# changelog

author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.8.19-1.2
changelog:
  - Remove guest-templates-json-1.7.21-dont-update-db-on-slaves.XCP-ng.patch...
  - ... The new create-guest-template-wrapper script now checks for master vs others
  - We're back in sync with CH's SRPM


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.4-1.1
changelog:
  - Sync with hotfix XS82E033
  - *** Upstream changelog ***
  - * Fri Aug 20 2021 Xihuan Yang <xihuan.yang@citrix.com> - 1.9.4-1
  - - CP-37595: Add template for Rocky Linux 8
  - * Wed Mar 17 2021 Xihuan Yang <xihuan.yang@citrix.com> - 1.9.2-1
  - - CP-36311: add template for gooroom os


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.6-1.1
changelog:
  - Sync with CH 8.2.1
  - *** Upstream changelog ***
  - * Mon Oct 11 2021 Martin Harvey <martin.harvey@citrix.com> - 1.9.6-1
  - - CP-38270: Windows Server 2022 template not experimental in yangtze.
  - * Tue Sep 21 2021 Martin Harvey <martin.harvey@citrix.com> - 1.9.5-1
  - - CP-37828: Commit windows server 2022 template into release


author: Gael Duperrey <gduperrey@vates.fr> - 1.10.4-2.1
changelog:
  - Sync with hotfix XS82ECU1036
  - Remove XCP-ng's version of debian 11 template as it is now provided from upstream
  - *** Upstream changelog ***
  - * Thu Jun 29 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 1.10.4-1
  - - CP-42910: Add Debian 11 and Ubuntu 2204 template


author: Gael Duperrey <gduperrey@vates.fr> - 1.10.5-1.1
changelog:
  - Sync with hotfix XS82ECU1046
  - Remove XCP-ng's version of RHEL 9 template as it is now provided from upstream
  - *** Upstream changelog ***
  - * Fri Aug 18 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 1.10.5-1
  - - CP-42910: Add Red Hat Enterprise Linux 9 template


author: Gael Duperrey <gduperrey@vates.fr> - 1.10.6-1.1
changelog:
  - Sync with hotfix XS82ECU1050
  - Remove XCP-ng's versions of Debian 12, Rocky Linux 9, and Centos Stream 9 templates as they are now provided from upstream
  - *** Upstream changelog ***
  - * Thu Sep 14 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 1.10.6-1
  - - UPD-956: Backport Rocky Linux 9, CentOS Stream 9 and Debian 12's templates to Yangtze


author: Gael Duperrey <gduperrey@vates.tech> - 1.10.7-1.1
changelog:
  - Sync with hotfix XS82ECU1069
  - *** Upstream changelog ***
  - * Tue May 21 2024 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 1.10.7-1
  - - CP-48730: Oracle 8 Requires Minimum 2 vCPUs
  - - CP-44647: Add Ubuntu 24.04 template


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-18
changelog:
  - fix CVE-2018-0734 - DSA signature local timing side channel
  - fix CVE-2019-1559 - 0-byte record padding oracle
  - close the RSA decryption One & done EM side channel (#1619558)


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-22
changelog:
  - fix CVE-2021-23841 openssl: NULL pointer dereference
    in X509_issuer_and_serial_hash()
  - fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
  - Resolves: rhbz#1932132, rhbz#1932126


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-23
changelog:
  - fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#1996054


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-24
changelog:
  - Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
  - Resolves: rhbz#2039993


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.0.2k-25
changelog:
  - Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Related: rhbz#2067160


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1:1.0.2k-26.1
changelog:
  - Add openssl-1.0.2k-update-expiring-certificates.patch to fix build time tests
  - Added gcc to BuildRequires


