# changelog

author: Simone Conti <s.conti@itnok.com> - 1.3.3.0-1
changelog:
  - Adding patch to rename kernel module from `aqc111` to `aqc111u`
  - Re-packing for XCP-ng of Marvell AQC111U driver


author: Gael Duperrey <gduperrey@vates.tech> - 38.00.00.00-1.1
changelog:
  - initial package, version 38.00.00.00-1.1
  - Synced from XS driver SRPM avago-mpt3sas-38.00.00.00-1.el7.centos.src.rpm


author: Mark Syms <mark.syms@citrix.com> - 3.34.0-1
changelog:
  - feat(vhd-util-scan): '-m' supports style brace expressions and pattern list
  - fix(vhd-util-scan): compare fnmatch return to FNM_NOMATCH instead of FNM_PATHNAME
  - CA-335771: timeouts are deltas not absolute deadlines


author: Mark Syms <mark.syms@citrix.com> - 3.36.0-1
changelog:
  - CA-338080: prevent segfault if stats have been freed
  - CA-338180: Ensure string is terminated
  - CA-338180: Correct return type of tapdisk_stats_length
  - CA-338176: fix resource leaks in vhd-util copy


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.37.2-1.0.1
changelog:
  - Sync with hotfix XS82E006
  - CA-340619: Propagate errors from snaphot creation
  - CA-342578: fix switch case fall through error
  - CA-342553: don't try to read encryption key from raw parent


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.37.3-1.0.1
changelog:
  - Sync with CH 8.2.1
  - *** Upstream changelog ***
  - * Thu Oct  7 2021 Mark Syms <mark.syms@citrix.com> - 3.37.3-1.0
  - - CA-355145: guard vbd_stats
  - - CA-183182: Don't error if there are no tapdisks to signal


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.37.4-1.0.1
changelog:
  - Sync with hotfix XS82ECU1009
  - *** Upstream changelog ***
  - * Fri Apr 29 2022 Mark Syms <mark.syms@citrix.com> - 3.37.4-1.0
  - - CA-350300: remove duplicated and unchecked call to canonpath


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.37.4-2.1
changelog:
  - Sync with hotfix XS82ECU1051
  - *** Upstream changelog ***
  - * Mon Jun 26 2023 Mark Syms <mark.syms@citrix.com> - 3.37.4-2
  - - CA-366614: clean up old tapdisk log files


author: Gael Duperrey <gduperrey@vates.tech> - 3.37.4-3.1
changelog:
  - Sync with hotfix XS82ECU1056
  - *** Upstream changelog ***
  - * Thu Sep 07 2023 Mark Syms <mark.syms@citrix.com> - 3.37.4-3
  - - CP-45025: Avoid retries except in a few specific cases
  - - CA-382087: Only write the bitmap if the contents have changed


author: Gael Duperrey <gduperrey@vates.tech> - 3.37.4-4.1
changelog:
  - Sync with hotfix XS82ECU1075
  - *** Upstream changelog ***
  - * Tue Aug 13 2024 Mark Syms <mark.syms@cloud.com> - 3.37.4-4
  - - CP-37221: backport coalesce performance improvements


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.0.0-2
changelog:
  - Update for XCP-ng 8.0.0
  - Clean spec file: remove Group and BuildRoot definitions
  - Remove 'dist' macro since it's built before xcp-ng-release


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.2-5
changelog:
  - Override module directory for depmod to make sure our alternative driver takes precedence
  - Simplify module path (simply /lib/modules/{version}/override/)


author: Gael Duperrey <gduperrey@vates.fr> - 1.10.2_223.0.183.0-1
changelog:
  - Update to version 1.10.2_223.0.183.0
  - Synced from XS driver SRPM broadcom-bnxt-en-1.10.2_223.0.183.0-1.xs8~2_1.src.rpm


author: Kai Engert <kaie@redhat.com> - 2017.2.11-71
changelog:
  - Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
  - Use comments in extracted bundle files.
  - Change packaging script to support empty legacy bundles.


author: Kai Engert <kaie@redhat.com> - 2017.2.11-72
changelog:
  - Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
    as a preparation to fix bugs in the interaction between p11-kit-trust and
    Mozilla applications, such as Firefox, Thunderbird etc.
  - For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
  - Require p11-kit 0.23.5
  - Added an utility to help with comparing output of the trust dump command.


author: Kai Engert <kaie@redhat.com> - 2017.2.16-71
changelog:
  - Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
    Mozilla removed code signing trust from all CAs (rhbz#1472933)


author: Bob Relyea <rrelyea@redhat.com> - 2019.2.32-76
changelog:
  - Update to CKBI 2.32 from NSS 3.44
  -   Removing:
  -   # Certificate "Visa eCommerce Root"
  -   # Certificate "AC Raiz Certicamara S.A."
  -   # Certificate "TC TrustCenter Class 3 CA II"
  -   # Certificate "ComSign CA"
  -   # Certificate "S-TRUST Universal Root CA"
  -   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
  -   # Certificate "Certplus Root CA G1"
  -   # Certificate "Certplus Root CA G2"
  -   # Certificate "OpenTrust Root CA G1"
  -   # Certificate "OpenTrust Root CA G2"
  -   # Certificate "OpenTrust Root CA G3"
  -  Adding:
  -   # Certificate "GlobalSign Root CA - R6"
  -   # Certificate "OISTE WISeKey Global Root GC CA"
  -   # Certificate "GTS Root R1"
  -   # Certificate "GTS Root R2"
  -   # Certificate "GTS Root R3"
  -   # Certificate "GTS Root R4"
  -   # Certificate "UCA Global G2 Root"
  -   # Certificate "UCA Extended Validation Root"
  -   # Certificate "Certigna Root CA"
  -   # Certificate "emSign Root CA - G1"
  -   # Certificate "emSign ECC Root CA - G3"
  -   # Certificate "emSign Root CA - C1"
  -   # Certificate "emSign ECC Root CA - C3"
  -   # Certificate "Hongkong Post Root CA 3"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-70.0
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "UTN USERFirst Email Root CA"
  -     # Certificate "Certplus Class 2 Primary CA"
  -     # Certificate "Deutsche Telekom Root CA 2"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "Certinomis - Root CA"
  -    Adding:
  -     # Certificate "Entrust Root Certification Authority - G4"
  - fix permissions on ghosted files.


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71
changelog:
  - Update to CKBI 2.48 from NSS 3.66
  -    Removing:
  -     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root CA"
  -     # Certificate "Sonera Class 2 Root CA"
  -     # Certificate "Taiwan GRCA"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Trustis FPS Root CA"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
  -    Adding:
  -     # Certificate "Microsoft ECC Root Certificate Authority 2017"
  -     # Certificate "Microsoft RSA Root Certificate Authority 2017"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "certSIGN Root CA G2"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "NAVER Global Root Certification Authority"
  -     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
  -     # Certificate "GlobalSign Secure Mail Root R45"
  -     # Certificate "GlobalSign Secure Mail Root E45"
  -     # Certificate "GlobalSign Root R46"
  -     # Certificate "GlobalSign Root E46"
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "ANF Secure Server Root CA"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.9.0-1
changelog:
  - mergerepo_c: Prepend protocol (file://) for URLs in pkgorigins (if --koji is used)
  - Update bash completion
  - doc: Update manpages
  - mergerepo: Fix NVR merging method
  - mergerepo: Fix behavior of --all param
  - createrepo: Add --cut-dirs and --location-prefix options
  - misc: Add cr_cut_dirs()
  - mergerepo: Use better version comparison algorithm
  - utils: Port cr_cmp_version_str() to rpm's algorithm (rpmvercmp)
  - misc: Rename elements in cr_Version structure
  - mergerepo: Fix version-release comparison for packages when --all is used
  - mergerepo: Show warnings if some groupfile cannot be automatically used
  - mergerepo: Exit with error code when a groupfile cannot be copied


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.9.1-1
changelog:
  - Fix double free during parsing broken XML metadata (Issue #33)
  - Tests: Add acceptance test for --general-compress-type option
  - Fix 'CR_CW_UNKNOWN_COMPRESSION cannot be used' error
  - Refactoring: Fix compiler warnings
  - Add --general-compress-type option (RhBug 1253850)
  - Enable drpm support when drpm library is detected on system (RhBug: 1261031) (Issue #37)
  - fix traceback on non-complete datetime information (Jarek Polok)
  - parsehdr: Skip broken dependency with bad (non-numerical) epoch and print warning about that
    (https://lists.fedoraproject.org/pipermail/devel/2015-August/213882.html)
  - misc: cr_str_to_evr(): Return NULL instead of "0" for bad (non-numerical) epoch
  - updateinfo: Fix a typo in the package release attribute (Luke Macken)
  - CMake: Don't require CXX compiler
  - Tests for different checksum type for RPMs and repodata files (#31)
  - Support different checksum type for RPMs and repodata files (#31)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.10.0-1
changelog:
  - Python 3 support (made by Ralph Bean)
  - Modify gen_rst.py to indicate --sqliterepo is an option too (Neal Gompa)
  - Do not compress manpages at generation time (Neal Gompa)


author: Igor Gnatenko <ignatenko@redhat.com> - 0.10.0-4
changelog:
  - Don't own python3_sitearch dir in python3 subpkg
  - Use %license macro
  - Follow modern packaging guidelines
  - Cleanups in spec file
  - Follow packaging guidelines about SourceURL
  - Fix license


author: Gael Duperrey <gduperrey@vates.tech> - 8.6.0-2.1
changelog:
  - Synced from XS82ECU1063
  - Removed xenserver-specific test of the dist macro
  - Replaced perl-interpreter BuildRequires with perl
  - Replaced unsupported %lconfig_scriptlets macro with %post and %postun one liners


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-112
changelog:
  - Modify 0191-RHBZ-1169168-disable-changed-paths.patch
    * man page fixup
  - Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
    * man page fixup
  - Modify 0205-RHBZ-1416569-reset-stats.patch
    * man page fixup
  - Add 0218-RHBZ-1459370-add-feature-fix.patch
    * handle null feature string
  - Add 0219-RHBZ-1448970-fix-resize.patch
    * if the resize fails, try to resume again with the old table.
  - Add 0220-RHBZ-1448223-fix-kpartx.patch
    * gracefully fail when run on something other than a file or block device
  - Add 0221-RH-harden-files.patch
    * change build parameters to use position independent code
  - Add 0222-RHBZ-1457288-fix-show-maps-json.patch
    * handle running "show maps json" with no multipath devices present
  - Add 0223-RHBZ-1452210-unpriv-sgio.patch
    * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
      and paths
  - Add 0224-RHBZ-1452210-prkey.patch
    * allow setting reservation_key to "file" to set and read keys from
      prkey_file. Also add new multipathd commands to modify the prkey file.
  - Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-113
changelog:
  - Modify 0224-RHBZ-1452210-prkey.patch
    * fix errow with telling multipathd to set prkeys
  - Add 0225-RH-udevdir.patch
    * fix rpmdiff complaint about udev rules installation
  - Resolves: bz #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-114
changelog:
  - Add 0226-RH-allow-overrides-section.patch
    * This is a dummy section that exists to help the transition to RHEL8
  - Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
  - Add 0228-RHBZ-1464634-hauwei-config-update.patch
  - Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
    * Do poll first, so udev_monitor_receive_device doesn't return error when
      there is no uevent
  - Add 0230-UP-allow-invalid-creates.patch
    * Allow creation of devices with no valid paths.
  - Add 0231-RHBZ-1458852-delay-readying.patch
    * Add ghost_delay configuration option to delay device activation when only
      ghost paths exist.
  - Add 0232-RHBZ-1456955-property-blacklist.patch
    * Add the "property" blacklist type.
  - Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-115
changelog:
  - Add 0233-RHBZ-1451852-1482629-nimble-config.patch
  - Add 0234-RHBZ-1500109-doc-typo.patch
  - Remove old triggerun scriptlet (bz1470384)
  - Resolves: bz #1451852, #1470384, #1482629, #1500109


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-116
changelog:
  - Add 0235-RHBZ-1480638-NVMe-support.patch
    * adds support for multipathing NVMe devices
  - Resolves: bz #1480638


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-117
changelog:
  - Modify 0235-RHBZ-1480638-NVMe-support.patch
    * remove overly-restrictive uevent filtering
  - Resolves: bz #1480638


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-118
changelog:
  - Modify 0224-RHBZ-1452210-prkey.patch
    * Improve error checking for mpathpersist
  - Resolves: bz #1452210


author: Sérgio Basto <sergio@serjux.com> - 1.18.25-5
changelog:
  - Revert "Bundle a version of tar to make it compatible in EL7"
  - Keep BR: perl(Digest)
  - Remove --clamp-mtime option on tar of el7.
  - Add Requires perl(Digest::MD5) and perl(Digest::SHA*) on dpkg-perl (#1628409)


author: Sérgio Basto <sergio@serjux.com> - 1.18.25-8
changelog:
  - Requires perl(MIME::Lite) on dpkg-dev (rhbz #1678637)
  - Adds check section and performs unit tests but ignores failures


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.47.0-1.1
changelog:
  - Replace %ldconfig_scriptlets with what it would evaluate to
  - This macro would require epel-rpm-macros, which is not available in XCP-ng 8.2


author: Edwin Török <edvin.torok@citrix.com> - 20180522git4b8552d-1.2.0
changelog:
  - CA-293636: Add support for NVIDIA vGPU on top of UEFI
  - CA-293633: Set default video resoultion to 1024x768
  - CA-293634: Various fixes to make GPU/PCI passthrough work
  - Add a config option to use iPXE drivers
  - Cleanup XenVariable integration
  - CA-297602: Speedup boot by enabling PV drivers
  - CA-298449: Add basic support for Intel GVT-g on top of UEFI
  - Fix race finding XenVariable PCI device
  - CA-296489: Allow boot ordering to be set from XS
  - CA-296489: Make Xen boot ordering work with normal boot entries
  - Remove unused patches
  - CA-296489: XenBootOrder: Fix a typo
  - CP-28675: XenVariable: Make some functions static
  - CP-28675: XenVariable: Move useful functions into a header file
  - CP-28675: XenVariable: Notify dom0 on Security Violation
  - CP-29100: Remove PCI Device and expose IO port for communication with varstored.
  - CP-29100: Remove previous workaround related to Xen Variable PCI device
  - CA-297688: Keep caching enabled during SEC phase


author: Edwin Török <edvin.torok@citrix.com> - 20180522git4b8552d-1.4.0
changelog:
  - CP-30786: Turn off cryptopkg when secure boot is off
  - Fix typo in secure boot enable condition
  - CA-314662: Don't accidentally switch off MTRRs in SEC phase
  - CA-309841: reenable PV drivers in OVMF
  - CP-30787: disable unneeded crypto code, simplify patchqueue


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 20180522git4b8552d-1.4.1
changelog:
  - CA-321788: make vGPU console work with all NVidia cards
  - Replace local fixes with upstream backports


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.4-1
changelog:
  - Upstream removed the tarball for 1.12.2, which made Source0 invalid.
  - There is a new version (1.12.4), so update to the new version.


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.4-2
changelog:
  - Strip libfakeroot-*.so (RHBZ#596735).
  - Verified that libguestfs still builds and runs with this change (this
    represents a fairly aggressive test of fakeroot).


author: Dominik Mierzejewski <rpm@greysector.net> - 1.24-1
changelog:
  - update to 1.24 (#1750054)
  - update source URL
  - drop obsolete patches
  - point to working URLs
  - make testsuite more verbose for the future
  - Apply all patches from Debian package (should fix libuser build)
  - fix root privilege faking for copied files/dirs (bug 887001)
  - fix LD_LIBRARY_PATH for multilib environment (bug 1241527)
  - update License: tag
  - don't strip the libraries in install, just keep the executable bit
  - when converting from latin1 to utf8, don't use the converted file
    if the conversion failed: the pt manpage is already utf8
  - alternativize libfakeroot and faked as well (bug 817088)
  - include Portugese manpages
  - add missing BR: libcap-devel
  - autogenerate most of the file list


author: Christian Lindig <christian.lindig@citrix.com> - 1.18.0-1
changelog:
  - CA-336056: fix non-root forkhelpers
  - Fix unit tests: lower max_fds
  - Update Travis to use common config


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.18.0-3.1
changelog:
  - Sync with CH 8.2.1
  - *** Upstream changelog ***
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.18.0-3
  - - Bump package after xs-opam update
  - * Tue Jul 13 2021 Edwin Török <edvin.torok@citrix.com> - 1.18.0-2
  - - bump packages after xs-opam update


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.18.1-1.1
changelog:
  - Update as part of XAPI security update synced from XS82ECU1019
  - *** Upstream changelog ***
  - * Tue Aug 16 2022 Rob Hoes <rob.hoes@citrix.com> - 1.18.1-1
  - - CP-34942: Make test compatible with dune 2.7+


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.18.1-2.1
changelog:
  - Sync with hotfix XS82ECU1027
  - *** Upstream changelog ***
  - * Thu Feb 23 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.18.1-2
  - - Change license to match source
  - - Remove macro for dependency generator


author: Gael Duperrey <gduperrey@vates.fr> - 1.18.3-2.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 1.18.3-2
  - - Bump release and rebuild
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 1.18.3-1
  - - Revert "CA-341921: avoid EINVAL errors for >1024 FDs"
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 1.18.2-1
  - - CA-341921: avoid EINVAL errors for >1024 FDs
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.18.1-4
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.18.1-3
  - - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.18.3-3.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.18.3-3
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.18.3-10.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1064
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 1.18.3-10
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 1.18.3-9
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 1.18.3-8
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 1.18.3-7
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.18.3-6
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.18.3-5
  - - Bump release and rebuild
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 1.18.3-4
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.18.3-12.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - No source changes: only rebuild for dependencies
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 1.18.3-12
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 1.18.3-11
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.18.3-12.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 1.18.3-12
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 1.18.3-11
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.18.3-15.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1080
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.18.3-15
  - - Bump release and rebuild
  - * Thu Dec 12 2024 Christian Lindig <christian.lindig@cloud.com> - 1.18.3-14
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 1.18.3-13
  - - Bump release and rebuild


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9
changelog:
  - Amended fix for FIPS enforcement issue (#1163848)
  - Fixed issue with applications that close all file descriptors (#1165047)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11
changelog:
  - Applied fix for urandom FD in FIPS140 mode (#1165047)
  - Applied fix for FIPS140-2 related regression (#1110696)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13
changelog:
  - Corrected reseed and respect of max_number_of_bits_per_request in 
    FIPS140-2 mode. Also enhanced the initial tests. (#1228199)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1
changelog:
  - Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
  - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
  - When writing certificates to smart cards write the CKA_ISSUER and
    CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
  - Use the shared system certificate store (#1110750)
  - Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
    CVE-2015-7575)
  - Allow hashing data over 2^32 bytes (#1306953)
  - Ensure written PKCS#11 public keys are not marked as private (#1339453)
  - Ensure secure_getenv() is called on all uses of environment variables
    (#1344591).
  - Fix issues related to PKCS #11 private key listing on certain HSMs
    (#1351389)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7
changelog:
  - Address interoperability issue with 3.5.x (#1388932)
  - Reject CAs which are both trusted and blacklisted in trust module (#1375303)
  - Added new functions to set issuer and subject ID in certificates (#1378373)
  - Reject connections with less than 1024-bit DH parameters (#1335931)
  - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
  - Mention limitations of certtool in manpage (#1375463)
  - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
  - Do not link directly to trousers but instead use dlopen (#1379739)
  - Fix incorrect OCSP validation (#1377569)
  - Added support for pin-value in PKCS#11 URIs (#1379283)
  - Added the --id option to p11tool (#1399232)
  - Improved sanity checks in RSA key generation (#1444780)
  - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
    CVE-2017-7869


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9
changelog:
  - Address crash in OCSP status request extension, by eliminating the
    unneeded parsing (CVE-2017-7507, #1455828)


author: Anderson Sasaki <ansasaki@redhat.com> 3.3.29-8
changelog:
  - Backported --sni-hostname option which allows overriding the hostname
    advertised to the peer (#1444792)
  - Improved counter-measures in TLS CBC record padding for lucky13 attack
    (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707)
  - Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack
    (CVE-2018-10846, #1589708)
  - Address p11tool issue in object deletion in batch mode (#1375307)
  - Backport PKCS#11 tests from master branch. Some tests were disabled due to
    unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key
    generation without login, and certificates do not inherit ID from the private
    key)
  - p11tool explicitly marks certificates and public keys as NOT private objects
    and private keys as private objects
  - Enlarge buffer size to support resumption with large keys (#1542461)
  - Legacy HMAC-SHA384 cipher suites were disabled by default
  - Added DSA key generation to p11tool (#1464896)
  - Address session renegotiation issue using client certificate (#1434091)
  - Address issue when importing private keys into Atos HSM (#1460125)


author: Jakub Čajka <jcajka@redhat.com> - 1.13-1
changelog:
  - Rebase to go1.13
  - Fix for CVE-2019-9512, CVE-2019-9514, CVE-2019-14809
  - Resolves: BZ#1741815, BZ#1741826, BZ#1743130


author: Jakub Čajka <jcajka@redhat.com> - 1.15-1
changelog:
  - Rebase to go1.15
  - Security fix for CVE-2020-16845 and CVE-2020-14040
  - Resolves BZ#1867100 and BZ#1853654


author: Jakub Čajka <jcajka@redhat.com> - 1.15.5-1
changelog:
  - Rebase to go1.15.5
  - Security fix for CVE-2020-28362, CVE-2020-28367 and CVE-2020-28366
  - Resolves: BZ#1897637, BZ#1897645 and BZ#1897648


author: Christian Lindig <christian.lindig@citrix.com> - 0.16.0-1
changelog:
  - Use Dune profile release
  - Add logging around signal handling
  - Check return value of malloc()
  - Use OCaml 4.07 for Travis


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.18.0-4.1
changelog:
  - Sync with CH 8.2.1
  - *** Upstream changelog ***
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 0.18.0-4
  - - Bump package for libev dependency
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 0.18.0-3
  - - Bump package after xs-opam update
  - * Tue Jul 13 2021 Edwin Török <edvin.torok@citrix.com> - 0.18.0-2
  - - bump packages after xs-opam update


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.18.0-4.3
changelog:
  - Rebuild for ocaml-rrdd-plugin-1.9.1-2.2.xcpng8.2
  - Fixes "not enough memory" messages in xcp-rrdd-plugins.log


author: Gael Duperrey <gduperrey@vates.fr> - 0.18.0-10.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 0.18.0-9
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 0.18.0-8
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 0.18.0-7
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.fr> - 0.18.0-10.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 0.18.0-9
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 0.18.0-8
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 0.18.0-7
  - - Bump release and rebuild
  - * Wed Apr 19 2023 Christian Lindig <christian.lindig@citrix.com> - 0.18.0-6
  - - XSI 1404 increase StartLimitBurst to 25, accept only 0 RC for scucess
  - * Tue Feb 28 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 0.18.0-5
  - - Fix xen BuildReqs


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.18.0-11.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 0.18.0-11
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 0.18.0-18.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1064
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 0.18.0-18
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 0.18.0-17
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 0.18.0-16
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 0.18.0-15
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 0.18.0-14
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 0.18.0-13
  - - Bump release and rebuild
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 0.18.0-12
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 0.18.0-20.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 0.18.0-20
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 0.18.0-19
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 0.18.0-23.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1080
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 0.18.0-23
  - - Bump release and rebuild
  - * Thu Dec 12 2024 Christian Lindig <christian.lindig@cloud.com> - 0.18.0-22
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 0.18.0-21
  - - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.8.19-1.1
changelog:
  - Reapply patch to disable create-guest-templates on slave hosts
  - Related to https://github.com/xcp-ng/xcp/issues/265


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.8.19-1.2
changelog:
  - Remove guest-templates-json-1.7.21-dont-update-db-on-slaves.XCP-ng.patch...
  - ... The new create-guest-template-wrapper script now checks for master vs others
  - We're back in sync with CH's SRPM


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.4-1.1
changelog:
  - Sync with hotfix XS82E033
  - *** Upstream changelog ***
  - * Fri Aug 20 2021 Xihuan Yang <xihuan.yang@citrix.com> - 1.9.4-1
  - - CP-37595: Add template for Rocky Linux 8
  - * Wed Mar 17 2021 Xihuan Yang <xihuan.yang@citrix.com> - 1.9.2-1
  - - CP-36311: add template for gooroom os


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.6-1.1
changelog:
  - Sync with CH 8.2.1
  - *** Upstream changelog ***
  - * Mon Oct 11 2021 Martin Harvey <martin.harvey@citrix.com> - 1.9.6-1
  - - CP-38270: Windows Server 2022 template not experimental in yangtze.
  - * Tue Sep 21 2021 Martin Harvey <martin.harvey@citrix.com> - 1.9.5-1
  - - CP-37828: Commit windows server 2022 template into release


author: Gael Duperrey <gduperrey@vates.fr> - 1.10.4-2.1
changelog:
  - Sync with hotfix XS82ECU1036
  - Remove XCP-ng's version of debian 11 template as it is now provided from upstream
  - *** Upstream changelog ***
  - * Thu Jun 29 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 1.10.4-1
  - - CP-42910: Add Debian 11 and Ubuntu 2204 template


author: Gael Duperrey <gduperrey@vates.fr> - 1.10.5-1.1
changelog:
  - Sync with hotfix XS82ECU1046
  - Remove XCP-ng's version of RHEL 9 template as it is now provided from upstream
  - *** Upstream changelog ***
  - * Fri Aug 18 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 1.10.5-1
  - - CP-42910: Add Red Hat Enterprise Linux 9 template


author: Gael Duperrey <gduperrey@vates.fr> - 1.10.6-1.1
changelog:
  - Sync with hotfix XS82ECU1050
  - Remove XCP-ng's versions of Debian 12, Rocky Linux 9, and Centos Stream 9 templates as they are now provided from upstream
  - *** Upstream changelog ***
  - * Thu Sep 14 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 1.10.6-1
  - - UPD-956: Backport Rocky Linux 9, CentOS Stream 9 and Debian 12's templates to Yangtze


author: Gael Duperrey <gduperrey@vates.tech> - 1.10.7-1.1
changelog:
  - Sync with hotfix XS82ECU1069
  - *** Upstream changelog ***
  - * Tue May 21 2024 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 1.10.7-1
  - - CP-48730: Oracle 8 Requires Minimum 2 vCPUs
  - - CP-44647: Add Ubuntu 24.04 template


author: Fei Su <fei.su@citrix.com> - 1.8.14-1
changelog:
  - CP-32728 Remove Windows 7 for Stockholm
  - CP-32707 Remove Windows Server 2008 and Windows Server 2008 R2


author: Sergey Dyasli <sergey.dyasli@citrix.com> - 1.8.15-1
changelog:
  - CA-333172: Remove viridian from PV guest template
  - Revert "CP-32458: make PV guests to be "plain PV" again"


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 1.8.19-1
changelog:
  - CP-33714: add template for gooroom os
  - CA-336730 create-guest-templates only after network-init
  - CA-339329 firstboot scripts shouldn't sync DB when ugprading
  - Revert "CP-33714: add template for gooroom os"


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 10.7.0-1
changelog:
  - Unbreak "safe" boot option on x2APIC machines
  - CP-31092: Move CC preparations from firstboot script to the installer
  - Remove outdated logrotate code
  - CP-32298: Reimplement 95-legacy-logrotate in the installer


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 10.7.2-1
changelog:
  - CA-332901: Fix sshd service enable with cc-preparations
  - CP-31092: Use different pool token generation in CC mode


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 10.7.4-1
changelog:
  - CA-336696: Handle errors when copying ownership
  - CA-336693: Pass the correct parameters to setEfiBootEntry()
  - CA-336693: Mount the ESP before restoring files
  - CA-336693: Fix UEFI restore when there is no storage partition


author: Simon Rowe <simon.rowe@citrix.com> - 1.2.0-1
changelog:
  - CP-29028: add optional updates parameter to RPU plugin
  - CP-29028: check host part of update URL matches main
  - Add missing `return` on error path
  - Add some documentation
  - CP-21760: set one-shot boot entry


author: rossla <ross.lagerwall@citrix.com> - 1.3.0-1
changelog:
  - CP-23016 Add more specific errors
  - CP-30204: Fix running error
  - CP-30204: Prevent upgrade from releases before 6.x in the RPU plugin


author: jenniferhe <jennifer.herbert@citrix.com> - 2.1.0-1
changelog:
  - CP-29836: Add an API to get the version from a URL
  - CP-30501: Add a new API, getDom0DefaultMemory
  - CP-29627: Make compatible with host-installer memory changes
  - CP-23016 Provide errors with underscores


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 2.2.0-1
changelog:
  - CA-329206: Get network settings from the correct PIF
  - CP-31507: Add more detailed error codes
  - Pylint cleanup


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.1.0-1
changelog:
  - HTTP server can reuse binding address now
  - Notify when HTTP server is ready
  - Better error handling and command logs
  - SIGTERM can be safely sent to NBD server


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 1.5.0-1
changelog:
  - Prevent stacktrace during SIGTERM signal and open_device call
  - Robustify nbdkit startup: always wait for sockpath to be created
  - Don't force stdout/stderr flush
  - Fix libs import using underscores instead of dashes


author: Gael Duperrey <gduperrey@vates.fr> - 2.22.20-3.1
changelog:
  - initial package, version 2.22.20-3.1
  - Synced from XS driver SRPM intel-i40e-2.22.20-3.xs8~2_1.src.rpm


author: Gael Duperrey <gduperrey@vates.tech> - 2.22.20-5.1
changelog:
  - Synced with intel-i40e-2.22.20-5.xs8~2_1.src.rpm
  - *** Upstream changelog ***
  - * Tue Feb 27 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.22.20-5
  - - CA-386057: Enable legacy-rx by default to resolve performance issue
  - - Note: 2.22.20-5 is for Yangtze, while 2.22.20-4 is for XS8 (rt-next)


author: Gael Duperrey <gduperrey@vates.fr> - 1.8.8-1
changelog:
  - initial package, version 1.8.8
  - Synced from XS driver SRPM intel-ice-1.8.8-1.el7.centos.src.rpm
  - change firmware to live in /lib/firmware/override


author: Stephen Cheng <stephen.cheng@cloud.com> - Version: 5.10.214-3
changelog:
  - CP-48894: Modify checksum
  - The checksum was wrongly grenerated in the previous commit due to xenpkg upgrade


author: Thierry Escande <thierry.escande@vates.tech> - 5.10.214-3.1
changelog:
  - Obsoletes igc-module RPM
  - Import XCP-ng specific patches from obsolete igc-module RPM
  - Add BuildRequires for gcc


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 5.5.2-2.1
changelog:
  - Attempt to fix memory leak
  - Add intel-ixgbe-5.5.2-fix-memory-leak.backport.patch
  - Related to https://xcp-ng.org/forum/topic/2507/alert-control-domain-memory-usage


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05 (EA)
  - Update release notes for 8u312-b05.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
  - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
  - Resolves: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.ea
changelog:
  - Add patch to improve performance of common separators in Scanner.useLocale
  - Move alt-java patch to correct section.
  - Resolves: rhbz#1862929


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b07 (EA)
  - Update release notes for 8u312-b07.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2011826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
  - Update release notes for 8u322-b04.
  - Require tzdata 2021c as of JDK-8274407.
  - Switch to EA mode.
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Related: rhbz#2022809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b06 (EA)
  - Update release notes for 8u322-b06.
  - Switch to GA mode for final release.
  - Require tzdata 2021e as of JDK-8275766.
  - Update tarball generation script to use git following shenandoah-jdk8u's move to github
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u332-b01 (EA)
  - Update release notes for shenandoah-8u332-b01.
  - Switch to EA mode.
  - Related: rhbz#2047529


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u332-b06 (EA)
  - Update release notes for shenandoah-8u332-b06.
  - Resolves: rhbz#2047529


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1
changelog:
  - Update to shenandoah-jdk8u332-b09 (GA)
  - Update release notes for 8u332-b09.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2022-04-19 @ 1pm PT.
  - Resolves: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
  - Related: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Related: rhbz#2150192


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150192


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
  - Related: rhbz#2150192


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.20+1 (EA)
  - Update release notes to 11.0.20+1
  - Switch to EA mode
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Add missing Swing release note
  - Related: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Update release notes to 11.0.20.1+1
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise runtime and buildtime tzdata requirements
  - Update README.md to match the version in later RHEL releases
  - Resolves: rhbz#2236229


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1
changelog:
  - For non debug subpackages, ghosted all alternatives (rhbz1649776)
  - For non system JDKs, if-outed versionless provides.
  - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
  - Related: RHEL-11320


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1
changelog:
  - Update to jdk-11.0.21+9 (GA)
  - Update release notes to 11.0.21+9
  - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Apply all patches using -p1
  - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
  - Add missing JFR alternative ghost
  - Move jcmd to the headless package
  - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12217
  - Resolves: RHEL-12910
  - Resolves: RHEL-12913
  - Resolves: RHEL-11320
  - Resolves: RHEL-13227
  - Resolves: RHEL-13217


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2
changelog:
  - Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
  - Resolves: RHEL-19642


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.ea
changelog:
  - Update to jdk-11.0.22+6 (EA)
  - Update release notes to 11.0.22+6
  - Switch to EA mode
  - Drop local copy of JDK-8312489 which is now included upstream
  - Resolves: RHEL-21031


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1
changelog:
  - Update to jdk-11.0.22+7 (GA)
  - Update release notes to 11.0.22+7
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20966


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.23+1 (EA)
  - Update release notes to 11.0.23+1
  - Switch to EA mode
  - Speed up PPC build by removing ppc64le --with-jobs=1 workaround


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1
changelog:
  - Update to jdk-11.0.23+9 (GA)
  - Update release notes to 11.0.23+9
  - Switch to GA mode for release
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-30914


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2
changelog:
  - Fix 11.0.22 release date in NEWS
  - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.3
changelog:
  - CA-334001: Revert upstream fix for CA-306398 since it's not complete
  - CA-332618: Fix several FCoE memory leaks
  - Replace i915 patches with backports
  - CA-335769: xen-netback: Handle unexpected map grant ref return value


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.4
changelog:
  - CA-335089, CP-33195: Move PV-IOMMU 1-1 map initialization to Xen
  - Restore PV-IOMMU kABI
  - CA-337060: Restore best effort unmaps to avoid clashes with reserved regions


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.5
changelog:
  - CA-337460 - Allow commit lists to be imported chronologically.
  - Replace patch with upstream backport


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.6
changelog:
  - CA-337406: Disable EFI pstore backend by default
  - CA-338183: Optimize get_random_u{32,64} by removing calls to RDRAND
  - CA-308055: Fix an iSCSI use-after-free


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.7
changelog:
  - CA-339209: Stop building Intel ME drivers and remove MEI from kABI
  - CP-31860: Backport GFS2 & DLM modules from v5.7-rc2
  - CP-31860: gfs2: Add some v5.7 for-rc5 patches
  - CA-338613: Fix busy wait in DLM


author: Sergey Dyasli <sergey.dyasli@citrix.com> - 4.19.19-7.0.9
changelog:
  - CA-349623: XSA-349 - Frontends can trigger OOM in Backends by update a watched path
  - CA-349624: XSA-350 - Use after free triggered by block frontend in Linux blkback


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-7.0.9.2
changelog:
  - Fix network perf issue caused by XSA 332 patches
  - Related to https://github.com/xcp-ng/xcp/issues/453


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-7.0.10.1
changelog:
  - Security update
  - Fix XSAs 361 362 365
  - Fix use-after-free in xen-netback caused by XSA-332
  - See https://xenbits.xen.org/xsa/


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-7.0.11.1
changelog:
  - Security (XSAs 367 and 371) and bugfix update
  - XSA-367: Linux: netback fails to honor grant mapping errors
  - XSA-371: Linux: blkback driver may leak persistent grants
  - Patches backported from linus kernel to fix event-related issues caused by XSA-332
  - Remove xsa332-linux-fix-perfs.patch, not needed anymore


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-7.0.10.1
changelog:
  - Security update
  - Fix XSAs 361 362 365
  - Fix use-after-free in xen-netback caused by XSA-332
  - See https://xenbits.xen.org/xsa/
  - *** Upstream changelog ***
  - * Wed Feb 04 2021 Igor Druzhinin <igor.druzhinin@citrix.com> - 4.19.19-7.0.10
  - - CA-351672: XSA-361: Linux: grant mapping error handling issues
  - - CA-351671: XSA-362: Linux: backends treating grant mapping errors as bug
  - - CA-351597: Fix use-after-free in xen-netback caused by XSA-332
  - - CA-351723: XSA-365: Linux: error handling issues in blkback's grant mapping
  - - CA-351672: XSA-361: More grant mapping error handling issues


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-7.0.11.1
changelog:
  - Security (XSAs 367 and 371) and bugfix update
  - XSA-367: Linux: netback fails to honor grant mapping errors
  - XSA-371: Linux: blkback driver may leak persistent grants
  - Patches backported from linus kernel to fix event-related issues caused by XSA-332
  - Remove xsa332-linux-fix-perfs.patch, not needed anymore
  - *** Upstream changelog ***
  - * Fri Mar 19 2021 Lin Liu <lin.liu@citrix.com> - 4.19.19-7.0.11
  - - CA-349120: Backport patches to fix spurious event-related warnings
  - - CA-352473: XSA-367: Linux: netback fails to honor grant mapping errors
  - - CA-352682: XSA-371: Linux: blkback driver may leak persistent grants


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-7.0.12.1
changelog:
  - Bugfix update based on XS82E030
  - *** Upstream changelog ***
  - * Fri Jun 18 2021 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.12
  - - CA-353048: Add new paravirt function for ioperm() syscall support
  - - CA-353093: CVE-2021-29154: Validate computation of branch displacements for x86
  - - CA-355291: Fix affinity setting for xen-dyn-lateeoi IRQs


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-7.0.13.1
changelog:
  - Bugfix update based on XS82E034
  - *** Upstream changelog ***
  - * Mon Sep 20 2021 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.13
  - - CA-358056: CVE-2021-3444: bpf: Fix truncation handling for mod32 dst reg wrt zero
  - - CA-358059: CVE-2021-3600: bpf: Fix 32 bit src register truncation on div/mod
  - - CA-357418: Fix race in set_evtchn_to_irq
  - - CA-356822: CVE-2021-33909: size_t-to-int vulnerability in Linux's filesystem layer
  - - CA-354789: Backport upstream patch to fix warning in evtchn_interrupt()


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-7.0.14.1
changelog:
  - Security update based on XS82E036 (XSA-392)
  - Remove new Citrix Commercial COPYING file that doesn't concern us (we don't ship their logo)
  - *** Upstream changelog ***
  - * Thu Dec 09 2021 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.14
  - - CP-37340: Clarify licensing and conform to Fedora packaging guidelines
  - - CA-361715: Limit netback rx queue length (XSA-392)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-7.0.15.1
changelog:
  - Security update based on XS82ECU1024
  - *** Upstream changelog ***
  - * Wed Dec 07 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.15
  - - CA-366138: Backport a patch to fix a CIFS oops
  - - CA-366517: Fix Linux's ability to use 64bit linear framebuffers
  - - CA-364458 / XSA-396: PV frontends vulnerable to attack by backends
  - - CA-368126 / XSA-403: Linux disk/nic frontends data leaks
  - - CA-369758 / XSA-423: Guest triggerable NIC reset/abort/crash via netback
  - - CA-373544 / XSA-424: Guests can trigger deadlock in netback


author: Gael Duperrey <gduperrey@vates.fr> - 4.19.19-7.0.16.1
changelog:
  - Synced with hotfix XS82ECU1028
  - *** Upstream changelog ***
  - * Wed Mar 22 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.16
  - - CP-42482: Convert to koji
  - - CA-375558: Fix nbd ref counting bug
  - - CA-375244: Ensure DLM reconnects after network outage
  - - CA-371727: Fix evaluation of _PDC ACPI method on dom0
  - - CA-376418: Backport fixes to XSA-423


author: Gael Duperrey <gduperrey@vates.fr> - 4.19.19-7.0.17.1
changelog:
  - Synced with hotfix XS82ECU1042
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.17
  - - CA-379289: Add a fix for XSA-432


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-7.0.18.1
changelog:
  - Sync with hotfix XS82ECU1052
  - No functional changes: we already had applied the fix for XSA-441 previously


author: Gael Duperrey <gduperrey@vates.tech> - 4.19.19-7.0.19.1
changelog:
  - Synced with hotfix XS82ECU1055
  - *** Upstream changelog ***
  - * Fri Oct 20 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.19
  - - CA-381221: Make NFS timeouts more consistent
  - - CA-383077 / XSI-1502: Backport SUNRPC-Always-drop-the-XPRT_LOCK-on-XPRT_CLOSE_WAIT


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-7.0.23.1
changelog:
  - Security fix, synced with hotfix XS82ECU1059
  - *** Upstream changelog ***
  - * Mon Jan 15 2024 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 4.19.19-7.0.23
  - - Rebuild on release environment
  - * Mon Jan 15 2024 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 4.19.19-7.0.22
  - - CA-387589: Refresh patch for XSA-441 so it works in livepatch environments
  - * Thu Jan 11 2024 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 4.19.19-7.0.21
  - - CA-384066: fix netback vifs queue length
  - * Thu Jan 11 2024 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 4.19.19-7.0.20
  - - CA-387401: Fix for XSA-448


author: Gael Duperrey <gduperrey@vates.tech> - 4.19.19-7.0.24.1
changelog:
  - Synced with hotfix XS82ECU1079
  - *** Upstream changelog ***
  - * Thu Dec 05 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 4.19.19-7.0.24
  - - CA-401809: Backport fixes for DLM failure leaves system unstable
  - - CA-394994: backport fix agaw for a supported 48 bit guest address width
  - - CA-395816: Enable config option to fix incorrect firmware fan control


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-7.0.1
changelog:
  - CA-333532: Fix patch context
  - CA-332867: Fix i915 late loading failure due to memory fragmentation


author: Rushikesh Jadhav <rushikesh7@gmail.com> - 4.19.140-1
changelog:
  - Update patch level to 4.19.140
  - Enable Kernel modules to support Wireless, Dell RBU
  - Enable NTFS RW


author: Rushikesh Jadhav <rushikesh7@gmail.com> - 4.19.142-1
changelog:
  - Add fix for XSA-331 from kernel package
  - Add fix for XSA-332 from kernel package
  - Update patch level to 4.19.142


author: Rushikesh Jadhav <rushikesh7@gmail.com> - 4.19.142-3
changelog:
  - Security update
  - Fix XSAs 361 362 365
  - Fix use-after-free in xen-netback caused by XSA-332
  - See https://xenbits.xen.org/xsa/
  - Updated to patch-4.19.93-94-mod to resolve XSA 365 conflict


author: Rushikesh Jadhav <rushikesh7@gmail.com> - 4.19.154-1
changelog:
  - Security (XSAs 367 and 371) and bugfix update
  - XSA-367: Linux: netback fails to honor grant mapping errors
  - XSA-371: Linux: blkback driver may leak persistent grants
  - Patches backported from linus kernel to fix event-related issues caused by XSA-332
  - Update patch level to 4.19.154


author: Rushikesh Jadhav <rushikesh7@gmail.com> - 4.19.227-1
changelog:
  - Fixes issue #522
  - Cumulative update till 4.19.227
  - Disabled Citrix patches that were taken from upstream
  - Disabled GFS2 and gvt patches as its not support by the distro


author: Rushikesh Jadhav <rushikesh7@gmail.com> - 4.19.265-1
changelog:
  - Update patch level to 4.19.265
  - Don't provide kernel Provides
  - We don't want kernel-alt to be pulled as build deps instead of main kernel packages


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.11-2
changelog:
  - Make a patch out of Michal's pkgconfig support.
  - Modernize the configure.ac file for Automake >= 1.13.
  - Respect the Fedora CFLAGS
    https://bugzilla.redhat.com/show_bug.cgi?id=908096


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.15-3
changelog:
  - Get the package closer to what upstream intended:
    - Do not move the headers into a subfolder of /usr/include
    - Make a libev-libevent-devel subpackage to contain the libevent
      compatibility header, so that only this subpackage conflicts with
      libevent-devel, not all of libev-devel
    - Drop the pkgconfig file, as upstream rejected it several times already.


author: Warren Togami <warren@blockstream.com> - 0.9.8-3
changelog:
  - 0.9.8
  - x86_64  EL7: DFORCE_MONOTONIC_FIX
    aarch64 EL7: DFORCE_MONOTONIC_FIX and FORCE_PTHREAD_NONVER
    ppc64le EL7: DFORCE_MONOTONIC_FIX and FORCE_PTHREAD_NONVER
    ppc64le F30+ FORCE_PTHREAD_NONVER


author: Warren Togami <warren@blockstream.com> - 0.9.8-4
changelog:
  - upstream says to use FORCE_PTHREAD_NONVER on any glibc+arch that gets stuck
    For Fedora 31+ "make test" gets stuck on i686 x86_64 ppc64le s390x


author: Paul Wouters <pwouters@redhat.com> - 0.9.8-5
changelog:
  - Resolves: rhbz#1766749 libfaketime rfe: please add Provides:faketime
  - Use license tag, remove duplicate README entry, update make test target


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1
changelog:
  - Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1
changelog:
  - Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.8-1
changelog:
  - Rebase to libtalloc 2.1.8
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.9-1
changelog:
  - Rebase to libtalloc 2.1.9
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.10-1
changelog:
  - Rebase to libtalloc 2.1.10
  - Resolves: rhbz#1470053 - Rebase libtalloc to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.14-1
changelog:
  - Rebase to libtalloc 2.1.14
  - Resolves: rhbz#1658747 - Rebase libtalloc to version 2.1.14 for Samba


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-1
changelog:
  - Rebase to libtalloc 2.1.16
  - Resolves: rhbz#1736005 - Rebase libtalloc to version 2.1.16 for Samba


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.6-2
changelog:
  - Resolves: rhbz#1241015 - tdb deadlocks if you acquire allrecord_lock
                             and start two traverses


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.12-2
changelog:
  - Resolves: rhbz#1441231 - The tdb robust mutexes runtime check is not thread safe and ends in a deadlock


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.15-1
changelog:
  - Resolves: rhbz#1470049 - Rebase libtdb to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.33-1
changelog:
  - Resolves: #1470054 - Rebase libtevent to enable samba rebase to version
                         4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.34-1
changelog:
  - Resolves: #1512414 - tevent can cause a Samba file corruption bug under
                         heavy threaded load


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-2
changelog:
  - lu-Fix-rpmdiff-failure.patch [bz#1229359]
  - lu-Fix-buffer-overflow-reported-by-Coverity.patch [bz#1233114]
  - Resolves: bz#1229359
    (Fix multilib support)
  - Resolves: bz#1233114
    (fix off-by-one in dwarf_to_unw_regnum (CVE-2015-3239))


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-5
changelog:
  - Version bumped [bz#1238864]
  - Resolves: bz#1238864
    libunwind: bump version to win against existing branches


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-6.el7
changelog:
  - Fix update from EPEL version [bz#1289950]
  - Resolves: bz#1289950
    (libunwind in RHEL 7.2 has a smaller release than the last libunwind package in EPEL-7)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-2.el7
changelog:
  - Rebase to 1.2 [bz#1384435]
  - Resolves: bz#1384435
    (Rebase libunwind package (and add for ppc64le): libunwind)


author: Gael Duperrey <gduperrey@vates.fr> - 20190314-6.1
changelog:
  - Synced from hotfix XS82ECU1026
  - *** Upstream changelog ***
  - * Tue Feb 7 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 20190314-6
  - - Update AMD microcode to the 2023-01-31 drop


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20190314-7.1
changelog:
  - Synced from hotfix XS82ECU1030
  - *** Upstream changelog ***
  - * Tue Apr 18 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 20190314-7
  - - Update to the 2023-04-13 drop.  Manually fix up the SSP-B0 date.


author: Gael Duperrey <gduperrey@vates.fr> - 20190314-9.1
changelog:
  - Synced from hotfix XS82ECU1045
  - *** Upstream changelog ***
  - * Wed Jul 26 2023 Alejandro Vallejo <alejandro.vallejo@cloud.com> 20190314-9
  - - Add new CPUs to the microcode blob:
  - - RS-B1 00a10f11: 2023-06-20, rev 0a10113e
  - - RS-B2 00a10f12: 2023-06-20, rev 0a10123e
  - - RSDN-A1 00aa0f01: 2023-06-19, rev 0aa00116
  - - RSDN-A2 00aa0f02: 2023-06-19, rev 0aa00212
  - * Fri Jul 21 2023 Alejandro Vallejo <alejandro.vallejo@cloud.com> 20190314-8
  - - Update to the 2023-07-19 drop.


author: Gael Duperrey <gduperrey@vates.tech> - 20190314-10.1
changelog:
  - Synced from hotfix XS82ECU1057
  - *** Upstream changelog ***
  - * Mon Nov 6 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 20190314-10
  - - Update to the 2023-10-19 AMD microcode drop
  -   Updated CPUs:
  -     RS-B1 00a10f11: 2023-06-20, rev 0a10113e -> 2023-09-06, rev 0a101144
  -     RS-B2 00a10f12: 2023-06-20, rev 0a10123e -> 2023-09-11, rev 0a101244
  -   RSDN-A2 00aa0f02: 2023-06-19, rev 0aa00212 -> 2023-09-11, rev 0aa00213


author: Gael Duperrey <gduperrey@vates.tech> - 20190314-11.1
changelog:
  - Synced from hotfix XS82ECU1067
  - *** Upstream changelog ***
  - * Fri May 10 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 20190314-11
  - - Update to the 2024-05-03 drop.
  -   Updated CPUs:
  -     ZP-B2 00800f12: 2021-11-11, rev 0800126e -> 2023-12-19, rev 0800126f
  -    SSP-B0 00830f10: 2023-08-16, rev 0830107b -> 2023-12-18, rev 0830107c
  -     GN-B0 00a00f10: 2023-06-09, rev 0a001079 -> 2024-02-26, rev 0a00107a
  -     GN-B1 00a00f11: 2023-08-23, rev 0a0011d3 -> 2024-02-23, rev 0a0011d5
  -     GN-B2 00a00f12: 2023-08-31, rev 0a001236 -> 2024-02-26, rev 0a001238
  -     RS-B1 00a10f11: 2023-09-06, rev 0a101144 -> 2024-02-23, rev 0a101148
  -     RS-B2 00a10f12: 2023-09-11, rev 0a101244 -> 2024-02-26, rev 0a101248
  -   RSDN-A2 00aa0f02: 2023-09-11, rev 0aa00213 -> 2024-02-28, rev 0aa00215


author: Gael Duperrey <gduperrey@vates.fr> 20190314-6.1
changelog:
  - Synced from hotfix XS82ECU1026
  - *** Upstream changelog ***
  - * Tue Feb 7 2023 Andrew Cooper <andrew.cooper3@citrix.com> 20190314-6
  - - Update AMD microcode to the 2023-01-31 drop


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20190314-7.1
changelog:
  - Synced from hotfix XS82ECU1030
  - *** Upstream changelog ***
  - * Tue Apr 18 2023 Andrew Cooper <andrew.cooper3@citrix.com> 20190314-7
  - - Update to the 2023-04-13 drop.  Manually fix up the SSP-B0 date.


author: Chris Leech <cleech@redhat.com> - 1.0.1-3.git036e314
changelog:
  - 1273663 sync with upstream v1.0.1-26-g036e314
    system capability incorrect advertised as station only


author: Gael Duperrey <gduperrey@vates.tech> - 5.9_0.5.5.0-1.1
changelog:
  - Update to version 5.9_0.5.5.0-1.1
  - Synced from XS driver SRPM mellanox-mlnxen-5.9_0.5.5.0-1.xs8~2_1.src.rpm
  - *** Upstream changelog ***
  - * Mon Aug 28 2023 Stephen Cheng <stephen.cheng@citrix.com> - 5.9_0.5.5.0-1
  - - CP-43274: Update to version 5.9-0.5.5.0


author: Christian Lindig <christian.lindig@citrix.com> - 1.22.0-1
changelog:
  - Upgrade from jbuilder to dune in opam rules
  - Update message-switch dependencies according to dune


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.23.1-1.1
changelog:
  - Sync with hotfix XS82E031
  - *** Upstream changelog ***
  - * Fri Jul 16 2021 Ben Anson <ben.anson@citrix.com> - 1.23.1-1
  - - maintenance: prepare for ocamlformat
  - - make format
  - - CA-351685: Make default Traceext.size configurable
  - - CA-351685: Reduce number of trace entries to 16 to reduce memory usage
  - - CA-351685: truncate large messages in trace buffer


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.23.2-3.1
changelog:
  - Sync with CH 8.2.1
  - *** Upstream changelog ***
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.23.2-3
  - - Bump package for libev dependency
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.23.2-2
  - - Bump package after xs-opam update
  - * Mon Aug 23 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.23.2-1
  - - maintenance: opam 2.1.0 compatibility
  - - CP-38064: update code for jst 0.13.0 compatibility
  - - maintenance: remove unused types
  - - CA-38064: truncate large messages in trace buffer


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.23.2-4.1
changelog:
  - Sync with hotfix XS82ECU1027
  - *** Upstream changelog ***
  - * Thu Feb 23 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.23.2-4
  - - Change license to match the one in the source repo
  - - Remove macro for dependency generator


author: Gael Duperrey <gduperrey@vates.fr> - 1.23.2-9.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 1.23.2-9
  - - Bump release and rebuild
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 1.23.2-8
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 1.23.2-7
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.23.2-6
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.23.2-5
  - - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.23.2-10.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.23.2-10
  - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.fr> - 1.23.2-17.1
changelog:
  - Sync with hotfix XS82ECU1064
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 1.23.2-17
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 1.23.2-16
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 1.23.2-15
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 1.23.2-14
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.23.2-13
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.23.2-12
  - - Bump release and rebuild
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 1.23.2-11
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.23.2-19.1
changelog:
  - Sync with hotfix XS82ECU1074
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 1.23.2-19
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 1.23.2-18
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.23.2-22.1
changelog:
  - Sync with hotfix XS82ECU1080
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.23.2-22
  - - Bump release and rebuild
  - * Thu Dec 12 2024 Christian Lindig <christian.lindig@cloud.com> - 1.23.2-21
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 1.23.2-20
  - - Bump release and rebuild


author: Igor Druzhinin <igor.druzhinin@citrix.com> - 2.1.26-xs19
changelog:
  - Import staging microcode-20220204 tag
  - Import staging microcode-20220131 tag
  - Import staging microcode-20220126 tag
  - Import staging microcode-20220121 tag


author: Andrew Cooper <andrew.cooper3@citrix.com> - 2.1.26-xs20
changelog:
  - Rework build system, build directly from Intel microcode repository.
  - Import staging microcode-20220207 tag.


author: David Morel <david.morel@vates.tech> - 2.1-26.xs28.1
changelog:
  - Update to IPU 2024.1 release
  - Security updates for:
      - INTEL-SA-INTEL-SA-00972
      - INTEL-SA-INTEL-SA-00982
      - INTEL-SA-INTEL-SA-00898
      - INTEL-SA-INTEL-SA-00960
      - INTEL-SA-INTEL-SA-01045


author: Gael Duperrey <gduperrey@vates.tech> - 2.1-26.xs29.1
changelog:
  - Update to IPU 2024.2 release
  - Security updates for:
      - INTEL-SA-INTEL-SA-01051
      - INTEL-SA-INTEL-SA-01052
      - INTEL-SA-INTEL-SA-01036


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.1-26.xs29.2
changelog:
  - Update Gemini Lake 06-7a-01 to revision 0x42
  - Fixes a regression introduced in IPU-2024.1, revision 0x40


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.1-26.xs29.3
changelog:
  - Update to IPU 2024.3 release
  - Security updates for:
      - INTEL-SA-01083
      - INTEL-SA-01118
      - INTEL-SA-01100
      - INTEL-SA-01038
      - INTEL-SA-01046
  - Removed 06-7a-01 individual "Source" file, now included in the latest release


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.1-26.xs29.4
changelog:
  - Update to the fixed released of IPU 2024.3
  - Intel has re-done the release after we reported that 06-a5-03 was not updated


author: David Morel <david.morel@vates.tech> - 2.1-26.xs29.5
changelog:
  - Update to the latest version of IPU 2024.3
  - Security updates for: 
      - INTEL-SA-01103
      - INTEL-SA-01097


author: Gael Duperrey <gduperrey@vates.tech> - 2.1-26.xs29.6
changelog:
  - Update to microcode-20241112 release
  - Security updates for:
      - INTEL-SA-01101
      - INTEL-SA-01079
  - Updated security updates for:
      - INTEL-SA-01097
      - INTEL-SA-01103
  - Updates for multiple functional issues


author: Gael Duperrey <gduperrey@vates.fr> - 2.1.24_046-1.1
changelog:
  - Update to version 2.1.24_046-1
  - Synced from XS driver SRPM microsemi-smartpqi-2.1.24_046-1.xs8~2_1.src.rpm


author: Gael Duperrey <gduperrey@vates.tech> - 2.1.28_025-1
changelog:
  - Update to version 2.1.28_025
  - Synced from XS driver SRPM microsemi-smartpqi-2.1.28_025-1.xs8~2_1.src.rpm


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.5-1
changelog:
  - New stable version 1.2.5.
  - Enable VDDK plugin on x86-64 only.
  - Small refactorings in the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.0-3
changelog:
  - Fix for CVE-2019-14850 denial of service due to premature opening
    of back-end connection
    resolves: rhbz#1757261


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.19.0-3
changelog:
  - Security fix: avoid race conditions that can cause the dbengine to grow out of control
  - Set memory mode = ram, no more disk cache
  - See https://github.com/netdata/netdata/issues/8001
  - Enforce installation of our netdata.conf.ui even if there are local changes


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-5
changelog:
  - Fixed SHA-3 implementation to conform to final standard (#1252936)
  - Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
    in secp256r1 and secp384r1 calculations (#1314374)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-8
changelog:
  - Use a cache-silent version of mpz_powm to prevent cache-timing
    attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)


author: Christian Lindig <christian.lindig@citrix.com> - 1.11.0-1
changelog:
  - Use xapi-rrd; rrd is being deprecated.
  - Use OCaml v4.07 for travis.
  - Corrected coverage rewriter.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.16.0-5.1
changelog:
  - Sync with CH 8.2.1
  - *** Upstream changelog ***
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.16.0-5
  - - Bump package after xs-opam update
  - * Tue Jul 13 2021 Edwin Török <edvin.torok@citrix.com> - 1.16.0-4
  - - bump packages after xs-opam update


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.16.1-2.1
changelog:
  - Sync with hotfix XS82ECU1027
  - *** Upstream changelog ***
  - * Thu Feb 23 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.16.1-2
  - - Change license to match source repo
  - - Fix BuildRequires for xen libraries
  - - Remove macro for dependency generator
  - * Mon Feb 20 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.16.1-1
  - - Same as 1.16.0, koji tooling needed an annotated tag to build


author: Gael Duperrey <gduperrey@vates.fr> - 1.16.1-7.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 1.16.1-7
  - - Bump release and rebuild
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 1.16.1-6
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 1.16.1-5
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.16.1-4
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.16.1-3
  - - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.16.1-8.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.16.1-8
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.16.1-15.1
changelog:
  - Sync with hotfix XS82ECU1064
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 1.16.1-15
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 1.16.1-14
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 1.16.1-13
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 1.16.1-12
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.16.1-11
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.16.1-10
  - - Bump release and rebuild
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 1.16.1-9
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.16.1-17.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 1.16.1-17
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 1.16.1-16
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.16.1-20.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1080
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.16.1-20
  - - Bump release and rebuild
  - * Thu Dec 12 2024 Christian Lindig <christian.lindig@cloud.com> - 1.16.1-19
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 1.16.1-18
  - - Bump release and rebuild


author: Christian Lindig <christian.lindig@citrix.com> - 1.3.0-1
changelog:
  - CP-26583: Remove API call labels for PPX port of Rrdd
  - CP-26583: Remove rpc <-> string conversion for PPX port
  - Strip whitespace


author: Christian Lindig <christian.lindig@citrix.com> - 1.9.0-1
changelog:
  - Factor out local reporter to allow avoiding the libxenctrl dependency
  - Change rpc -> rpclib in opam file


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.0-5.1
changelog:
  - Sync with CH 8.2.1
  - *** Upstream changelog ***
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.9.0-5
  - - Bump package after xs-opam update
  - * Tue Jul 13 2021 Edwin Török <edvin.torok@citrix.com> - 1.9.0-4
  - - bump packages after xs-opam update
  - * Thu Sep 02 2021 Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.0-3.3
  - - Rebuild for message-switch 1.23.1 from XS82E031


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.1-2.1
changelog:
  - Sync with hotfix XS82ECU1027
  - *** Upstream changelog ***
  - * Mon Feb 27 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.9.1-2
  - - Change license to match the one in the source repo
  - * Mon Feb 20 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.9.1-1
  - - Same as 1.9.0, koji tooling needed an annotated tag to build


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.9.1-2.2
changelog:
  - Add ocaml-rrdd-plugin-1.9.1-check-page-count-before-writing-payload.backport.patch
  - This fixes gpumon's "not enough memory" warnings in xcp-rrdd-plugins.log


author: Gael Duperrey <gduperrey@vates.fr> - 1.9.1-7.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 1.9.1-7
  - - Bump release and rebuild
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 1.9.1-6
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 1.9.1-5
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.9.1-4
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.9.1-3
  - - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.1-8.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.9.1-8
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.9.1-15.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1064
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 1.9.1-15
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 1.9.1-14
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 1.9.1-13
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 1.9.1-12
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.9.1-11
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.9.1-10
  - - Bump release and rebuild
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 1.9.1-9
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.9.1-17.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 1.9.1-17
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 1.9.1-16
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.9.1-20.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1080
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.9.1-20
  - - Bump release and rebuild
  - * Thu Dec 12 2024 Christian Lindig <christian.lindig@cloud.com> - 1.9.1-19
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 1.9.1-18
  - - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.5.0-5.1
changelog:
  - Sync with CH 8.2.1
  - *** Upstream changelog ***
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.5.0-5
  - - Bump package after xs-opam update
  - * Tue Jul 13 2021 Edwin Török <edvin.torok@citrix.com> - 1.5.0-4
  - - bump packages after xs-opam update


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.5.1-2.1
changelog:
  - *** Upstream changelog ***
  - * Thu Feb 23 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.5.1-2
  - - Change license to match source repo
  - * Mon Feb 20 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.5.1-1
  - - Same as 1.5.0, koji tooling needed an annotated tag to build


author: Gael Duperrey <gduperrey@vates.fr> - 1.5.1-7.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 1.5.1-7
  - - Bump release and rebuild
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 1.5.1-6
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 1.5.1-5
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.5.1-4
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.5.1-3
  - - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.5.1-8.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.5.1-8
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.5.1-15.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1064
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 1.5.1-15
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 1.5.1-14
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 1.5.1-13
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 1.5.1-12
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.5.1-11
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.5.1-10
  - - Bump release and rebuild
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 1.5.1-9
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.5.1-17.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 1.5.1-17
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 1.5.1-16
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.5.1-20.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1080
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.5.1-20
  - - Bump release and rebuild
  - * Thu Dec 12 2024 Christian Lindig <christian.lindig@cloud.com> - 1.5.1-19
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 1.5.1-18
  - - Bump release and rebuild


author: Christian Lindig <christian.lindig@citrix.com> - 1.88.0-1
changelog:
  - maintenance: replace references to pervasives module
  - ci: use configuration from xs-opam
  - CA-328130 add speed to Vusb record


author: Christian Lindig <christian.lindig@citrix.com> - 1.94.0-1
changelog:
  - add Sriov.enable_action_result Manual_successful, for manual sr-iov/vf
  	configuration support
  - Revert "add Sriov.enable_action_result Manual_successful, for manual
  	sr-iov/vf configuration support"


author: Christian Lindig <christian.lindig@citrix.com> - 1.95.0-1
changelog:
  - maintenance: remove ambiguity of doc comment
  - maintenance: Tweak comments
  - Maintenance: add ocamlformat configuration
  - maintenance: update dune to 2.0
  - format: format using ocamlformat 0.14
  - maintenance: reformat comments with stars in them


author: Christian Lindig <christian.lindig@citrix.com> - 1.96.0-1
changelog:
  - maintenance: formatting fixes
  - maintenance: fix (deprecation) warnings
  - maintenance: drop unused Scheduler code
  - CA-338201: use a more efficient way of splitting a map
  - Optimization: store handles in the map
  - Optimization: do not build intermediate list
  - CA-338201: use mtime
  - CA-337546: use a single persistent pipe per scheduler, avoid using
  	pipes in Delay.wait
  - CA-337546: add mtime to opam file


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.96.1-1.1
changelog:
  - Update for XS82E020 and rebuild for xs-opam-src 6.35.6
  - *** Upstream changelog ***
  - * Thu Feb 11 2021 Ben Anson <ben.anson@citrix.com> - 1.96.1-1
  - - CP-35026 optionally include client info in logs
  - - CA-347560: Add VM.import_metadata_async


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.96.2-2.1
changelog:
  - Sync with CH 8.2.1
  - *** Upstream changelog ***
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.96.2-2
  - - Bump package after xs-opam update
  - * Mon Aug 23 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.96.2-1
  - - CP-38064: compatibility with rpclib 7
  - * Tue Jul 13 2021 Edwin Török <edvin.torok@citrix.com> - 1.96.1-2
  - - bump packages after xs-opam update


author: Gael Duperrey <gduperrey@vates.fr> - 1.96.4-1.1
changelog:
  - Sync to hotfix XS82ECU1011
  - * Tue May 17 2022 Christian Lindig <christian.lindig@citrix.com> - 1.96.4-1
  - - CA-363633: Always take the generation-id directly from xapi
  - - CA-361220: xenopsd: introduce TASK.destroy_on_finish
  - - Remove CPUID levelling v1 compat code
  - - Add featureset to xenopsd VM state


author: Christian Lindig <christian.lindig@citrix.com> - 1.94.0-1
changelog:
  - add Sriov.enable_action_result Manual_successful, for manual sr-iov/vf
      configuration support
  - Revert "add Sriov.enable_action_result Manual_successful, for manual
      sr-iov/vf configuration support"


author: Christian Lindig <christian.lindig@citrix.com> - 1.96.0-1
changelog:
  - maintenance: formatting fixes
  - maintenance: fix (deprecation) warnings
  - maintenance: drop unused Scheduler code
  - CA-338201: use a more efficient way of splitting a map
  - Optimization: store handles in the map
  - Optimization: do not build intermediate list
  - CA-338201: use mtime
  - CA-337546: use a single persistent pipe per scheduler, avoid using
      pipes in Delay.wait
  - CA-337546: add mtime to opam file


author: Gael Duperrey <gduperrey@vates.fr> - 1.96.4-1.1
changelog:
  - Sync to hotfix XS82ECU1011
  - *** Upstream changelog ***
  - * Tue May 17 2022 Christian Lindig <christian.lindig@citrix.com> - 1.96.4-1
  - - CA-363633: Always take the generation-id directly from xapi
  - - CA-361220: xenopsd: introduce TASK.destroy_on_finish
  - - Remove CPUID levelling v1 compat code
  - - Add featureset to xenopsd VM state


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.96.4-2.1
changelog:
  - Sync with hotfix XS82ECU1027
  - *** Upstream changelog ***
  - * Thu Feb 23 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.96.4-2
  - - Change license to match the one in the source repo
  - - Remove macro for dependency generator
  - - Be more specific on installable files


author: Gael Duperrey <gduperrey@vates.fr> - 1.96.5-1.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 1.96.5-1
  - - Introduce functions in CPU feature sets in xenopsd
  - - xenopsd: change type of reported CPU feature-sets to an abstract type
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 1.96.4-6
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 1.96.4-5
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.96.4-4
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.96.4-3
  - - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.96.5-2.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.96.5-2
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.96.7-4.1
changelog:
  - Sync with hotfix XS82ECU1064
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 1.96.7-4
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 1.96.7-3
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 1.96.7-2
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 1.96.7-1
  - - CP-42182 remove rrd-cli, it's now in xcp-rrdd
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@citrix.com> - 1.96.6-5
  - - Don't install rrd-cli binary. It moved into the xcp-rrdd package.
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.96.6-4
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.96.6-3
  - - Bump release and rebuild
  - * Thu Oct 19 2023 Christian Lindig <christian.lindig@citrix.com> - 1.96.6-2
  - - install rrd-cli in install section
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 1.96.6-1
  - - CP-42182 Add CLI tool on xe and rrd-cli to enable saving of rrds to local host


author: Gael Duperrey <gduperrey@vates.tech> - 1.96.7-6.1
changelog:
  - Sync with hotfix XS82ECU1074
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 1.96.7-6
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 1.96.7-5
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.96.7-9.1
changelog:
  - Sync with hotfix XS82ECU1080
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.96.7-9
  - - Bump release and rebuild
  - * Thu Dec 12 2024 Christian Lindig <christian.lindig@cloud.com> - 1.96.7-8
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 1.96.7-7
  - - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.0-5.1
changelog:
  - Sync with hotfix XS82ECU1027
  - *** Upstream changelog ***
  - * Tue Feb 28 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.9.0-5
  - - Change license to be a valid SPDX identifier
  - - Fix xen BuildReqs
  - - Remove macro for dependency generator
  - * Mon Feb 20 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.9.0-4
  - - Bump to avoid conflict with existing version tag in repo


author: Gael Duperrey <gduperrey@vates.fr> - 1.9.0-10.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 1.9.0-10
  - - Bump release and rebuild
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 1.9.0-9
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 1.9.0-8
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.9.0-7
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.9.0-6
  - - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.0-11.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.9.0-11
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.9.0-18.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1064
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 1.9.0-18
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 1.9.0-17
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 1.9.0-16
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 1.9.0-15
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.9.0-14
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.9.0-13
  - - Bump release and rebuild
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 1.9.0-12
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.9.0-20.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 1.9.0-20
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 1.9.0-19
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.9.0-23.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1080
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.9.0-23
  - - Bump release and rebuild
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.9.0-22
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 1.9.0-21
  - - Bump release and rebuild


author: Christian Lindig <christian.lindig@citrix.com> - 1.4.0-1
changelog:
  - Move to dune and fix opam dependencies
  - Update .travis.yml to pin all opam packages in this repo, use OCaml 4.06


author: Christian Lindig <christian.lindig@citrix.com> - 1.3.0-1
changelog:
  - async: make safe-string compliant
  - lwt: make safe-string compliant
  - lwt_examples: fix use of cohttp (>= 1.0.0)


author: Christian Lindig <christian.lindig@citrix.com> - 2.21.0-1
changelog:
  - CP-32124: Set fips=yes explicitly
  - CP-32124: Add checkHost verify peer hostname against cert
  - CP-32124: Check if the CRLpath is an empty directory
  - CP-32124: Set the default log facility as 'authpriv'
  - CP-32124: Disable TLSv1.3


author: Christian Lindig <christian.lindig@citrix.com> - 2.25.0-1
changelog:
  - CA-337546: add a xapi_stdext_resources module for safe handling of
  	file descriptors
  - CA-337546: use Unixfd.t to avoid leaks
  - CA-337546: watchdog: replace pipe with scheduler
  - CA-337546: convert xapi-compression to use safe pipes
  - CA-337546: rename to safe_resources
  - CA-337546: print LOC on GC close failure
  - CA-337546: use Hashtbl.replace in move_into
  - CA-337546: add opam file for new library
  - CA-337546: stunnel disconnect: fix Stack overflow
  - CA-337546: stunnel: don't loop when wait=false in disconnect
  - CA-340493: only call diagnose failure if a logfile exists


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.25.1-1.1
changelog:
  - Update for XS82E020
  - *** Upstream changelog ***
  - * Thu Feb 11 2021 Ben Anson <ben.anson@citrix.com> - 2.25.1-1
  - - CP-35026 add ability to parse a PROXY header
  - - CP-35026 add STUNNEL_PROXY additional header
  - - CA-342856 don't print to stderr, use Debug.error
  - - fixup! CA-342856 don't print to stderr, use Debug.error


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.25.2-1.1
changelog:
  - Sync with hotfix XS82E031
  - *** Upstream changelog ***
  - * Fri Jul 16 2021 Ben Anson <ben.anson@citrix.com> - 2.25.2-1
  - - CP-36872: Backport XSI-989
  - - Use HTTP/1.1 in 101 response


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.25.3-1.1
changelog:
  - Sync with CH 8.2.1
  - *** Upstream changelog ***
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 2.25.3-2
  - - Bump package after xs-opam update
  - * Thu Sep 23 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 2.25.3-1
  - - CA-358583: Fix PROXY metadata to multiple HTTPS requests on a connection


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.25.3-3.1
changelog:
  - Security update, synced from XS82ECU1019
  - *** Upstream changelog ***
  - * Thu Sep 08 2022 Rob Hoes <rob.hoes@citrix.com> - 2.25.3-3
  - - CA-368579: Mitigations against DoS attacks by unauthenticated clients


author: Christian Lindig <christian.lindig@citrix.com> - 2.25.0-1
changelog:
  - CA-337546: add a xapi_stdext_resources module for safe handling of
      file descriptors
  - CA-337546: use Unixfd.t to avoid leaks
  - CA-337546: watchdog: replace pipe with scheduler
  - CA-337546: convert xapi-compression to use safe pipes
  - CA-337546: rename to safe_resources
  - CA-337546: print LOC on GC close failure
  - CA-337546: use Hashtbl.replace in move_into
  - CA-337546: add opam file for new library
  - CA-337546: stunnel disconnect: fix Stack overflow
  - CA-337546: stunnel: don't loop when wait=false in disconnect
  - CA-340493: only call diagnose failure if a logfile exists


author: Gael Duperrey <gduperrey@vates.fr> - 2.25.5-4.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 2.25.5-4
  - - Bump release and rebuild
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 2.25.5-3
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 2.25.5-2
  - - Bump release and rebuild
  - * Mon May 15 2023 Christian Lindig <christian.lindig@citrix.com> - 2.25.5-1
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations)
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 2.25.4-3
  - - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.25.5-5.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 2.25.5-5
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 2.25.6-7.1
changelog:
  - Sync with hotfix XS82ECU1064
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 2.25.6-7
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 2.25.6-6
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 2.25.6-5
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 2.25.6-4
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 2.25.6-3
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 2.25.6-2
  - - Bump release and rebuild
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 2.25.6-1
  - - CA-379173 handle race condition in stunnel_cache


author: Gael Duperrey <gduperrey@vates.tech> - 2.25.7-1.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 2.25.7-1
  - - CA-395174: Try to unarchive VM's metrics when they aren't running
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 2.25.6-8
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 2.25.7-4.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1080
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 2.25.7-4
  - - Bump release and rebuild
  - * Thu Dec 12 2024 Christian Lindig <christian.lindig@cloud.com> - 2.25.7-3
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 2.25.7-2
  - - Bump release and rebuild


author: Alex Brett <alex.brett@cloud.com> - 7.4p1-23.1 + 0.10.3-2
changelog:
  - Imported openssh-7.4p1-23.el7_9 from CentOS, including:
  - Fix for CVE-2023-38408
  - Fix for CVE-2021-41617
  - Fix for CVE-2018-15473
  - Fix for CVE-2017-15906


author: Thierry Escande <thierry.escande@vates.tech> - 7.4p1-23.2.1 + 0.10.3-2.23.2.1
changelog:
  - Harden default ciphers and algorithms
  - Disable GSSAPIAuthentication in sshd_config
  - Remove build dependency on xauth (used for X11 forwarding not supported on XCP-ng hosts)
  - Make use of xcpng_subrel macro for versioning
  - Disable gnome_askpass
  - Add BuildRequires for gcc


author: Thierry Escande <thierry.escande@vates.tech> - 7.4p1-23.3.1 + 0.10.3-2.1
changelog:
  - Update to 7.4p1-23.3 + 0.10.3-2
  - *** Upstream changelog ***
  - * Tue Jul 02 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 7.4p1-23.3 + 0.10.3-2
  - - CP-50166: Remove libsystemd integration
  - - CA-395182: Fix CVE-2024-6387 - use of non-async-signal-safe fn in sighandler


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-12
changelog:
  - fix CVE-2017-3737 - incorrect handling of fatal error state
  - fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-13
changelog:
  - add S390x assembler updates
  - make CA name list comparison function case sensitive (#1548401)
  - fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
  - fix CVE-2018-0732 - large prime DH DoS of TLS client
  - fix CVE-2018-0737 - RSA key generation cache timing vulnerability
  - fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-16
changelog:
  - fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
  - fix incorrect error message on FIPS DSA parameter generation (#1603597)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-17
changelog:
  - use SHA-256 in FIPS RSA pairwise key check
  - fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
    timing side-channel key extraction


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-18
changelog:
  - fix CVE-2018-0734 - DSA signature local timing side channel
  - fix CVE-2019-1559 - 0-byte record padding oracle
  - close the RSA decryption One & done EM side channel (#1619558)


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-22
changelog:
  - fix CVE-2021-23841 openssl: NULL pointer dereference
    in X509_issuer_and_serial_hash()
  - fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
  - Resolves: rhbz#1932132, rhbz#1932126


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-23
changelog:
  - fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#1996054


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-24
changelog:
  - Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
  - Resolves: rhbz#2039993


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.0.2k-25
changelog:
  - Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Related: rhbz#2067160


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1:1.0.2k-26.1
changelog:
  - Add openssl-1.0.2k-update-expiring-certificates.patch to fix build time tests
  - Added gcc to BuildRequires


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 2.5.3-2.3.7
changelog:
  - CP-33305: Try and protect OVS from OOM
  - Roll CP-33305-dont-kill-ovs.patch into CP-15129-Convert-to-use-systemd-services.patch
  - CA-331103: Fix crash in mbundle_lookup()


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.5.3-2.3.10.2
changelog:
  - Rebuild for updated xs-openssl in XCP-ng 8.2.1
  - Not sure it's required but better safe than sorry


author: Gael Duperrey <gduperrey@vates.fr> - 2.5.3-2.3.11.2
changelog:
  - Sync to hotfix XS82ECU1008
  - *** Upstream changelog ***
  - * Thu Mar 24 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.5.3-2.3.11
  - - CA-364343: Honour updelay when LACP is used
  - - CA-367973: Backport bond-related patches to fix XSI-1198


author: Gael Duperrey <gduperrey@vates.fr> - 2.5.3-2.3.12.1
changelog:
  - Sync to hotfix XS82ECU1017
  - *** Upstream changelog ***
  - * Mon Aug 08 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.5.3-2.3.12
  - - CA-351960 / CA-369139: CVE-2020-35498: Support extra padding length
  - - CA-357261: Hide expected errors from logrotate script


author: David Morel <david.morel@vates.tech> - 2.5.3-2.3.12.2
changelog:
  - Comment out tests that fail
  - Enable make check in spec file, without parallel tests
  - Fix CVE-2023-5366, manual backport from 2.17
  - Backport fix for CVE-2023-1668 from XS 8.3/8.4 version 2.5.3-2.3.14
  - *** Upstream changelog ***
  - * Tue Apr 18 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.5.3-2.3.14
  - - CA-376367: Fix CVE-2023-1668


author: Than Ngo <than@redhat.com> - 2.7.1-11
changelog:
  - Fixed CVE-2016-10713 - Out-of-bounds access in pch_write_line function 
  - Fixed CVE-2018-6952 - Double free of memory
  - Resolves: #1626473, honor new file mode 100755 when applying patches
  - Resolves: #1653294, Added virtual provides for bundled gnulib library


author: Robert Relyea <rrelyea@redhat.com> - 1.8.8-7
changelog:
  - Don't hang if the daemon is blocked by systemd
  - Make sure we have a new enough systemd-devel to have the udev headers


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - Fix misuse of magic in API (CPAN RT#78080)
  - Drop redundant explicit requires for perl(Exporter) and perl(File::Temp)


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - Compress::Raw::Bzip2 needs to use PERL_NO_GET_CONTEXT (CPAN RT#80318)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79811)
    - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78080)


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - Compress::Raw::Zlib needs to use PERL_NO_GET_CONTEXT (CPAN RT#80319)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79812)
    - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78079)


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
  - Update to 2.061
    - Include zlib 1.2.8 source
    - Typo fix (CPAN RT#85431)
    - Silence compiler warning by making 2nd parameter to DispStream a const char*


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - FAQ: added a few paragraphs on how to deal with pbzip2 files
      (CPAN RT#77743)
    - Compress::Zip: speed up compress, uncompress, memGzip and memGunzip
      (CPAN RT#77350)
  - BR: perl(lib)
  - Drop BR: perl(Test::Builder) and perl(Test::More) as they're bundled
  - Drop BR: perl(Config), perl(Fcntl), perl(File::Copy), perl(File::Glob),
    perl(POSIX) and perl(Symbol) as they're not dual-lived
  - Drop redundant explicit require for perl(Exporter)
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - IO::Compress::Zip
      - Allow member name and Zip Comment to be "0"
    - IO::Compress::Base::Common
      - Remove "-r" test - the file open will catch this
      - IO::Compress::Base::Common returned that it could not read readable files
        in NFS (CPAN RT#80855)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79820)
    - General performance improvements
    - Fix failing 01misc.t subtest introduced in 2.057 (CPAN RT#81119)
  - Explicitly install to 'perl' directories


author: Paul Howarth <paul@city-fan.org> - 2.059-1
changelog:
  - Update to 2.059
    - IO::Compress::Base
      - Added "Encode" option (fixes the encoding half of CPAN RT#42656)


author: Paul Howarth <paul@city-fan.org> - 2.060-1
changelog:
  - Update to 2.060
    - Updated POD
      - CPAN RT#82138: Example code not clear - gunzip() takes filenames!
    - IO::Compress::Base
      - Remove the flush call when opening a filehandle


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
  - Update to 2.061
    - zipdetails (1.06)
      - Get it to cope with Android 'zipalign' non-standard extra fields; these
        are used to make sure that a non-compressed member starts on a 4 byte
        boundary
    - unzip example with IO::Uncompress::Unzip (CPAN RT#84647)


author: Paul Howarth <paul@city-fan.org> - 1.35-1
changelog:
  - Update to 1.35:
    - Explain how to use MIME::Types in mod_perl; when you do not read the
      documentation about mod_perl/fork it will work as always, but
      inefficiently
    - subType() did not handle subType's with '+' in them
    - Added video/webm and audio/webm, although not (yet) IANA registered
  - BR: perl(Carp) and perl(Exporter)
  - BR: at least version 1.00 of  perl(Test::Pod)
  - Use a patch rather than scripted iconv to fix character encooding
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Don't use macros for commands
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.36-1
changelog:
  - Update to 1.36:
    - xlsx and friends had encoding 'binary' (since version 1.30), but should
      have been 'base64' (CPAN RT#80529)


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - Update to 1.37:
    - Remove text/x-perl, where we also have an application/x-perl
      (CPAN RT#82100)


author: Paul Howarth <paul@city-fan.org> - 1.38-1
changelog:
  - Update to 1.38:
    - Add application/vnd.ms-excel.template.macroEnabled.12 and five related
      from http://filext.com/faq/office_mime_types.php (CPAN RT#82616)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:1.20-10
changelog:
  - Remove perl(base) from BR
  - Package README and ChangeLog
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Remove deleting empty directories


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.2.4-4
changelog:
  - Add conditional for sphinx on rhel.
  - Remove rhel logic from with_python3 conditional.
  - Disable failing tests for Python3.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.3.1-1
changelog:
  - Update to 2.3.1.
  - Re-enable some tests, ignore others.
  - Docs are available in English and Japanese now.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.3.5-1
changelog:
  - Update to 2.3.5.
  - Docutils needed now to build README.html.
  - Add some BR optionally used by the testsuite.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.3.5-2
changelog:
  - Use python-sphinx for rhel > 6 (rhbz#973318).
  - Update BR to use python-pexpect instead of pexpect.


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.4.14-2
changelog:
  - Use python-sphinx for rhel > 6 (rhbz#973321).
  - Update URL.
  - Fix changelog entry with an incorrect date (rhbz#973325).


author: Edwin Török <edvin.torok@citrix.com> - 2.10.2-4.1.4
changelog:
  - CP-29626: Call blk_drain in NVMe reset code to avoid lockups
  - CP-29898: Implement NVME migration workaround
  - CP-29935: Add a command to allow querying whether the VM is migratable
  - CP-29827: Don't conflate RTC_CENTURY bit with trad-compat
  - CP-29827: Make legacy CPU unplug work for all machine types
  - Fix patch context
  - Backport NVMe fixes from upstream, including a CVE
  - CA-303616: Expose LFB address when GVT-g is enabled


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 2.10.2-4.5.0
changelog:
  - Fix patch context
  - CA-336055: nvme: Disassociate block driver state during unplug
  - CA-299551: Fix sporadic cpu_physical_memory_snapshot_get_dirty assertion


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 2.10.2-4.5.1
changelog:
  - CA-337460 - Allow commit lists to be imported chronologically.
  - CP-33051 - Forward port preopened sockets in monitor fdset.
  - Fix patch context
  - CP-33348 - Allow preopend nbd sockets to be passed to running qemu instance via qmp command.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.2.1-4.6.1.1
changelog:
  - Sync with CH 8.2.1
  - *** Upstream changelog ***
  - * Fri Jul 16 2021 Anthony PERARD <anthony.perard@citrix.com> - 4.2.1-4.6.1
  - - CP-36452: Import patch queue from trunk / QEMU 4.2


author: Gael Duperrey <gduperrey@vates.fr> - 4.2.1-4.6.2.1
changelog:
  - Sync to hotfix XS82ECU1013
  - *** Upstream changelog ***
  - * Wed May 25 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-4.6.2
  - - CA-366527: Fix passthrough of multiple different devices
  - - CA-362592: Fix mapcache/iothread SIGBUS


author: Gael Duperrey <gduperrey@vates.fr> - 4.2.1-4.6.3.1
changelog:
  - Sync to hotfix XS82ECU1031
  - *** Upstream changelog ***
  - * Thu Apr 20 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-4.6.3
  - - Convert to Koji-based build
  - - CA-374355: Fix use of Lang1/Lang2 keys
  - - CA-376325: XSI-1393: Backport: xen-bus: reduce scope of backend watch


author: Gael Duperrey <gduperrey@vates.tech> - 4.2.1-4.6.4.1
changelog:
  - Sync to hotfix XS82ECU1068
  - *** Upstream changelog ***
  - * Thu May 30 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-4.6.4
  - - CP-42792: Backport a patch to avoid unncessary buffered ioreq polling
  - - CA-391031: Reinstate rate limiting of RTC_CHANGE events
  - - CA-391069: Avoid livelock due to buffered ioreqs


author: Gael Duperrey <gduperrey@vates.tech> - 8.74.0.2-1
changelog:
  - Update to version 8.74.0.2
  - Synced from XS driver SRPM qlogic-fastlinq-8.74.0.2-1.xs8~2_1.src.rpm


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7.14.53-1.1
changelog:
  - Backport patch from kernel tree
  - qlogic-netxtreme2-Fix-NULL-pointer-dereference-in-bnx2x_del_all_vlans.backport.patch


author: Gael Duperrey <gduperrey@vates.fr> - 7.14.76-1.1
changelog:
  - Sync with CH 8.2.1
  - *** Upstream changelog ***
  - * Thu Jul 8 2021 Chuntian Xu <chuntian.xu@citrix.com> - 7.14.76-1
  - - CP-37167: Update netXtreme2 driver to version 7.14.76
  - Drop patch partially applied upstream
  - Dropped patch: qlogic-netxtreme2-Fix-NULL-pointer-dereference-in-bnx2x_del_all_vlans.backport.patch
  - Add new patch to extend upstream's same fix to more devices, as in the dropped patch
  - New patch: qlogic-netxtreme2-7.14.76-Fix-NULL-pointer-dereference.XCP-ng.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7.14.63-2
changelog:
  - Version 7.14.63
  - Add qlogic-netxtreme2-Fix-NULL-pointer-dereference-in-bnx2x_del_all_vlans.backport.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7.14.76-2
changelog:
  - Merge the two RPMs into one for easier uninstallation
  - Obsoletes qlogic-netxtreme2-alt-4.19.0+1-modules


author: Gael Duperrey <gduperrey@vates.fr> - 7.15.10-1
changelog:
  - Update to version 7.15.10
  - Rediff qlogic-netxtreme2-7.15.10-install-into-dedicated-dir.XCP-ng.patch


author: Gael Duperrey <gduperrey@vates.tech> - 10.02.11.00_k-1
changelog:
  - Update to version 10.02.11.00_k
  - Synced from XS driver SRPM qlogic-qla2xxx-10.02.11.00_k-1.xs8~2_1.src.rpm


author: Gael Duperrey <gduperrey@vates.fr> - 1.2.6-7.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 1.2.6-7
  - - Bump release and rebuild
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 1.2.6-6
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 1.2.6-5
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.2.6-4
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.2.6-3
  - - Bump release and rebuild
  - * Tue Feb 28 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.2.6-2
  - - Change license to match the one in the source repo
  - * Mon Feb 20 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.2.6-1
  - - Same as 1.2.5, koji tooling needed an annotated tag to build


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.6-8.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.2.6-8
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.2.6-15.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1064
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 1.2.6-15
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 1.2.6-14
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 1.2.6-13
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 1.2.6-12
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.2.6-11
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.2.6-10
  - - Bump release and rebuild
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 1.2.6-9
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.2.6-17.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 1.2.6-17
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 1.2.6-16
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.2.6-20.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1080
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.2.6-20
  - - Bump release and rebuild
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.2.6-19
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 1.2.6-18
  - - Bump release and rebuild


author: Christian Lindig <christian.lindig@citrix.com> - 1.4.7-1
changelog:
  - CA-302328: Ignore extra stat fields with newer kernels
  - Reduce compiler warnings
  - Update Opam and Travis configuration


author: Christian Lindig <christian.lindig@citrix.com> - 1.7.7-1
changelog:
  - CA-144246 prevent log spam when intellicache enabled
  - maintenance: fix compiler warnings
  - maintenance: update .travis.yml


author: Rob Hoes <rob.hoes@citrix.com> - 1.10.9-4
changelog:
  - Bump release and rebuild
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 1.10.9-3
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 1.10.9-2
  - - Bump release and rebuild
  - * Mon May 15 2023 Christian Lindig <christian.lindig@citrix.com> - 1.10.9-1
  - - unchanged source code but top commit was not tagged
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.10.8-7
  - - Bump release and rebuild
  - * Tue Feb 28 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.10.8-6
  - - Change license to match the one in the source repo
  - - Fix xen BuildReqs


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.10.9-5.1
changelog:
  - Remove old xen BuildRequires wrongly retained in previous build
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.10.9-5
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.10.9-12.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1064
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 1.10.9-12
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 1.10.9-11
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 1.10.9-10
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 1.10.9-9
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.10.9-8
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.10.9-7
  - - Bump release and rebuild
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 1.10.9-6
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.10.9-14.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 1.10.9-14
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 1.10.9-13
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.10.9-17.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1080
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.10.9-17
  - - Bump release and rebuild
  - * Thu Dec 12 2024 Christian Lindig <christian.lindig@cloud.com> - 1.10.9-16
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 1.10.9-15
  - - Bump release and rebuild


author: Andreas Schneider <asn@redhat.com> - 4.10.16-8
changelog:
  - resolves: #1878205 - Fix restarting winbind on package upgrade
  - resolves: #1892632 - Fix CVE-2020-14318
  - resolves: #1891687 - Fix CVE-2020-14323
  - resolves: #1879834 - Fix CVE-2020-1472
  - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
  - resolves: #1868917 - Fix %U substitution for 'valid users' option
  - resolves: #1853272 - Fix 'require_membership_of' documentation in
                         pam_winbind{.conf} manpage


author: Andreas Schneider <asn@redhat.com> - 4.10.16-14
changelog:
  - resolves: #1937867 - Fix possible core dump with printing support
  - resolves: #1930747 - Ensure that libwbclient has been updated before
                         restarting services


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.29.1-1.1
changelog:
  - Sync with hotfix XS82E006
  - CA-343115: ensure device symlinks are created correctly even when path count not required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.29.1-1.2
changelog:
  - Sync patches with our latest 2.29.1-8.2 branch before XCP-ng 8.2 final release
  - 0006-feat-drivers-add-LinstorSR-driver.patch updated
  - 0007-feat-tests-add-unit-tests-concerning-ZFS-close-xcp-n.patch added


author: Benjamin Reis <benjamin.reis@vates.fr> - 2.29.1-1.3
changelog:
  - Add: 0008-If-no-NFS-ACLs-provided-assume-everyone.patch
  - Fix crash when attempting to access non existent ACL (happened on QNAP devices)


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 2.30.3-1.1
changelog:
  - Sync with hotfix XS82E023
  - CA-349759: don't call srUpdate within a lock
  - CA-352165: Check that 'device' exists in the dconf before using it
  - XSI-915: Improve performance of LVHDoHBA
  - CP-35625: Extract calls to unlink to helper and log
  - CP-35625: use link instead of rename to improve crash consistency
  - CP-35625: Extract calls to rename into helper and log.
  - CA-350871: Add lock context manager for LVM operations to allow for
    higher level controlDon't take locks for readonly operations
  - CA-350871: Log if LVHD snapshot pauses VM for more than 60secs
  - CA-350437: simplify 02vhd-cleanup to only handle LVM refcounts
  - Sync patches with our latest 2.30.3-8.2 branch
  - 0009-Fix-regression-added-by-XSI-915.patch added


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 2.30.3-1.4
changelog:
  - Remove 0009-Fix-regression-added-by-XSI-915.patch
  - Add 0001-backport-of-ccd121cc248d79b749a63d4ad099e6d5f4b8b588 to use upstream fix instead


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 2.30.4-1.1
changelog:
  - Sync with hotfix XS82E028
  - Sync patches with our latest 2.30.4-8.2 branch
  - *** Upstream changelog ***
  - * Wed May 19 2021 Mark Syms <mark.syms@citrix.com> - 2.30.4-1
  - - CA-354228: Reinstate load calls in _pathrefresh


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 2.30.6-1.1
changelog:
  - Sync with CH 8.2.1
  - Sync patches with our latest 2.30.6-8.2 branch
  - *** Upstream changelog ***
  - * Fri Oct 22 2021 Mark Syms <mark.syms@citrix.com> - 2.30.6-1
  - - CA-359453: use rename not link if links not supported
  - - CP-38316: update path checker for Equalogic at vendors request
  - * Thu Oct  7 2021 Mark Syms <mark.syms@citrix.com> - 2.30.5-1
  - - CA-355401: make post attach scan best effort and report errors
  - - CA-355289: ensure xapi is initialised before starting GC
  - - CA-356645: use "self.session is None" not "self.session == None"


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 2.30.6-1.2
changelog:
  - Add 0011-Avoid-usage-of-umount-in-ISOSR-when-legacy_mode-is-u.patch
  - Keep folder mounted when ISO SR is used with legacy_mode=True


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 2.30.7-1.1
changelog:
  - Sync with hotfix XS82ECU1009
  - Sync patches with our latest 2.30.7-8.2 branch
  - Add 0012-MooseFS-SR-uses-now-UUID-subdirs-for-each-SR.patch
  - Use subdirectory for each SR on the MooseFS server
  - *** Upstream changelog ***
  - * Fri Apr 29 2022 Mark Syms <mark.syms@citrix.com> - 2.30.7-1
  - - CA-352880: when deleting an HBA SR remove the kernel devices


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 2.30.7-1.2
changelog:
  - Add 0013-Fix-is_open-call-for-many-drivers-25.patch
  - Add 0014-Remove-SR_CACHING-capability-for-many-SR-types-24.patch


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 2.30.8-2.1
changelog:
  - Sync with hotfix XS82ECU1022
  - Sync patches with our latest 2.30.8-8.2 branch
  - *** Upstream changelog ***
  - * Wed Nov 23 2022 Mark Syms <mark.syms@citrix.com> - 2.30.8-2
  - - CA-353437: give coalesce tracker grace iterations to make progress
  - - CA-372641: fix _expand_size for multipath
  - - CA-372772: fix miscalculation of seek offset
  - * Fri Sep 23 2022 Tim Smith <tim.smith@citrix.com> - 2.30.8-1
  - - CA-369613: report errors correctly from multipath
  - - CA-369395: default multipath handle to dmp if not set
  - - CA-370037: improvements to exception handling
  - - Added Dell ME4 multipath config
  - - CA-370696 Do not attempt to validate device or NFS server paths


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 2.30.8-2.2
changelog:
  - Fix issues when running quicktest on ZFS and LVMoISCSI
  - Add 0015-Remove-SR_PROBE-from-ZFS-capabilities-37.patch
  - Add 0016-Fix-vdi-ref-when-static-vdis-are-used.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.30.8-2.3
changelog:
  - Do not overwrite multipath.conf if users made changes
  - Add warning to multipath.conf to prevent future modifications
    (for users which haven't modified it yet, that is, the vast majority)
  - Add /etc/multipath/conf.d/custom.conf for user customization
  - Add 0017-Tell-users-not-to-edit-multipath.conf-directly.patch
  - Add 0018-Add-custom.conf-multipath-configuration-file.patch
  - Add 0019-Install-etc-multipath-conf.d-custom.conf.patch


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 2.30.8-7.1
changelog:
  - Sync with hotfix XS82ECU1051
  - Sync patches with our latest 2.30.8-8.2 branch
  - *** Upstream changelog ***
  - * Thu Sep 28 2023 Mark Syms <mark.syms@citrix.com> - 2.30.8-7
  - - CP-45514: set ownership and perms on backeend device
  - * Fri Aug 04 2023 Mark Syms <mark.syms@citrix.com> - 2.30.8-6
  - - Fixes for CA-379329, monitor for missing iSCSI sessions
  - * Fri Jun 30 2023 Mark Syms <mark.syms@citrix.com> - 2.30.8-5
  - - CA-375968: multi session iSCSI updates
  - * Fri Jun 30 2023 Mark Syms <mark.syms@citrix.com> - 2.30.8-4
  - - Rebuild
  - * Mon Jun 26 2023 Mark Syms <mark.syms@citrix.com> - 2.30.8-3
  - - Backport fix for CA-378768


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 2.30.8-9.1
changelog:
  - Sync with hotfix XS82ECU1056
  - Sync patches with our latest 2.30.8-8.2 branch
  - *** Upstream changelog ***
  - * Fri Oct 27 2023 Mark Syms <mark.syms@citrix.com> - 2.30.8-9
  - - Backport fix for CP-45927, set Equalogic path checker
  - * Thu Oct 19 2023 Mark Syms <mark.syms@citrix.com> - 2.30.8-8
  - - Backport fix for CA-375367
  - - Backport fix for CA-379315
  - - Backport fix for CA-381221


author: Benjamin Reis <benjamin.reis@vates.fr> - 2.30.8-9.2
changelog:
  - Add 0020-Backport-NFS4-only-support.patch
  - Add 0021-Backport-probe-for-NFS4-when-rpcinfo-does-not-includ.patch


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 2.30.8-10.1
changelog:
  - Sync with hotfix XS82ECU1060
  - Sync patches with our latest 2.30.8-8.2 branch
  - - *** Upstream changelog ***
  - * Fri Jan 19 2024 Mark Syms <mark.syms@citrix.com> - 2.30.8-10
  - - Backport fix for CA-386479, log into all iSCSI targets


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 2.30.8-12.1
changelog:
  - Add 0023-feat-LVHDSR-add-a-way-to-modify-config-of-LVMs-56.patch
  - Sync with hotfix XS82ECU1065
  - Sync patches with our latest 2.30.8-8.2 branch
  - - *** Upstream changelog ***
  - * Wed Mar 13 2024 Mark Syms <mark.syms@citrix.com> - 2.30.8-12
  - - CA-389576: in Python 2.7 IOError is not a subclass of OSError
  - * Mon Feb 26 2024 Mark Syms <mark.syms@citrix.com> - 2.30.8-11
  - - CA-387770 Improve error message for readonly shares
  - - CA-388451: Ensure that xapi sessions are logged out
  - - CP-47841: update multipath confiugration for PURE FlashArray
  - - Backport fix for NFS attach from config
  - - CA-387770: Backport Check for R/O FS at create


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.30.8-12.3
changelog:
  - %preun: Move command above exit 0 so that it's executed
  - Properly disable the removed sr_health_check.timer
  - Also remove the dangling symlink if still present due to improper removal
    of the timer in sm-2.30.8-12.2


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 2.30.8-13.1
changelog:
  - Sync with hotfix XS82ECU1075
  - Sync patches with our latest 2.30.8-8.2 branch
  - - *** Upstream changelog ***
  - * Tue Aug 13 2024 Mark Syms <mark.syms@cloud.com> - 2.30.8-13
  - - Update multipath.conf with backports for HPE MSA SAN
  - - Backport fix for CA-393194
  - - UPD-1002: backport updates to multipath.conf for several SANs


author: Gael Duperrey <gduperrey@vates.fr> - 0.23.0-53.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 0.23.0-53
  - - Bump release and rebuild
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 0.23.0-52
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 0.23.0-51
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 0.23.0-50
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 0.23.0-49
  - - Bump release and rebuild
  - * Thu Feb 23 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 0.23.0-48
  - - Change license to match source repo
  - * Mon Feb 20 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 0.23.0-47
  - - Bump package to avoid reusing versions from other versions


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.23.0-54.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 0.23.0-54
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 0.23.0-61.1
changelog:
  - Sync with hotfix XS82ECU1064
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 0.23.0-61
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 0.23.0-60
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 0.23.0-59
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 0.23.0-58
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 0.23.0-57
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 0.23.0-56
  - - Bump release and rebuild
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 0.23.0-55
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 0.23.0-63.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 0.23.0-63
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 0.23.0-62
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 0.23.0-66.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1080
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 0.23.0-66
  - - Bump release and rebuild
  - * Thu Dec 12 2024 Christian Lindig <christian.lindig@cloud.com> - 0.23.0-65
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 0.23.0-64
  - - Bump release and rebuild


author: Christian Lindig <christian.lindig@citrix.com> - 0.26.0-1
changelog:
  - The fixes below had been backed out and are now put back in
  - "CA-335725: Calculate a constant boot time host free memory""
  - "CA-335725: Refine some variable names""
  - "CA-335725: Update the tolerance of free memory difference""


author: Christian Lindig <christian.lindig@citrix.com> - 0.27.0-1
changelog:
  - maintenance: prepare for ocamlformat
  - maintenance: format code with ocamlformat
  - maintenance: format comments with ocamlformat


author: Gael Duperrey <gduperrey@vates.fr> - 0.27.0-10.1
changelog:
  - Rebuild for updated ocaml-xcp-idl from XS82ECU1040
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 0.27.0-10
  - - Bump release and rebuild
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 0.27.0-9
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 0.27.0-8
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 0.27.0-7
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 0.27.0-6
  - - Bump release and rebuild
  - * Thu Feb 23 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 0.27.0-5
  - - Drop incorrect BuildRequires - only the devel packages should be specified
  - - Change license to match source repo


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.27.0-11.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 0.27.0-11
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 0.27.0-18.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1064
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 0.27.0-18
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 0.27.0-17
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 0.27.0-16
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 0.27.0-15
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 0.27.0-14
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 0.27.0-13
  - - Bump release and rebuild
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 0.27.0-12
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 0.27.0-20.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 0.27.0-20
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 0.27.0-19
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 0.27.0-23.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1080
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 0.27.0-23
  - - Bump release and rebuild
  - * Thu Dec 12 2024 Christian Lindig <christian.lindig@cloud.com> - 0.27.0-22
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 0.27.0-21
  - - Bump release and rebuild


author: Christian Lindig <christian.lindig@citrix.com> - 0.26.0-1
changelog:
  - The fixes below had been backed out and are now put back in
  - "CA-335725: Calculate a constant boot time host free memory""
  - "CA-335725: Refine some variable names"" 
  - "CA-335725: Update the tolerance of free memory difference""


author: Joe Orton <jorton@redhat.com> - 1.7.14-13
changelog:
  - fix mod_authz_svn regression with mod_auth_kerb (#1306431)
  - fix "svn diff" property handling (#1378178)
  - fix permissions of /run/svnserve to match tmpfiles (#1496243)


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-2
changelog:
  - RHEL-7.6 erratum
    Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
    Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
    Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets


author: Radovan Sroka <rsroka@redhat.com> 1.8.23-4
changelog:
  - RHEL-7.7 erratum
    Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
    Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'


author: Marek Tamaskovic <mtamasko@redhat.com> 1.8.23-5
changelog:
  - RHEL-7.8 erratum
    Resolves: rhbz#1711997 sudo is super slow when /etc/security/limits.conf contains many entries


author: Marek Tamaskovic <mtamasko@redhat.com> 1.8.23-6
changelog:
  - RHEL-7.8 erratum
    Resolves: rhbz#1647678 sudo access denied with pam_access and pts terminal configurations


author: Radovan Sroka <rsroka@redhat.com> - 1.8.23-10.2
changelog:
  - RHEL 7.9.Z ERRATUM
  - defaults use_pty plus SELinux ROLE in user specification breaks terminal
    Resolves: rhbz#1972820


author: Radovan Sroka <rsroka@redhat.com> - 1.8.23-10.3
changelog:
  RHEL 7.9.Z ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161222


author: Gael Duperrey <gduperrey@vates.tech> - 1.9.15-4.1
changelog:
  - Synced from XS82ECU1072
  - *** Upstream changelog ***
  - * Thu Jul 4 2024 Lin Liu <Lin.Liu01@cloud.com> - 1.9.15-4
  - - Drop python plugin as not required
  - * Wed Mar 06 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.9.15-3
  - - CA-389574: Depend on vi


author: Lukas Nykryn <lnykryn@redhat.com> - 219-50
changelog:
  - core: fix the reversed sanity check when setting StartupBlockIOWeight over dbus (#1302305)
  - shared/dropin: ignore ENAMETOOLONG when checking drop-in directories (#7525) (#1489095)
  - enable display manager only on systemd installation (#1464893)
  - remove unnecessary dependency on dracut (#1466676)
  - substitute PACKAGE_STRING with the actual package NVR (#1453153)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-52
changelog:
  - cryptsetup: when unlocking always put path to the object into Id (#1511043)
  - cryptsetup: use more descriptive name for the variable and drop redundant function (#1511043)
  - cryptsetup-generator: do not bind to the decrypted device unit (#6538) (#1511043)
  - introduce naming based on phys_port_name for nfp via udev rule (#1516283)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-54
changelog:
  - automount: ack automount requests even when already mounted (#1535135)
  - udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
  - journald-native: Fix typo in MANDLOCK message (#1501017)
  - process-util: make our freeze() routine do something useful (#1540941)
  - dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
  - bus-util.c: fix TasksMax= property assignment (#1537147)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-55
changelog:
  - sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
  - core: Let two more booleans survive a daemon-reload (#1542391)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-57
changelog:
  - sd-journal: properly handle inotify queue overflow (#1540538)
  - sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
  - journalctl: Periodically call sd_journal_process in journalctl (#1540538)
  - sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-57.1
changelog:
  - umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
  - core: Implement timeout based umount/remount limit (#1571098)
  - core: Implement sync_with_progress() (#1571098)


author: Patsy Griffin <patsy@redhat.com> - 2020d-1
changelog:
  - Rebase to tzdata-2020d
   - Palestine will end summer time on 2020-10-24 rather than the
     predicted 2020-10-31.


author: Patsy Griffin <patsy@redhat.com> - 2020f-1
changelog:
  - Rebase to tzdata-2020f including changes for tzdata-2020e
    - tzdata-2020f fixes a bug in tzdata-2020e that caused an
      invalid zi file in rearguard format
    - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
    - Australia/Currie is identical to Australia/Hobart for all
      timestamps since 1970 and was therefore created by mistake,
      now moved to the "backward" file.


author: Patsy Griffin <patsy@redhat.com> - 2021b-1
changelog:
  - Rebase to tzdata-2021b
    - Innclude patch for Mayen
    - Jordan now starts DST on February's last Thursday.
    - Samoa no longer observes DST.
    - Merge more location-based Zones whose timestamps agree since 1970.
    - Move some backward-compatibility links to 'backward'.
    - Rename Pacific/Enderbury to Pacific/Kanton.
    - Correct many pre-1993 transitions in Malawi, Portugal, etc.
    - zic now creates each output file or link atomically.
    - zic -L no longer omits the POSIX TZ string in its output.
    - zic fixes for truncation and leap second table expiration.
    - zic now follows POSIX for TZ strings using all-year DST.
    - Fix some localtime crashes and bugs in obscure cases.
    - zdump -v now outputs more-useful boundary cases.
    - tzfile.5 better matches a draft successor to RFC 8536.


author: Patsy Griffin <patsy@redhat.com> - 2021c-1
changelog:
  - Rebase to tzdata-2021c
    - Revert most of 2021b changes to 'backward'.
    - Fix 'zic -b fat' bug in pre-1970 32-bit data.
    - Fix two Link line typos.
    - Distribute SECURITY file.


author: Patsy Griffin <patsy@redhat.com> - 2021d-1
changelog:
  - Rebase to tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".


author: Patsy Griffin <patsy@redhat.com> - 2021e-1
changelog:
  - Rebase to tzdata-2021e - supersedes tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".
    - Palestine will fall back 2021-10-29 at 01:00, rather
      than the predicted 2021-10-30.


author: Patsy Griffin <patsy@redhat.com> - 2022a-1
changelog:
  - Rebase to tzdata-2022a
    - Palestine springs forward on 2022-03-27, not -03-26.
    - zdump -v now outputs better failure information
    - fixes for code that reads corrupted TZif data


author: Patsy Griffin <patsy@redhat.com> - 2022b-1
changelog:
  - Rebase to tzdata-2022b
    - Chile transitions to DST on 2022-09-11, not 2022-09-04
    - 'make install' now defaults LOCALTIME to Factory rather than GMT
    - More zones that are the same since 1970 have been moved to backzone.
    - Include patch for awk workaround.


author: Patsy Griffin <patsy@redhat.com> - 2022c-1
changelog:
  - Rebase to tzdata-2022c - supersedes tzdata-2022b
    - Add a work-around for an awk bug in FreeBSD, macOS, etc.
    - Improve tzselect with respect to intercontinental Zones.


author: Patsy Griffin <patsy@redhat.com> - 2022d-1
changelog:
  - Rebase to tzdata-2022d
    - Palestine's DST transition will be on October 29, 2022,
      not October 28, 2022.
    - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.


author: Patsy Griffin <patsy@redhat.com> - 2022e-1
changelog:
  - Rebase to tzdata-2022e
    - Jordan and Syria cancelled the DST transition planned
      for 2022-10-28, remaining at +03 permanently.


author: Patsy Griffin <patsy@redhat.com> - 2022f-1
changelog:
  - Rebase to tzdata-2022f
    - Mexico will stop observing DST except near the US border.
    - Chihuahua moved to -06 year round starting on 2022-10-30.
    - Fiji no longer observes DST.


author: Patsy Griffin <patsy@redhat.com> - 2022g-1
changelog:
  - Rebase to tzdata-2022g
    - The northern edge of the Mexican state of Chihuahua will
      change time zone to agree with nearby US locations on
      2022-11-30.
    - Added a new Zone America/Ciudad_Juarez that splits from
      America/Ojinaga.


author: Patsy Griffin <patsy@redhat.com> - 2023a-1
changelog:
  - Rebase to tzdata-2023a
    - Egypt reintroduced DST, from April through October.
    - Morocco springs forward April 23, not April 30.
    - Palestine delayed the start of DST this year.


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Bobby Eshleman <bobby.eshleman@gmail.com> - 0.5.0-1
changelog:
  - Update to 0.5.0
  - Add secureboot-certs script
  - Require varstored-tools for secureboot-certs
  - Add unit tests to %check
  - Add build deps for unit tests
  - Create /var/lib/uefistored/ for secureboot-certs
  - Add /usr/share/varstored symlinks


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.0.0-0.1
changelog:
  - Version 1.0.0 with updated secureboot-certs script
  - Not based on a tag, so release 0.1, pending the v1.0.0 tag


author: Bobby Eshleman <bobbyeshleman@gmail.com> - 1.1.0-1
changelog:
  - Update to 1.1.0
  - FHS compliance: symlink /usr/share/varstored/PK.auth to /var/lib/uefistored/PK.auth
  - This also prevents our default PK from being overwritten by XAPI
  - For PK to always be available, copy PK to /var/lib/uefistored in %post if missing


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.1.5-1
changelog:
  - Update to 1.1.5
  - secureboot-certs: changed the user agent, added --user-agent param
  - secureboot-certs: better error message in case of download failure


author: Simon Rowe <simon.rowe@citrix.com> - 2.0.0-1
changelog:
  - CA-293995: Ensure xmllint call is quoted
  - Remove slipstreaming tools
  - Add support for multiple precheck scripts


author: Karel Zak <kzak@redhat.com> 2.23.2-45
changelog:
  - fix #1501953 - blkid shows wrong return code on failure with ambivalent results
  - fix #1486777 - wipefs printing duplicate gpt clear messages
  - fix #1454652 - fix test suite


author: Karel Zak <kzak@redhat.com> 2.23.2-49
changelog:
  - fix #1520906 - make hostname in login(1) prompt optional
  - fix #1521163 - [RFE] blkid can identify magic number and UUID of VDO volume


author: Edwin Török <edvin.torok@citrix.com> - 0.2.0-1
changelog:
  - CA-302981: Timeout on XAPI calls
  - CP-30032: sandboxing support for varstore-rm
  - Merge from master: rename xcp to xapi-idl


author: Christian Lindig <christian.lindig@citrix.com> - 0.3.0-1
changelog:
  - CA-308072: fix varstored-guard with toolstack restart
  - CA-308072: wait for unix socket to be connectable
  - CA-308072: do not swallow errors from creating the http server


author: Bobby Eshleman <bobbyeshleman@gmail.com> - 0.9.1-1.1
changelog:
  - Change varstore-sb-state setup to not load auth data
  - Patch varstored-0.9.1-sb-state-only-load-auth-data-if-needed.XCP-ng.patch added


author: Bobby Eshleman <bobbyeshleman@gmail.com> - 0.9.1-1.2
changelog:
  - Update varstored-0.9.1-sb-state-only-load-auth-data-if-needed.XCP-ng.patch
  - Updated to upstream version of the patch after PR merge
  - Renamed to varstored-0.9.1-sb-state-only-load-auth-data-if-needed.backport.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.0.0-1
changelog:
  - Update to 1.0.0
  - Drop varstored-0.9.1-sb-state-only-load-auth-data-if-needed.XCP-ng.patch merged upstream


author: Gael Duperrey <gduperrey@vates.fr> - 0.43.0-10.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 0.43.0-10
  - - Bump release and rebuild
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 0.43.0-9
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 0.43.0-8
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 0.43.0-7
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 0.43.0-6
  - - Bump release and rebuild
  - * Tue Feb 28 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 0.43.0-5
  - - Change license to match the one in the source repo


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.43.0-11.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 0.43.0-11
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 0.43.0-18.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1064
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 0.43.0-18
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 0.43.0-17
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 0.43.0-16
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 0.43.0-15
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 0.43.0-14
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 0.43.0-13
  - - Bump release and rebuild
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 0.43.0-12
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 0.43.0-20.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 0.43.0-20
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 0.43.0-19
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 0.43.0-23.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1080
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 0.43.0-23
  - - Bump release and rebuild
  - * Thu Dec 12 2024 Christian Lindig <christian.lindig@cloud.com> - 0.43.0-22
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 0.43.0-21
  - - Bump release and rebuild


author: Edvin Török <edvin.torok@citrix.com> - 1.11.0-1
changelog:
  - CP-32138: replace deprecated Lwt_log with Logs_lwt
  - CP-32138: replace deprecated recv_msg from Lwt_unix
  - CP-32138: do not daemonize ourselves
  - CP-32138: simplify path setup
  - CP-32138: Use collaborative log reporter
  - CP-32138: Generate more descriptive messages when match fails
  - cli: stop logging debug-level messages by default
  - CP-32138: Do not manage pid files
  - CP-32138: use an already activated socket


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.3-1.1
changelog:
  - Rebase on CH 8.2
  - Remove dependency to non-free packages again
  - Rediff xapi-1.249.3-allow-migrate_send_during-RPU.XCP-ng.patch
  - Adapt other patches (done by Benjamin Reis):
  - Redo xapi-1.249.3-open-vxlan-port-for-sdn-controller.XCP-ng.patch
  - (Open VxLAN port for VxLAN tunnels. Now based on the tunnel's protocol field)
  - Rediff xapi-1.249.3-create-plugged-vif-and-vbd-and-suspended-vm.XCP-ng.patch
  - (Create plugged vifs and vbds and suspended vms)
  - Rediff xapi-1.249.3-open-openflow-port.XCP-ng.patch
  - (Open OpenFlow port for SDN controller)


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.249.3-1.2
changelog:
  - Add xapi-1.249.3-update-db-tunnel-protocol-from-other_config.XCP-ng.patch
  - Fill the new protocol fields of the tunnels if the info is in its network's other_config
  - Add xapi-1.249.3-expose-host-xen-scheduler-granularity-in-xapi.XCP-ng.patch
  - Expose a host xen scheduler granularity in XAPI
  - New conf file: /etc/xapi.conf.d/allow-sched-gran.conf


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.3-1.3
changelog:
  - Enforce update of xapi.conf when it's updated in the RPM
  - Add warning on top of xapi.conf to prevent user modification
  - Add additional experimental sm drivers to xapi.conf


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.249.3-1.4
changelog:
  - /etc/xapi.conf.d/allow-sched-gran.conf becomes /etc/xapi.conf.d/00-XCP-ng-allow-sched-gran.conf
  - New conf file: /etc/xapi.conf.d/00-XCP-ng-create-tools-sr.conf


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.5-1.1
changelog:
  - Sync with hotfix XS82E002
  - Maintenance update
  - Adapt patch xapi-1.249.5-open-vxlan-port-for-sdn-controller.XCP-ng.patch
  - Adapt patch xapi-1.249.5-expose-host-xen-scheduler-granularity-in-xapi.XCP-ng.patch
  - Rebuilt all dependencies first after xs-opam-repo update


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.9-1.1
changelog:
  - Add: xapi-1.249.9-update-schema-hash.XCP-ng.patch
  - Sync with hotfix XS82E020
  - *** Upstream changelog ***
  - * Wed Apr 28 2021 Rob Hoes <rob.hoes@citrix.com> - 1.249.9-1
  - - CA-349123: Update VBD/VIF plug fix
  - * Wed Apr 28 2021 Rob Hoes <rob.hoes@citrix.com> - 1.249.8-1
  - - CA-349123: Fix metadata race in VBD/VIF plug
  - * Fri Mar 26 2021 Ben Anson <ben.anson@citrix.com> - 1.249.7-1
  - - maintenance: allow tests to run in a sandbox
  - - idl: fix name of dependencies of tests
  - - CA-352111: Do not output on cronjobs unless there's an error
  - * Thu Feb 11 2021 Ben Anson <ben.anson@citrix.com> - 1.249.6-1
  - - CP-35026 tell stunnel to provide inet address info
  - - CP-35026 utils for extracting IP addresses
  - - CP-35026 add client field to Context.t
  - - CP-35026 pass client info to the debug module
  - - maintenance: declar fpath as a dependency for xe
  - - CP-35021 VM.suspend - assert support for NVidia cards
  - - CP-35021 introduce new API error for vGPU suspend
  - - REQ-819 stockholm schema version bump
  - - CP-34602: test get_server_localtime and message.get_since
  - - CA-342551: Avoid replacing certificate alerts
  - - CA-343646: generate certificate alerts
  - - CA-343646: Avoid using API when no alerts are going to be modified
  - - CP-35210: log why a private key or certificates failed to validate
  - - CA-351323 XSI-828 fix snapshot metadata lookup
  - - CA-348700: Block VDI.copy if on-boot=reset
  - - maintenance: detect schema updates which are missing version bumps
  - - CA-332779: Update power_state first in force_state_reset_keep_current_operations
  - - CA-332779: Avoid VM.remove in maybe_cleanup_vm
  - - CA-347560: Call VM.import_metadata_async for MD updates


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.9-1.2
changelog:
  - Add xapi-1.249.9-fix-usb-device-reset.backport.patch
  - Fixes USB passthrough when combined with PCI device passthrough to same VM
  - Related to https://github.com/xcp-ng/xcp/issues/511


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.10-1.1
changelog:
  - Sync with hotfix XS82E031
  - Adapt `expose-host-xen-scheduler-granularity-in-xapi` patch to 1.249.10
  - *** Upstream changelog ***
  - * Fri Jul 16 2021 Ben Anson <ben.anson@citrix.com> - 1.249.10-1
  - - CP-36827: Backport XSI-989
  - - CA-353553 add API error for when NVidia GPU is misconfigured
  - - format
  - - CP-35523: Block access to the website on port 80
  - - CP-35523: Always accept requests from the unix socket
  - - CA-355657 XSI-1037 reduce load during bugtool
  - - XSI-995 handle case where pci doesn't exist in VM.power_stat- e_reset
  - - CA-329462 Cluster.create should clean up if it fails
  - - XSI-804 ensure HVM boot params consistent


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.10-1.2
changelog:
  - Fix handling of web-dir parameter
  - Reenable access to the website on port 80, to avoid a regression


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.19-1.1
changelog:
  - Sync with CH 8.2.1
  - Remove xapi-1.249.10-fix-web-dir-parameter.XCP-ng.patch, contributed and included upstream
  - Rediff xapi-1.249.19-expose-host-xen-scheduler-granularity-in-xapi.XCP-ng.patch
  - Disable requires to tdb-tools, samba-winbind and proprietary upgrade-pbis-to-winbind for now
  - *** Upstream changelog ***
  - * Fri Nov 26 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.249.19-1
  - - CA-361151: Use PBIS as the default AD backend
  - * Wed Nov 24 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.249.18-1
  - - CA-360951: Failed to lookup workgroup from domain as DNS cache
  - * Thu Oct 28 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.249.17-1
  - - CA-359975: set the IP in /etc/issue on first boot
  - * Tue Oct 12 2021 Christian Lindig <christian.lindig@citrix.com> - 1.249.16-1
  - - CA-341715: control-domain-params-init: skip on upgrade
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.249.15-4
  - - Bump package for libev dependency
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.249.15-3
  - - Bump package after xs-opam update
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.249.15-2
  - - Bump packages after ocaml-xen-api-libs-transitional update
  - * Thu Sep 23 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.249.15-1
  - - Fix handling of web-dir parameter
  - * Wed Sep 15 2021 Lin Liu <lin.liu@citrix.com> - 1.249.14-1
  - - CA-356959: Decide user account locked out by lockoutTime
  - - CA-358568: Password expired could not show on XenCenter
  - - CA-358816: Updated subject name in DC does not get updated in pam
  - * Wed Sep 8 2021 Lin Liu <lin.liu@citrix.com> - 1.249.13-1
  - - CP-36682: Backport replace PBIS with winbind
  - * Wed Sep 8 2021 Danilo Del Busso <Danilo.Del.Busso@citrix.com> - 1.249.12-1
  - - CP-37590: Replaced negative language with `pool member`
  - - CP-37590: Replaced negative language with `bond member`
  - * Mon Aug 23 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.249.11-1
  - - CP-38064: update for rpclib 7 compatibility


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.19-1.2
changelog:
  - Disable HTTP webpage now that regressions were fixed
  - Remove patch xapi-1.249.10-reenable-http-webpage.XCP-ng.patch


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.249.19-1.3
changelog:
  - Add backport of CA-363207: SSH access failing when using AD groups with spaces in name
  - * xapi-1.249.19-fix-ssh-access-failure-when-ad-groups-names-with-spaces.backport.patch
  - * See: https://github.com/xapi-project/xen-api/pull/4617


author: Gael Duperrey <gduperrey@vates.fr> 1.249.25-2.1
changelog:
  - Sync to hotfix XS82ECU1011
  - Remove xapi-1.249.9-fix-usb-device-reset.backport.patch
  - Remove xapi-1.249.19-fix-ssh-access-failure-when-ad-groups-names-with-spaces.backport.patch
  - * Wed May 18 2022 Christian Lindig <christian.lindig@citrix.com> - 1.249.25-2
  - - XSI-791/CA-343760 Backport to yangtze
  - * Tue May 17 2022 Christian Lindig <christian.lindig@citrix.com> - 1.249.25-1
  - - XSI-1246/CA-367232: Daily license re-apply fails is HA is enabled
  - * Tue May 17 2022 Christian Lindig <christian.lindig@citrix.com> - 1.249.24-1
  - - CA-363633: Always take the generation-id directly from xapi
  - - CP-38462 UPD-825 Recognise ethtool-advertise on PIFs
  - - CA-366801 UPD-825 xsh: fix XAPI blob sync and EBADF
  - - CA-363391 UPD-825 fix wake-on-lan script
  - - CA-361209 UPD-825 backport utility functions in records.ml
  - - CA-361209 UPD-825 When using WoL find the remote physical PIF
  - - CA-361209 UPD-825 add vlan references to PIF's cli records
  - - CA-365112: Minor refine to keep code flat
  - - CA-365112: Fixup pep8 issues
  - - CA-365112: Permit pool admin username with space to ssh login
  - * Tue Feb 22 2022 Rob Hoes <rob.hoes@citrix.com> - 1.249.23-1
  - - Revert stunnel-on-demand commits
  - * Fri Feb 04 2022 Rob Hoes <rob.hoes@citrix.com> - 1.249.22-1
  - - CA-363207: SSH access failing when using AD groups with spaces in name
  - * Wed Feb 02 2022 Rob Hoes <rob.hoes@citrix.com> - 1.249.21-1
  - - CA-363068: Ensure that stunnel-on-demand shuts down after xapi
  - * Fri Jan 28 2022 Rob Hoes <rob.hoes@citrix.com> - 1.249.20-1
  - - CA-361220: xenopsd: avoid space leak in VM.import_metadata_async
  - - USB device reset for Privileged VMs (with PCI device attached) is not working due to bad argument '-r'
  - - CP-38978: Accept TCP4 connection
  - - CP-38978: Update xe-toolstack-restart
  - - CP-38978: Separate stunnel service and socket for fips off and on
  - - CP-38978: Separate stunnel conf file for fips
  - - CP-38978: Add systemd socket for on-demand stunnel


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.26-2.1
changelog:
  - Security update (and other fixes), synced from hotfix XS82ECU1019
  - Rediffed patches after upstream formatting changes (actually Benjamin Reis did)
  - *** Upstream changelog ***
  - * Thu Sep 08 2022 Rob Hoes <rob.hoes@citrix.com> - 1.249.26-2
  - - CA-368579: Mitigations against DoS attacks by unauthenticated clients
  - * Thu Sep 08 2022 Rob Hoes <rob.hoes@citrix.com> - 1.249.26-1
  - - CA-368910: Allow destruction of PVS_cache_storage if SR is already gone
  - - CA-365946: Block VIF hotplug into dom0
  - - CA-370084: Print PEMs containing DOS endlines
  - - CA-368806: Workaround pbis get wedged


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.249.26-2.3
changelog:
  - Rework xapi-1.249.26-redirect-fileserver-https.backport.patch to reflect upstream changes
  - Update xapi-1.249.26-update-xapi-conf.XCP-ng.patch to re-enable HTTP (prerequisite for HTTP to HTTPS redirect)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.28-1.1
changelog:
  - Rebase on hotfix XS82ECU1027
  - *** Upstream changelog ***
  - * Tue Feb 28 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.249.28-1
  - - CA-372128: Avoid extra comparisons in db_cache_types
  - - CA-342527: Remove unnecessary list traversals on rbac.check
  - - CA-352073: Ensure all serialized calls can pass rbac checks
  - - CA-370578 use subsystemId in NVidia GPU matching
  - - Change license to match the one in the source repo
  - - Fix xen BuildReqs
  - - Remove macro for dependency generator
  - * Thu Oct 13 2022 Rob Hoes <rob.hoes@citrix.com> - 1.249.27-1
  - - CA-368579: Patches upstreamed


author: Gael Duperrey <gduperrey@vates.fr> - 1.249.32-1.1
changelog:
  - Sync with hotfix XS82ECU1040
  - Remove and rebase XCP-ng patches to adapt them
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 1.249.32-1
  - - CA-378837 log results from Host.get_vms_which_prevent_evacuation
  - - xapi: switch CPU feature sets to the abstract type and don't interpret them
  - - Remove CPUID tests from xapi and add to xenopsd
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.31-2
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.31-1
  - - CA-377824 fix FD leak in xapi
  - * Mon May 22 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.30-1
  - - CA-333441, CA-377454 create /var/lock/sm/iscsiadm
  - * Mon May 15 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.29-1
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 1/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 2/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 3/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 4/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 5/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 6/6
  - - CP-41796 enable HTTPS migration by default
  - - CP-41796 prevent changes to https_only in CC_PREPARATIONS=true
  - - CA-376297: Test that mirage-crypto accepts all valid RSA keys
  - - CA-376448: explicitly validate refs in PVS_cache_storage.create
  - - CA-333441 - restarting ISCSI daemon after setting initiator IQN
  - - CA-333441: Do not fail the startup sequence if the iSCSI initiator cannot be set
  - - CP-42835: Allow changing DNS servers when HA or clustering enabled
  - - maintenance: fix formatting
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.28-2
  - - Bump release and rebuild


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1.249.32-1.2
changelog:
  - Add xapi-1.249.32-allow-a-user-to-select-on-which-SR-to-run-quicktest.backport.patch
  - Add xapi-1.249.32-add-vdi_update-filter-to-some-tests.backport.patch
  - Remove xapi-1.249.32-fix-quicktest-default-sr-param.backport.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.32-2.1
changelog:
  - Security update, synced from hotfix XS82ECU1049
  - *** Upstream changelog ***
  - * Tue Sep 26 2023 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 1.249.32-2
  - - CP-45072 Use debugfs instead of libfsimage on xe-restore-metadata probes


author: Gael Duperrey <gduperrey@vates.tech> - 1.249.36-1.1
changelog:
  - Sync with hotfix XS82ECU1064
  - *** Upstream changelog ***
  - * Wed Mar 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.36-1
  - - CA-389496: Avoid configuration conflicts for rotating xapi logs
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.35-1
  - - CA-368437 remove duplicate keys from SM.features
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.34-2
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.34-1
  - - CP-45703 jemalloc: avoid bottlenecks with C threads
  - - CP-43755 Pam: avoid sleep(1) call when multithreaded
  - - CP-43755 Split internal and external auth locks
  - - CP-43755 Locking_helpers: introduce Semaphore
  - - CP-43755 xapi_session: switch to using Semaphore instead of Mutex
  - - CP-43755 Increase threads for PAM logins
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 1.249.33-6
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.249.33-5
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.249.33-4
  - - Bump release and rebuild
  - * Mon Oct 23 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.33-3
  - - remove xe-restore-metadata.use.debugfs.patch after merging it
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 1.249.33-1
  - - Leave the API version for Yangtze/hotfixes as 2.15
  - - CA-376879: VLAN PIF created in pool.join is shown as disconnected
  - - CA-374989: Avoid using get_record on cross-pool migration
  - - CP-42182 call "rrd-cli save_rrds" in bugtool - backport
  - - CA-383491: [Security fix] Use debugfs on xe-restore-metadata probes
  - - ci: update apt repositories on every run


author: Gael Duperrey <gduperrey@vates.tech> - 1.249.38-1.1
changelog:
  - Sync with hotfix XS82ECU1074
  - Removed xsa459-xen-api as it was integrated upstream.
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.38-1
  - - CA-390277: Stop using host records on CLI cross-pool migrations
  - - CP-49228: Updates to Portable SR Functionality
  - - CA-393578: Fix vbd cleanup in metadata scripts
  - - update-ca-bundle: really avoid failure on missing directory
  - - CA-394169: Allow task to have permissions on itself
  - - CA-394169: Allow task to have permissions on itself - backport
  - - CA-394444: Update task cancellation in `message_forwarding.ml`
  - - CA-394444: Update `vm_operation_table`
  - - CA-395174: Try to unarchive VM's metrics when they aren't running
  - - CA-395174: Try to unarchive VM's metrics when they aren't running
  - - CA-395174: rrdd_proxy: Change *_at to specify the IP address
  - - CA-395174: rrdd_proxy: Use Option to encode where VMs might be available at
  - - CA-386552 XSI-1534 Failed to disable pool HA after missing HA statefile
  - - XSI-1706/CP-51295: limit open TCP connections to 250 and increase socket backlog
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.37-1
  - - Quicktest_vm_lifecycle: use requested SR not default SR
  - - CP-46179 create backup VDI with determinstic UUID
  - - CP-46179 update metadata backup/restore to use deterministic UUID
  - - CP-46179 improve quoting in shell code
  - - CP-46179 use -y (yes) flag to facilitate scripting
  - - ci: remove warnings about outdated node versions
  - - CA-392163 clear scheduled assignments on startup
  - - CA-392163 on start failure, clear a VM's resource allocations
  - - CA-392163 - backport adjustments
  - - CA-393199: Disable external auth should clean pbis cache


author: Gael Duperrey <gduperrey@vates.tech> - 1.249.40-1.1
changelog:
  - Sync with hotfix XS82ECU1080
  - *** Upstream changelog ***
  - * Mon Dec 16 2024 Christian Lindig <christian.lindig@citrix.com> - 1.240.40-1
  - - rebuild but use latest tag
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.39-2
  - - rebuild
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.39-1
  - - CA-397599 XSI-1704 implement setter for blocked ops manually
  - - CA-397599 XSI-1704 reformat
  - - CA-401242: avoid long-running, idle connections on VDI.pool_migrate, backport
  - - CA-399629: make daily-license-check aware of never
  - - CA-399629: adopt previous commit to yangtze
  - - Revert "XSI-1706/CP-51295: limit open TCP connections to 250 and increase socket backlog"
  - - CA-402901: Update leaked dp to Sr
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 1.249.38-2
  - - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.11.0-3.1
changelog:
  - Sync with CH 8.2.1
  - *** Upstream changelog ***
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.11.0-3
  - - Bump package after xs-opam update
  - * Tue Jul 13 2021 Edwin Török <edvin.torok@citrix.com> - 1.11.0-2
  - - bump packages after xs-opam update


author: Gael Duperrey <gduperrey@vates.fr> - 1.11.0-9.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 1.11.0-9
  - - Bump release and rebuild
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 1.11.0-8
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 1.11.0-7
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.11.0-6
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.11.0-5
  - - Bump release and rebuild
  - * Tue Feb 28 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.11.0-4
  - - Change license to be a valid SPDX identifier


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.11.0-10.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.11.0-10
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.11.0-17.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1064
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 1.11.0-17
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 1.11.0-16
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 1.11.0-15
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 1.11.0-14
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.11.0-13
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.11.0-12
  - - Bump release and rebuild
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 1.11.0-11
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.11.0-19.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 1.11.0-19
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 1.11.0-18
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.11.0-22.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1080
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.11.0-22
  - - Bump release and rebuild
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.11.0-21
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 1.11.0-20
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.fr> - 0.34.1-8.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 0.34.1-8
  - - Bump release and rebuild
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 0.34.1-7
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 0.34.1-6
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 0.34.1-5
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 0.34.1-4
  - - Bump release and rebuild
  - * Thu Feb 23 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 0.34.1-3
  - - Change license to match source repo


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.34.1-9.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 0.34.1-9
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.fr> - 0.34.1-16.1
changelog:
  - Sync with hotfix XS82ECU1064
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 0.34.1-16
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 0.34.1-15
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 0.34.1-14
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 0.34.1-13
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 0.34.1-12
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 0.34.1-11
  - - Bump release and rebuild
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 0.34.1-10
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 0.34.1-18.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 0.34.1-18
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 0.34.1-17
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 0.34.1-21.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1080
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 0.34.1-21
  - - Bump release and rebuild
  - * Thu Dec 12 2024 Christian Lindig <christian.lindig@cloud.com> - 0.34.1-20
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 0.34.1-19
  - - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.1.0-2
changelog:
  - Fix upgrade from previous version (no more removed symlink)
  - Add systemd requires for scriptlets
  - Fix paths


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.1.1-1
changelog:
  - New version 1.1.1 that does not report Corosync as available anymore,
    since it is a feature that relies on proprietary packages that we
    don't provide.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.1.3-2
changelog:
  - Rebuild to take new(ish) feature from XAPI into account (pool secret rotation)
  - Static linking is evil!


author: Christian Lindig <christian.lindig@citrix.com> - 0.53.0-1
changelog:
  - Ovs.create_bridge: whitespace in vsctl call
  - CA-329442: Avoid recreating bridges unless absolutely necessary


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.0-1
changelog:
  - Update for XCP-ng 8.2
  - First update of deps, to be refined after tests
  - Remove guest-templates-json-data-xenapp
  - Remove ocaml-xenops-tools
  - Remove and obsolete xenserver-firstboot
  - Add iproute-tc
  - Add xs-openssl
  - Replace stunnel_xs with stunnel
  - Replace gnupg with gnupg2


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.0-5
changelog:
  - Require security-tools and xapi-xe, since they are...
  - ... not pulled by xenserver-firstboot anymore
  - Require xenospd-cli, not pulled by anything else...
  - ... (xenops-cli used to be pulled by xenopsd)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.0-8
changelog:
  - Obsolete dummy xcp-ng-secureboot-certs, not required by varstored anymore
  - Comment out part of posttrans systemd services enabling, should now be fixed


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.0-12
changelog:
  - Remove dep to bugtool-conn-test, obsoleted by xenserver-status-report
  - Remove dep to xenserver-transfer-vm, obsoleted by xcp-ng-deps itself


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.0-3
changelog:
  - Build the binaries and packages contained in the ISO ourselves
  - Fix Centos 8.3+ support
  - Add Centos Stream support


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.0-10
changelog:
  - Sync to latest upstream master: v7.30.0 + 10 commits
  - Dropped patches merged upstream and rebased the rest
  - Add support for RHEL 9 and derivatives in install.sh


author: Gael Duperrey <gduperrey@vates.fr> - 8.2.0-11
changelog:
  - Switch RPMs to systemd by default and provide legacy RPMs for chkconfig.
  - Merge separate -xenstore RPMs back into xe-guest-utilities RPMs


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7.45.0-2
changelog:
  - Add xcp-ng-pv-tools-7.45.0-fix-boot-hang-caused-by-CPU-hotplug-rule.backport.patch
  - Backported from master


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.0-1
changelog:
  - Update for XCP-ng 8.2.0
  - Change versioning
  - Build from tarball now, not from ISO that doesn't exist anymore
  - Rename unmount_halted_xstools.sh to unmount_xstools.sh
  - Update README.txt (new doc links + FreeBSD section)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.0.0-12
changelog:
  - Add fallback yum mirror in case mirrors.xcp-ng.org is down
  - Includes updated repo file and updated fastestmirror configuration


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.1.0-2
changelog:
  - Move POST scriptlet to POSTTRANS to avoid bugs due to ordering issues
  - Avoids issue where uname is missing when executing the script
  - See https://bugs.centos.org/view.php?id=14795


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.1.0-6
changelog:
  - Enable chronyd and chrony-wait service
  - Reduce chrony-wait timeout from 600s to 120s
  - This reduces boot time a lot for hosts that can't reach a ntp server


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.0-5
changelog:
  - Sync with XS82E015
  - Fix sshd and ssh config patching
  - Handling of chronyd systemd unit override not synced yet, on purpose


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.0-7
changelog:
  - Don't reenable rsyslog.service when not needed
  - Landing page: XOA deploy fixes
  - Landing page: update jquery to 3.6.0


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.1-1
changelog:
  - Update to xcp-ng-release 8.2.1
  - Sync with xenserver-release 8.2.1
  - Remove patches whose changes are now included in the tarball
  - Remove manual patching of EULA as the updated one is in 8.2.1's branding-xcp-ng RPM
  - Switch to Citrix's better way of overriding the timeout in chrony-wait
  - *** Upstream changelog ***
  - * Tue Oct 26 2021 Igor Druzhinin <igor.druzhinin@citrix.com> - 8.2.1-8
  - - CP-37372: Obsolete XS82E034 hotfix
  - * Wed Oct 20 2021 Ross Lagerwall <ross.lagerwall@citrix.com> - 8.2.1-7
  - - CA-339520: fcoe_driver: Only run "fcoeadm -i" when needed
  - * Mon Sep 20 2021 Ross Lagerwall <ross.lagerwall@citrix.com> - 8.2.1-6
  - - CP-34895: reduce verbosity of SM logs
  - - CA-343416: write crit log message to host console
  - - CA-343416: log corosync warning and above to console
  - - CA-343759: Send HUP to rsyslogd after DHCP setup
  - - CA-356624: Force log rotation when file size reaches 100 MiB
  - - CA-358540: Fix secure.log typo
  - * Tue Sep 14 2021 Christian Lindig <christian.linidg@citrix.com> - * 8.2.1-5
  - - Add obsoltes for XS82E033
  - * Fri Sep 10 2021 Igor Druzhinin <igor.druzhinin@citrix.com> - 8.2.1-4
  - - CP-37666: Obsolete XS82E032 hotfix
  - - CP-38080: Obsolete XS82E031
  - * Fri Jul 30 2021 Ross Lagerwall <ross.lagerwall@citrix.com> - 8.2.1-3
  - - CP-37202: Obsolete XS82E030 hotfix
  - * Tue Jul 13 2021 Ming Lu <ming.lu@citrix.com> - 8.2.1-2
  - - CP-36430: Update ciphers for SSH server and client
  - * Fri Jun 25 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 8.2.1-1
  - - CP-36759: First 8.2.1 release


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.1-2
changelog:
  - Fix inverted test for the presence of an old replacement chrony-wait service file
  - The file was not removed when it should.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.1-3
changelog:
  - Add a comment about chronyd and chrony-wait services. In 8.2.1 we still need to enable them manually.
  - Fix symlink to chrony-wait.service now that we removed our custom replacement from /etc


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.1-4
changelog:
  - Add inline patches to fix cipher lists in sshd and ssh config for people updating from an updated 8.2


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.1-6
changelog:
  - Partially sync with hotfix XS82ECU1018 (xenserver-release-8.2.1-10)
  - Fix spurious fcoe-related error messages
  - Install ssh_config and sshd_config configuration files into /opt/xensource/config/
  - But don't overwrite user configuration like the hotfix does. Keep using patches for now.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.1-8
changelog:
  - Update HTML page
  - HTTPS by default for XOA quick deploy
  - Webpage clean-up: remove FA fonts, references to unused fonts, jquery...
  - BuildRequires git for %autosetup -S git


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.1-13
changelog:
  - Update repo files for CentOS and EPEL
  - Point at repo.vates.tech for CentOS since mirrorlist.centos.org was cut
  - Add "(EOL)" to repo descriptions for EOL repos
  - Drop unused repos


author: Thierry Escande <thierry.escande@vates.tech> - 8.2.1-14
changelog:
  - Sync with hotfix XS82ECU1072
  - *** Upstream changelog ***
  - * Wed Sep 11 2024 Lin Liu <Lin.Liu01@cloud.com> - 8.2.1-11+
  - - CA-392433: Start dhclient on iSCSI BFS interfaces+


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.7.0-1
changelog:
  - Fix lock in updater plugin (See: https://github.com/xcp-ng/xcp/issues/523)
  - Normalize plugins output
  - Add plugin to display return of lsblk


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.7.2-1
changelog:
  - Really disable unwanted repos when running yum update
  - Fix exception handling when a command fails


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.8.0-1
changelog:
  - Add LVM plugin to list and create PVs, VGs and LVs
  - RAID plugin: handle gracefully when no RAID is present
  - Add a way to install packages with updater.py
  - xcp-ng-linstor is now a default repo of updater.py


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.10.0-1
changelog:
  - Add check_installed function in updater.py
  - Exclude smartctl plugin, only available on XCP-ng 8.3


author: rossla <ross.lagerwall@citrix.com> - 2.2.1-1
changelog:
  - CP-23016 Update API to store last error code
  - Set lastError on IOError, OSError & Exception, then return false


author: jenniferhe <jennifer.herbert@citrix.com> - 2.3.0-1
changelog:
  - add errno.IO to errors passed to host-upgrade
  - CP-29627: Increase the amount of memory assigned to dom0
  - CP-29836: Expose the product version of a Yum repository
  - CP-30501: Add API to get dom0 default memory by version
  - CP-30557: Make default_memory base its recomendation based on platform version


author: Christian Lindig <christian.lindig@citrix.com> - 1.25.0-1
changelog:
  - CA-325582: remove SR RRDs from memory after archiving
  - CA-325582: always remove VM RRDs from memory even if archiving failed
  - CA-325582: Report disabled sources


author: Christian Lindig <christian.lindig@citrix.com> - 1.28.0-1
changelog:
  - CP-33121: stop using stdext's std and monadic modules
  - stats: use standard Mutex.execute
  - xcp_rrdd: Do not include modules into the namespace


author: Christian Lindig <christian.lindig@citrix.com> - 1.29.0-1
changelog:
  - fix build -- use OASIS
  - Add opam file
  - rrddump: Update for stdext 2.0.0
  - Move text_export from xapi-rrd-unix
  - Port to jbuilder
  - Ported from jbuilder to dune and updated dependencies.
  - Do not use 'finally' from package xapi-stdext-pervasives.
  - maintenance: rrddump pointing at incorrect repo
  - Fix after rrddump merge
  - maintenance: normalize opam files


author: Christian Lindig <christian.lindig@citrix.com> - 1.30.0-1
changelog:
  - CA-335964: Prepare code for hiding temporary uuids
  - CA-335964: Actively mask temporary VM UUIDs from exposed metrics


author: Christian Lindig <christian.lindig@citrix.com> - 1.32.0-1
changelog:
  - maintenace: prepare for ocamlformat
  - maintenance: format code with ocamlformat
  - maintenance: format comments with ocamlformat


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.33.0-6.1
changelog:
  - Security update, synced from hotfix XS82ECU1019
  - *** Upstream changelog ***
  - * Thu Sep 08 2022 Rob Hoes <rob.hoes@citrix.com> - 1.33.0-6
  - - CA-368579: Mitigations against DoS attacks by unauthenticated clients


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.33.2-1.1
changelog:
  - Sync with hotfix XS82ECU1027
  - *** Upstream changelog ***
  - * Tue Feb 28 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.33.2-1
  - - CA-371780: Reduce cost of merge_new_dss
  - - CA-371780: Reduce overheads in update_rrdds
  - - CA-371780: Port xcp-rrdd tests to alcotest
  - - Change license to match the one in the source repo
  - - Fix xen BuildReqs
  - * Thu Oct 13 2022 Rob Hoes <rob.hoes@citrix.com> - 1.33.1-1
  - - CA-368579: Patches upstreamed


author: Gael Duperrey <gduperrey@vates.fr> - 1.33.2-6.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 1.33.2-6
  - - Bump release and rebuild
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 1.33.2-5
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 1.33.2-4
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.33.2-3
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.33.2-2
  - - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.33.2-7.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1049
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Mon Oct 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.33.2-7
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.33.4-4.1
changelog:
  - Sync with hotfix XS82ECU1064
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 1.33.4-4
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 1.33.4-3
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 1.33.4-2
  - - Bump release and rebuild
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 1.33.4-1
  - - CP-42182 Add CLI tool on xe and rrd-cli to enable saving of rrds to local host
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.33.3-3
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 1.33.3-2
  - - Bump release and rebuild
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 1.33.3-1
  - - CP-42182 Add CLI tool on xe and rrd-cli to enable saving of rrds to local host


author: Gael Duperrey <gduperrey@vates.tech> - 1.33.4-6.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 1.33.4-6
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 1.33.4-5
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 1.33.5-3.1
changelog:
  - Sync with hotfix XS82ECU1080
  - *** Upstream changelog ***
  - * Mon Dec 16 2024 Christian Lindig <christian.lindig@citrix.com> - 1.33.5-3
  - - Udpate CHECKSUMs
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.33.5-2
  - - Bump release and rebuild
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 1.33.5-1
  - - CA-399183 fix rrd-cli execution
  - * Thu Dec 12 2024 Christian Lindig <christian.lindig@cloud.com> - 1.33.4-8
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 1.33.4-7
  - - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.1-9.3.1
changelog:
  - Security update
  - Related to XSAs 333, 334, 336, 337, 338, 339, 340, 342, 343, 344
  - See http://xenbits.xen.org/xsa/
  - Reboot required
  - Also remove xen-4.13.1-insert-Ice-Lake-and-Comet-Lake-model-numbers.backport.patch, not needed anymore


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.1-9.5.1
changelog:
  - Security update
  - Related to XSAs 286, 345, 346, 347
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.1-9.6.1
changelog:
  - Security update
  - Related to XSA-351
  - See http://xenbits.xen.org/xsa/advisory-351.html
  - Patch for XSA-286 rewritten for better performance.
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.1-9.7.1
changelog:
  - Security update
  - Related to XSA-355
  - See http://xenbits.xen.org/xsa/advisory-355.html
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.1-9.8.2
changelog:
  - Security update
  - Related to XSAs 115, 322, 323, 324, 325, 330, 348, 352, 353, 358, 359
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.1-9.8.3
changelog:
  - Security update
  - Related to XSA 360
  - See http://xenbits.xen.org/xsa/advisory-360.html
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.1-9.8.4
changelog:
  - Remove dist tag from XEN_VENDORVERSION
  - Avoids hitting the 16 char limit in xen_extra
  - Related to https://github.com/xcp-ng/xcp/issues/476


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.1-9.9.1
changelog:
  - Sync with hotfix XS82E016
  - Bugfix update (we already had applied the security patch for XSA-360)
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.1-9.11.1
changelog:
  - Security update, synced from hotfix XS82E026
  - Related to XSAs 373, 375, 377
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.1-9.12.1
changelog:
  - Security update, synced from hotfix XS82E031
  - Related to XSAs 378, 379, 380, 382, 384
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.0-8.4
changelog:
  - Security update
  - Related to XSA-307, XSA-313, XSA-316, XSA-318
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.0-8.5.1
changelog:
  - Update for new microcode related to SRBDS Intel issues
  - Related to XSA-320
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.1-9.2.1
changelog:
  - Security update
  - Related to XSA-317, XSA-319, XSA-321, XSA-328
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.1-9.12.1
changelog:
  - Security update, synced from hotfix XS82E032
  - Related to XSAs 378, 379, 380, 382, 384
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.4-9.18.1
changelog:
  - Security update, synced from hotfix XS82E035
  - Related to XSAs 388, 389
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.4-9.19.1
changelog:
  - Security update, synced from hotfix XS82E037
  - Adapt to new microcode released to fix security vulnerabilities in Intel CPUs
  - Also fixes XSAs 394 and 395
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.4-9.20.1
changelog:
  - Security update, synced from hotfix XS82ECU1006
  - Related to XSA 398
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.4-9.21.2
changelog:
  - Security update, synced from hotfix XS82ECU1007
  - Related to XSAs 397, 399 and 400
  - See http://xenbits.xen.org/xsa/
  - Additional patches added from upstream xen to fix fallouts of XSA-400 patches
  - Reboot required


author: Gaël Duperrey <gduperrey@vates.fr> - 4.13.4-9.22.1
changelog:
  - Sync with hotfix XS82ECU1010
  - Integrated upstream patches related to XSA 400 to replace our patches
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Andrei Semenov <andrei.semenov@vates.fr> - 4.13.4-9.22.2
changelog:
  - Security update
  - Related to XSA 401 and XSA 402
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.4-9.23.1
changelog:
  - Security update, synced from hotfix XS82ECU1012
  - Fix XSA 404
  - Replaced our XSA 401 and 402 patches with those from the XS hotfix
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.4-9.24.1
changelog:
  - Security update, synced from hotfix XS82ECU1014
  - XSA 407
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.4-9.25.1
changelog:
  - Synced from hotfix XS82ECU1015
  - Remove amd-iommu-correct-xt-handling.patch, it's already in XS82ECU1015
  - Reboot required


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.4-9.26.1
changelog:
  - Security update, synced from hotfix XS82ECU1016
  - Fix XSA-410, XSA-411, and other issues
  - Reboot required


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.4-9.27.1
changelog:
  - Security update, synced from hotfix XS82ECU1020
  - Fix XSA-326 XSA-414 XSA-415 XSA-416 XSA-417 XSA-418 XSA-419 XSA-420 XSA-421
  - Reboot required


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.4-9.28.1
changelog:
  - Synced from hotfix XS82ECU1021
  - Fix XSA-422 and other issues
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.4-9.29.1
changelog:
  - Synced from hotfix XS82ECU1023
  - Enable AVX-512 by default for EPYC Zen4 (Genoa)
  - Reboot required


author: Gael Duperrey <gduperrey@vates.fr> 4.13.5-9.30.1
changelog:
  * Synced from hotfix XS82ECU1026
  - *** Upstream changelog ***
  - * Mon Feb 6 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.30
  - - Fix for XSA-426 CVE-2022-27672.
  - - Fix memory corruption issues in the Ocaml bindings.
  - - On xenstored live update, validate the config file before launching into the new xenstored.
  - * Mon Feb 6 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.29
  - - Update to Xen 4.13.5
  - The upstream commit history before this point also mentions "Initial Sapphire Rapids support" and other changes


author: Andrei Semenov <andrei.semenov@vates.fr> - 4.13.5-9.30.3
changelog:
  - Fix for XSA-427 (applied as is from Xen Project).
  - Fix for XSA-428 (applied as is from Xen Project). part 1
  - Fix for XSA-428 (applied as is from Xen Project). part 2
  - Fix for XSA-429 (adapted from Xen Project)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.5-9.31.1
changelog:
  - Synced from hotfix XS82ECU1030
  - Dropped our XSA-427 to 429 patches, now applied upstream
  - *** Upstream changelog ***
  - * Mon Apr 17 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.31
  - - Remove the NR_IOMMUs compile time limit.  This is necessary to boot on
  -   4-socket Sapphire Rapids systems.
  - - Cope booting in x2APIC mode on AMD systems without XT mode.
  - - Load AMD microcode on all logical processors.
  - - Fixes for
  -   - XSA-427 CVE-2022-42332
  -   - XSA-428 CVE-2022-42333 CVE-2022-42334
  -   - XSA-429 CVE-2022-42331
  - - Increase the size of the serial transmit buffer.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.30
changelog:
  - Fix for XSA-426 CVE-2022-27672.
  - Fix memory corruption issues in the Ocaml bindings.
  - On xenstored live update, validate the config file before launching
    into the new xenstored.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.31
changelog:
  - Remove the NR_IOMMUs compile time limit.  This is necessary to boot on
    4-socket Sapphire Rapids systems.
  - Cope booting in x2APIC mode on AMD systems without XT mode.
  - Load AMD microcode on all logical processors.
  - Fixes for
    - XSA-427 CVE-2022-42332
    - XSA-428 CVE-2022-42333 CVE-2022-42334
    - XSA-429 CVE-2022-42331
  - Increase the size of the serial transmit buffer.


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.5-9.32.1
changelog:
  - Synced from hotfix XS82ECU1034
  - *** Upstream changelog ***
  - * Tue May 16 2023 Roger Pau Monné <roger.pau@citrix.com> - 4.13.5-9.32
  - - Mitigate performance degradation with logdirty by disabling VCPU_SSHOTTMR_future.
  - - Adjust bogus assert in AMD-Vi code.
  - - Early boot improvements.


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.5-9.34.1
changelog:
  - Synced from hotfix XS82ECU1041 
  - *** Upstream changelog ***
  - * Sat Jul 22 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.34
  - - Fix for XSA-433 CVE-2023-20593.
  - * Tue Jul 4 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.33
  - - Hide MPX by default from guests.  This simplifies cross-pool upgrade scenarios.
  - - Limit scheduler loadbalancing to once per millisecond.  This improves performance on large systems.


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.5-9.35.1
changelog:
  - Synced from hotfix XS82ECU1044 
  - *** Upstream changelog ***
  - * Tue Aug 1 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.35
  - - Fix bug in XSA-433 fix, which accidentally disabled a hardware errata workaround.


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.5-9.36.1
changelog:
  - Synced from hotfix XS82ECU1045 
  - *** Upstream changelog ***
  - * Thu Aug 3 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.36
  - - Fixes for
  - - XSA-434 CVE-2023-20569
  - - XSA-435 CVE-2022-40982
  - - Expose MSR_ARCH_CAPS to guests on all Intel hardware by default.  - - On Cascade: Lake and later hardware, guests now see the bits stating hardware immunity to various speculative vulnerabilities.


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.5-9.34.1
changelog:
  - Security update, synced from hotfix XS82ECU1041
  - *** Upstream changelog ***
  - * Sat Jul 22 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.34
  - - Fix for XSA-433 CVE-2023-20593.
  - * Tue Jul 4 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.33
  - - Hide MPX by default from guests.  This simplifies cross-pool upgrade scenarios.
  - - Limit scheduler loadbalancing to once per millisecond.  This improves performance on large systems.


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.5-9.35.1
changelog:
  - Synced from hotfix XS82ECU1044
  - *** Upstream changelog ***
  - * Tue Aug 1 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.35
  - - Fix bug in XSA-433 fix, which accidentally disabled a hardware errata workaround.


author: Gael Duperrey <gduperrey@vates.fr> - 4.13.5-9.36.1
changelog:
  - Security update, synced from hotfix XS82ECU1045
  - *** Upstream changelog ***
  - * Thu Aug 3 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.36
  - - Fixes for
  -   - XSA-434 CVE-2023-20569
  -   - XSA-435 CVE-2022-40982
  - - Expose MSR_ARCH_CAPS to guests on all Intel hardware by default.  On Cascade
  -   Lake and later hardware, guests now see the bits stating hardware immunity
  -   to various speculative vulnerabilities.


author: Andrei Semenov <andrei.semenov@vates.tech> - 4.13.5-9.36.2
changelog:
  - More fixes to Zenbleed (XenServer backport from Xen Project)
  - Fix for AMD errata #1474 (XenServer backport from Xen Project)
  - Fix for XSA-429 (XenServer backport from Xen Project)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.13.5-9.37.1
changelog:
  - Security update
  - Sync with hotfix XS82ECU1047, which fixes XSAs we already fixed, but also goes further on XSA-443 and adds other fixes
  - *** Upstream changelog ***
  - * Wed Oct 4 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.37
  - - Fixes for
  -   - XSA-438 CVE-2023-34322
  -   - XSA-439 CVE-2023-20588
  -   - XSA-440 CVE-2023-34323
  -   - XSA-442 CVE-2023-34326
  -   - XSA-443 CVE-2023-34325
  -   - XSA-444 CVE-2023-34327 CVE-2023-34328
  - - Pygrub extended to deprivilege itself before operating on guest disks.
  - - Ignore MADT entries with invalid APIC_IDs.
  - - Fix the emulation of VPBLENDMW with a mask and memory operand.
  - - Fix a incorrect diagnostic about spurious interrupts.
  - - Update IO-APIC IRTEs atomically.  Fixes a race condition which causes
  -   interrupts to be routed badly, often with "No irq handler for vector"
  -   errors.
  - - Further fix for XSA-433.  Extend the chicken-bit workaround to all CPUs
  -   which appear to be a Zen2 microarchtiecture, even those not on the published
  -   model list.
  - - Fix for AMD errata #1474.  Disable C6 after 1000 days of uptime on AMD Zen2
  -   systems to avoid a crash at ~1044 days.
  - - Fix for MSR_ARCH_CAPS boot-time calculations for PV guests.


author: Gael Duperrey <gduperrey@vates.tech> - 4.13.5-9.38.1
changelog:
  - Security update, synced from hotfix XS82ECU1057
  - *** Upstream changelog ***
  - * Mon Nov 6 2023 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.38
  - - Fixes for
  -   - XSA-445 CVE-2023-46835
  -   - XSA-446 CVE-2023-46836
  - - Fix for AMD erratum #1485, which has been observed to cause #UD exception on AMD Zen4 systems.


author: David Morel <david.morel@vates.tech> - 4.13.5-9.39.1
changelog:
  - Security update, synced from hotfix XS82ECU1061
  - Replace our fix for XSA-449
  - *** Upstream changelog ***
  - * Fri Mar  8 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.39
  - - Fixes for:
  -   - XSA-449 CVE-2023-46839
  -   - XSA-452 CVE-2024-2193, off by default
  -   - XSA-453 CVE-2023-28746


author: David Morel <david.morel@vates.tech> - 4.13.5-9.39.1
changelog:
  - Security update, synced from hotfix XS82ECU1061
  - Replace our fix for XSA-449
  - *** Upstream changelog ***
  - * Fri Mar  8 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.39
  - - Fixes for:
  -   - XSA-449 CVE-2023-46839
  -   - XSA-453 CVE-2024-2193, off by default
  -   - XSA-452 CVE-2023-28746


author: David Morel <david.morel@vates.tech> - 4.13.5-9.40.1
changelog:
  - Security update, synced from hotfix XS82ECU1062
  - *** Upstream changelog ***
  - * Mon Apr  8 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-9.40
  - - Fixes for:
  -   - XSA-454 CVE-2023-46842
  -   - XSA-455 CVE-2024-31142
  -   - XSA-456 CVE-2024-2201


author: David Morel <david.morel@vates.tech> - 4.13.5-9.40.2
changelog:
  - Security update
  - Fix for:
    - XSA-458 CVE-2024-31143: fixing double unlock in x86 guest IRQ handling


author: David Morel <david.morel@vates.tech> - 4.13.5-9.40.3
changelog:
  - Security update
  - Fix for:
    - XSA-460 CVE-2024-31145 - error handling in x86 IOMMU identity mapping
    - XSA-461 CVE-2024-31146 - PCI device pass-through with shared resources


author: David Morel <david.morel@vates.tech> - 4.13.5-9.44.1
changelog:
  - Synced from hotfix XS82ECU1077
  - Replace our backports for XSA-458 and XSA-460
  - *** Upstream changelog ***
  - * Thu Sep 19 2024 Alex Brett <alex.brett@cloud.com> - 4.13.5-9.44
  - - Fix a packaging issue affecting livepatching
  - * Thu Sep 12 2024 Roger Pau Monné <roger.pau@citrix.com> - 4.13.5-9.43
  - - Fix for XSA-462 / CVE-2024-45817.
  - * Thu Sep 05 2024 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 4.13.5-9.42
  - - Fix for XSA-460 / CVE-2024-31145.
  - * Thu Jul 11 2024 Roger Pau Monné <roger.pau@citrix.com> - 4.13.5-9.41
  - - Fixes for XSA-458 CVE-2024-31143.
  - - Fix early detection of CPU features on hardware with the CPUID Limit active
  -   in firmware.
  - - Fix RTC emulation.


author: David Morel <david.morel@vates.tech> - 4.13.5-9.45.1
changelog:
  - Synced from hotfix XS82ECU1078
  - *** Upstream changelog ***
  - * Tue Nov 05 2024 Javi Merino <javi.merino@cloud.com> - 4.13.5-9.45
  - - Fixes for XSA-463 CVE-2024-45818
  - - Fixes for XSA-464 CVE-2024-45819
  - - Fix IO-APIC directed EOIs when using AMD-Vi interrupt remapping
  - - Remove an overly strict check when parsing AMD IVRS ACPI tables


author: Ben Anson <ben.anson@citrix.com> - 0.150.4-1
changelog:
  - CP-28375: Implement soft reset handler for guest kdump support
  - CA-342935: Disengage guest balloon driver and reset PV features on soft reset


author: Ben Anson <ben.anson@citrix.com> - 0.150.5-1
changelog:
  - UPD-678 CA-351823 Revert "Avoid sexp_option deprecation warning"
  - UPD-678 CA-351823 unit test for [@sexp.option] fix


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.150.5-1.1
changelog:
  - Update for XS82E020
  - *** Upstream changelog ***
  - * Mon Feb 22 2021 Ben Anson <ben.anson@citrix.com> - 0.150.5-1
  - - UPD-678 CA-351823 Revert "Avoid sexp_option deprecation warning"
  - - UPD-678 CA-351823 unit test for [@sexp.option] fix
  - * Wed Feb 17 2021 Ben Anson <ben.anson@citrix.com> - 0.150.4-1
  - - CP-28375: Implement soft reset handler for guest kdump support
  - - CA-342935: Disengage guest balloon driver and reset PV features on soft reset
  - * Thu Feb 11 2021 Ben Anson <ben.anson@citrix.com> - 0.150.3-1
  - - CA-341518: send error handshake during migration
  - - CA-341518: add tmp ids to vm_migrate_op
  - - CA-341518: call VM_check_state on tmp VM on a failed VM_migrate
  - - Avoid sexp_option deprecation warning
  - - CA-332779: verify power state for start/reboot/resume
  - - CA-332779: Fix resume unit test due to power-state checks
  - - CA-347560: move metadata import and add/remove functions outside VM module
  - - CA-347560: Introduce VM_import_metadata atomic and queue the op when needed
  - - CA-347560: Introduce VM.import_metadata_async


author: Edwin Török <edvin.torok@citrix.com> - 0.150.6-1
changelog:
  - Maintenance: fix compiler warning about const
  - CP-37034: add featureset manipulation helpers
  - CP-37034: move TSX handling logic out of xenopsd
  - CP-37282: use xenctrl Max policy for Xen 4.7 compat code
  - CP-37282: Update CI to use Yangtze branch


author: Edwin Török <edvin.torok@citrix.com> - 0.150.7-1
changelog:
  - CP-33898: Fix command line with QEMU 4.1.1
  - CA-341686: Don't let QEMU open device read-only
  - CA-341689: Set read-only to cdroms
  - CA-345834: Fix device id to be the same as QEMU
  - CA-351685: improved fix for XSA-354
  - CA-351685: increase default xenopsd quota


author: Pau Ruiz Safont <pau.safont@citrix.com> - 0.150.8-1
changelog:
  - maintenance: opam 2.1.0 compatibility
  - CP-38064: update for rpclib 7 compatibility
  - CP-38064: update usage of epoll to Core 0.14.0


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.150.5.1-1.1
changelog:
  - Sync with hotfix XS82E031
  - *** Upstream changelog ***
  - * Fri Jul 16 2021 Ben Anson <ben.anson@citrix.com> - 0.150.5.1-1
  - - CA-351685: improved fix for XSA-354
  - - CA-351685: increase default xenopsd quota


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.150.9-1.1
changelog:
  - Sync with CH 8.2.1
  - *** Upstream changelog ***
  - * Tue Oct 12 2021 Christian Lindig <christian.lindig@citrix.com> - 0.150.9-1
  - - Add mtu to VIF frontend xs tree (CA-359472)
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 0.150.8-2
  - - Bump package after xs-opam update
  - * Mon Aug 23 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 0.150.8-1
  - - maintenance: opam 2.1.0 compatibility
  - - CP-38064: update for rpclib 7 compatibility
  - - CP-38064: update usage of epoll to Core 0.14.0
  - * Fri Jul 16 2021 Edwin Török <edvin.torok@citrix.com> - 0.150.7-1
  - - CP-33898: Fix command line with QEMU 4.1.1
  - - CA-341686: Don't let QEMU open device read-only
  - - CA-341689: Set read-only to cdroms
  - - CA-345834: Fix device id to be the same as QEMU
  - - CA-351685: improved fix for XSA-354
  - - CA-351685: increase default xenopsd quota
  - * Tue Jul 13 2021 Edwin Török <edvin.torok@citrix.com> - 0.150.6-1
  - - Maintenance: fix compiler warning about const
  - - CP-37034: add featureset manipulation helpers
  - - CP-37034: move TSX handling logic out of xenopsd
  - - CP-37282: use xenctrl Max policy for Xen 4.7 compat code
  - - CP-37282: Update CI to use Yangtze branch


author: Gael Duperrey <gduperrey@vates.fr> - 0.150.12-1.1
changelog:
  - * Tue May 17 2022 Christian Lindig <christian.lindig@citrix.com> - 0.150.12-1
  - - Add featureset to xenopsd VM state
  - - Add platformdata to persistent metadata
  - - CA-363633: Always take the generation-id directly from xapi
  - - CA-363700: update xenopsd platformdata if rtc-timeoffset changes
  - - Remove CPUID levelling v1 compat code
  - - Upgrade featureset in xenopsd when importing VM state
  - - Upgrade VM runtime state when xenopsd restarts
  - * Fri May 13 2022 Christian Lindig <christian.lindig@citrix.com> - 0.150.11-1
  - - CA-366014 UPD-825 pass dm qemu to UEFI qemu, too
  - - CA-364138 log when about to stop varstored and varstore-guard
  - * Fri May 13 2022 Christian Lindig <christian.lindig@citrix.com> - 0.150.10-1
  - - CA-361220: xenopsd: introduce TASK.destroy_on_finish


author: Christian Lindig <christian.lindig@citrix.com> - 0.150.0-1
changelog:
  - maintenance: prepare for ocamlformat
  - maintenance: format code with ocamlformat
  - maintenance: format comments using ocamlformat


author: Ben Anson <ben.anson@citrix.com> - 0.150.1-1
changelog:
  -  CA-344431: ls_lR: factor out dir concatenation
  -  CA-344431: ls_lR: refactor, use fold
  -  CA-344431: ls_lR: separate recursion into separate function
  -  CA-344431: ls_lR: add quota
  -  CA-344431: ls_lR: limit depth
  -  CA-344431, CA-348217: exclude attr/os/hotfixes from ls_lR


author: Ben Anson <ben.anson@citrix.com> - 0.150.2-1
changelog:
  -  CA-344431: read important xenstore entries first
  -  CA-344431: refactor attr/os/hotfixes exclusion


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.150.2-1.1
changelog:
  - Security update (XSA 354)
  - Rebase on CH 8.2 hotfix XS82E013
  - Keep xenopsd-0.66.0-use-xcp-clipboardd.XCP-ng.patch for https://github.com/xcp-ng/xcp/issues/166


author: Gael Duperrey <gduperrey@vates.fr> - 0.150.12-1.1
changelog:
  - *** Upstream changelog ***
  - * Tue May 17 2022 Christian Lindig <christian.lindig@citrix.com> - 0.150.12-1
  - - Add featureset to xenopsd VM state
  - - Add platformdata to persistent metadata
  - - CA-363633: Always take the generation-id directly from xapi
  - - CA-363700: update xenopsd platformdata if rtc-timeoffset changes
  - - Remove CPUID levelling v1 compat code
  - - Upgrade featureset in xenopsd when importing VM state
  - - Upgrade VM runtime state when xenopsd restarts
  - * Fri May 13 2022 Christian Lindig <christian.lindig@citrix.com> - 0.150.11-1
  - - CA-366014 UPD-825 pass dm qemu to UEFI qemu, too
  - - CA-364138 log when about to stop varstored and varstore-guard
  - * Fri May 13 2022 Christian Lindig <christian.lindig@citrix.com> - 0.150.10-1
  - - CA-361220: xenopsd: introduce TASK.destroy_on_finish


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.150.14-1.1
changelog:
  - Sync with hotfix XS82ECU1027
  - *** Upstream changelog ***
  - * Mon Feb 27 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 0.150.14-1
  - - test: run as part of the xapi-xenopsd package
  - - Reformat for compatibility with xapi
  - - CA-369444: Ensure xenopsd still starts if VM state upgrade fails
  - - CA-369446: exit with error if add_vswitch_port fails
  - - Change license to match the one in the source repo
  - - Prepare for next hotfix: build-depend on the transitional libraries
  - - Fix xen BuildReqs
  - - Remove macro for dependency generator
  - - Add last-produced versions of obsoleted packages


author: Gael Duperrey <gduperrey@vates.fr> - 0.150.17-1.1
changelog:
  - Sync with hotfix XS82ECU1040
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 0.150.17-1
  - - Add cpuid library
  - - Introduce functions in CPU feature sets in xenopsd
  - - xenopsd: change type of reported CPU feature-sets to an abstract type
  - - Remove CPUID tests from xapi and add to xenopsd
  - - Offload VM CPU Policy checks to Xen
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 0.150.16-2
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 0.150.16-1
  - - CA-377824 fix FD leak in xenopsd
  - * Tue May 16 2023 Christian Lindig <christian.lindig@citrix.com> - 0.150.15-2
  - - Bump release and rebuild
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 0.150.15-1
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations)
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations)
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations)
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 0.150.14-2
  - - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.150.17-2.1
changelog:
  - Security update, synced from hotfix XS82ECU1049
  - Also fix upgrade from XCP-ng 8.1 via yum
  - *** Upstream changelog ***
  - * Tue Sep 26 2023 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 0.150.17-2
  - - CA-38341: Always invoke pygrub in depriv mode


author: Gael Duperrey <gduperrey@vates.tech> - 0.150.19-3.1
changelog:
  - Sync with hotfix XS82ECU1064
  - *** Upstream changelog ***
  - * Fri Mar 08 2024 Christian Lindig <christian.lindig@cloud.com> - 0.150.19-3
  - - Bump release and rebuild
  - * Wed Mar 06 2024 Christian Lindig <christian.lindig@cloud.com> - 0.150.19-2
  - - Bump release and rebuild
  - * Tue Mar 05 2024 Christian Lindig <christian.lindig@cloud.com> - 0.150.19-1
  - - CA-382035: Verify commandline items for service process in "pid"
  - * Fri Nov 03 2023 Christian Lindig <christian.lindig@cloud.com> - 0.150.18-5
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 0.150.18-4
  - - Bump release and rebuild
  - * Tue Oct 24 2023 Christian Lindig <christian.lindig@cloud.com> - 0.150.18-3
  - - Bump release and rebuild
  - * Mon Oct 23 2023 Christian Lindig <christian.lindig@citrix.com> - 0.150.18-2
  - - remove pygrub patch after it was merged
  - * Wed Oct 18 2023 Christian Lindig <christian.lindig@cloud.com> - 0.150.18-1
  - - CA-381503: bump qemu filesize limit
  - - CA-383491: Invoke pygrub in depriv mode
  - - ci: fix run issues
  - - maintenance: apply ocamlformat


author: Gael Duperrey <gduperrey@vates.tech> - 0.150.19-5.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Thu Aug 29 2024 Christian Lindig <christian.lindig@cloud.com> - 0.150.19-5
  - - Bump release and rebuild
  - * Wed Jun 19 2024 Christian Lindig <christian.lindig@cloud.com> - 0.150.19-4
  - - Bump release and rebuild


author: Gael Duperrey <gduperrey@vates.tech> - 0.150.19-8.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1080
  - No source changes: only rebuild for dependencies
  - *** Upstream changelog ***
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 0.150.19-8
  - - Bump release and rebuild
  - * Thu Dec 12 2024 Christian Lindig <christian.lindig@cloud.com> - 0.150.19-7
  - - Bump release and rebuild
  - * Mon Dec 09 2024 Christian Lindig <christian.lindig@cloud.com> - 0.150.19-6
  - - Bump release and rebuild


author: Christian Lindig <christian.lindig@citrix.com> - 0.146.0-1
changelog:
  - CP-33121: replace Opt with Option
  - CP-33121: Do not use Stdext directly
  - maintenance: whitespace
  - maintenace: remove warnings


author: Christian Lindig <christian.lindig@citrix.com> - 0.147.0-1
changelog:
  - CP-32863: Run hotplug scripts from xenopsd for storage driver domains
  - CP-32863: fix hotplug script for storage driver domains
  - CP-32863: make removal idempotent
  - CP-32863: do not get stuck waiting for state to reach closed when key
  	disappears
  - CP-32863: Do not wait for hotplug scripts in Dom0 when plugging in
  	storage driver domains


author: Christian Lindig <christian.lindig@citrix.com> - 0.148.0-1
changelog:
  - CA-335964: store the original vm uuid when starting migration
  - CA-335964: refactor rename function
  - maintenance: use travis validator suggestions


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 1.2.7-1
changelog:
  - Fix -u help message to correspond the result
  - CA-341602: Calculate start time on per-process basis
  - CA-341602: Do not start all of the process groups in parallel


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 1.3.7-1
changelog:
  - CP-38441: Add bugtool support for vTPM
  - CA-369841: XSI-1298 xen-bugtool command takes over 1 hour to collect xenserver-databases


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 1.3.12-1
changelog:
  - CA-378768: capture block schedulers
  - Capture the contents of the cron dirs
  - CP-41107: Store bug tool log in status report
  - CP-43806: Collect `xen-cpuid -p`
  - Collect customised multipath configuration
  - Remove obsolete MPP from bugtool
  - CP-42688: Collect NRPE config files
  - XSI-1385: Collect plain text (human-readable) SAR file reports


author: Bernhard Kaindl <bernhard.kaindl@cloud.com> - 1.3.13-1
changelog:
  - CP-45506: Also add testcase for the subarchive at etc/systemd.tar
  - CP-45506: Archive /etc/systemd as a tar archive inside the output


author: Lin Liu <Lin.Liu01@cloud.com> - 1.3.17-1
changelog:
  - Backport re-adding PowerBroker Identity Service/PBIS
  - CP-41238: Run commands before collecting directories
  - Fix to preserve the directory traversal order in Python2
  - CP-49944: plugins: Fix multiple file patterns for the same directory


author: Christian Lindig <christian.lindig@citrix.com> - 10.1.0-1
changelog:
  - XSI-301: Print errno when watchdog hypercall fails.
  - XSI-301: remove duplicated unlock_pages lines
  - CA-315962 cleanupwatchdog: Use hypercall's errno
  - CA-315962 cleanupwatchdog: exit when encountering errors on hypercalls
  - CA-315962 cleanupwatchdog: restrict hypercalls to disable watchdogs
  - CA-315962 cleanupwatchdog: simplify hypercall call handling
  - CA-315962 cleanupwatchdog: Allow resetting watchdog slots without an HA file
  - CA-315962: Flush watchdog slots on HA startup


author: Gael Duperrey <gduperrey@vates.tech> - 10.3.1-3.1
changelog:
  - Sync with hotfix XS82ECU1080
  - *** Upstream changelog ***
  - * Mon Dec 16 2024 Christian Lindig <christian.lindig@citrix.com> - 10.3.1-3
  - - Bump release and rebuild
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 10.3.1-2
  - - Bump release and rebuild
  - * Fri Dec 13 2024 Christian Lindig <christian.lindig@cloud.com> - 10.3.1-1
  - - lib: ensure the correct maximum amount of hosts
  - - CA-403139: Set scheduler policy and priority thread
  - - CA-403683: Configurable syslog printing
  - * Thu Dec 12 2024 Christian Lindig <christian.lindig@cloud.com> - 10.3.0-2
  - - Bump release and rebuild
  - * Thu Jul 22 2021 Rachel Yan <Rachel.Yan@citrix.com> - 10.3.0-1
  - - CA-322009: Fixed warning from set scheduler
  - * Tue Feb 16 2021 Rob Hoes <rob.hoes@citrix.com> - 10.2.0-1
  - - CA-351513: fix gcc's -fanalyzer warnings
  - - maintenance: ignore generated files


author: Pau Ruiz Safont <pau.safont@citrix.com> - 6.35.7-1
changelog:
  - xs: update xapi-inventory to actually use dune
  - maintenance: fix ocaml compilation with GCC 10 and later
  - maintenance: fix depexts
  - CP-38064: update ppxlib to 0.13.0 and dependents
  - ci: use updated container images
  - Rename stockholm to yangtze in xs-opam-ci.env
  - Update workflow for yangtze branch
  - CP-37282: Update mock xenctrl for TSX changes
  - fix: broken links from inria's gitlab
  - maintenance: pin stockholm branches in xs-extra


author: Pau Ruiz Safont <pau.safont@citrix.com> - 6.35.8-1
changelog:
  - CA-341597: add conf-libev
  - CA-341597: Use the lcm branch for varstored-guard
  - CA-341597: add libev as dependency
  - CA-341597: make libev available to packages that depend on xs-opam-repo


author: Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.35.10-1
changelog:
  - Re-enabled automatic ocaml dependency generator
  - Include license metadata for all packages
  - xs: update xapi-rrd 1.8.3 (CA-371780)
  - upstream: update metadata from the official repository
  - upstream: update conduit sources to match the expected version, 2.2.2


author: Christian Lindig <christian.lindig@citrix.com> - 6.32.0-1
changelog:
  - CA-333908 bump stdext with datetime changes
  - CP-32669: add randomconv to be able to test mirage-crypto-pk
  - CP-32669: update ppx_tools to 6.0
  - CP-32669: update mirage-types packages to 3.6.0
  - CP-3266: update mirage-protocols packages to 3.1.0
  - CP-32669: synchronize ssl package with upstream
  - CP-32669: update x509 to 0.11.0
  - CP-32669: update menhir to 20200211
  - CP-32669: update upstream-extra packages
  - CP-32669: update ppx_tools_versioned to 5.3.0
  - CP-32669: update base64 to 3.4.0
  - CP-21669: update ocaml-migrate-parsetree to 1.7.1
  - CP-32669: update bigstringaf to 0.6.1
  - CP-32669: update ocplib-endian to 1.1
  - CP-32669: update dune packages to 2.5.0
  - CP-32669: update sha to use 1.13
  - CP-32669: Add pci v1.0.2
  - Don't use COPY --chown in Dockerfile


author: Christian Lindig <christian.lindig@citrix.com> - 6.35.0-1
changelog:
  - CA-338596: Update xe to use fpath
  - CA-338596: Move fpath to upstream
  - CP-33121: remove unused stdext-bigbuffer
  - Sync opam dependencies for xs-extra/ from source repos
  - upstream-extras: add ocamlformat


author: Ben Anson <ben.anson@citrix.com> - 6.35.2-1
changelog:
  - bump stdext to v4.11.2
  - tools: change distro variable for travis CI
  - stockholm: point to lcm branches


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-2
changelog:
  - Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
  - Using safe primes for FIPS DH self-test


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes bugs in s390x AES code.
  - Uses the first detected address family if IPv6 is not available
  - Reverts the changes in https://github.com/openssl/openssl/pull/13305
    as it introduces a regression if server has a DSA key pair, the handshake fails
    when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
    it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
    will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
    known - https://trac.nginx.org/nginx/ticket/2071#comment:1
    As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
    could early callback instead of servername callback.
  - Resolves: rhbz#1978214
  - Related: rhbz#1934534


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-5
changelog:
  - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#2005402


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1:1.1.1k-5.1
changelog:
  - Manually sync with CentOS 8's 1.1.1k-5 as Citrix did not update for CH 8.2.1
  - Use the hobbled sources instead of the full sources, as RHEL/CentOS does
  - Rediff Citrix's patch use-linux-random-header.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1:1.1.1k-5.2
changelog:
  - Fix failing tests due to expired certificates in test data
  - Disable zlib to remove TLS compression support
  - Remove extraneous --system-ciphers-file configure option


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1:1.1.1k-6.1
changelog:
  - Sync with Centos 8 Stream's 1.1.1k-6.
  - *** Upstream changelog ***
  - * Wed Mar 23 2022 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
  - - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - - Resolves: rhbz#2067146


author: David Morel <david.morel@vates.fr> - 1:1.1.1k-9.1
changelog:
  - Sync with Centos 8 Stream's 1.1.1k-9.
  - Remove update-expired-SCT-certificates patch as it is integrated upstream
  - *** Upstream changelog ***
  - * Wed Feb 08 2023 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-9
  - - Fixed Timing Oracle in RSA Decryption
  -   Resolves: CVE-2022-4304
  - - Fixed Double free after calling PEM_read_bio_ex
  -   Resolves: CVE-2022-4450
  - - Fixed Use-after-free following BIO_new_NDEF
  -   Resolves: CVE-2023-0215
  - - Fixed X.400 address type confusion in X.509 GeneralName
  -   Resolves: CVE-2023-0286
  - * Thu Jul 21 2022 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-8
  - - Fix no-ec build
  -   Resolves: rhbz#2071020
  - * Tue Jul 05 2022 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-7
  - - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
  -   Resolves: CVE-2022-2097
  - - Update expired certificates used in the testsuite
  -   Resolves: rhbz#2092462
  - - Fix CVE-2022-1292: openssl: c_rehash script allows command injection
  -   Resolves: rhbz#2090372
  - - Fix CVE-2022-2068: the c_rehash script allows command injection
  -   Resolves: rhbz#2098279


author: David Morel <david.morel@vates.tech> - 1:1.1.1k-12.2
changelog:
  - Sync with Centos 8 Stream's 1.1.1k-12.
  - Do not package openssl.cnf at all for xs-openssl, the system-wide one will be
    the one packaged with openssl.
  - disable weak ciphers at compile time
  - *** Upstream changelog ***
  - * Thu Nov 30 2023 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-12
  - - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series
  -   (a proper fix for CVE-2020-25659)
  -   Resolves: RHEL-17696
  - * Wed Nov 15 2023 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-11
  - - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking
  -   excessively long X9.42 DH keys or parameters may be very slow
  -   Resolves: RHEL-16538
  - * Thu Oct 19 2023 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-10
  - - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters
  -   Resolves: RHEL-14245
  - - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value
  -   Resolves: RHEL-14239


author: Sahana Prasad <sahana@redhat.com> 1.1.1g-14
changelog:
  - Fix CVE-2021-3450 openssl: CA certificate check bypass with
    X509_V_FLAG_X509_STRICT
  - Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing


author: Daiki Ueno <dueno@redhat.com> 1.1.1g-16
changelog:
  - Use AI_ADDRCONFIG only when explicit host name is given
  - Allow only curves defined in RFC 8446 in TLS 1.3


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1:1.1.1k-6.1
changelog:
  - Sync with Centos 8 Stream's 1.1.1k-6.
  - *** Upstream changelog ***
  - * Wed Mar 23 2022 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
  - - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - - Resolves: rhbz#2067144


author: Aaron Robson <aaron.robson@citrix.com> - 10.1.9-1
changelog:
  - CA-304344: Makefile warning due to missing file XSFeatureInstallLicence.py
  - CA-304345: Integrate xsconsole with Travis CI
  - 'make clean' and 'make test' implemented
  - include suitable .gitgnore


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.1.11-1.1
changelog:
  - Rebase on CH 8.2
  - Re-remove incloudsphere subpackage
  - Keep xsconsole-10.1.9-rebrand-xsconsole-service.XCP-ng.patch
  - Keep xsconsole-10.1.9-define-xcp-ng-colors.XCP-ng.patch
  - Keep xsconsole-10.1.10-replace-ext3-with-ext.XCP-ng.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.1.13-1.1
changelog:
  - Sync with CH 8.2.1
  - Remove patches contributed and merged upstream
  - *** Upstream changelog ***
  - * Fri Jul 09 2021 Ross Lagerwall <ross.lagerwall@citrix.com> - 10.1.13-1
  - - Display 'Ext' instead of 'Ext3' for `ext` SRs
  - - CA-355872: Use XAPI to edit DNS entries within xsconsole
  - - Display clearer error message when XAPI unreachable
  - - rework is_master to raise in case of failure
  - * Fri Feb 19 2021 Ross Lagerwall <ross.lagerwall@citrix.com> - 10.1.12-1
  - - CA-348699: Fix full version display if the build number is empty


author: Gael Duperrey <gduperrey@vates.tech> - 10.1.13.1-2.1
changelog:
  - Rebuild after sync with hotfix XS82ECU1074
  - Removed patch for xsa459 as it was integrated upstream
  - *** Upstream changelog ***
  - * Fri Jun 21 2024 Alex Brett <alex.brett@cloud.com> - 10.1.13.1-2
  - - Fix packaging issue
  - * Mon Jun 17 2024 Alex Brett <alex.brett@cloud.com> - 10.1.13.1-1
  - - CA-388527: Fix 'timed out' when creating an iSCSI SR
  - - CP-49228: Update Portable SR functionality for deterministic UUIDs


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.5.1-2
changelog:
  - Disable amd64 assembly on non-intel architectures (#2035802):
    this should avoid the issue where an executable stack is created.


