# changelog

author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.11.2-1.1
changelog:
  - Update to 1.11.2-1
  - *** Upstream changelog ***
  - * Tue Nov 29 2022 Xihuan Yang <xihuan.yang@citrix.com> - 1.11.2-1
  - - CP-39690: Add Ubuntu Jammy 11 (experimental) template


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.0-1.1
changelog:
  - Update to 2.0.0-1
  - *** Upstream changelog ***
  - * Thu Jan 19 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.0-1
  - Switch upstream to GitHub
  - - Build for Python 3 and drop Python 2 support
  - - CP-41654: Check for duplicate uuids and reflabels in templates


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.3-1.1
changelog:
  - Update to 2.0.3-1
  - Remove our Debian 11 template, as upstream's one is not marked experimental anymore
  - *** Upstream changelog ***
  - * Fri Jul 14 2023 Alex Brett <alex.brett@cloud.com> - 2.0.3-1
  - - CP-43952: Remove 32-bit Windows 10
  - * Fri May 05 2023 Xihuan Yang <xihuan.yang@citrix.com> - 2.0.2-1
  - - CP-41630: Support up to 64 vCPUs for HVM guests
  - * Thu Feb 16 2023 Minghui Hu <minghui.hu@citrix.com> - 2.0.1-1
  - - CP-41650: Remove CoreOS templates from Next
  - * Tue Feb 14 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.0-2
  - - CP-42132: Install Windows 11 template by default


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.6-1.1
changelog:
  - Update to 2.0.6-1
  - Remove our Debian 12, RHEL 9, Rocky Linux 9, and Centos Stream 9 templates, now provided upstream
  - *** Upstream changelog ***
  - * Thu Oct 19 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.6-1
  - - CP-44378: Remove 'preview' From Ubuntu 22.04 Guest template
  - * Thu Sep 14 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.5-1
  - - CP-44127: Add New Guest templates Rocky Linux 9, CentOS Stream 9 and Debian 12
  - * Fri Sep 8 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.4-1
  - - CP-44042: Add Red Hat Enterprise Linux 9 (preview) template
  - * Wed Sep 6 2023 Lin Liu<Lin.Liu01@cloud.com> - 2.0.3-2
  - - BuildRequires python-setuptools to support xs9


author: Gael Duperrey <gduperrey@vates.tech> - 2.0.9-1.1
changelog:
  - Sync with 2.0.9-1
  - *** Upstream changelog ***
  - * Tue Feb 13 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.9-1
  - - CP-46356 Remove 'preview' from Windows 11 template


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.10-1.1
changelog:
  - Sync with 2.0.10-1
  - *** Upstream changelog ***
  - - CP-47662 Remove deprecated guest templates SUSE Linux 12 SP4 and Ubuntu 18.04
  - - CP-48082 Update Guest Templates to support UEFI Secure boot


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 2.5.3-2.3.11
changelog:
  - CA-357261: Hide expected errors from logrotate script
  - Drop unneeded BuildRequires
  - CP-38416: Enable static analysis


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.5.3-2.3.13.1
changelog:
  - Rebase on latest package from CH 8.3 Preview
  - Re-add changes to produce openvswitch-ipsec subpackage


author: David Morel <david.morel@vates.fr> - 2.5.3-2.3.13.2
changelog:
  - Backport fix for CVE-2023-1668: Remote traffic denial of service via crafted packets with IP proto 0
  - Comment out tests that fail
  - Enable make check in spec file


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.5.3-2.3.14.1
changelog:
  - Update to 2.5.3-2.3.14
  - Drop openvswitch-2.5.3-CVE-2023-1668.backport.patch, now patched in XenServer's RPM
  - *** Upstream changelog ***
  - * Tue Apr 18 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.5.3-2.3.14
  - - CA-376367: Fix CVE-2023-1668


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.17.7-1.1
changelog:
  - Update to 2.17.7-1
  - Add openvswitch-2.17.7-comment-failing-tests.XCP-ng.patch (Benjamin Reis)
  - Add openvswitch-2.17.7-add-pythonpath-ipsec.XCP-ng.patch (Benjamin Reis)
  - Get ipsec script and service from new sources (Benjamin Reis)
  - *** Upstream changelog ***
  - * Wed Aug 23 2023 Chunjie Zhu <chunjie.zhu@cloud.com> - 2.17.7-1
  - - CP-44181: upgrade to OVS LTS 2.17.7


author: David Morel <david.morel@vates.tech> - 2.17.7-1.2
changelog:
  - Apply fix for CVE-2023-3966, provided in advisory
  - Apply fix for CVE-2023-5366, provided in advisory


author: David Morel <david.morel@vates.tech> - 2.17.7-1.3
changelog:
  - Link with xs-openssl instead of openssl
  - Tweak ovs-ctl script that is used to start ovsdb-server, passing it
    --ssl-ciphers and --ssl-protocols command line parameters to disable weak
    ciphers.


