# changelog

author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.2-5
changelog:
  - Override module directory for depmod to make sure our alternative driver takes precedence
  - Simplify module path (simply /lib/modules/{version}/override/)


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-5.0.4
changelog:
  - CP-30827: Set ABI version to 1 and turn on kABI checking
  - CA-310995: Disable hung task warnings for the idle IO scheduling class
  - CA-311463: Fix occasional leak of grant ref mappings under memory pressure


author: Rushikesh Jadhav <rushikesh7@gmail.com> - 4.19.19-46
changelog:
  - Install using uname instead of short_uname to not overwrite old kernel
  - Introduced patch-4.19.36-37-pre
  - Upgraded patch level to 4.19.46


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Paul Wouters <pwouters@redhat.com> - 3.23-2
changelog:
  - Support crypto-policies package
  - Pull in some patches from upstream and IANA registry updates
  - gcc7 format-truncate fixes and workarounds


author: Paul Wouters <pwouters@redhat.com> - 3.25-3
changelog:
  - Cleanup shebangs for python3
  - Use the same options via macro for make programs and make install
  - Remove old ifdefs
  - Sync up patches to new upstream version
  - Add Requires: for unbound-libs >= 1.6.6
  - Enable crypto-policies support
  - Make rundir world readable for easier permission granting for socket


author: Paul Wouters <pwouters@redhat.com> - 3.26-1
changelog:
  - Resolves: rhbz#1566574 Rebase to libreswan 3.26
  - Resolves: rhbz#1527037 libreswan IPSEC implementation: should follow the policies of system-wide crypto policy
  - Resolves: rhbz#1375779 [IKEv2 Conformance] Test IKEv2.EN.R.1.1.6.7: Sending INVALID_KE_PAYLOAD failed
  - Resolves: rhbz#1085758 [TAHI][IKEv2] IKEv2.EN.I.1.2.1.1: Can't observe CREATE_CHILD_SA request for rekey
  - Resolves: rhbz#1053048 [TAHI][IKEv2] IKEv2.EN.I.1.2.4.1-7: libreswan doesn't sent CREATE_CHILD_SA after IKE_SA Lifetime timeout


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7.14.63-2
changelog:
  - Version 7.14.63
  - Add qlogic-netxtreme2-Fix-NULL-pointer-dereference-in-bnx2x_del_all_vlans.backport.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.11.1-7.3
changelog:
  - Security update
  - Fix XSA-297
  - See http://xenbits.xen.org/xsa/advisory-297.html
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.11.1-7.5.1
changelog:
  - Fix a possible memory corruption when forcibly shutting down a VM with AMD MxGPU attached
  - Fix a possible host crash when forcibly shutting a Windows VMs that is in an unclean state
  - After a live migration, a Windows VM could hang for more than a minute
  - Windows VMs with the viridian_reference_tsc flag enabled could crash during migration
  - Patches imported from XS 8.0 hotfix XS80E004


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.11.1-7.5.2
changelog:
  - Make max_grant_frames and max_maptrack_frames configurable
  - Default value of max_grant_frames is not sufficient in some cases
  - VM params platform/max_grant_frames and max_maptrack_frames are now used
  - Refs https://github.com/xcp-ng/xcp/issues/289


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.11.1-7.6
changelog:
  - Security update
  - Fix XSA-296, XSA-298, XSA-299, XSA-302
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.11.1-7.7
changelog:
  - Security update
  - Related to XSA-304 and XSA-305
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.11.1-7.8
changelog:
  - Security update
  - Related to XSA-308, XSA-309, XSA-310, XSA-311
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.11.1-7.9
changelog:
  - Security update
  - Related to XSA-307, XSA-313, XSA-318
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.11.1-7.11
changelog:
  - Security update
  - Related to XSA-317, XSA-319, XSA-321, XSA-328
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.11.1-7.11.1
changelog:
  - Security update
  - Related to XSAs 333, 336, 337, 338, 339, 340, 342, 343, 344
  - See http://xenbits.xen.org/xsa/
  - Reboot required


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.11.1-7.11.2
changelog:
  - Security update
  - Related to XSAs 343, 345, 346 and 347
  - Patches manually applied and adapated from http://xenbits.xen.org/xsa/
  - Enforce --fuzz=0 for patch application
  - Fix xsa333.patch for clean application without fuzz and rename it to xsa333-modified.patch
  - Rename xsa343-4.11-3.patch to xsa343-4.11-3-modified.patch
  - Rename xsa336-4.11.patch to xsa336-4.11-modified.patch
  - Fix it for clean application without fuzz
  - Add explanations to the modified patches about their modification
  - Reboot required


author: Rob Hoes <rob.hoes@citrix.com> - 0.96.0-1
changelog:
  - CP-29962: Stop passing -vgt_monitor_config_file argument to QEMU
  - CA-309427: interpret the -serial option rather than looking for hvm_serial


author: Christian Lindig <christian.lindig@citrix.com> - 0.101.0-1
changelog:
  - Fix cross-pool migration for qemu-trad VMs
  - CA-313709: Introduce a Naples version in the VM state
  - CA-313709: Save xen-platform QEMU params in persistent VM state
  - CA-313709: Remember the original QEMU profile
  - CA-313709: Fix migrations from older versions for VMs without device_id


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.101.0-1.1
changelog:
  - Update for XCP-ng 8.0
  - Re-apply xenopsd-0.66.0-use-xcp-clipboardd.XCP-ng.patch for https://github.com/xcp-ng/xcp/issues/166
  - Drop patch xenopsd-0.66.0-use-xen-platform-rev-1-if-no-device-id-specified.backport.patch, now included in main source


