# changelog

author: Paul Howarth <paul@city-fan.org> - 1.5.0-5
changelog:
  - Make GeoIP.dat -> GeoIP-initial.dat symlink in %install, not %post,
    and don't %ghost it
  - Run geoipupdate silently in %post and cron job
  - Create empty database files for %ghost to work with old rpm versions
  - Don't try to use noarch subpackages on old rpm versions
  - Update %description to mention database updates
  - Drop outdated README.Fedora


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-7
changelog:
  - Don't download the database in %post (#1029807)
  - Don't download GeoLiteASNum as it's no longer provided.


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-10
changelog:
  - Added base IPv6 database to GeoIP package
  - Added GeoIP-data subpackage with all other databases (#1201857)


author: Kamil Dudka <dkdudka@redhat.com> - 2.2.51-13
changelog:
  - avoid failure of %check when building as root (#1085389)
  - setfacl.1: document the meaning of '-' in perms (#1337039)


author: Dean Nelson <dnelson@redhat.com> - 20130823-7
changelog:
  - Fix the dangling symlink issue for acpidump(1) and acpixtract(1) man pages
    that was reported in RHBZ 1074681.


author: Dean Nelson <dnelson@redhat.com> - 20130823-8
changelog:
  - Fix run-misc-tests.sh script to properly set the number of BITS to 64 when run
    on a ppc64le system as requested by RHBZ 1125471.


author: Dean Nelson <dnelson@redhat.com> - 20140926-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 967963.
  - Refresh existing patches and add new ones to enable a clean build.
  - Fix build failures that start before and finish after midnight.


author: Dean Nelson <dnelson@redhat.com> - 20150619-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 1211328.
  - Refresh existing patches and add/delete ones to enable a clean build.
  - Add missing return status checks after a few calls to AcpiDmDumpTable() and
    one to fopen().


author: Dean Nelson <dnelson@redhat.com> - 20150619-3
changelog:
  - Remove acpitests-unix-20160527 directory from the build because it was a
    mistake that it was present and it complicated the fixing of the file
    permissions done related to RHBZ 1211328's requested rebase.


author: Dean Nelson <dnelson@redhat.com> - 20160527-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 1278038.
  - Refresh existing patches and add/delete ones to enable a clean build.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20241121-1.1
changelog:
  - Packaging fix.
  - Remove overridden amd_fam17h and amd_fam19h files introduced in 20240503-1.1 build
    as we now get these directly from the "source" tarball.


author: Gael Duperrey <gduperrey@vates.fr> - 20250626-1.1
changelog:
  - Update to 20250626-1 as redistributed by XenServer
  - Updated CPUs:
      GN-B1 00a00f11: 2024-02-23, rev 0a0011d5 -> 2024-09-06, rev 0a0011d7
      GN-B2 00a00f12: 2024-02-26, rev 0a001238 -> 2024-09-06, rev 0a00123b
     CGL-B2 00a00f82: 2024-02-29, rev 0a00820c -> 2024-09-13, rev 0a00820d
      RS-B1 00a10f11: 2024-02-23, rev 0a101148 -> 2024-09-06, rev 0a10114c
      RS-B2 00a10f12: 2024-02-26, rev 0a101248 -> 2024-09-06, rev 0a10124c
     STP-B1 00a10f81: 2024-02-27, rev 0a108108 -> 2024-09-11, rev 0a108109
     VMR-B0 00a20f10: 2024-08-27, rev 0a20102d -> 2024-09-13, rev 0a20102e
     VMR-B2 00a20f12: 2024-02-29, rev 0a201210 -> 2024-09-13, rev 0a201211
     RMB-B1 00a40f41: 2024-02-29, rev 0a404107 -> 2024-09-13, rev 0a404108
     CZN-A0 00a50f00: 2024-02-29, rev 0a500011 -> 2024-09-13, rev 0a500012
     RPL-B2 00a60f12: 2024-02-27, rev 0a601209 -> 2024-09-11, rev 0a60120a
     PHX-A1 00a70f41: 2024-02-28, rev 0a704107 -> 2024-09-11, rev 0a704108
    HPT1-A2 00a70f52: 2024-02-28, rev 0a705206 -> 2024-09-11, rev 0a705208
    PHX2-A0 00a70f80: 2024-02-28, rev 0a708007 -> 2024-09-11, rev 0a708008
    HPT2-A0 00a70fc0: 2024-02-28, rev 0a70c005 -> 2024-09-11, rev 0a70c008
    RSDN-A2 00aa0f02: 2024-02-28, rev 0aa00215 -> 2024-09-06, rev 0aa00216


author: Thierry Escande <thierry.escande@vates.tech> - 20251203-1.1
changelog:
  - Update to the 2025-12-03 drop as redistributed by XenServer
    New CPUs:
       BRH-C1 00b00f21: 2025-10-17, rev 0b002161
       SHP-C1 00b00f81: 2025-10-20, rev 0b008121
      BRHD-B0 00b10f10: 2025-10-17, rev 0b101058
       STX-B0 00b20f40: 2025-10-19, rev 0b204037
       GNR-B0 00b40f40: 2025-10-20, rev 0b404035
       GNR-B1 00b40f41: 2025-10-20, rev 0b404108
       KRK-A0 00b60f00: 2025-10-19, rev 0b600037
      KRK2-A0 00b60f80: 2025-10-19, rev 0b608038
      STXH-A0 00b70f00: 2025-10-19, rev 0b700037
    Secondary blobs on existing CPUs:
        GN-B1 00a00f11: 2025-04-18, rev 0a0011de
        GN-B2 00a00f12: 2025-03-27, rev 0a001247
        RS-B1 00a10f11: 2025-06-09, rev 0a101158
        RS-B2 00a10f12: 2025-06-12, rev 0a101253
      RSDN-A2 00aa0f02: 2025-06-12, rev 0aa0021c


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-5
changelog:
  - fix issues reported by static analysis tools
    Resolves: rhbz#1027762
  - add man-pages for arptables-{save,restore}
    Resolves: rhbz#1025726


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-8
changelog:
  - Add missing long option --set-counters and update documentation
    Corrosponding short option -c was implemented, but undocumented.
    Resolves: rhbz#1050854


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16
changelog:
  - the correct solution is remove smp_flags, they don't work properly on ppc with
    the option mpower7
  - Related: rhbz#1048745


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-21
changelog:
  - correct the DST correction when using UTC time specification (#1328832)
  - clear non-job files from at dir and test for write error on fclose
    to fix bogus syslog messages


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-23
changelog:
  - fix the ownership of the spool directory (#1414228)
  - document the -n option of atd (#739870)
  - fix handling of the aborted jobs (due to possibly
    temporary conditions) and avoid flooding the syslog


author: Steve Grubb <sgrubb@redhat.com> 2.7.4-1
changelog:
  resolves: #1367703 - auvirt wasn't supporting date keywords
  resolves: #1396792 - augenrules includes files ending in regexp "rules"
  resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character


author: Steve Grubb <sgrubb@redhat.com> 2.7.5-1
changelog:
  resolves: #1437187 - audit rpm postinstall script points to non-existing file
  resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page & rules
  resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
  resolves: #1438997 - SECCOMP records have wrong syscall


author: Steve Grubb <sgrubb@redhat.com> 2.7.8-1
changelog:
  resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
  resolves: #1448526 - aureport shows the wrong auid "-1"
  resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
  resolves: #1482121 - python audit crash dereferencing auparse_state_t le field


author: Steve Grubb <sgrubb@redhat.com> 2.8.1-1
changelog:
  resolves: #982154 - Can't find the "avc" event with the auvirt command
  resolves: #1101605 - Ipv6 seems no working
  resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
  resolves: #1455598 - Default port is wrong in audisp-remote.conf
  resolves: #1476406 - Audit package rebase


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18-1
changelog:
  - Update to 5.18
  - Fix multilib conflicts (#831379)
  - Make some dependencies arch-specific
  - Remove obsolete macros


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-15
changelog:
  - enable hardened build (#1092506)
  - fix short option for --version, document -t option of avahi-autoipd (#948583)
  - fix crashes in D-Bus methods GetAlternativeHostName and GetAlternativeServiceName (#1003688)
  - fix bug when avahi-daemon ended up in a tight loop (#1081801)
  - remove prefix /home/lennart/tmp/avahi from references in man pages (#1120233)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-17
changelog:
  - fix crash due to use of deprecated Gtk3 API (#1263720)
  - don't add 0pointer.de and zeroconf.org to default browse list (#1340837)
  - fix not publishing entries if a probing interface is removed (#1222646)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-18
changelog:
  - create home directory for avahi-autoipd user (#1416287)
  - get rid of the dangling symlink to avahi-discover in debuginfo package (#1421229)


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.0-1
changelog:
  - Update to 2.0 (fixes #817902, #831835).
  - Don't try to python-bytecompile our non-python *.py (#813651).


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.1-1
changelog:
  - Update to 2.1 (fixes #860510, #906469, #912113, #919246, #928253).
  - Don't ship completions included in util-linux 2.23-rc2 for F-19+.


author: Roman Rakus <rrakus@redhat.com> - 2.1-4
changelog:
  - Added conditionals to not add completions for some commands; the packages
    has their own completions
    Resolves: #1007839


author: Nick Clifton <nickc@redhat.com> 2.27-21.base
changelog:
  - Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
    (#1513014)


author: Matt Domsch <mdomsch@fedoraproject.org> - 0.3.4-1
changelog:
  - drop unnecessary explicit version requirement on udev
  - bugfix: start indices at 1 not 0, to match Dell and HP server port designations
  - bugfix: don't assign names to unknown devices
  - bugfix: don't assign duplicate names


author: Matt Domsch <Matt_Domsch@dell.com> - 0.3.5-1
changelog:
  - install dump_pirq into /usr/sbin
  - fix udev rule, skip running if NAME is already set
  - move udev rule to /lib/udev/rules.d by default


author: Matt Domsch <Matt_Domsch@dell.com> - 0.3.7-1
changelog:
  - drop dump_pirq, suggest use biosdecode instead
  - don't use '#' in names, use 'p' instead, by popular demand
  - properly look for SMBIOS, then $PIR, then recurse
  - Add kernel command line parameter "biosdevname={0|1}" to turn off/on biosdevname
  - Fix segfault when BIOS advertises zero sized PIRQ Routing Table
  - Add 'bonding' and 'openvswitch' to the virtual devices list
  - fail PIRQ lookups if device domain is not 0
  - Don't suggest names if running in a virtual machine (Xen, KVM,
    VMware tested, but should work on others)
  - Typo fixes


author: Andrew Cooper <Andrew.Cooper3@citrix.com> - 0.3.7-1@XS_RELEASE@
changelog:
  - Apply XenServer specific patches
  - Remove udev rules
  - Prevent bailing in a virtualized environment


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.55.5-2.3
changelog:
  - Fix a bad integer conversion that interrupts valid coalesce calls on large VDIs
  - Add 0002-CP-308382-fix-sign-conversion-in-coalesce.patch
  - Add 0003-Fix-coalesced-size-conversion-in-vhd-util-coalesce.patch


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 3.55.5-6.1
changelog:
  - Sync with 3.55.5-6
  - Revert openssl 3 dependency from XS specfile (no change compared to previous XCP-ng release)
  - Drop patch 0002-CP-308382-fix-sign-conversion-in-coalesce.patch, upstream now
  - Drop patch 0003-Fix-coalesced-size-conversion-in-vhd-util-coalesce.patch, upstream now
  - *** Upstream changelog ***
    * Thu Jul 31 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-6
    - Fix coalesced size conversion in vhd-util-coalesce (CP-308382)
    * Mon Jun 23 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-5
    - Backport fix for CA-408175
    - CP-308382: fix sign conversion in coalesce
    * Mon Apr 07 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-4
    - CP-54256: log when reporting EOPNOTSUPP
    * Fri Feb 21 2025 Deli Zhang <deli.zhang@cloud.com> - 3.55.5-3
    - CP-50273: Move CCM dependency to OpenSSL 3


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 3.55.5-9.1
changelog:
  - Sync with 3.55.5-9
  - Drop patch 0002-Prevent-segfault-of-vhd-util-scan-on-VHD-with-corrup.patch, upstream now
  - *** Upstream changelog ***
    * Thu Apr 09 2026 Mark Syms <mark.syms@citrix.com> - 3.55.5-9
    - Remove old, obsolete, udev rule override.
    * Wed Jan 28 2026 Mark Syms <mark.syms@citrix.com> - 3.55.5-8
    - Prevent segfault of vhd-util scan on VHD with corrupt footer
    * Thu Aug 28 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-7
    - CA-416464: return BLKIF_RSP_EOPNOTSUPP for EOPNOTSUPP


author: Petr Machata <pmachata@redhat.com> - 1.53.0-18
changelog:
  - Turn off build flags pre-set by Boost distribution.
    (boost-1.53.0-buildflags.patch)
  - Pass RPM_OPT_FLAGS through user-config.jam.


author: Petr Machata <pmachata@redhat.com> - 1.53.0-21
changelog:
  - Fix atomic_cas32 (thanks Jaroslav Škarvada for figuring out where
    the problem is) (boost-1.54.0-interprocess-atomic_cas32-ppc.patch)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - do not use arch-specific BuildRequires (#1268268)
  - support TLS libraries without SSLv3 (#1298227)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - Install unpatched gcc.jam (#1305019).
  - Build libboost_python and libboost_python3 such that they depend on
    their respective libpython (#1302120).
    (boost-1.53.0-python-libpython_dep.patch,
    boost-1.53.0-python-abi_letters.patch)
  - Fix Boost.Python test suite so that PyImport_AppendInittab is called
    before PyInitialize, which broke the test suite with Python 3.
    (boost-1.53.0-python-test-PyImport_AppendInittab.patch)
  - Patch gcc.jam to not add bogus rpaths.


author: Petr Sabata <contyk@redhat.com> - 1.5-1
changelog:
  - 1.5 bump
  - BuildRoot and defattr cleanup
  - Use macros in Sources
  - Drop show-ports and foreach patches -- those have been included upstream


author: Petr Sabata <contyk@redhat.com> - 1.5-2
changelog:
  - Add three latest bugfixes from upstream git on top of 1.5
  - Dropping params patch (included upstream variant)


author: Kai Engert <kaie@redhat.com> - 2017.2.16-71
changelog:
  - Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
    Mozilla removed code signing trust from all CAs (rhbz#1472933)


author: Bob Relyea <rrelyea@redhat.com> - 2019.2.32-76
changelog:
  - Update to CKBI 2.32 from NSS 3.44
  -   Removing:
  -   # Certificate "Visa eCommerce Root"
  -   # Certificate "AC Raiz Certicamara S.A."
  -   # Certificate "TC TrustCenter Class 3 CA II"
  -   # Certificate "ComSign CA"
  -   # Certificate "S-TRUST Universal Root CA"
  -   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
  -   # Certificate "Certplus Root CA G1"
  -   # Certificate "Certplus Root CA G2"
  -   # Certificate "OpenTrust Root CA G1"
  -   # Certificate "OpenTrust Root CA G2"
  -   # Certificate "OpenTrust Root CA G3"
  -  Adding:
  -   # Certificate "GlobalSign Root CA - R6"
  -   # Certificate "OISTE WISeKey Global Root GC CA"
  -   # Certificate "GTS Root R1"
  -   # Certificate "GTS Root R2"
  -   # Certificate "GTS Root R3"
  -   # Certificate "GTS Root R4"
  -   # Certificate "UCA Global G2 Root"
  -   # Certificate "UCA Extended Validation Root"
  -   # Certificate "Certigna Root CA"
  -   # Certificate "emSign Root CA - G1"
  -   # Certificate "emSign ECC Root CA - G3"
  -   # Certificate "emSign Root CA - C1"
  -   # Certificate "emSign ECC Root CA - C3"
  -   # Certificate "Hongkong Post Root CA 3"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-79
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "UTN USERFirst Email Root CA"
  -     # Certificate "Certplus Class 2 Primary CA"
  -     # Certificate "Deutsche Telekom Root CA 2"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "Certinomis - Root CA"
  -    Adding:
  -     # Certificate "Entrust Root Certification Authority - G4"
  - fix permissions on ghosted files.


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71
changelog:
  - Update to CKBI 2.48 from NSS 3.66
  -    Removing:
  -     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root CA"
  -     # Certificate "Sonera Class 2 Root CA"
  -     # Certificate "Taiwan GRCA"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Trustis FPS Root CA"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
  -    Adding:
  -     # Certificate "Microsoft ECC Root Certificate Authority 2017"
  -     # Certificate "Microsoft RSA Root Certificate Authority 2017"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "certSIGN Root CA G2"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "NAVER Global Root Certification Authority"
  -     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
  -     # Certificate "GlobalSign Secure Mail Root R45"
  -     # Certificate "GlobalSign Secure Mail Root E45"
  -     # Certificate "GlobalSign Root R46"
  -     # Certificate "GlobalSign Root E46"
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "ANF Secure Server Root CA"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"


author: Ray Strode <rstrode@redhat.com> 69.1.6-1
changelog:
  - Update syslinux background to black
    Resolves: #1003873
  - Prune unused images from anaconda/ after talking to #anaconda


author: Jim Perrin <jperrin@centos.org> - 70.0.5-1
changelog:
  - Properly import all backgrounds images
  - update poweredby.png
  - Add CREDITS for artwork attribution as possible. 
  - Update anaconda rnotes images from Tuomas, inspired by Alain


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.62-1
changelog:
  - use systemctl preset, not systemctl enable
  - fix typo in manpage
  - partly support socket activated services


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.4-1
changelog:
  - ntsysv: show systemd services and sockets
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files
  - alternatives: remove unused variable
  - alternatives: warn if the target is not a symlink
  - spec: add link to git
  - lets simplify version


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.5-1
changelog:
  - add systemd-sysv-install alias
  - don't create symlinks if they already exist
  - fix wrongly behaving LDFLAGS


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.6-1
changelog:
  - systemd-sysv-install: don't play ping-pong with systemctl
  - ntsysv: add description to systemd services
  - ntsysv: skip templates
  - Makefile: fix typo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.7.2-1
changelog:
  - alternatives: introduce --keep-missing
  - alternatives: allow family in --set and display it in --config


author: Miroslav Lichvar <mlichvar@redhat.com> 1.29.1-1
changelog:
  - update to 1.29.1 (#1053022, CVE-2014-0021)
  - fix selecting of sources with prefer option (#1061048)
  - fix potential bug in writing of drift files (#1061106)
  - replace hardening build flags with _hardened_build (#1061036)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.1-1
changelog:
  - update to 2.1 (#1117882 #1169353 #1206504 #1209568 CVE-2015-1821
    CVE-2015-1822 CVE-2015-1853)
  - extend chrony-helper to allow using servers from DNS SRV records (#1211600)
  - add servers from DHCP with iburst option by default (#1219492)
  - execute test suite


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-1
changelog:
  - update to 3.1 (#1387223 #1274250 #1350669 #1406445)
  - don't start chronyd without capability to set system clock (#1306046)
  - fix chrony-helper to escape names of systemd units (#1418968)
  - package chronyd sysconfig file (#1396840)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.2-1
changelog:
  - update to 3.2 (#1482565 #1462081 #1454765)
  - use ID from /etc/os-release to set pool.ntp.org vendor zone


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Yann Dirson <yann.dirson@vates.tech> - 7.1-2.1
changelog:
  - Build for XCP-ng 8.3
  - Removed "Recommends: cifs-utils-info" as not supported by el7 rpm
  - Changed BuildRequires to pull python36-docutils
  - Add build fix for older toolchain: 0001-Fix-build-with-pre-c99-compilers.patch


author: Jakub Jelinek <jakub@redhat.com> 3.2.3-70
changelog:
  - filter out -fstack-protector-strong, -grecord-gcc-switches and new
    i686, ppc and s390 tunings (#1048850)


author: Edwin Török <edvin.torok@citrix.com> - v1.1.0-1
changelog:
  - Add sbd and xapi-clusterd to control-slice
  - Add qemuback to service whitelist
  - CP-24885: Add infrastructure to let services depend ability to set RT priority
  - CP-24885: Enable sbd to assume RT priority


author: Edwin Török <edvin.torok@citrix.com> - 1.3.0-1
changelog:
  - CP-38750: fix typo in xapi-storage-script.service
  - CP-38750: whitelist more control-plane services


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-20
changelog:
  - fix another bogus date in changelog
  - update config.guess/config.sub for aarm64 build (#925189)
  - run autoreconf instead of autoheader


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-3
changelog:
  - fix the python module to work with compressed dictionaries (#972542)
  - fix various dictionary lookup errors (#986400, #986401)
  - make the library reentrant and fix compilation warnings


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-5
changelog:
  - make the simplistic check and the purging of special characters much
    less aggressive (#1003624, #985378)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-14
changelog:
  - mark the 0hourly and dailyjobs crontabs as config
  - properly handle users for whose getpwnam() returns NULL temporarily
  - log when crond is shutting down


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16
changelog:
  - disable mail from anacron with empty MAILTO
  - crontab: do not block access with PAM when running as root
  - improve the crontab man page
  - do not hardcode system_u selinux user but use the user from
    the current context


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-17
changelog:
  - make anacron not to contradict itself in syslog
    (job output does not have to be necessarily mailed)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18
changelog:
  - fix regression - spurious PAM log message from crontab (#1479064)
  - allow empty variables in crontabs (#1439217)


author: Ondrej Kozina <okozina@redhat.com> - 1.6.7-1
changelog:
  - Update to cryptsetup 1.6.7.
  - patch: avoid use of kernel crypto API socket which is known
    to be broken in RHEL7.0 kernel (7.1+ is fine).
  - Resolves: #1206170


author: Ondrej Kozina <okozina@redhat.com> - 1.7.4-4
changelog:
  - patch: fix regression in blockwise functions
  - patch: avoid repeating error messages when device holders
    detected.
  - patch: add option to cryptsetup-reencrypt to print progress
    log sequentaly
  - patch: use --progress-frequency in reencryption dracut module
  - Resolves: #1480006 #1447632 #1479857


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-30
changelog:
  - 1386751 - cups-lpd program did not catch all legacy usage of ISO-8859-1
  - 1441860 - CUPS may fail to start if NIS groups are used


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-32
changelog:
  - 1468747 - CUPS failover backend allows multiple jobs to get stuck in failed queue
  - 1469816 - Failover backend won't fail-over if the printer is disconnected


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-33
changelog:
  - 1466497 - Remove weak SSL/TLS ciphers from CUPS
  - 1434153 - CUPS print jobs show incorrect number under the "pages" column


author: Thierry Escande <thierry.escande@vates.tech> - 8.9.1-5.1
changelog:
  - Restore changes from original fc40 specfile
  - Add %bcond xcpng for specific XCP-ng build directives
  - Add %bcond build_minimal to disable libcurl-minimal package build
  - Update to curl v8.9.1 from el10 srpm
  - Port NSS cipher compat list patch and tests from XS8
  - Backport patch for CVE 2024-8096
  - *** Upstream changelog ***
    * Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 8.9.1-5
    - Bump release for October 2024 mass rebuild:
      Resolves: RHEL-64018
    * Mon Aug 19 2024 Jacek Migacz <jmigacz@redhat.com> - 8.9.1-4
    - correct indentation in test plan
    * Fri Aug 02 2024 Jacek Migacz <jmigacz@redhat.com> - 8.9.1-3
    - fix libcurl and libcurl-minimal conflict in test plan (RHEL-52103)
    * Fri Aug 02 2024 Jacek Migacz <jmigacz@redhat.com> - 8.9.1-2
    - add gating configuration (RHEL-52103)
    - sigpipe: init the struct so that first apply ignores (RHEL-53327)
    * Wed Jul 31 2024 Jacek Migacz <jmigacz@redhat.com> - 8.9.1-1
    - new upstream release (RHEL-50806)
    * Tue Jul 9 2024 Jacek Migacz <jmigacz@redhat.com> - 8.6.0-8
    - disable OpenSSL Engine API support (RHEL-30436)
    - setopt: Fix disabling all protocols (CVE-2024-2004)
    - http2: push headers better cleanup (CVE-2024-2398)
    * Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 8.6.0-7
    - Bump release for June 2024 mass rebuild
    * Mon Feb 12 2024 Jan Macku <jamacku@redhat.com> - 8.6.0-6
    - revert "receive max buffer" + add test case
    - temporarily disable test 0313
    - remove suggests of libcurl-minimal in curl-full
    * Mon Feb 12 2024 Jan Macku <jamacku@redhat.com> - 8.6.0-5
    - add Provides to curl-minimal
    * Wed Feb 07 2024 Jan Macku <jamacku@redhat.com> - 8.6.0-4
    - drop curl-minimal subpackage in favor of curl-full (#2262096)
    * Mon Feb 05 2024 Jan Macku <jamacku@redhat.com> - 8.6.0-3
    - ignore response body to HEAD requests


author: Jakub Jelen <jjelen@redhat.com> 2.1.26-18
changelog:
  - Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
  - Add and document ability to run saslauth as non-root user (#1188065)
  - Support AIX SASL GSSAPI (#1174322)
  - Update client library to be thread safe (#1147659)
  - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
  - Don't use unnecessary quotes around user description (#1082564)
  - Fix confusing message when config file has typo (#1022479)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-15.1
changelog:
  - Cut the corosynclib-devel build dependency by disabling the cluster subpackage
  - Cut the dlm-devel build dependency by disabling the lockd subpackage


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-15.2
changelog:
  - Drop the obsolete lvm2-sm-config subpackage
  - It was unused, and it didn't require the right Release


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-16.1
changelog:
  - Rebase on 7:2.02.180-16
  - *** Upstream changelog ***
    * Fri Mar 22 2024 Mark Syms <mark.syms@citrix.com> - 7:2.02.180-16
    - CA-368585 Drop sm-config sub-package
    - CA-380627 Suppress errors when attempting to start services
    - CA-384527 add lvm filter to skip nbd device scan


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-18.1
changelog:
  - Rebase on 7:2.02.180-18
  - *** Upstream changelog ***
    * Thu Jul 11 2024 Lin Liu <Lin.Liu01@cloud.com> - 7:2.02.180-18
    - CP-46075: Disable cluster and cmirror as not used and introduce extra deps
    * Thu Jul 11 2024 Lin Liu <Lin.Liu01@cloud.com> - 7:2.02.180-17
    - CP-46075: Compatible with XS9


author: Mathieu Labourier <mathieu.labourier@vates.tech> - 7:2.02.180-18.2.1
changelog:
  - Rebase on 7:2.02.180-18.2
  - *** Upstream changelog ***
    * Thu May  1 2025 Mark Syms <mark.syms@cloud.com> - 7:2.02.180-18.2
    - Rebuild
    * Wed Apr 30 2025 Mark Syms <mark.syms@cloud.com> - 7:2.02.180-18.1
    - Update scan search root and add device filters


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 7:2.02.180-18.3.1
changelog:
  - Rebase on 7:2.02.180-18.3
  - *** Upstream changelog ***
    * Wed Dec 03 2025 Mark Syms <mark.syms@citrix.com> - 7:2.02.180-18.3
    - CP-31079: update default configuration


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-112
changelog:
  - Modify 0191-RHBZ-1169168-disable-changed-paths.patch
    * man page fixup
  - Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
    * man page fixup
  - Modify 0205-RHBZ-1416569-reset-stats.patch
    * man page fixup
  - Add 0218-RHBZ-1459370-add-feature-fix.patch
    * handle null feature string
  - Add 0219-RHBZ-1448970-fix-resize.patch
    * if the resize fails, try to resume again with the old table.
  - Add 0220-RHBZ-1448223-fix-kpartx.patch
    * gracefully fail when run on something other than a file or block device
  - Add 0221-RH-harden-files.patch
    * change build parameters to use position independent code
  - Add 0222-RHBZ-1457288-fix-show-maps-json.patch
    * handle running "show maps json" with no multipath devices present
  - Add 0223-RHBZ-1452210-unpriv-sgio.patch
    * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
      and paths
  - Add 0224-RHBZ-1452210-prkey.patch
    * allow setting reservation_key to "file" to set and read keys from
      prkey_file. Also add new multipathd commands to modify the prkey file.
  - Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-113
changelog:
  - Modify 0224-RHBZ-1452210-prkey.patch
    * fix errow with telling multipathd to set prkeys
  - Add 0225-RH-udevdir.patch
    * fix rpmdiff complaint about udev rules installation
  - Resolves: bz #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-114
changelog:
  - Add 0226-RH-allow-overrides-section.patch
    * This is a dummy section that exists to help the transition to RHEL8
  - Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
  - Add 0228-RHBZ-1464634-hauwei-config-update.patch
  - Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
    * Do poll first, so udev_monitor_receive_device doesn't return error when
      there is no uevent
  - Add 0230-UP-allow-invalid-creates.patch
    * Allow creation of devices with no valid paths.
  - Add 0231-RHBZ-1458852-delay-readying.patch
    * Add ghost_delay configuration option to delay device activation when only
      ghost paths exist.
  - Add 0232-RHBZ-1456955-property-blacklist.patch
    * Add the "property" blacklist type.
  - Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-115
changelog:
  - Add 0233-RHBZ-1451852-1482629-nimble-config.patch
  - Add 0234-RHBZ-1500109-doc-typo.patch
  - Remove old triggerun scriptlet (bz1470384)
  - Resolves: bz #1451852, #1470384, #1482629, #1500109


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-116
changelog:
  - Add 0235-RHBZ-1480638-NVMe-support.patch
    * adds support for multipathing NVMe devices
  - Resolves: bz #1480638


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-117
changelog:
  - Modify 0235-RHBZ-1480638-NVMe-support.patch
    * remove overly-restrictive uevent filtering
  - Resolves: bz #1480638


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-118
changelog:
  - Modify 0224-RHBZ-1452210-prkey.patch
    * Improve error checking for mpathpersist
  - Resolves: bz #1452210


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-2
changelog:
  - Improve documentation and messages on output file preallocation
    when using thin_repair and thin_restore.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc3
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - New thin_show_duplicates command.
  - Add '--skip-mappings' and '--format custom' options to thin_dump.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc6
changelog:
  - Don't open devices as writeable if --clear-needs-check-flag is not set.
  - Fix cache metadata format version 2 superblock packing.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.2-1
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - Fix segfault when dump tools are given a tiny metadata file.
  - Fix -V exiting with 1.
  - Fix thin_check when running on XML dump instead of binary data.
  - Speed up free block searches.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.3-1
changelog:
  - Update to latest bugfix and documentation update release.
  - *_restore tools wipe superblock as a last resort.
  - Add thin_check --override-mapping-root.


author: Lukas Nykryn <lnykryn@redhat.com> - 033-534
changelog:
  - base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
  - base/dracut-lib.sh: remove bashism
  - Align dev_unit_name() with systemd's function.
  - dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
  Resolves: #1306640
  - 90dmsquash-live-ntfs: fix depends()
  - 90dmsquash-live: we don't have find_binary inside initramdisk
  - dracut: Ajusting variables name for --include
  Resolves: #1489882


author: Josh Stone <jistone@redhat.com> 8.1.1-1
changelog:
  - Update to release 8.1.1.
  - Drop the backported dyninst-test2_4-kill-init.patch.
  - Drop the now-upstreamed dyninst-unused_vars.patch.
  - Update other patches for context.
  - Patch the installed symlinks to be relative, not $(DEST) filled.


author: Josh Stone <jistone@redhat.com> 8.1.2-6
changelog:
  - rhbz1063447: squash testsuite g++ optimization
  - rhbz1030969: backported additional patch to silence new warnings


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.47.0-1.1
changelog:
  - Replace %ldconfig_scriptlets with what it would evaluate to
  - This macro would require epel-rpm-macros, which is not available in XCP-ng 8.2


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-9
changelog:
  - fixed missing systemd unit file (RHBZ#818953)
    merged fedora patches from Tom Callaway
  - fixed NETWORK test in the init script (RHBZ#1026784)
  - fixed needed rpmdiff failures (RHBZ#883988)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-14
changelog:
  - Fixed persmissions of ebtables.service (RHBZ#1288586)
  - Added upstream patch to add noflush option to ebtables-restore (RHBZ#1334271)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220801-1.7.4.1
changelog:
  - Sync with 20220801-1.7.4
  - *** Upstream changelog ***
  - * Fri Feb 02 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.4
  - - CA-388017: Fix most PixieFail vulnerabilities
  - - Fix CVE-2023-45229 - Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message
  - - Fix CVE-2023-45230 - Buffer overflow in the DHCPv6 client via a long Server ID option
  - - Fix CVE-2023-45231 - Out of Bounds read when handling a ND Redirect message with truncated options
  - - Fix CVE-2023-45232 - Infinite loop when parsing unknown options in the Destination Options header
  - - Fix CVE-2023-45233 - Infinite loop when parsing a PadN option in the Destination Options header
  - - Fix CVE-2023-45234 - Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message
  - - Fix CVE-2023-45235 - Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220801-1.7.5.1
changelog:
  - Sync with 20220801-1.7.5
  - *** Upstream changelog ***
  - * Wed Mar 20 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.5
  - - CA-390410: Disable some unneeded modules
  - - CA-390410: Downgrade some errors to warnings


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220801-1.7.7.1
changelog:
  - Sync with 20220801-1.7.7
  - *** Upstream changelog ***
  - * Thu Jun 06 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.7
  - - CA-388489: Fix CVE-2023-45236, CVE-2023-45237, and additional fix for CVE-2023-45229
  - * Tue May 14 2024 Deli Zhang <deli.zhang@cloud.com> - 20220801-1.7.6
  - - CP-46076: Support xs9 build


author: anthony.perard@vates.tech - 20220801-1.7.10.1
changelog:
  - Sync with edk2-20220801-1.7.10
  - *** Upstream changelog ***
  - * Wed Jun 11 2025 Fei Su <fei.su@cloud.com> - 20220801-1.7.10
  - - CA-410587 [XSI-1806] Fix 802.1Q Header Handling in OVS on XS8
  - * Fri Mar 07 2025 Deli Zhang <deli.zhang@cloud.com> - 20220801-1.7.9
  - - CP-53516: Add perl modules require for XS9 build
  - * Thu Oct 31 2024 Deli Zhang <deli.zhang@cloud.com> - 20220801-1.7.8
  - - CP-50542: Upgrade OpenSSL to 3.0.9
  - - CP-52657: Fix CVE-2024-6119


author: Thierry Escande <thierry.escande@vates.tech> - 20220801-1.7.11.1
changelog:
  - Sync with edk2-20220801-1.7.11
  - *** Upstream changelog ***
    * Mon Mar 09 2026 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.11
    - CA-424506: Fix boot from physical CD/DVD drive


author: Peter Jones <pjones@redhat.com> - 0.8.0-4
changelog:
  - Fix buffer overflow when remove_from_boot_order removes nothing (lennysz)
    Resolves: rhbz#1168019


author: Peter Jones <pjones@redhat.com> - 0.8.0-6
changelog:
  - Handle -b and -o parsing in a way that matches the documentation.
    Resolves: rhbz#1174964
  - Use the right GUID when setting boot entries active/inactive
    Resolves: rhbz#1221771


author: Peter Jones <pjones@redhat.com> - 0.10-1
changelog:
  - Update package to 0.10.
  - Fixes a build error due to different cflags in the builders vs updstream
    makefile.


author: Mark Wielaard <mjw@redhat.com> - 0.170-1
changelog:
  - New upstream release. Remove upstreamed patches.
  - Sync provide_yama_scope with fedora.
  - Add elfutils-0.170-x86_64-backtrace-test-override.patch.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.49-10
changelog:
  - Use vsnprintf instead of vsprintf to avoid buffer overflow
    (it happens e.g. when running systemtap testsuite)
    Resolves: #1038931


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-13
changelog:
  - Fix segfaults if Tcl is built with stubs and Expect is used directly from C program
    (patch taken from Debian project, written by Sergei Golovan)
    Resolves: #1091060


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-14
changelog:
  - Use different and probably better approach of fixing segfaults if Tcl is
    built with stubs and Expect is used directly from C program
    Resolves: #1091060


author: Chris Leech <cleech@redhat.com> - 1.0.30-4.git91c0c8c
changelog:
  - 1039779 replace README that contained mostly build instructions with
    README.redhat containing better distro-specific information


author: Chris Leech <cleech@redhat.com> - 1.0.31-1.git5dfd3e4
changelog:
  - 1274530 rebase to upstream 1.0.31+
  - no longer requires libhbaapi/libhbalinux
  - no longer attempts to connect to lldpad if DC_REQUIRED is configured off
    for all interfaces


author: Chris Leech <cleech@redhat.com> - 1.0.32-1
changelog:
  - 1384707 fcoeadm --target segfaults if non-FCoE FC targets are present
  - 1321611 fcoemon should only try to connect to lldpad when required


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-27
changelog:
  - fix CVE-2014-0207 - cdf_read_short_sector insufficient boundary check
  - fix CVE-2014-0237 - cdf_unpack_summary_info() excessive looping DoS
  - fix CVE-2014-0238 - CDF property info parsing nelements infinite loop
  - fix CVE-2014-3478 - mconvert incorrect handling of truncated pascal string
  - fix CVE-2014-3479 - fix extensive backtracking in regular expression
  - fix CVE-2014-3480 - cdf_count_chain insufficient boundary check
  - fix CVE-2014-3487 - cdf_read_property_info insufficient boundary check
  - fix CVE-2014-3538 - unrestricted regular expression matching
  - fix CVE-2014-3587 - fix cdf_read_property_info
  - fix CVE-2014-3710 - out-of-bounds read in elf note headers
  - fix CVE-2014-8116 - multiple denial of service issues (resource consumption)
  - fix CVE-2014-8117 - denial of service issue (resource consumption)
  - fix CVE-2014-9652 - out of bounds read in mconvert()
  - fix CVE-2014-9653 - malformed elf file causes access to uninitialized memory


author: Jan Kaluza <jkaluza@redhat.com> 5.11-32
changelog:
  - fix #1278737 - add support for Java 1.7 and 1.8
  - fix #1281723 - show full executable name for core
  - fix #1271636 - add support for detection of Python 2.7 byte-compiled files
  - fix #1278768 - comment out too-sensitive Pascal magic


author: Ondrej Vasik <ovasik@redhat.com> - 3.2-25
changelog:
  - own /usr/share/locale and /usr/lib/modules
  - improve filesystem content file to include symlinks and rootdir


author: Kamil Dudka <kdudka@redhat.com> - 1:4.5.10-7
changelog:
  - fix specfile issues reported by the fedora-review script
  - do not use the AM_C_PROTOTYPES macro (removed in Automake 1.12)
  - do not require gets() to be declared


author: Akira TAGOH <tagoh@redhat.com> - 2.10.95-5
changelog:
  - Fix the race condition issue on updating cache (#1011510)
  - Fix crash issue in FcFontSort()
  - Fix an issue not copying all values from the font.


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 26.1.3-1.10
changelog:
  - Fix for expiring sessions breaking long migrations
  - More fixes for XSA-489 (CVE-2026-23562, CVE-2026-42486)


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 26.1.4-3.1
changelog:
  - Update to upstream 26.1.4-3
  - *** Upstream changelog ***
    * Wed Apr 29 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.4-3
    - Final security patch from xapi-89

    * Fri Apr 24 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.4-2
    - Security patches from xapi-89

    * Fri Mar 06 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.4-1
    - XSI-2155: keep track of outstanding domain builds in NUMA placement
    - CA-424055: NUMA: avoid using up the entire memory on node0


author: Pau Ruiz Safont <pau.safont@vates.tech> - 26.1.4-3.3
changelog:
  - Foundational changes for having a more efficient and safer VM revert
  - Add dmidecode to xapi-core Requires


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 26.1.11-1.1
changelog:
  - Fix shutdown VMs not being migratable due to errors generated when the VM was running
  - Allow moving VMs back to DHCP from static IP with configure_ipv4/6
  - Update to upstream 26.1.11-1
  - *** Upstream changelog ***
    * Wed Apr 29 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.11-1
    - Remove handling of VBD.other_config:backend-local
    - Do not recognise VM.other_config:is_system_domain
    - Do not recognise {VM;PBD}.other_config:storage_driver_domain
    - CA-426596: Supports SM feature removing
    - Add removed features in debug log
    - xapi_vm: Implement RBAC checking for keys in set_other_config
    - xapi_vm: Implement per-key RBAC checking for VM.platform

    * Tue Apr 21 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.10-1
    - Revert "CA-423816 avoid double counting VM overhead memory"

    * Wed Apr 15 2026 Changlei Li <changlei.li@citrix.com> - 26.1.9-1
    - Revert "log/debug: use Ptime's rfc3339 formatting when logging to stdout"

    * Tue Apr 14 2026 Changlei Li <changlei.li@citrix.com> - 26.1.8-1
    - CP-48452: Session.UserAgent is now an instance property and has a default value.
    - CP-311919: Bumped version of Java SDK dependency. Also bumped Java version to 17 (LTS)
    - CP-311541: Expose the PS cmdlets so that they can be called without importing the module.
    - CA-423202: Xapi can incorrectly expect livepatches for EOL base versions
    - quicktests: Force VDI format on creation
    - Use the latest version of System.Management.Automation (7.4.14).
    - CA-423816 avoid double counting VM overhead memory

    * Tue Mar 31 2026 Changlei Li <changlei.li@cloud.com> - 26.1.7-1
    - CP-311612: skip VDI.other-config test on SMAPIv3+
    - CP-311613: do not attempt to export delta VHD from SMAPIv3
    - Don't deny smartcards in usb-policy.conf

    * Thu Mar 19 2026 Changlei Li <changlei.li@cloud.com> - 26.1.6-1
    - xapi-stdext: add try_map_collect to listext
    - xapi_ha: rework error path for attaching statefile VDIs
    - static_vdis: print both reference and uuid when attaching a VDI
    - xapi/helpers: log error message from launching scripts
    - log/debug: use Ptime's rfc3339 formatting when logging to stdout
    - debug: remove ad-hoc String.split_on_char
    - debug: reformat comment
    - xapi-cli-server: stop using SR records to filter ISO-backed PBDs on cross-pool migration
    - xapi-cli-server: stop using SR records for cross pool migrations
    - xapi-cli-server: print reason for failing to select preferred SR
    - CA-424916 don't exit thread/loop on events error
    - Revert "Rewrite update_vm_links"
    - Revert "Update VDI snapshot and parent links after import"
    - CA-423760: Retain host.last_update_hash on an ejected host
    - CA-423760: Reset host.latest_synced_updates_applied

    * Tue Mar 10 2026 Changlei Li <changlei.li@cloud.com> - 26.1.5-1
    - Add new stunnel configuration for VM import
    - stunnel: add doccoments to the configuration functions
    - Add comment documenting the 'world' stunnel config
    - CP-311125 unhide AD cache pool parameters in XE CLI
    - Log dangling references on import and export
    - github: create releases for tag on the 26.1-lcm branch
    - Update VDI snapshot and parent links after import
    - Rewrite update_vm_links
    - Refresh remote session during long migrations
    - CA-424021: Add GC rule for PCI records
    - Add GC rule for PUSB records
    - Add GC rule for Feature records
    - XSI-2155: keep track of outstanding domain builds in NUMA placement
    - CA-424055: NUMA: avoid using up the entire memory on node0
    - CA-423682: Dead lock on update repository mutex
    - [Backport] Don't block switching to a different edition when HA is enabled
    - CA-424473 Fix OpaqueRef:NULL in vm import
    - xe-reset-networking: allow the user to perform a network reset without renaming the interface


author: Marek Kasik <mkasik@redhat.com> - 2.4.11-11
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197740


author: Martin Bříza <mbriza@redhat.com> - 4.0.1-1
changelog:
  - Update to upstream 4.0.1 (#808005)
  - Corrected Source0 link to .tar.gz extension as not all releases are available as .tar.bz2
  - Resolves #724817 - gawk-4.0.0 regression in '\' escape handling in gsub()
  - Resolves #820550 - gawk: getline in BEGIN skips 2 lines


author: Honza Horak <hhorak@redhat.com> - 1.9.1-1
changelog:
  - Updated to new upstream release 1.9.1
  - Dropped -filestruct, -ndbmlock and -fhs patches, they are not 
    needed anymore and GDBM_NOLOCK is used always
  - Run testsuite


author: Honza Horak <hhorak@redhat.com> - 1.10-1
changelog:
  - Updated to new upstream release 1.10
  - Dropped -shortread patch, which has been already applied by upstream
  - Disable large file support, that is enabled by default since 1.9, 
    but not compatible with db files created using gdbm-1.8.3 and lower
  - License change to GPLv3+
  - Add doc files THANKS AUTHORS NOTE-WARNING
  - Changed text in NOTE-WARNING to correspond with build settings


author: Florian Weimer <fweimer@redhat.com> - 2.17-215
changelog:
  - CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504809)
  - CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504809)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-221
changelog:
  - CVE-2018-1000001: Fix realpath() buffer underflow (#1534635)
  - i386: Fix unwinding for 32-bit C++ application (#1529982)
  - Reduce thread and dynamic loader stack usage (#1527904)
  - x86-64: Use XSAVE/XSAVEC more often during lazy symbol binding (#1528418)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-13
changelog:
  - Explicitly added '-g' option into CFLAGS & CXXFLAGS to correctly build .debug_info for i386 (bug #1413034)
  - Added a workaround to correctly add hardening flags during build process (bug #1406689)


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.22-4
changelog:
  - allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
  - do not abort when missing hash algorithm in FIPS mode (#1078962)


author: Philippe Coval <philippe.coval@vates.tech> - 3.3.29-10.1
changelog:
  - Remove installed gnutls-dane if no more supported
  - Remove unnecessary removal of non built files
  - Make c++ lib optional (disabled by default)


author: Simon Lukasik <slukasik@redhat.com> - 1.3.0-6
changelog:
  - Resolve multilib conflict of gpgme-config (#341351)
  - Resolve multilib conflict of gpgme.h (#341351)


author: Tomas Mraz <tmraz@redhat.com> - 1.3.2-1
changelog:
  - new upstream version
  - re-enable gpg tests (original patch by John Morris <john@zultron.com>)
  - quiet configure warning 'could not find g13'
  - there is no libgpgme-pth anymore


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 24.1.0-2.1
changelog:
  - Sync with 24.1.0-2
  - *** Upstream changelog ***
  - * Thu Jun 06 2024 Ming Lu <ming.lu@cloud.com> - 24.1.0-2
  - - Bump release and rebuild
  - * Thu May 23 2024 Ming Lu <ming.lu@cloud.com> - 24.1.0-1
  - - CP-48969: log only first time that NVML can't be opened
  - - ci: update all actions


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.14-4
changelog:
  - Added group-separator, no-group-separator options decription
  - Aligned output of built-in help
  - Defuzzified gnulib-tests-rm-f patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-2
changelog:
  - Fixed invalid UTF-8 byte sequence error in PCRE mode
    (by pcre-backported-fixes patch)
    Resolves: rhbz#1217080
  - Fixed buffer overrun for grep -F
    Resolves: CVE-2015-1345
  - Fixed \w and \W behaviour in multibyte locales
    Resolves: rhbz#1159012
  - Documented --fixed-regexp option
    Resolves: rhbz#1103259
  - Updated pcre buildrequires to require pcre-devel >= 7.8-7
    Related: rhbz#1217080


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-3
changelog:
  - Speedup DFA for long patterns and fixed begline/endline matching
    Resolves: rhbz#1413029
  - Added support for GREP_LEGACY_EGREP_FGREP_PS environmental variable which
    controls how egrep, fgrep show in ps output
    Resolves: rhbz#1297441


author: Jan Vcelak <jvcelak@redhat.com> 1.22.1-1
changelog:
  - new upstream release (#890973)
    + various fixes in manual pages
    + various fixes and improvements in macros
    + new gropdf driver for generating PDF files
  - fix: backslash-period escape does not work (#682857)
  - fix: groff ftbfs - patch does not apply (#885225)


author: Philippe Coval <philippe.coval@vates.tech> - 2.06-4.0.5,1
changelog:
  - Rebase on 2.06-4.0.5
  - *** Upstream changelog ***
    * Fri Apr 17 2026 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.06-4.0.5
    - CA-424431: Fix a rare out-of-memory error

    * Thu May 30 2024 Deli Zhang <deli.zhang@cloud.com> - 2.06-4.0.4
    - CP-46111: Remove build require freetype-devel

    * Thu Apr 11 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 2.06-4.0.3
    - CP-47745: compatibilities for XS9, optimize back some code


author: Peter Jones <pjones@redhat.com> - 8.28-14
changelog:
  - Handle "set variable" commands separately from other parsing in grubby's
    GetNextLine()
    Resolves: rhbz#1152550


author: Peter Jones <pjones@redhat.com> - 8.28-17
changelog:
  - Fix the ordering of creating the debug entries, so they don't get picked
    when we're choosing kernel command line defaults on upgrades.
    Related: rhbz#1212128


author: rmarshall@redhat.com - 8.28-18
changelog:
  - Patched new-kernel-pkg so that kernel installations when MAKEDEBUG is
    set would put the debugging entries after the non-debugging entries.
    Resolves: #1285601
  - Re-numbered the last set of patches to go with the flow. No actual
    changes to the patches; just a git mv to rename.
  - Re-organized and updated the grubby man page contents to include some
    features that were not documented as well as correct typos and
    re-write some entries for better clarity.
    Resolves: #1232168


author: rmarshall@redhat.com - 8.28-21
changelog:
  - Resolve issues with the recent grubby logic patches that
    appeared on the ppc platform. Fix a problem that occurred
    on systems where no kernel update had ever been installed.
    Resolves: rhbz#1285601
  - Specify the actual prune_debug file in sources.
    Resolves: rhbz#1285601


author: rmarshall@redhat.com - 8.28-23
changelog:
  - Fixes --info flag on s390/s390x.
    Related: rhbz#1285601
  - Fixes --set-default-index on s390/s390x.
    Related: rhbz#1285601
  - Allows prune_debug to run on s390/s390x.
    Resolves: rhbz#1285601


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.3-1.1
changelog:
  - Update to 2.0.3-1
  - Remove our Debian 11 template, as upstream's one is not marked experimental anymore
  - *** Upstream changelog ***
  - * Fri Jul 14 2023 Alex Brett <alex.brett@cloud.com> - 2.0.3-1
  - - CP-43952: Remove 32-bit Windows 10
  - * Fri May 05 2023 Xihuan Yang <xihuan.yang@citrix.com> - 2.0.2-1
  - - CP-41630: Support up to 64 vCPUs for HVM guests
  - * Thu Feb 16 2023 Minghui Hu <minghui.hu@citrix.com> - 2.0.1-1
  - - CP-41650: Remove CoreOS templates from Next
  - * Tue Feb 14 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.0-2
  - - CP-42132: Install Windows 11 template by default


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.6-1.1
changelog:
  - Update to 2.0.6-1
  - Remove our Debian 12, RHEL 9, Rocky Linux 9, and Centos Stream 9 templates, now provided upstream
  - *** Upstream changelog ***
  - * Thu Oct 19 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.6-1
  - - CP-44378: Remove 'preview' From Ubuntu 22.04 Guest template
  - * Thu Sep 14 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.5-1
  - - CP-44127: Add New Guest templates Rocky Linux 9, CentOS Stream 9 and Debian 12
  - * Fri Sep 8 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.4-1
  - - CP-44042: Add Red Hat Enterprise Linux 9 (preview) template
  - * Wed Sep 6 2023 Lin Liu<Lin.Liu01@cloud.com> - 2.0.3-2
  - - BuildRequires python-setuptools to support xs9


author: Gael Duperrey <gduperrey@vates.tech> - 2.0.9-1.1
changelog:
  - Sync with 2.0.9-1
  - *** Upstream changelog ***
  - * Tue Feb 13 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.9-1
  - - CP-46356 Remove 'preview' from Windows 11 template


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.10-1.1
changelog:
  - Sync with 2.0.10-1
  - *** Upstream changelog ***
  - * Mon Mar 25 2024 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.10-1
  - - CP-47662 Remove deprecated guest templates SUSE Linux 12 SP4 and Ubuntu 18.04
  - - CP-48082 Update Guest Templates to support UEFI Secure boot


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.13-1.1
changelog:
  - Rebase on 2.0.13-1
  - *** Upstream changelog ***
    * Tue Nov 19 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 2.0.13-1
    - CP-50305: Remove '(preview') from Windows Server 2025 template
    * Thu Sep 19 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 2.0.12-1
    - CP-50304 Add Windows Server 2025 preview template
    * Tue Sep 03 2024 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.11-1
    - CP-47949 Add New Guest template Ubuntu 24.04
    - CP-47949 Remove 'preview' label from RHEL9, Rocky9, CentOS Stream 9 and Debian 12


author: Gael Duperrey <gduperrey@vates.tech> - 2.0.14-1.1
changelog:
  - Rebase on 2.0.14-1
  - Add templates for almalinux 10, rocky linux 10, debian 13, oracle linux 10, redhat 10
  - *** Upstream changelog ***
    * Tue Jan 21 2025 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.14-1
    - CP-51980: Add CentOS Stream 10 template
    - CP-51980: Remove 'preview' label from Ubuntu24.04


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 2.0.15-1.1
changelog:
  - Sync with 2.0.15-1
  - Replace rhel-10.json with XenServer's
  - *** Upstream changelog ***
    * Thu Nov 13 2025 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.15-1
    - CP-310014 Support New Guest Template RHEL 10
    - CA-414588 Add the deprecated label for the EOL templates

    * Tue Jan 21 2025 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.14-1
    - CP-51980: Add CentOS Stream 10 template
    - CP-51980: Remove 'preview' label from Ubuntu24.04


author: Petr Stodulka <pstodulk@redhat.com> - 1.5-8
changelog:
  - Gzip overwrite existing files when user choose "no" on yes/no question.
    It's due to wrong dupicit declaration of yesno() function in gzip.h
    which is compiled wrong with -O2 option.
    Resolves: rhbz#1201689


author: Jakub Martisko <jamartis@redhat.com> - 1.5-10
changelog:
  - doc change: missing grep options are now mentioned in the zgrep 
    man pages/help message
    Resolves: #1437002


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-11
changelog:
  - don't use mmap(2) to avoid failures on i386 with 1GB files and larger (#672917)
  - fix package URL (#676962)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-12
changelog:
  - fix possible buffer overflows, integer overflows (CVE-2011-3630 CVE-2011-3631 CVE-2011-3632)
  - update man page


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-14
changelog:
  - do not allow to hardlink files across filesystems by default (#786719)
    (use -f option to override)


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 2.2.0-1
changelog:
  - CA-329206: Get network settings from the correct PIF
  - CP-31507: Add more detailed error codes
  - Pylint cleanup


author: Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.1-1
changelog:
  - CA-392310: Handle LV mount point from URLs
  - Allow specifying fs type in args for upgrade
  - CP-51969: Add support for "platform" argument


author: Jiri Popelka <jpopelka@redhat.com> - 3.11-3
changelog:
  - remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
  - remove outdated de & pt man pages
  - /usr move: use _bindir macro


author: Mukundan Ragavan <nonamedotc@fedoraproject.org> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Spec cleanup
  - drop unused configure options
  - Install desktop file (fixes bz#1541785)


author: Michal Minar <miminar@redhat.com> 0.252-8.1
changelog:
  - Updated pci, usb and vendor ids.
  - Resolves: rhbz#1236458
  - Resolves: rhbz#1256004
  - Resolves: rhbz#1266217
  - Resolves: rhbz#1271797


author: Michal Minar <miminar@redhat.com> 0.252-8.2
changelog:
  - Updated pci, usb and vendor ids.
  - Resolves: rhbz#1292382
  - Resolves: rhbz#1291614
  - Resolves: rhbz#1324198


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.252-8.5
changelog:
  - Updated pci, usb and vendor ids
    Resolves: #1386133 #1424763
  - Removed module nx_crypto from blacklist on PowerPCs
    Resolves: #1264326


author: Robert Scheck <robert@fedoraproject.org> 1.0-0.6.pre2
changelog:
  - Added patch to fix a memory leak in resolver.c (#782275, #861582)
  - Run autoreconf to recognize aarch64 (#925579)
  - Added patch to fix needlessly caused assertion failure when using
    nss-myhostname (#839750, #847124, #868065, #961236, #1007434)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.1-5
changelog:
  - Fix upstream test failure in Pod-Simple-Texinfo
    Resolves: #970986
  - Fix @enumerate does not support start numbers greater than nine
    Resolves: #1134160


author: Yann Dirson <yann.dirson@vates.tech> - 9.49.41-2.1
changelog:
  - Reinstate creation of utmp group, and remove dependency on XS' fork
    of the setup RPM where it has been transfered for them.


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 2.22.20-6
changelog:
  - CA-386057: Enable legacy-rx by default to resolve performance issue
  - Note: 2.22.20-5 is for Yangtze


author: Quentin Casasnovas <quentin.casasnovas@vates.tech> - 2.4.5-8.1.1
changelog:
  - Sync with 2.4.5-8.1.1
  - *** Upstream changelog***
    * Fri Apr 10 2026 Stephen Cheng <stephen.cheng@citrix.com> - 2.4.5-8.1
    - CP-312064: Update to version 2.4.5
    * Mon Jul 28 2025 Stephen Cheng <stephen.cheng@cloud.com> - 1.17.2-1
    - CP-308119: (XS8) Update driver to v1.17.2


author: Stephen Cheng <stephen.cheng@cloud.com> - Version: 5.10.214-3
changelog:
  - CP-48894: Modify checksum
  - The checksum was wrongly grenerated in the previous commit due to xenpkg upgrade


author: Thierry Escande <thierry.escande@vates.tech> - 5.10.214-3.1
changelog:
  - Obsoletes igc-module RPM
  - Import XCP-ng specific patches from obsolete igc-module RPM
  - Add BuildRequires for gcc


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20240717-1
changelog:
  - Update to IPU 2024.3 release
  - As the archive from XS is missing an update for 06-a5-03 due to Intel
    initially forgetting to release its update, we manually package this file.


author: David Morel <david.morel@vates.tech> - 20250127-1
changelog:
  - Update to publicly released microcode-20250211
  - Security updates for:
      - INTEL-SA-01166
      - INTEL-SA-01213
      - INTEL-SA-01139
      - INTEL-SA-01228
  - Updates for multiple functional issues
  - Upstream update drops files for older Sapphire Rapids steppings, we kept the previous versions


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20250501-1
changelog:
  - Update to publicly released microcode-20250512
  - Security updates for:
      - INTEL-SA-01153
      - INTEL-SA-01244
      - INTEL-SA-01247
      - INTEL-SA-01322
  - Updates for multiple functional issues
  - Upstream doesn't provide updates for older Sapphire Rapids steppings, we kept the last known versions


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20250715-1
changelog:
  - Update to publicly released microcode-20250812
  - Security updates for:
      - INTEL-SA-01249
      - INTEL-SA-01308
      - INTEL-SA-01310
      - INTEL-SA-01311
      - INTEL-SA-01367
  - Updates for multiple functional issues
  - Upstream doesn't provide updates for older Sapphire Rapids steppings, we kept the last known versions


author: Gael Duperrey <gduperrey@vates.tech> - 20251029-1
changelog:
  - Update to Intel's publicly released microcode-20251111, based on XenServer's 20251029 release that has the same contents.
  - Updates for multiple functional issues
  - Upstream doesn't provide updates for older Sapphire Rapids steppings, we kept the last known versions


author: Gael Duperrey <gduperrey@vates.tech> - 20260115-1
changelog:
  - Update to Intel's publicly released microcode-20260210, based on XenServer's 20260115 release that has the same contents.
  - Security updates for:
   - Updated security updates for INTEL-SA-01083 originally published on Aug 13, 2024 INTEL-SA-01083
   - Security updates for INTEL-SA-01396
  - Updates for multiple functional issues


author: Philippe Coval <philippe.coval@vates.tech> - 20260416-1
changelog:
  - Update to Intel's publicly released microcode-20260512, based on XenServer's 20260416 release that has the same contents.
  - Security updates for INTEL-SA-01420
  - Update for multiple functional issues


author: Gael Duperrey <gduperrey@vates.tech> - 20260416-2
changelog:
  - Update to Intel's microcode, based on XenServer's 20260416-2 release.
   - Revert Granite Rapids AP/SP ucode back to IPU 2026.1 to fix a hang on boot on some platforms.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.6-1.1
changelog:
  - remove python3 fix that has been upstreamed
  - Sync with 2.0.6-1
  - *** Upstream changelog ***
    * Wed Jul 24 2024 Lin Liu <lin.liu@citrix.com> - 2.0.6-1
    - CA-395874: Some python3 fix


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-7
changelog:
  - Update IANA numbers
  - Apply patch from CentOS Stream, never applied upstream:
    Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)
  - Apply patches from Debian, never applied upstream:
    - fix tsol buffer overflow,
      https://sourceforge.net/p/ipmitool/mailman/message/24405281/
    - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
  - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)


author: Thomas Woerner <twoerner@redhat.com> - 6.19-5
changelog:
  - New service sub package to provide the ipset service (RHBZ#1136257)
    Service and start-stop script from F-24
  - Fixed ipset package summary (RHBZ#1195171)
    Spec file derived from F-24


author: Thomas Woerner <twoerner@redhat.com> - 6.19-6
changelog:
  - Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
  - Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
  - No save on reload, but legacy save action (RHBZ#1136257)


author: Thomas Woerner <twoerner@redhat.com> - 6.29-1
changelog:
  - Rebase to 6.29 (RHBZ#1351299)
  - Fixes:
    - Backport ipset capability to run in namespaces (RHBZ#1226051)
    - Fix service save with empty ipset list and existing ipset save file
      (RHBZ#1377621)
    - Fix internal error at printing to output buffer (RHBZ#1395865)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-16
changelog:
  - Fix important coverity findings: missing include for flock and use bash for
    init script (RHBZ#1264399)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-17
changelog:
  - Fixed init script not to fail on missing restorecon (RHBZ#1246380)
  - Adapted man page snipplet for TRACE to use proper logging backend names
    (RHBZ#1261238)
  - Warn about use of DROP in nat table (RHBZ#1298879)
  - Fixed modules unload in init script (RHBZ#1324102)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-18
changelog:
  - Add support for --wait options to restore commands (RHBZ#1438597)
  - Do not set changed flag for rule check operations with module targets
    (RHBZ#1438597)
  - Add version option to restore commands (RHBZ#1438597)


author: Phil Sutter - 1.4.21-20
changelog:
  - Prevent iptables.service and ip6tables.service from running in parallel
    (RHBZ#1486803)
  - Don't restart services upon upgrade (RHBZ#1380141)


author: Phil Sutter - 1.4.21-24.1
changelog:
  - Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
  - Propagate errors on service stop (RHBZ#1563168)
  - Avoid overwriting parent's return code (RHBZ#1563168)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-7
changelog:
  - ping hung when it cannot receive echo reply (#1362463)
  - arping documentation inconsistency (#1351704)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-9
changelog:
  - IPv4 vs IPv6 inconsistency on return value of ping (#1362388)
  - ping6 does not use device specified with -I parameter (#1371824, #1424965)
  - double cap_free call in ping_common.c (#1410114)
  - ping assumes EACCESS errors are due to broadcast addresses (#1387315)
  - ping -t with multicast address without effect on ppc64 (#1373333)
  - arping -c <n> does not exit when the device is deleted (#1387542)


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-34
changelog:
  - 1322000 ensure TCP abort on session failure to prevent data corruption with link flap
  - 1294964, 1265073, 1213569 iscsiuio update, fix small ARP table issue
  - 1309488 remove broken sysfs cache code to speed up login of many sessions
  - 1330348 sync with upstream Open-iSCSI for minor fixes


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-6
changelog:
  - 1507945 force start iscsiuio for boot session recovery with qedi
  - 1457359 start systemd socket listeners, otherwise if iscsid is started
    directly iscsiuio doesn't activate as expected


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8
changelog:
  - Fix vlock doesn't perform PAM account management or credential reinitialization
    Resolves: #1032140


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.42.1
changelog:
  - Sync with 4.19.19-8.0.42
  - *** Upstream changelog ***
    * Mon Apr 07 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 4.19.19-8.0.42
    - XSI-1728: Avoid repeatedly emitting uevents for LUN changes on CHECK_CONDITION
    * Tue Feb 18 2025 Kevin Lampis <klampis@cloud.com> - 4.19.19-8.0.41
    - CP-51825: Add 50G/100G/200G ethtool link modes
    * Tue Feb 18 2025 Kevin Lampis <klampis@cloud.com> - 4.19.19-8.0.40
    - None
    * Thu Jan 09 2025 Gerald Elder-Vass <gerald.elder-vass@citrix.com> - 4.19.19-8.0.39
    - CA-401809: Resolve incorrect coverity warning
    - CA-404447: Improve logging for xhci failures


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.43.1
changelog:
  - Sync with 4.19.19-8.0.43
  - *** Upstream changelog ***
   * Fri Jul 18 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 4.19.19-8.0.43
   - CA-412882: Register NVMe ns_id attribute(s) as default sysfs groups
   - CA-360450: Fix deadlock on PCI passthrough


author: Quentin Casasnovas <quentin.casasnovas@vates.tech> - 4.19.19-8.0.44.1
changelog:
  - Sync with 4.19.19-8.0.44
  - *** Upstream changelog ***
    * Fri Oct 31 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.44
    - CA-399062: NFS timeout causes potential deadlock
    - CA-419803 / CA-419762: Backport patches to fix NBD disconnect crash


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.45.1
changelog:
  - Sync with 4.19.19-8.0.45
  - Add missing patch for CVE-2020-14314 (use-after-free detected by Syzkaller)
  - *** Upstream changelog ***
    * Fri Feb 27 2026 Frediano Ziglio <frediano.ziglio@citrix.com> - 4.19.19-8.0.45
    - CA-400357: Use the correct MAC for rndis_host interfaces
    - CA-395473: Backport a patch to fix CVE-2020-14314
    - XSI-2150: Remove added chunk causing deadlock


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.46.1
changelog:
  - Sync with 4.19.19-8.0.46
  - SUNRPC: Restore call to cancel_work_sync()
  - *** Upstream changelog ***
    * Thu Mar 19 2026 Frediano Ziglio <frediano.ziglio@citrix.com> - 4.19.19-8.0.46
    - XSI-2150: Avoid deadlocks on NFS spinlocks


author: Quentin Casasnovas <quentin.casasnovas@vates.tech> - 4.19.19-8.0.46.5
changelog:
  - Backport for CVE-2026-46300 (Fragnesia), iterative fixes to CVE-2026-43284
  - Backport for CVE-2026-46333 (ssh-key-sign, ptrace_may_dream)
  - Backport for CVE-2026-43494 (pintheft)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.227-4
changelog:
  - Don't provide kernel Provides
  - We don't want kernel-alt to be pulled as build deps instead of main kernel packages


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.316+1-1
changelog:
  - Import kernel source v4.19.316
  - Rebase and rework needed patches from main kernel repo
  - Sync spec file with main kernel repo v4.19.19-8.0.34.1
  - Fix Requires on python3-xcp-libs


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.320+1-1
changelog:
  - Sync spec file with main kernel repo v4.19.19-8.0.36.1
  - Import new patches from main kernel repo (already merged upstream)
  - Update kernel sources to v4.19.320


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.320+1-2
changelog:
  - Disable PERF_EVENTS_INTEL_RAPL and INTEL_POWERCLAMP in kernel config as done
    in the main kernel for performance reasons


author: Thierry Escande <thierry.escande@vates.tech> - 2.0.15-20.1
changelog:
  - Backport patch removing kernel_version(), fixing bug for kernel with
    patchlevel greater than 255


author: Philippe Coval <philippe.coval@vates.tech> - 2.0.15-21.1
changelog:
  - Rebase on 2.0.15-21
  - *** Upstream changelog ***
    * Mon Apr 13 2026 Frediano Ziglio <frediano.ziglio@citrix.com> - 2.0.15-21
    CP-312109: Avoid to wait indefinitely for initilisation


author: David Howells <dhowells@redhat.com>
changelog:
  - Adjust the manual page for 'keyctl unlink' to show keyring is optional.
  - Add --version support for the keyutils version and build date.


author: David Howells <dhowells@redhat.com> - 1.5.4-1
changelog:
  - Fix the keyctl padd command and similar to handle binary input.
  - Make keyctl show able to take a keyring to dump.
  - Make keyctl show able to take a flag to request hex key IDs.
  - Make keyctl show print the real ID of the root keyring.


author: David Howells <dhowells@redhat.com> - 1.5.6-1
changelog:
  - Fix the request-key.conf.5 manpage.
  - Fix the max depth of key tree dump (keyctl show) [BZ 1002761].
  - The input buffer size for keyctl padd and pinstantiate should be larger [BZ 1002761].
  - Add keyctl_invalidate.3 manpage [BZ 1002761].


author: David Howells <dhowells@redhat.com> - 1.5.7-1
changelog:
  - Provide a utility function to find a key by type and name.
  - Allow keyctl commands to take a type+name arg instead of a key-id arg.
  - Add per-UID get_persistent keyring function [BZ 1014739].


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-12
changelog:
  - weak-modules: fix coverity introduced by latest changes
  - weak-modules: fix "permission denied" on some upgrades.
    Resolves: rhbz#1416566


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-17
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1468305
  - weak-modules: implement dry run by symlink restoration.
    Resolves: rhbz#1477073


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-18
changelog:
  - depmod: external directories support.
    Resolves: rhbz#1361857
  - BuildRequires automake autoconf libtool.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-20
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1510058


author: Philippe Coval <philippe.coval@vates.tech> - 1.15.1-22.1
changelog:
  - Skip keyring tests if keyring blocked by seccomp
  - Add explicit dependency to gcc
  - Make build dependency to latex optionnal
  - Rebuild with openssl-3


author: Fridolin Pokorny <fpokorny@redhat.com> - 458-3
changelog:
  - Expanded lessecho usage (#948597)
  - Added lessfilter info to man (#948597)
  - Expanded lesskey usage (#948597)
  - Added --old-bot to help (#948597)


author: Jozef Mlich <jmlich@redhat.com> - 458-5
changelog:
  - fixing regression in 72dfd3f63594e1d4c9416180a95c47ae583934c6
    incorrect parsing of commandline arguments
  - Resolves #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-8
changelog:
  - changes introduced in less-458-old-bot-in-help.patch
    wasn't compiled in. It is necessary to use mkhelp tool.
    Resolves: #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-9
changelog:
  - The --use-backslash option documented in the man page
    was missing from online help for less.
    Resolves: #1109090


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-8
changelog:
  - Change the source location to the new upstream on fedorahosted
  - import a new tarball from the new source


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-10
changelog:
  - Un-revert the RHEL-specific changes. (Jeff Moyer)
  - Make devel sub-package depend on specific ver-rel (Jeff Moyer)
  - Resolves: bz#905462


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-12.2
changelog:
  - Get rid of sparc support (we don't build it) (Jeff Moyer)
  - Implement proper support for aarch64 (Jeff Moyer)
  - Resolves: bz#1026429


author: Philippe Coval <philippe.coval@vates.tech> - 3.6.1-4.1
changelog:
  - Rebuild with openssl-3
  - Reapply changes from 3.3.3-1.1 on upstream base 3.6.1-4
    * Thu Aug 28 2025 Yann Dirson <yann.dirson@vates.tech> - 3.3.3-1.1
    - Refresh ldconfig cache on installation/removal
    * Thu Apr 30 2020 Ondrej Dubaj <odubaj@redhat.com> - 3.3.3-1
    - Rebase to version 3.3.3


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.0.1-20
changelog:
  - Apply a patch by Dmitri Pal to strip trailing whitespace
  - Resolves: rhbz#1012434 - libiniconfig doesn't trim trailing whitespace


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-25
changelog:
  - Resolves: rhbz#1205557 - Include the latest upstream ding-libs release in 7.2
  - Port the SONAME hack


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-27
changelog:
  - Re-add the soname hack
  - Resolves: rhbz#1290382 - Rebase ding-libs to the latest available upstream


author: Michal Židek <mzidek@redhat.com> - 0.6.1-29
changelog:
  - Fix rpmdiff failure for 'Binary stripping'
  - Resolves: rhbz#1480270 - Rebase ding-libs to the latest upstream release


author: Karel Zak <kzak@redhat.com> 2.23.2-45
changelog:
  - fix #1501953 - blkid shows wrong return code on failure with ambivalent results
  - fix #1486777 - wipefs printing duplicate gpt clear messages
  - fix #1454652 - fix test suite


author: Karel Zak <kzak@redhat.com> 2.23.2-49
changelog:
  - fix #1520906 - make hostname in login(1) prompt optional
  - fix #1521163 - [RFE] blkid can identify magic number and UUID of VDO volume


author: Steve Grubb <sgrubb@redhat.com> 0.7.5-2
changelog:
  - resolves: #1185610 - libcap-ng: update caps table for newer kernels
  - Fix a leaked FD in upstream code


author: Nikola Forró <nforro@redhat.com> - 0.41-12
changelog:
  - resolves: #1406927
    start cgred service after nss-user-lookup target
    show warnings about unsuccessful user/group lookups


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - show warning when "tasks" file can not be opened
  - extend description of "controllers" section in cgrules.conf man page
    resolves: #1561736


author: Matej Mužila <mmuzila@redhat.com> - 5.3.21-23
changelog:
  - Mention in man page that care should be taken when running db_hotbackup
    with -c option. Resolves: rhbz#1460077


author: Tom Hughes <tom@compton.nu> - 20120410-1
changelog:
  - Update to 20120410 release
  - Drop the 0. from the version - the dates are the upstream versions
  - Remove explicit dependencies on elfutils-libelf


author: Kamil Dudka <kdudka@redhat.com> 3.0-7.20120601cvs
changelog:
  - Update to 3.0 (20120601 snap)
  - fix crash of el_insertstr() on incomplete multi-byte sequence (#840598)


author: Tim Smith <tim.smith@citrix.com> - 1.0.3-2
changelog:
  - Create static and devel subpackages to reflect the fact that this is a static
    library used only at build time.


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.11-2
changelog:
  - Make a patch out of Michal's pkgconfig support.
  - Modernize the configure.ac file for Automake >= 1.13.
  - Respect the Fedora CFLAGS
    https://bugzilla.redhat.com/show_bug.cgi?id=908096


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.15-3
changelog:
  - Get the package closer to what upstream intended:
    - Do not move the headers into a subfolder of /usr/include
    - Make a libev-libevent-devel subpackage to contain the libevent
      compatibility header, so that only this subpackage conflicts with
      libevent-devel, not all of libev-devel
    - Drop the pkgconfig file, as upstream rejected it several times already.


author: Steve Dickson <steved@redhat.com> 2.0.18-1
changelog:
  - Updated to latest stable upstream version: 2.0.18-stable
  - Moved documentation into its own rpm (bz 810138)


author: Philippe Coval <philippe.coval@vates.tech> - 2.0.21-4.1
changelog:
  - Rebuild with openssl-compat-10
  - Make openssl optional (enabled by default)
  - Update legacy %patchN syntax for rpmspec
  - Add make and gcc to BuildRequires


author: Dan Horák <dhorak@redhat.com> - 3.0.13-16
changelog:
  - Drop ppc64le from the multilib list
  - Use additional BR: only in ppc64le build
  - Resolves: RHBZ1116945


author: Marek Polacek <polacek@redhat.com> 4.8.5-20
changelog:
  - handle exceptions in basic_istream::sentry (#1469384)
  - don't run pr63354.c on ppc (#1468546)
  - ensure proxy privatization safety (#1491395)
  - fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
  - on aarch64, remove libatomic.so (#1465510)


author: Marek Polacek <polacek@redhat.com> 4.8.5-21
changelog:
  - fix 27_io/basic_fstream/53984.cc
  - fix for classes with bases with mutable members (PR c++/77375)
  - fix handling side-effects of parameters (PR c/77767)
  - fix combine's make_extraction (PR rtl-optimization/78378)
  - fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
  - fix -A / -B to A / B folding (PR middle-end/80362)
  - fix comparison of decimal float zeroes (PR middle-end/80692)
  - fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)


author: Jeff Law <law@redhat.com> 4.8.5-24
changelog:
  - Sync gcc48-rh1469697-13 patch to upstream (#1469697)
  - Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
  - Avoid infinite loop if probing interval is less than guard size (#1469697)
  - Fix debug information for large probing interval on aarch64 (#1469697)
  - Fix ICE on ppc port with large probing interval (#1469697)

  - rebuild to remove static relocations not known to older linkers (#1508968)


author: Jeff Law <law@redhat.com> 4.8.5-26
changelog:
  - Avoid red zone probing for zero residual dynamic allocation (#1469697)
  - Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)


author: Marek Polacek <polacek@redhat.com> 4.8.5-28
changelog:
  - Minor testsuite fixes to clean up test results (#1469697)
  - retpoline support for spectre mitigation (#1535655)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-5
changelog:
  - add FIPS DRBG implementation
  - run the FIPS POST tests in shared library constructor
  - make it possible to run the test suite in the FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-13
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-14
changelog:
  - add DRBG CAVS driver and other necessary CAVS driver updates (#1172568)
  - allow ath reinitialization in FIPS mode
  - allow for auto-initialization of DRBG


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1
changelog:
  - Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1
changelog:
  - Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                             version 4.7.x


author: Steve Dickson <steved@redhat.com> 0.25-13
changelog:
  - Strip newlines out of IDMAP_LOG messages (bz 1261124)
  - Fixed some NEGATIVE_RETURNS that a Covscan scan found (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-15
changelog:
  - nss_getpwnam: correctly check for negative values (bz 1271449)
  - Fixed a memory leak in nss_name_to_gid() (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-16
changelog:
  - Add options to aid id mapping in multi domain environments (bz 1378557)
  - Query DNS for the the NFSv4 domain (bz 980925)


author: Steve Dickson <steved@redhat.com> 0.25-18
changelog:
  - Enlarge the TXT record to lager than 127 characters (bz 1498210)
  - Allow white spaces in static IP mapping (bz 1455923)


author: Thomas Haller <thaller@redhat.com> - 3.2.21-9
changelog:
  - improve local port handling for netlink socket with EADDRINUSE (rh #1249158)
  - rtnl: backport support for link-netnsid attribute (rh #1255050)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Tom Lane <tgl@redhat.com> 2:1.5.10-3
changelog:
  - Remove compat subpackage (it's now a separate package "libpng12")
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 2:1.5.12-1
changelog:
  - Update to libpng 1.5.12 for minor bug fixes
  - Activate chunk size limits by default, with a very generous default limit


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptf based on upstream
  - Related: #1283576


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-1
changelog:
  - fix leak when throwing PWQError exception
  - added pkgconfig file
  - call the simplicity checks before the cracklib check
  - add enforce_for_root option to the PAM module
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-1
changelog:
  - use rpm built-in filtering of provides (rhbz#830153)
  - remove strain debug fprintf() (rhbz#831567)


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-5
changelog:
  - fix brittle configuration settings (#1259633)
  - fix abort when generating large passwords on some architectures


author: Paul Moore <pmoore@redhat.com> - 2.2.1-1
changelog:
  - Removed '--disable-static' from the build to ensure that scmp_sys_resolver
    is self contained and resolve RPATH issues


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix setexecfilecon() to work better in a chroot (#1329931)
  - Fix typo in sefcontext_compile.8 (#1320062)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-4
changelog:
  - Clarify is_selinux_mls_enabled() description
  - Explain how to free policy type from selinux_getpolicytype()
  - Compare absolute pathname in matchpathcon -V
  - Add selinux_snapperd_contexts_path()
  - Modify audit2why analyze function to use loaded policy
  - Sort object files for deterministic linking order
  - Respect CC and PKG_CONFIG environment variable
  - Avoid mounting /proc outside of selinux_init_load_policy()
  - Fix multiple spelling errors


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Add missing av_permission values (#1025931)
  - Set an appropriate errno in booleans.c (#1402140)
  - Change matchpathcon usage to match with matchpathcon manpage (#1412797)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Sort object files for deterministic linking order
  - Support overriding Makefile RANLIB
  - Respect CC and PKG_CONFIG environment variable
  - Fix multiple spelling errors
  - genhomedircon: %{USERID} and %{USERNAME} support and code cleanups


author: Petr Lautrbach <plautrba@redhat.com> 2.5-4
changelog:
  - genhomedircon: add support for Development/Debug syntax
  - genhomedircon: generate contexts for logins mapped to the default user
  - Validate and compile file contexts before installing
  - Swap tcp and udp protocol numbers


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-8
changelog:
  - Save linked policy, skip re-link when possible
  - Replace access(,F_OK) checks to make setuid programs work (#1186431)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-9
changelog:
  - Update semanage to allow runtime labeling of Infiniband Pkeys (#1466274)
  - Update semanage to allow runtime labeling of ibendports (#1466274)
  - Keep copy of file_contexts.homedirs in policy store (#1409813)
  - Add support for listing fcontext.homedirs file (#1409813)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Correctly detect unknown classes in sepol_string_to_security_class
  - Sort object files for deterministic linking order
  - Fix neverallowxperm checking on attributes
  - Remove libsepol.map when cleaning
  - Add high-level language line marking support to CIL
  - Change logic of bounds checking to match change in kernel
  - Fix multiple spelling errors
  - Only apply bounds checking to source types in rules
  - Fix CIL and not add an attribute as a type in the attr_type_map
  - Build policy on systems not supporting DCCP protocol
  - Fix extended permissions neverallow checking
  - Fix CIL neverallow and bounds checking
  - Android.mk: Add -D_GNU_SOURCE to common_cflags


author: Petr Lautrbach <plautrba@redhat.com> 2.5-5
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6
changelog:
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-7
changelog:
  - Define cgroup_seclabel policy capability (rhbz#1493517)
  - Fix unitialized jmp and invalid dereference


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-8.1
changelog:
  - Define nnp_nosuid_transition policy capability (rhbz#1480519)
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - Allow runtime labeling of ibendports (rhbz#1464489)
  - Allow runtime labeling of Infiniband Pkeys (rhbz#1464489)
  - Add IB end port handling to CIL (rhbz#1464489)
  - Add ibendport ocontext handling (rhbz#1464489)
  - Add support for ibendportcon labels (rhbz#1464489)
  - Add Infiniband Pkey handling to CIL (rhbz#1464489)
  - Add ibpkey ocontext handling (rhbz#1464489)
  - Add support for ibpkeycon labels (rhbz#1464489)
  - Remove unused attribute on a used argument from avrule_read() (rhbz#1464489)
  - Add binary module support for xperms
  - Add support for converting extended permissions to CIL


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.10.16-17.0.3.1
changelog:
  - Don't build vfs_glusterfs and thus don't buildrequire glusterfs
  - Remove the useless build dependency to epel-release
  - Add gcc to the BuildRequires


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.10.16-17.0.4.1
changelog:
  - Update from XS 8.3 pre-release updates
  - *** Upstream changelog ***
  - * Tue Sep 20 2022 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.4
  - - CP-40720: Remove epel-release from BuildRequires


author: Yann Dirson <yann.dirson@vates.tech> - 4.10.16-25.1
changelog:
  - Revert XS changes to prepare for merging new upstream, keeping changelog
    and kerberos config changes
  - By Lucas Ravagnier <lucas.ravagnier@vates.tech>:
    - Import samba-4.10.16-25.el7_9
    - Use a bcond to enable XCP-ng packaging tweaks while preserving upstream spec content.
    - *** Upstream changelog ***
      * Tue Jul 25 2023 Andreas Schneider <asn@redhat.com> - 4.10.16-25
      - resolves: #2222250 - Fix netlogon capabilities level 2

      * Fri Jan 20 2023 Andreas Schneider <asn@redhat.com> - 4.10.16-24
      - related: #2154364 - Add additional patches for CVE-2022-38023

      * Wed Dec 21 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-23
      - resolves: #2154364 - Fix CVE-2022-38023

      * Tue Aug 30 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-20
      - resolves: #2119058 - Fix possible segfault in winbind

      * Tue May 10 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-19
      - resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                 mapping for uid/gid conflict

      * Tue Jan 25 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-18
      - resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
      - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
      - resolves: #2046148 - Fix CVE-2021-44142


author: Gaëtan Lehmann <gaetan.lehmann@vates.tech> - 4.10.16-25.2
changelog:
  - Apply packaging changes from XenServer's samba-4.10.16-17.0.{4-8}
  - *** Upstream changelog ***
  - * Tue Apr 01 2025 Lin Liu <Lin.Liu01@cloud.com> - 4.10.16-17.0.8
  - - CA-408843: enctypes support machine account
  -
  - * Thu Jan 02 2025 Deli Zhang <deli.zhang@cloud.com> - 4.10.16-17.0.7
  - - CP-50277: Remove unused cups package
  -
  - * Mon Sep 9 2024 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.6
  - - CP-50735: Remove avahi support
  -
  - * Wed Aug 7 2024 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.5
  - - CP-50670: Remove python and json support
  -
  - * Tue Sep 20 2022 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.4
  - - CP-40720: Remove epel-release from BuildRequires


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.8-1
changelog:
  - Rebase to libtalloc 2.1.8
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.9-1
changelog:
  - Rebase to libtalloc 2.1.9
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.10-1
changelog:
  - Rebase to libtalloc 2.1.10
  - Resolves: rhbz#1470053 - Rebase libtalloc to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.14-1
changelog:
  - Rebase to libtalloc 2.1.14
  - Resolves: rhbz#1658747 - Rebase libtalloc to version 2.1.14 for Samba


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-1
changelog:
  - Rebase to libtalloc 2.1.16
  - Resolves: rhbz#1736005 - Rebase libtalloc to version 2.1.16 for Samba


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.6-2
changelog:
  - Resolves: rhbz#1241015 - tdb deadlocks if you acquire allrecord_lock
                             and start two traverses


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.12-2
changelog:
  - Resolves: rhbz#1441231 - The tdb robust mutexes runtime check is not thread safe and ends in a deadlock


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.15-1
changelog:
  - Resolves: rhbz#1470049 - Rebase libtdb to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.33-1
changelog:
  - Resolves: #1470054 - Rebase libtevent to enable samba rebase to version
                         4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.34-1
changelog:
  - Resolves: #1512414 - tevent can cause a Samba file corruption bug under
                         heavy threaded load


author: Steve Dickson <steved@redhat.com> 0.2.4-0.7
changelog:
  - Backported upstream debugging (bz 1273159)
  - Fixed memory leak in svc_vc_create (bz 1276685)
  - Fixed memory leaks in server-side GSS authenticator (bz 1282488)


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-1
changelog:
  - upstream release of 2.9.1
  - a couple more API entry point
  - compatibility with python3
  - a lot of bug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6
changelog:
  - Fix missing entities after CVE-2014-3660 fix
  - CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
  - Fix regressions introduced by CVE-2014-0191 patch


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6.2
changelog:
  - Fix a series of CVEs (rhbz#1286496)
  - CVE-2015-7941 Stop parsing on entities boundaries errors
  - CVE-2015-7941 Cleanup conditional section error handling
  - CVE-2015-8317 Fail parsing early on if encoding conversion failed
  - CVE-2015-7942 Another variation of overflow in Conditional sections
  - CVE-2015-7942 Fix an error in previous Conditional section patch
  - Fix parsing short unclosed comment uninitialized access
  - CVE-2015-7498 Avoid processing entities after encoding conversion failures
  - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
  - CVE-2015-5312 Another entity expansion issue
  - CVE-2015-7499 Add xmlHaltParser() to stop the parser
  - CVE-2015-7499 Detect incoherency on GROW
  - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
  - CVE-2015-8242 Buffer overead with HTML parser in push mode
  - CVE-2015-1819 Enforce the reader to run in constant memory


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.9.1-6.3
changelog:
  - Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
  - Bug 763071: Heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071> (CVE-2016-1834)
  - Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (CVE-2016-1840)
  - Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (CVE-2016-1838)
  - Bug 758605: Heap-based buffer overread in xmlDictAddString <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (CVE-2016-1839)
  - Bug 759398: Heap use-after-free in xmlDictComputeFastKey <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (CVE-2016-1836)
  - Fix inappropriate fetch of entities content (CVE-2016-4449)
  - Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
  - Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
  - Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
  - Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
  - Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
  - Avoid building recursive entities (CVE-2016-3627)
  - Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
  - More format string warnings with possible format string vulnerability (CVE-2016-4448)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.5.1-2
changelog:
  - Disable amd64 assembly on non-intel architectures (#2035802):
    this should avoid the issue where an executable stack is created.


author: Chris Leech <cleech@redhat.com> - 1.0.1-3.git036e314
changelog:
  - 1273663 sync with upstream v1.0.1-26-g036e314
    system capability incorrect advertised as station only


author: Jaromir Capik <jcapik@redhat.com> - 3.3.4-8
changelog:
  - Fixing use of uninitialized 'vendor_id' value on ppc (#996590)
  - Fixing bogus date in the changelog


author: Martin Sehnoutka <msehnout@redhat.com> - 3.4.0-0.20160601gitf9185e5.1
changelog:
  - New upstream release
  - Drop patches that are already present in upstream
  - Apply upstream fix for systemd paths
  - Resolves: #1297795


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-14
changelog:
  - fix #1381719 - make /var/lib/logrotate/logrotate.status the default state file
  - fix #1387533 - make 'su' directive accept usernames starting with digits


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-15
changelog:
  - fix #1483800 - update references to project page
  - fix #1472984 - improve the error message for bad config file mode
  - fix #1465720 - trigger weekly rotations more predictably
  - fix #1461907 - make 'copy' and 'copytruncate' work together


author: Tim Niemueller <tim@niemueller.de> - 5.1.4-7
changelog:
  - Add patch to from lua.org with smaller bugfixes
  - sed -i -e 's/5\.1\.3/5.1.4/g' on autotoolize patch, bug #641144


author: pjp <pjp@fedoraproject.org> - r128-1
changelog:
  - lz4cli sparse file support
  - Restored lz4hc compression ratio
  - lz4 cli supports long commands
  - Introduced lz4-static sub package BZ#1208203


author: pjp <pjp@fedoraproject.org> - r129-1
changelog:
  - New LZ4_compress_fast() API.
  - New LZ4 CLI improved performance with multiple files.
  - Other bug fix and documentation updates.


author: pjp <pjp@fedoraproject.org> - r130-1
changelog:
  - Fixed: incompatibility sparse mode vs console.
  - Fixed: LZ4IO exits too early when frame crc not present.
  - Fixed: incompatibility sparse mode vs append mode.
  - Performance fix: big compression speed boost for clang(+30%).


author: pjp <pjp@fedoraproject.org> - r131-1
changelog:
  - New: Dos/DJGPP target #114.
  - Added: Example using lz4frame library #118.
  - Changed: liblz4.a no longer compiled with -fPIC by default.


author: Nikola Forró <nforro@redhat.com> - 12.5-13
changelog:
  - fix SIGSEGV crash in smtp_auth_var()
  - add warning message for empty from variable
    resolves: #1113611


author: Petr Machata <pmachata@redhat.com> - 1:3.82-18
changelog:
  - Backport upstream patch that adds wildcard expansion to pattern
    rules. (make-3.82-stem_glob.patch)


author: Petr Machata <pmachata@redhat.com> - 1:3.82-19
changelog:
  - make now restores rlimit to its original values before launching
    subprocess via $(shell) (make-3.82-func_shell-rlimit.patch)
  - Determinize one test (make-3.82-tests-SECONDARY.patch)


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-22
changelog:
  - Check if the target-specific variable is the same as the global
    variable, and if it is, don't free it.  Savannah bug #31743.
    Resolves: #1323206


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-23
changelog:
  - In very obscure situations we may incorrectly write the free token
    back to the pipe.
    Resolves: #1322670


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.3-1
changelog:
  - resolves: #858577
    updated to 2.6.3
  - cleaned .spec file
  - resolves: #855632
    fixed SIGABRT crash
  - adds support for man-pages-overrides


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.3-6
changelog:
  - resolves: #948695
    fixed double free
  - fixed certain man pages to match options with --help and --usage


author: Thierry Escande <thierry.escande@vates.tech> - 5.9_0.5.5.0-3.1
changelog:
  - Sync with 5.9_0.5.5.0-3
  - *** Upstream changelog ***
    * Tue Feb 18 2025 Kevin Lampis <klampis@cloud.com> - 5.9_0.5.5.0-3
    - CP-51825: Enable 50G/100G/200G ethtool link modes for XS8 kernel


author: Quentin Casasnovas <quentin.casasnovas@vates.tech> - 8.17.1.0.0-1
changelog:
  - Sync to latest available version
  - Drop 0001-bsg-lib-pre-5.0-API.patch, as a compat layer was added with an equivalent change


author: Yann Dirson <yann.dirson@vates.tech> - 6.4-4.20230114
changelog:
  - Restore Fedora changelog and versionning, while keeping other XS-ification
  - XS changelog:
    * Wed Apr 10 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 6.4-3
    - CA-391276: Revert previous changes due to regression
    * Wed Mar 13 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 6.4-2
    - CA-369899: Update to verion 20240309
    - CA-369899: Use MONOTONIC time instead of REALTIME
    * Tue Jul 11 2023 Tim Smith <tim.smith@citrix.com> - 6.4-1
    - First imported release


author: Yann Dirson <yann.dirson@vates.tech> - 6.4-5.20240309
changelog:
  - sync with XS 6.4-4
  - unlisted XS changes:
    - Upgrade upstream revision to 20240309
    - Build and run a test program to verify there are no conflicts in lib versions
  - XS changelog:
    * Wed Aug 14 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 6.4-4
    - CP-48941: Update ncurses to MONOTONIC


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 5.7.2-51.1
changelog:
  - Rebase on XS8's 5.7.2-51
  - Undo most changes from snmp.xs.conf, which are related to a proprietary implementation


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 5.7.2-51.2
changelog:
  - Add net-snmp-5.7.2-no-XENSERVER-MIB.xcp-ng.patch
  - Remove XenServer-specific options from /etc/sysconfig/snmpd


author: Thierry Escande <thierry.escande@vates.tech> - 5.7.2-51.3
changelog:
  - Backport patches for CVE-2022-24805, CVE-2022-24806, CVE-2022-24807,
    CVE-2022-24808, CVE-2022-24809, CVE-2022-24810, and CVE-2022-44793


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 5.7.2-52.1
changelog:
  - Rebase on 5.7.2-52
  - Replace our patch by upstream identical one
  - *** Upstream changelog ***
    * Wed Jul 31 2024 Deli Zhang <deli.zhang@cloud.com> - 5.7.2-52
    - CA-393002: Fix CVE-2022-24805 and CVE-2022-24809 issues


author: Philippe Coval <philippe.coval@vates.tech> - 5.9.3-8.1
changelog:
  - Rebuild for openssl-3
  - Remove obsolete net-snmp-5.7.2-CVE-2022-24806.patch
  - Rebase on 5.9.3-8
  - *** Upstream changelog ***
    * Mon Jan 20 2025 Deli Zhang <deli.zhang@cloud.com> - 5.9.3-8
    - CP-50295: Add epoch 1 for XS 8

    * Fri Jan 17 2025 Chunjie Zhu <chunjie.zhu@cloud.com> - 5.9.3-7
    - CP-53263: Remove net-tools

    * Fri Jan 17 2025 Stephen Cheng <stephen.cheng@cloud.com> - 5.9.3-6
    - CP-53229: Remove chrpath

    * Thu Nov 21 2024 Stephen Cheng <stephen.cheng@cloud.com> - 5.9.3-5
    - CP-50538 Remove perl related packages
    - CP-50538 Remove selinux from BuildRequires

    * Fri Aug 23 2024 Deli Zhang <deli.zhang@cloud.com> - 5.9.3-4
    - CP-44169: Add XenServer SNMP Agent so
    - CP-44170: Update default settings
    - CP-44429: Move snmpd.xs.conf from xenserver-release
    - CP-44429: Improve service config

    * Tue Jul 30 2024 Deli Zhang <deli.zhang@cloud.com> - 5.9.3-3
    - CP-50122: Revert perl-srpm-macros require

    * Fri Jul 26 2024 Deli Zhang <deli.zhang@cloud.com> - 5.9.3-2
    - CP-50122: Replace redhat-rpm-config with xenserver-config-rpm in XS9

    * Mon Sep 04 2023 Lin Liu <lin.liu@citrix.com> - 5.9.3-1
    - First imported release


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-0.13.20131004git
changelog:
  - latest snapshot (#1013530)
  - remove %ifarch alpha condition from %prep
  - improve sctp-statistics.patch (#982638#c10)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.18.20131004git
changelog:
  - Resolves: #1063913 - netstat doesn't list sctp servers in -A mode
  - Resolves: #1257549 - netstat tool does not throw correct exit code on wrong parameter
  - Resolves: #1392910 - ifconfig inaccurately rounds exabytes


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-5
changelog:
  - Fixed SHA-3 implementation to conform to final standard (#1252936)
  - Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
    in secp256r1 and secp384r1 calculations (#1314374)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-8
changelog:
  - Use a cache-silent version of mpz_powm to prevent cache-timing
    attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.48
changelog:
  - exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
  - Correctly set the minor version when set in nfsmount.conf (1458504)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.49
changelog:
  - mount: handle EACCES during version negotiation (bz 1479573)
  - mount: Fix problems with parsing minorversion= (bz 1489262)
  - mountstats:  Remove a shebang (bz 987031)
  - nfsdcltrack: remove a warning (bz 1475462)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.50
changelog:
  - rpc.nfsd: Do not fail when all address families are not support (bz 1450528)
  - mount.nfs: merge in vers= and nfsvers= options (bz 1496822)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.51
changelog:
  - systemd: add a generator for the rpc_pipefs mountpoint (bz 1358333)
  - nfsdcltrack: return an non-zero value for invalid options (bz 1461349)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.52
changelog:
  - nfs(5): update some version information (bz 1452461)
  - nfsiostat: avoid parsing "no device mounted ..." line (bz 1508046)


author: Bob Relyea <rrelyea@redhat.com> - 3.67.0-3
changelog:
  - revert sql default language in man pages
  - fix SEC_PKCS12EnableCipher so python-nss tests will still work.


author: Bob Relyea <rrelyea@redhat.com> - 3.67.0-3
changelog:
  - Include softoken specific patches required by the NSS 3.67
    release including:
  -  sdb timeout fixes.
  -  coverity patch.
  -  fixing private key macing


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-1
changelog:
  - Rebase to NSS 3.79.
  - add reader/writer lock on encrypted attribute access
  - skip attribute verification on attributes with default values
  - don't export trust objects if they are default trust objects from dbm


author: Matus Honek <mhonek@redhat.com> - 2.4.44-10
changelog:
  - Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
  - Fix issues in MozNSS compatibility layer (#1400578)
    + Force write file with fsync to avoid race conditions
    + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
    + Allow missing cert and key which is a valid usecase
    + Create extraction folder only in /tmp to simplify selinux rules
    + Fix Covscan issues


author: Matus Honek <mhonek@redhat.com> - 2.4.44-11
changelog:
  - MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
    + Fix a possible invalid dereference (covscan)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-12
changelog:
  - MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
    + Warn just before use of a PIN about key file extraction


author: Matus Honek <mhonek@redhat.com> - 2.4.44-13
changelog:
  - MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
  - MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
  - MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)


author: Alex Brett <alex.brett@cloud.com> - 7.4p1-23.1 + 0.10.3-2
changelog:
  - Imported openssh-7.4p1-23.el7_9 from CentOS, including:
  - Fix for CVE-2023-38408
  - Fix for CVE-2021-41617
  - Fix for CVE-2018-15473
  - Fix for CVE-2017-15906


author: Thierry Escande <thierry.escande@vates.tech> - 7.4p1-23.2.1 + 0.10.3-2.23.2.1
changelog:
  - Harden default ciphers and algorithms
  - Disable GSSAPIAuthentication in sshd_config
  - Remove build dependency on xauth (used for X11 forwarding not supported on XCP-ng hosts)
  - Make use of xcpng_subrel macro for versioning
  - Disable gnome_askpass
  - Add BuildRequires for gcc


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7.4p1-23.3.1 + 0.10.3-2.23.3.1
changelog:
  - Sync with 7.4p1-23.3 + 0.10.3-2.23.3
  - *** Upstream changelog ***
  - * Tue Jul 02 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 7.4p1-23.3 + 0.10.3-2
  - - CP-50166: Remove libsystemd integration
  - - CA-395182: Fix CVE-2024-6387 - use of non-async-signal-safe fn in sighandler


author: Philippe Coval <philippe.coval@vates.tech> - 9.8p1-1.2.1
changelog:
  - Refresh XCP-ng patches:
    - Drop unnecessary hardening and gssapi patches
    - Replace CVE-2025-26465 backport with upstream patch from 9.9p1
  - Sync with 9.8p1-1.2
  - *** Upstream changelog ***
  - * Fri Nov 07 2025 Alex Brett <alex.brett@citrix.com> - 9.8p1-1.2
  - - CA-420416: Remove diffie-hellman-group14-sha1 KexAlgorithm
  - * Thu Jan 02 2025 Deli Zhang <deli.zhang@cloud.com> - 9.8p1-1.1
  - - CA-400917: Disable PerSourcePenalties
  - - CA-401322: Revert sshd.pam to xs8 default
  - - CA-401322: Ensure new config files applied
  - * Fri Sep 13 2024 Deli Zhang <deli.zhang@citrix.com> - 9.8p1-1
  - - CP-50298: Upgrade to version 9.8p1
  - * Wed Jul 31 2024 Lin Liu <lin.liu@citrix.com> - 8.8p1-3
  - - CP-50477: Customize ssh configurations
  - * Mon Sep 25 2023 Lin Liu <lin.liu@citrix.com> - 8.8p1-2
  - - CP-45435: Permit root ssh login
  - * Thu Jul 20 2023 Lin Liu <lin.liu@citrix.com> - 8.8p1-1
  - - First imported release


author: Lucas Ravagnier <lucas.ravagnier@vates.tech> - 9.8p1-1.2.3
changelog:
  - Add patch upstream log when refusing a certificate as dependency for CVE-2026-35414 patch
  - Fix CVE-2026-35414 (Bypass of authorized_keys)
  - Test for CVE-2026-35414 (with a fix for this test)
  - Fix ECDSA Bypass


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-22
changelog:
  - fix CVE-2021-23841 openssl: NULL pointer dereference
    in X509_issuer_and_serial_hash()
  - fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
  - Resolves: rhbz#1932132, rhbz#1932126


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-23
changelog:
  - fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#1996054


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-24
changelog:
  - Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
  - Resolves: rhbz#2039993


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.0.2k-25
changelog:
  - Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Related: rhbz#2067160


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1:1.0.2k-26.1
changelog:
  - Add openssl-1.0.2k-update-expiring-certificates.patch to fix build time tests
  - Added gcc to BuildRequires


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 3.0.9-2.0.1.2
changelog:
  - Update to the upstream 3.0.9-2.0.1 package
  - Remove backported patches as OpenSSL 3.0.9 is not affected by the CVEs they
    were fixing: openssl-1.0.2k-cve-2019-1547.backport.patch,
    openssl-1.0.2k-cve-2019-1551.backport.patch, and
    openssl-1.0.2k-cve-2019-1563.backport.patch
  - Remove a patch fixing a build time test as it's no longer necessary on 3.0.9:
    openssl-1.0.2k-update-expiring-certificates.patch
  - *** Upstream changelog ***
    * Thu Jan 02 2025 Deli Zhang <deli.zhang@cloud.com> - 3.0.9-2.0.1
    - CP-52657: Fix CVE-2024-6119
    - CP-52243: Remove new ciphers
    - CP-50862: Add fips only config file
    - CP-50299: Revert epoch=1
    - CP-50299: Disable crypto-policies
    - CP-50299: Build with devtoolset-11

    * Thu Jul 27 2023 Lin Liu <lin.liu@citrix.com> - 3.0.9-2
    - Restore basearch

    * Thu Jul 27 2023 Lin Liu <lin.liu@citrix.com> - 3.0.9-1
    - First imported release


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 1.0.2k-26.1.1
changelog:
  - First build - OpenSSL 1.0.2k-26 compatible package
  - Add backported patches from our OpenSSL package: openssl-1.0.2k-cve-2019-1547.backport.patch,
    openssl-1.0.2k-cve-2019-1551.backport.patch, openssl-1.0.2k-cve-2019-1563.backport.patch
    (the openssl-1.0.2k-update-expiring-certificates.patch was dropped since it
    was already included in the upstream package)
  - *** Upstream changelog ***
    * Thu Feb 13 2025 Lin Liu <deli.zhang@cloud.com> - 1.0.2k-26.1
    - CP-53507: Build OpenSSL 1.0.2k-26 compatible package

    * Thu Jul 18 2024 Lin Liu <Lin.Liu01@cloud.com> - 1.0.2k-26
    - First imported release


author: Philippe Coval <philippe.coval@vates.tech> - 1.0.2k-26.2.1
changelog:
  - Replace older openssl-devel (1.0 API) during transition
  - Release is set 26.2.1 (as a follow up of openssl-1:1.0.2k-26.2)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.5.3-2.3.13.1
changelog:
  - Rebase on latest package from CH 8.3 Preview
  - Re-add changes to produce openvswitch-ipsec subpackage


author: David Morel <david.morel@vates.fr> - 2.5.3-2.3.13.2
changelog:
  - Backport fix for CVE-2023-1668: Remote traffic denial of service via crafted packets with IP proto 0
  - Comment out tests that fail
  - Enable make check in spec file


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.5.3-2.3.14.1
changelog:
  - Update to 2.5.3-2.3.14
  - Drop openvswitch-2.5.3-CVE-2023-1668.backport.patch, now patched in XenServer's RPM
  - *** Upstream changelog ***
  - * Tue Apr 18 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.5.3-2.3.14
  - - CA-376367: Fix CVE-2023-1668


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.17.7-1.1
changelog:
  - Update to 2.17.7-1
  - Add openvswitch-2.17.7-comment-failing-tests.XCP-ng.patch (Benjamin Reis)
  - Add openvswitch-2.17.7-add-pythonpath-ipsec.XCP-ng.patch (Benjamin Reis)
  - Get ipsec script and service from new sources (Benjamin Reis)
  - *** Upstream changelog ***
  - * Wed Aug 23 2023 Chunjie Zhu <chunjie.zhu@cloud.com> - 2.17.7-1
  - - CP-44181: upgrade to OVS LTS 2.17.7


author: David Morel <david.morel@vates.tech> - 2.17.7-1.2
changelog:
  - Apply fix for CVE-2023-3966, provided in advisory
  - Apply fix for CVE-2023-5366, provided in advisory


author: David Morel <david.morel@vates.tech> - 2.17.7-1.3
changelog:
  - Link with xs-openssl instead of openssl
  - Tweak ovs-ctl script that is used to start ovsdb-server, passing it
    --ssl-ciphers and --ssl-protocols command line parameters to disable weak
    ciphers.


author: David Morel <david.morel@vates.tech> - 2.17.7-1.5
changelog:
  - link back to openssl to avoid issues with XO sdn-controller
  - use ciphers that works with XO sdn-controller and should not be considered as weak-ciphers


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.17.7-2.1
changelog:
  - Sync with 2.17.7-2
  - *** Upstream changelog ***
  - * Thu Jun 13 2024 Lin Liu <Lin.Liu01@cloud.com> - 2.17.7-2
  - - CP-46117: Refresh patches to build with XS9


author: Gaëtan Lehmann <gaetan.lehmann@vates.tech> - 2.17.7-4.1
changelog:
  - Sync with 2.17.7-4
  - *** Upstream changelog ***
    * Wed Jan 22 2025 Alex Brett <alex.brett@cloud.com> - 2.17.7-4
    - CA-405118: Backport 3 patches to handle updated groff
    
    * Thu Dec 12 2024 Stephen Cheng <stephen.cheng@cloud.com> - 2.17.7-3
    - CP-50699: For xs9, move config file for openvswitch.service from xenserver-release


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.57-2
changelog:
  - Fix a bug in recent btrfs patch when an extended partition is examined. 
    (H.J. Lu) (bug #906847)
  - Fix naming of /boot partitions according to their fstab entry (bug #893472)
  - Don't generate .btrfsfix files which will be included in final rpm
  - Fix wrong boot partition set by linux-boot-prober when / and /boot are
    mounted (bug #906886)
  - Factor out 'logger', so that it is run once and logs are piped to it (John
    Reiser) (bug #875356)


author: rmarshall@redhat.com - 1.58-6
changelog:
  - Adding handling to skip probing extended dos partitions
    Resolves: rhbz#1322957
  - Improve Windows detection for dual boot and support Windows 10
    Resolves: rhbz#1322956
  - Suppress non-blocking dmraid sector size warning message
    Resolves: rhbz#1198918


author: rmarshall@redhat.com - 1.58-7
changelog:
  - Do not resolve device mapper links when generating stanzas
    for bootloader.
    Resolves: rhbz#1300262


author: rmarshall@redhat.com - 1.58-8
changelog:
  - Resolve some coverity concerns with how the previous patch detected
    whether or not a partition was a device mapper device.
    Related: rhbz#1300262


author: rmarshall@redhat.com - 1.58-9
changelog:
  - Fix regular expression that missed a corner case when detecting
    extended dos partitions.
    Resolves: rhbz#1322957


author: Stef Walter <stefw@redhat.com> - 0.20.7-1
changelog:
  - Update to upstream stable 0.20.7 release
  - Expose pkcs11x.h header and defines for attached extensions rhbz#1142305


author: Daiki Ueno <dueno@redhat.com> - 0.23.5-3
changelog:
  - Avoid reference to thread-unsafe strerror rhbz#1378947
  - Fix PKCS#11 OAEP interface rhbz#1191209
  - Update documentation to follow RFC7512 rhbz#1165977


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-14
changelog:
  - pam_unix: add no_pass_expiry option for ignoring password
    expiration in crond and sshd with public key authentication
  - add manual page for environment(5) (#1110257)
  - pam_loginuid: log if auditd not detected
  - always ignore audit error when -EPERM is returned (#1287800)
  - pam_lastlog: fix possible NULL dereference when localtime fails (#1313537)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-19
changelog:
  - pam_access: (group) match syntax is prioritized over network@netgroup
    match (#1358881), add support for additional /etc/security/access.d/*.conf
    files, improve documentation (#1421735)
  - pam_lastlog: fix pt_BR translation (#1185697)
  - pam_faillock: support admin_group with users equivalent to root in
    faillock handling (#1285550)


author: Brian C. Lane <bcl@redhat.com> 3.1-21
changelog:
  - Backport fix for 1 sector logical partition separation from start of extended
    Resolves: rhbz#1212323


author: Brian C. Lane <bcl@redhat.com> 3.1-22
changelog:
  - Use 512b sector size when communicating with device-mapper
    Resolves: rhbz#1188431
  - Add a test to make sure partitions are the correct size on device-mapper
    Related: rhbz#1188431


author: Brian C. Lane <bcl@redhat.com> 3.1-23
changelog:
  - libparted: Use read only when probing devices on linux
    Resolves: rhbz#1245144
  - tests: Use wait_for_dev_to_ functions
    Related: rhbz#1245144


author: Brian C. Lane <bcl@redhat.com> 3.1-24
changelog:
  - tests: Add udevadm settle to wait_for_ loop
    Related: rhbz#1260664
  - tests: Add-wait-to-t9042
    Resolves: rhbz#1257415
  - tests: Fix t1700 failing on a host with a 4k xfs file
    Related: rhbz#1260664


author: Brian C. Lane <bcl@redhat.com> 3.1-25
changelog:
  - docs: Add list of filesystems for fs-type
    Resolves: rhbz#1311596
  - libparted: Remove fdasd geometry code from alloc_metadata
    Resolves: rhbz#1244833


author: Brian C. Lane <bcl@redhat.com> - 3.1-29
changelog:
  - Add support for NVMe devices
    Resolves: rhbz#1316239
  - Backport partition resize command
    Resolves: rhbz#1423357


author: Tomas Mraz <tmraz@redhat.com> 0.78.99-1
changelog:
  - use better (auditable) libselinux calls for checking
    the access to passwd (#518268)
  - add support for the -e option as seen on Debian passwd
  - make the binary PIE and full RELRO (#784483)


author: Than Ngo <than@redhat.com> - 2.7.1-11
changelog:
  - Fixed CVE-2016-10713 - Out-of-bounds access in pch_write_line function 
  - Fixed CVE-2018-6952 - Double free of memory
  - Resolves: #1626473, honor new file mode 100755 when applying patches
  - Resolves: #1653294, Added virtual provides for bundled gnulib library


author: Petr Pisar <ppisar@redhat.com> - 8.32-13
changelog:
  - Disable unsupported JIT mode on little-endian 64-bit PowerPC platform
    (bug #1125642)
  - Raise optimization level to 3 on little-endian 64-bit PowerPC (bug #1123498)


author: Petr Pisar <ppisar@redhat.com> - 8.32-15
changelog:
  - Fix compiling expression where start-anchored character with more than one
    other case follows circumflex in multiline UTF mode (bug #1110621)
  - Fix character class with a literal quotation (bug #1111091)
  - Fix empty-matching possessive zero-repeat groups in interpreted mode
    (bug #1119320)
  - Fix compiler crash for zero-repeated groups with a recursive back reference
    (bug #1119356)
  - Reset non-matched groups within capturing group up to forced match
    (bug #1161597)
  - Fix static linking (bug #1217111)
  - Package pcredemo.c as a documentation for pcre-devel (bug #1217118)


author: Petr Pisar <ppisar@redhat.com> - 8.32-16
changelog:
  - Fix CVE-2015-2328 (infinite recursion compiling pattern with recursive
    reference in a group with indefinite repeat) (bug #1330509)
  - Fix CVE-2015-8385 (buffer overflow caused by named forward reference to
    duplicate group number) (bug #1330509)
  - Fix CVE-2015-8386 (buffer overflow caused by lookbehind assertion)
    (bug #1330509)
  - Fix CVE-2015-3217 (stack overflow caused by mishandled group empty match)
    (bug #1330509)
  - Fix CVE-2015-5073 and CVE-2015-8388 (buffer overflow for forward reference
    within backward assertion with excess closing parenthesis) (bug #1330509)
  - Fix CVE-2015-8391 (inefficient posix character class syntax check)
    (bug #1330509)
  - Fix CVE-2016-3191 (workspace overflow for (*ACCEPT) with deeply nested
    parentheses) (bug #1330509)


author: Petr Pisar <ppisar@redhat.com> - 8.32-17
changelog:
  - Let [:graph:], [:print:], and [:punct:] POSIX classes to handle Unicode
    characters in UCP mode to match Perl behavior (bug #1400267)
  - Fix matching Unicode ranges in JIT mode (bug #1402288)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-284
changelog:
  - Use a macro to cover all 64-bit PowerPC architectures (bug #1061792)
  - Declare dependencies for cpan tool (bug #1122368)
  - Use stronger algorithm needed for FIPS in t/op/crypt.t (bug #1084796)
  - Make *DBM_File desctructors thread-safe (bug #1107542)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-286
changelog:
  - Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
  - Rebuild with corrected binutils to fix systemtap support (bug #1238472)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-288
changelog:
  - Fix CRLF conversion in ASCII FTP upload (bug #1263734)
  - Don't leak the temp utf8 copy of namepv (bug #1063330)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-291
changelog:
  - Backported and sub-packaged libraries historically supplied with Perl 4
    into perl-Perl4-CoreLibs


author: Petr Pisar <ppisar@redhat.com> - 2.51-6
changelog:
  - Rebuild against "file" package fixed by Jan Kaluza to correct run-time
    dependencies (bug #1048910)


author: Petr Pisar <ppisar@redhat.com> - 0.033-2
changelog:
  - Croak on failed write into a file (bug #1031096)
  - Do not use already existing temporary files (bug #1031096)


author: Marcela Mašláňová <mmaslano@redhat.com> - 1:0.225-4
changelog:
  - Install to vendor directories rather than perl core directories so as to
    avoid conflicts between our debuginfo and the main perl-debuginfo package


author: Paul Howarth <paul@city-fan.org> - 1:0.225-6
changelog:
  - Reinstate compatibility with old distributions like EL-5
    - Add back buildroot definition and cleaning
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Make %files list more explicit
  - Drop redundant %{?perl_default_filter}
  - Don't use macros for commands
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 1:0.225-242
changelog:
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.42-2
changelog:
  - Add BR perl(File::Spec)
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Remove deleting empty directories
  - Remove defattr


author: Alex Brett <alex.brett@cloud.com> - 0.8.9-0.31.20140113.2
changelog:
  - CA-393520: Drop ship-label-plugin-in-initrd.patch as not required for XS, and
    causes warnings following removal of fontconfig


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-13
changelog:
  - hll/pp: Fix pp crash when processing base module (#1350806)
  - sepolicy: fix obtaining domain name in HTMLManPages (#1174744)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-14
changelog:
  - Fix export of fcontext socket entries (#1435100)
  - Fix checks whether a module name is passed to semanage-module (#1420527)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-15
changelog:
  - sepolicy: Do not fail when file_contexts.{homedirs,local} are not present (#1395778)
  - fixfiles - use quotes around "$FILEPATH" (#1241946)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-16
changelog:
  - Strip non-printable characters when parsing audit messages (#1406328)
  - Install seobject python module into arch specific path (#1061049)
  - restorecond: Decrease loglevel of termination message (#1422121)
  - semodule_package: do not fail with an empty fc file (#1390535)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-18
changelog:
  - semanage: Enable listing file_contexts.homedirs
  - semanage: Fix manpage author for ibpkey and ibendport pages.
  - semanage: Update man pages for infiniband
  - semanage: Update semanage to allow runtime labeling of ibendports
  - semanage: Update semanage to allow runtime labeling of Infiniband Pkeys
  - semanage: Improve semanage-port man page
  - fixfiles: do not dereference link files in tmp


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-20
changelog:
  - setfiles: Mention customizable types in restorecon man page (#1260238)
  - sepolicy: do not fail when file_contexts.local or .subs do not exist (#1512590)
  - semanage: Fix export of ibendport entries (#1471809)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-22
changelog:
  - semanage: Fix fcontext help message (#1499259)
  - semanage: Improve semanage-user.8 man page (#1079946)
  - semodule: Improve man page (#1337192)


author: Panu Matilainen <pmatilai@redhat.com> - 1.13-12
changelog:
  - Hack poptBadOption() to return something semi-meaningful on exec alias
    failures (#697435, #710267)
  - Run internal test-suite on build, minimal as it might be


author: Tim Waugh <twaugh@redhat.com> - 0.0.5-8
changelog:
  - Avoid a race during start-up if there are no configured ports (bug #1034139).
  - Moved tmpfiles configuration file to correct location.
  - Don't use %ghost in manifest for state directory, in order to make
    sure it is ready to use after installation.


author: Jan Rybar <jrybar@redhat.com> - 3.3.10-10
changelog:
  - Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
  - Resolves: rhbz#1169349


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.7-19
changelog:
  - Build with -D_FILE_OFFSET_BITS=64 to get stat64 in pth_high.c
  - Guard the ARM CFLAGS sed substitution.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.3-1
changelog:
  - New upstream release
  - Build a python3 subpackage
  - Run the test suite even though we ignore the output


author: Miloslav Trmač <mitr@redhat.com> - 0.3-5
changelog:
  - Disable -fstrict-aliasing (see http://www.python.org/dev/peps/pep-3123/ for
    rationale)
  - Don't ship .pyc files from the test suite in %doc, to avoid multilib
    conflicts


author: Deli Zhang <deli.zhang@cloud.com> - 2.7.5-92
changelog:
  - CP-50325: Use new api of ncurses-devel
  - CP-50323: Replace deprecated functions
  - CA-397616: Remove test_gdb test temporarily
  - CP-50323: Remove unused module test test_ftplib.py
  - CP-50323: Build with OpenSSL 3
  - CP-50323: Import python-2.7.5-90.el7.src.rpm


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.2.4-1
changelog:
  - Upstream update 0.2.4
    - Changes i18n.easy_gettext_setup() to return lgettext functions when
      byte strings are requested.


author: Kamil Dudka <kdudka@redhat.com> - 7.19.0-15
changelog:
  - allow to return -1 from the write callback (#857875) 
  - remove the patch for curl-config --static-libs no longer needed
  - run the tests against the just built pycurl, not the system one


author: Philippe Coval <philippe.coval@vates.tech> - 7.19.0-19.1
changelog:
  - Add gcc to BuildRequires
  - Define __python for modern parser
  - Update obsolete patch macro with autosetup
  - Rebuild with openssl-3


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.10-0
changelog:
  - clamp timestamps from the future.  BZ 894630, 1013733
  - Fix the condition to enter single-connection mode. BZ 853432
  - Fix unit tests


author: Antonio Trande <sagitterATfedoraproject.org> - 0.17.1-0.2.20190506git23989c4
changelog:
  - Bump to a pre-release 0.17.1, commit #23989c4
  - Unversioned commands point to Python3 on Fedora
  - Obsolete Python2 version on Fedora


author: Benjamin Reis <benjamin.reis@vates.tech> - 24.19.2-1.1
changelog:
  - Rebase on 24.19.2-1
  - Drop xapi-24.11.0-sb-state-api.XCP-ng.patch
  - Drop xapi-24.11.0-don-t-generate-link-local-address-for-interfaces.patch
  - Drop xapi-23.31.0-fix-ipv6-import.XCP-ng.patch
  - *** Upstream changelog ***
  - * Tue Jul 16 2024 Ming Lu <ming.lu@cloud.com> - 24.19.2-1
  - - CA-395626: Fix (server status report generation report)
  - * Tue Jul 09 2024 Ming Lu <ming.lu@cloud.com> - 24.19.1-1
  - - Fixes: 99c43569a0 ("Transition from exception-raising Unix.getenv to Sys.getenv_opt with")
  - * Tue Jul 09 2024 Ming Lu <ming.lu@cloud.com> - 24.19.0-1
  - - CP-47304: [Toolstack] - Add data model for anti-affinity group
  - - CP-47655: [Toolstack] - Associate/disassociate VM to/from anti-affinity group
  - - CA-391880: Update related field 'groups' of VM when destroying VM group.
  - - CP-47302: VM start with anti-affinity
  - - CA-392177: Keep current group after reverting from snapshot
  - - CP-47656 Anti-affinity feature generate alert
  - - CP-48570: Load recommendations from config file when Xapi starts
  - - CP-48011: Xapi Support anti-affinity feature flag
  - - CA-393421: Special VMs cannot be added to VM groups
  - - CP-48625: Code refactoring
  - - opam: add psq to xapi dependencies
  - - CP-49665: Anti-affinity support for host evacuation
  - - CP-48752: Add UT for host evacuation with anti-affinity support
  - - CP-49953: Remove parse_uri, switch to using Uri module instead
  - - doc: remaining API docs
  - - doc: add XenAPI release info
  - - Printf.kprintf is deprecated, replace with Printf.ksprintf
  - - Fix misplaced inline attributes
  - - CP-50050 track CBT status for SMAPIv3 SRs
  - - CP-49953: Remove parse_uri, switch to using Uri module instead
  - - CI: Complete parallel Coveralls uploads: Finish when done
  - - CP-49116: Replace fingerprint in certificate DB with sha256 and sha1
  - - CA-392887: set_tls_config immediately after enabling clustering
  - - CI: Update endcover step to v2 to fix CI (#5763)
  - - CA-386173: Update the message of WLB authentication issue
  - - Revert "CP-49953: Remove parse_uri, switch to using Uri module instead"
  - - Fix a bug noticed by a quicktest run
  - - Eliminate unnecessary usage of List.length to check for empty lists
  - - Transition from exception-raising Unix.getenv to Sys.getenv_opt with
  - - Replace Hashtbl.find with Hashtbl.find_opt in trivial cases
  - - Refactor Hashtbl.find out of resources/table.ml
  - - Refactor Hashtbl.find out of xenopsd/xc/readln.ml
  - - Add a gate for Hashbtl.find
  - - CP-50135: Bump datamodel_lifecycle for anti-affinity
  - - IH-621: Add IPMI host power on support and remove DRAC
  - - opam: generate xapi-forkexecd with dune
  - - opam: remove unversioned opam dependencies
  - - opam: generate xapi-networkd using dune
  - - fe_test: print stacktrace on unit test failure
  - - fix(fe_test): make it compatible with fd-send-recv 2.0.2
  - - Fix indentation in C code
  - * Mon Jul 01 2024 Ming Lu <ming.lu@cloud.com> - 24.18.0-1
  - - doc/README.md: Improve the Hugo Quick start guide for an easier start
  - - .codecov.yml: Remove scripts (Codecov is confused, we move scripts/ to python3/)
  - - CA-394444: Update task cancellation in `message_forwarding.ml`
  - - Hugo docs: Add dark mode support, theme variant selector and print
  - - Don't generate link-local address for interfaces
  - - Make `cluster-stack-version` show up in the CLI
  - - Update datamodel lifecycle
  - - Removed headers from the templates.
  - - Renamed files and reordered table of contents.
  - - IH-583 Create standalone implementations of systemd functions
  - - Fix failing builds by attaching package to the cram test
  - - CA-394883: fix race condition allocating task ids
  - - CA-394882: avoid error on tasks that are not ours
  - - CA-381119: use JsonRPC V2 for error replies
  - - CA-394169: Allow task to have permissions on itself
  - - CI: use new version of codecov action
  - - Merge .codecov.yml from feature/py3 to drop scripts checks
  - - CP-50055 Add Go SDK as a release package in XAPI
  - - CI: codecov is unstable, use coveralls
  - - CA-394921: Ignore unkown properties during Java SDK deserialisation
  - - CP-49446: expose SR health values to Python
  - - opam: record correct authorship for stdext packages
  - - IH-628: add new package clock for timekeeping
  - * Tue Jun 18 2024 Ming Lu <ming.lu@cloud.com> - 24.17.0-1
  - - CP-48666: initialize a skeleton project for Go SDK
  - - CP-47347: Add mustache template for Enum Types
  - - CP-47351: generate Record and Ref Type Golang code for all classes
  - - CP-47348: generate Golang code of Enum Type for all classes
  - - CP-47362: generate file headers
  - - CP-48666: collect api errors
  - - CP-47364: generate api messages and errors of Golang code
  - - refactor: create an `Alcotest.testable` to check structure of generated JSON is wanted
  - - refactor: move `objects` and `session_id` from `Gen_go_helper` to `CommonFunctions`
  - - CP-48666: use dune rule to get the destination dir for the generated files
  - - CP-48666: generate all enums to a file
  - - refactor the way of getting enums
  - - CP-48666: refactor the JSON schema checking
  - - CP-48666: refactor `render_template` with an optional newline parameter
  - - CP-47361: generate mustache template for deserialize and serialize functions
  - - CP-47358: Generate convert functions Go code
  - - CP-48855: update templates (APIErrors, APIMessages, Record)
  - - CP-48855: adjust generated json for templates changed
  - - CP-48855: add templates for option and APIVersions
  - - CP-48855: render options
  - - CP-47355, CP-47360: generate mustache template for xapi data module class messages
  - - CP-47354: Generate messages functions Golang code for all classes
  - - CP-47354: add unit tests for `func_name_suffix` and `string_of_ty_with_enums`
  - - CP-48855: render APIVersion
  - - CP-48855: fix go lint var-naming warnings
  - - fix `StringOfTyWithEnumsTest` after merged
  - - CP-48855: it should be only one empty line at end of Go file
  - - CP-47356: expose `published_release_for_param` and `compare_versions` for usage of other modules
  - - CP-47358: Add unit tests for generating convert functions
  - - CP-47355, CP-47360: generate mustache template for xapi data module class messages
  - - CP-47354: Generate messages functions Golang code for all classes
  - - CP-47354: add unit tests for `func_name_suffix` and `string_of_ty_with_enums`
  - - CP-48855: update templates (APIErrors, APIMessages, Record)
  - - CP-48855: adjust generated json for templates changed
  - - CP-48855: add templates for option and APIVersions
  - - CP-48855: render options
  - - CP-48855: render APIVersion
  - - CP-48855: remove go lint var-naming warnings
  - - CP-47356: Support backwards capability for Go SDK
  - - CP-47361: generate mustache template for deserialize and serialize functions
  - - CP-47358: Generate convert functions Go code
  - - CP-47358: Add unit tests for generating convert functions
  - - CP-47354: Generate messages functions Golang code for all classes
  - - CP-47354: add unit tests for `func_name_suffix` and `string_of_ty_with_enums`
  - - CP-48855: render options
  - - CP-48855: render APIVersion
  - - CP-47357: Add a Go JSON-RPC client file
  - - CP-47357: fix review issues
  - - CP-47367 Add type checking for generated SDK Go files
  - - CP-49350: fix variable naming in Go SDK
  - - Set up Github Action for go SDK component test (#5588)
  - - CA-391381: Avoid errors for Partial Callables in observer.py
  - - xapi-tracing: bind its test to the package
  - - opam: generate xapi-tracing with dune
  - - opam: generate xapi-tracing-export with dune
  - - opam: generate rrdd-plugin with dune
  - - opam: generate xapi-rrd-transport-utils with dune
  - - opam: generate xapi-rrdd with dune
  - - opam: drop xapi-rrd-transport
  - - opam: drop xen-api-sdk
  - - Revert "CP-47660 define anti-affinity feature"
  - - Remove CVM and relevant test cases (#5655)
  - - opam: Fix metadata
  - - opam: de-templatise message-switch-core
  - - ocaml: remove unused bindings
  - - dune: enforce version +3
  - - Add `VM.set_uefi_mode` API call
  - - Go SDK: Misc fixes for on-going component tests (#5661)
  - - Add `VM.get_secureboot_readiness` API call
  - - Add `Pool.get_guest_secureboot_readiness` API call
  - - CP-49446: Update SR health to include new constructors
  - - doc: copy design documents from xapi-project.github.io
  - - doc: add info table to design docs
  - - doc: style design doc index
  - - CP-47928: Add component test for Go SDK
  - - CP-49647 use URI for create_misc
  - - CP-49647 use URI for dbsync_master
  - - CP-49647 use URI for export.ml
  - - CP-49647 use URI for import.ml
  - - CP-49647 use URI for importexport.ml
  - - CP-49647 use URI for rrd_proxy.ml
  - - CP-49647 use URI for sm_fs_ops.ml
  - - CP-49647 use URI for xapi_message.ml
  - - CP-49647 use URI for xapi_xenops.ml
  - - CP-49647 use URI for xapi_vm_migrate.ml
  - - CP-49647 use URI for xapi_host.ml
  - - CP-49647 use URI for cli_util.ml
  - - CP-49647 use URI for http.ml
  - - CP-49647 use URI for cli_operations
  - - CP-45235: Support for `xe-cli` to transmit `traceparent`
  - - doc: add design review links (historical)
  - - doc: RDP design: fix list nesting
  - - CP-48995: Instrument `XenAPI.py` to submit traceparent
  - - Update datamodel_lifecycle.ml
  - - CP-49768: Update GO SDK README file (#5671)
  - - CP-49249: Implement SMAPIv3 CBT Forwarding
  - - CA-393866: Add support for Infinity in Java SDK parser
  - - CA-393507: Default cluster_stack value
  - - Remove fix_firewall.sh
  - - CA-393119: Don't use HTTPS for localhost migrations
  - - CP-49828: Remove iovirt script
  - - CP-49129: Add unit test for parallel parsing.
  - - CP-49129: Make unit test run on alcotest.
  - - CP-49129: Replace `ocamlyacc` with `menhir`
  - - CP-49129: Drop global lock around sexpr parsing
  - - CP-49045: replace all uses of ocamlyacc with menhir which is thread-safe
  - - CP-49129: Update `quality-gate.sh` for `ocamlyacc`
  - - Link just qcheck-core, not qcheck
  - - Define qcheck-core dependency in opam packages
  - - Makefile: fix compatibility with the dash shell
  - - CP-49858: Fix phrasing in readme
  - - CP-49858: Add licence text on top of Go source files
  - - CP-49858: Unit test: licence template variable
  - - CP-49858: Remove template variables 'first' and 'is_session_id'
  - - CP-49858: Unit test: Update for changes on template variables
  - - rpm: remove `sexprpp` from public_name
  - - sexpr: add tests to the package
  - - xapi-rrdd: change tests to reduce amount of logs produced
  - - rrd-transport: generate opam metadata using dune
  - - http-lib: generate opam metadata using dune
  - - wsproxy: test with alcotest instead of ounit
  - - vhd-format-lwt: run tests using alcotest
  - - xen-api-client: run tests with alcotest
  - - xapi-sdk: add empty packge to be able to run tests for it
  - - CI: pin packages
  - - CP-49647 use URI for newcli.ml
  - - CP-49677 implement Http.Url using URI
  - - Update quality-gate.sh
  - * Mon Jun 10 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 24.16.0-3
  - - Bump release and rebuild
  - - Remove vm_anti_affinity tag and dependency on m2crypto


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 24.19.2-1.3
changelog:
  - Add xapi-24.19.2-update-new-fingerprint-fields-on-DB-upgrade.backport.patch, backported from XAPI project
  - Add xapi-24.19.2-more-fingerprint-field-updates-fixes.XCP-ng.patch to complement the fix
  - Fixes an issue where new fingerprint fields are not populated, which under
    some circumstances makes pool join fail.


author: Deli Zhang <deli.zhang@cloud.com> - 3.6.8-20
changelog:
  - CP-53516: Fix build issue caused by expat upgrade
  - CP-50324: Replace deprecated functions
  - CP-50324: Remove python3-pip require
  - CA-397616: Remove test_gdb tests temporarily
  - CP-50324: Build with OpenSSL 3
  - CP-50324: Import python3-3.6.8-18.el7.src.rpm


author: Yann Dirson <yann.dirson@vates.tech> - 1.12.0-1
changelog:
  - Backport to el7, based on fc36 package
  - Back to old layout
  - Nuke the '(Build)Requires: ... with ...' syntax


author: Yann Dirson <yann.dirson@vates.tech> - 2.28.1-4.1
changelog:
  - Fix build invocation using hardcoded (and buggy) paths
  - Remove macros undefined and/or (not) expanding inside the package description
  - Add missing requires (taken from XS' python-opentelemetry.spec)


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-7
changelog:
  - Converting specfile from F28 to RHEL7
  - Tests disabled because the minimal RHEL7 Python 3 stack does not contain test
    dependencies
  - Disabled building of the Python 2 subpackage
  Resolves: rhbz#1660563


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-8
changelog:
  - SRPM renamed from python-setuptools to python3-setuptools
  - Package prepared to contain only Python 3 version
  Resolves: rhbz#1660563


author: Yann Dirson <yann.dirson@vates.tech> - 40.4.1-1.0.1
changelog:
  - Cherry-pick:
    * Wed Sep 19 2018 Randy Barlow <bowlofeggs@fedoraproject.org> - 40.4.1-1
    - Update to 40.4.1 (#1599307).
    - https://github.com/pypa/setuptools/blob/v40.4.1/CHANGES.rst
  - Run bootstrap.py in prep (or setup.py cannot run)
  - (hack) Adjust wheel name with a wildcard to cope with the 40.4.1.post20250122
  version it comes up with


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.26.20-3.1
changelog:
  - Sync with 1.26.20-3
  - *** Upstream changelog ***
    * Thu Feb 6 2025 Ming Lu <ming.lu@cloud.com> - 1.26.20-3
    - Bump release for rebuild
    * Sun Jan 26 2025 Marcus Granado <marcus.granado@cloud.com> - 1.26.20-2
    - Update for version 1.26.20 and bump release for rebuild
    * Thu Jan 16 2025 XenServer Rebuild <rebuild@xenserver.com> - 1.26.15-5
    - CP-53241: XenServer 9 rebuild


author: Yann Dirson <yann.dirson@vates.tech> - 3.0.2-4.2
changelog:
  - Switch updategrub.py to python3, install in /opt/xensource/bin,
    keep a compat symlink for old kernel-alt hardcoding a python2.7 path


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.0.4-1.1
changelog:
  - Rebase on 3.0.4-1
    *** Upstream changelog ***
    * Thu Mar 14 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.4-1
    - CA-389988: Fix USB network handling

    * Wed Mar 6 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.3-1
    - CA-371311: Pick up updates to handle USB ethernet cards


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.0.4-2.1
changelog:
  - Rebase on 3.0.4-2
  - *** Upstream changelog ***
    * Tue Jun 11 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.4-2
    - Add missing package dependencies


author: Gaëtan Lehmann <gaetan.lehmann@vates.tech> - 3.0.6-1.1
changelog:
  - Rebase on 3.0.6-1
  - *** Upstream changelog ***
    * Mon Mar 03 2025 Stephen Cheng <stephen.cheng@cloud.com> - 3.0.6-1
    - CA-407115: Adding logic to handle boot entries without additional arguments

    * Fri Nov 08 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 3.0.5-1
    - CA-392459: Avoid opening /dev/mem when calling biosdevname


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 3.0.8-1.1
changelog:
  - Rebase on 3.0.8-1
  - *** Upstream changelog ***
    * Thu Jul 31 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 3.0.8-1
    - CP-308428: bootloader: Add support for xen_boot entry type
    - bootloader: Various cleanup


author: Yann Dirson <yann.dirson@vates.tech> - 3.0.10-1.1
changelog:
  - Rebase on 3.0.10-1
  - *** Upstream changelog ***
    * Tue Sep 30 2025 Stephen Cheng <stephen.cheng@citrix.com> - 3.0.10-1
    - CA-417888: Fix a drucat bug
    - docs/ci: various update

    * Fri Aug 22 2025 Chunjie Zhu <chunjie.zhu@cloud.com> - 3.0.9-1
    - CP-54481: support DMV RPU plugin
    - github ci: various update


author: Marcin Zajaczkowski <mszpak ATT wp DOTT pl> - 0.5.0-5
changelog:
  - remove prodive/obsolete of python-xattr (bug 781838)
  - fix problem with mixed use of tabs and spaces


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.9
changelog:
  - CA-391031: Reinstate rate limiting of RTC_CHANGE events
  - CA-391069: Avoid livelock due to buffered ioreqs


author: Yann Dirson <yann.dirson@vates.tech> - 4.2.1-5.2.12.1
changelog:
  - Sync with xs8 4.2.1-5.2.12, no code change, only rebuild against libjemalloc.so.2:
    * Fri Aug 02 2024 Stephen Cheng <stephen.cheng@cloud.com> - 4.2.1-5.2.12
    - CP-46112: Rebuild after new version of jemalloc

    * Fri Aug 02 2024 Stephen Cheng <stephen.cheng@cloud.com> - 4.2.1-5.2.11
    - CP-46112: Rebuild with new version of jemalloc


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.2.1-5.2.14.1
changelog:
  - Sync with 4.2.1-5.2.14
  - Remove 0001-nvme-Don-t-check-NSID-in-NVME_VOLATILE_WRITE_CACHE.patch in favor of XenServer's fix
  - *** Upstream changelog ***
    * Wed Oct 15 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.14
    - CA-418876: Fix NVMe namespace indexing

    * Thu Oct 02 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.13
    - CA-417654: Fix NVME bug which causes WS2025 install failures


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.2.1-5.2.15.1
changelog:
  - Sync with 4.2.1-5.2.15
  - *** Upstream changelog ***
    * Thu Oct 23 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.2.1-5.2.15
    - Allow passthrough of devices from a PCI segment different than 0.


author: Quentin Casasnovas <quentin.casasnovas@vates.tech> - 4.2.1-5.2.17.1
changelog:
  - Sync with 4.2.1-5.2.17
  - *** Upstream changelog ***
    * Thu Jan 08 2026 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.17
    - CA-407410: qmp: Fix race causing events to be sent during negotiation
    * Mon Dec 01 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.16
    - CA-420202: xen-hvm: Handle framebuffer relocation


author: Thierry Escande <thierry.escande@vates.tech> - 4.2.1-5.2.18.1
changelog:
  - Sync with 4.2.1-5.2.18
  - *** Upstream changelog ***
    * Thu Feb 26 2026 Frediano Ziglio <frediano.ziglio@citrix.com> - 4.2.1-5.2.18
    - CA-422649: xen: mapcache: Fix finding matching entry


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7.14.76-2.1
changelog:
  - Rebase on CH 8.3 Preview
  - Keep qlogic-netxtreme2-Fix-NULL-pointer-dereference-in-bnx2x_del_all_vlans.backport.patch


author: Matthieu Saulnier <fantom@fedoraproject.org> - 3.2.0-1
changelog:
  - update to 3.2.0
  - remove BuildRoot tag in spec file
  - remove "rm -rf $RPM_BUILD_ROOT" at the beginning of %install section
  - remove %clean section
  - remove %defattr lines
  - add a joker for libqrencode.so.* files


author: Peter Gordon <peter@thecodergeek.com> - 3.2.0-2
changelog:
  - Add patch to fix improper LIBPTHREAD macro in the pkgconfig file:
    + fix-LIBPTHREAD-macro.patch
  - Resolves: #795582 (qrencode-devel: Malformed pkgconfig file causes build to
    fail ("@LIBPTHREAD@: No such file or directory"))


author: Matthieu Saulnier <fantom@fedoraproject.org> - 3.3.1-1
changelog:
  - update to 3.3.1
  - remove "Group" tag in spec file
  - fix manfile suffix
  - remove patch to fix improper LIBPTHREAD macro in the pkgconfig file:
    - upstream issue


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-9
changelog:
  - Move /sbin/* files under /usr (bug #983179)
  - Harden executables due to rpc.rquotad and quota_nld daemons (bug #983179)
  - Document quotagrpadmins(5), quotatab(5), warnquota.conf(5), rcp.rquota(8)
    (bug #983179)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-12
changelog:
  - Do not warn if rquotad RPC service is not registered (bug #1155584)
  - Query kernel for next quota on XFS or file system with hidden quota files
    (bug #1305968)
  - Add rpc-rquotad.service file which was known as nfs-rquotad.service
    in nfs-utils (bug #1207239)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-14
changelog:
  - Add nfs-rquotad.service alias for backward compatibility (bug #1207239)
  - Start rpc-rquotad.service when starting nfs-server.service (bug #1207239)


author: Ondrej Vasik <ovasik@redhat.com> - 4.1-18
changelog:
  - Require sil-abyssinica-fonts in supplemental(#994341)
  - Fully specify requirements on subpackages(#971386)


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-2
changelog:
  - Add dist tag, fix a few rpmlint issues, rebuild due to
    wrong vendor (#451229)
  - Added ncurses requirement(#469390)


author: Phil Knirsch <pknirsch@redhat.com> - 8.1-4
changelog:
  - Added the "we-are-upstream" comments according to Fedora review (#226376)
  - Added -p option to install to preserve timestamps (#226376)


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-5
changelog:
  - removed clear from dot-bash_logout (synchronized with bash,
    related to #429406)
  - removed unset USERNAME from dot-bash_profile (synchronized with
    bash, related to #196735)


author: Steve Dickson <steved@redhat.com> - 0.2.0-35
changelog:
  - Restart rpcbind.socket on restarts (bz 1303751)
  - Added localhost:111 to rpcbind socket activation (bz 1293430)
  - Soft static allocate rpc uid/gid (bz 1321279)


author: Steve Dickson <steved@redhat.com> - 0.2.0-39
changelog:
  - Added libtirpc dependency (bz 1396291)
  - Removed xlog warning (bz 1377531)
  - Removed an 'i' warning (bz 1377560)


author: Florian Festi <ffesti@redhat.com> - 4.11.3-22
changelog:
  - Move rpm-plugin-systemd-inhibit man page to that package (#1360706)
  - Fix off by one error in base64 code (#1341913)
  - Add sources to lua to prevent %autosetup failing in some cases (#1359084)
  - Fix refcounting for Python hdr objects (#1358467)
  - Perl dependecy generator: Skip blocks after variable definitions (#1378307)
  - Verify signatures properly (#1371487)
  - Export function in Python binding for yum (#1343692)


author: Florian Festi <ffesti@redhat.com> - 4.11.3-28
changelog:
  - Make sure files in /usr/src/debug are not world writable (RHBZ #1441098)
  - Increase maximal header size (RHBZ #1434656)
  - Increase buffer to be able to render Korean dates (RHBZ #1425231)
  - Add --noconfig option (RHBZ #1406611)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.3-31
changelog:
  - Backport missing infra for --noconfig option (#1406611)
  - As a side-effect, this also makes --noghost work as intended


author: Andrew Cooper <andrew.cooper3@citrix.com> - 3.4.1-1
changelog:
  - Update to 3.4.1
     - Fixes for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086
                 CVE-2024-12087, CVE-2024-12088, CVE-2024-12747
  - Resync specfile


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-41
changelog:
  RHEL 7.8 ERRATUM
  - added patch and doc-patch with new "fsync" imjournal option
    resolves: rhbz#1696686
  - added patch resolving omelasticsearch crash on "nothing" reply
    resolves: rhbz#1684236


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-44
changelog:
  RHEL 7.8 ERRATUM
  - added patch and doc-patch for new caseSensitive imUDP/TCP option
    resolves: rhbz#1309698


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-46
changelog:
  RHEL 7.8 ERRATUM
  - Support Intermediate Certificate Chains in rsyslog
    resolves: rhbz#1627799
  - fixed WorAroundJournalBug patch to not cause leaks
    resolves: rhbz#1744617
  - added patch fixing possible segfault in rate-limiter
    resolves: rhbz#1744682


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-47
changelog:
  RHEL 7.8 ERRATUM
  - edited imfile truncation detection patch with reression fix
    resolves: rhbz#1744856


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-48
changelog:
  RHEL 7.8 ERRATUM
  - added patch resolving crash on wrong MsgProperty
    resolves: rhbz#1549706
  - added patch resolving CVE in pmaixforward module
    resolves: rhbz#1768320
  - added patch resolving CVE in pmcisconames module
    resolves: rhbz#1768323
  - added patch implementing file ID for imfile
    resolves: rhbz#1763746
  - added patch fixing omelasticsearch with ES 6.X
    resolves: rhbz#1600171


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-49
changelog:
  RHEL 7.8 ERRATUM
  - fixed fsync patch to actually revognize the new option
    resolves: rhbz#1696686 (failedQA)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-52
changelog:
  RHEL 7.8 ERRATUM
  - edited patch file ID for imfile to not log useless errors
    also improved file-id behavior to adress newly found problems
    resolves: rhbz#1763746


author: Petr Hracek <phracek> - 4.1.0-0.20.20120314git3c2946
changelog:
  - Multiple packages are installing files under /etc/tmpfiles.d
  - comply http://fedoraproject.org/wiki/Packaging:Guidelines#Tmpfiles.d
  - Resolves: rhbz#1121958


author: Martin Briza <mbriza@redhat.com> - 4.2.1-9
changelog:
  - Backported commit from upstream to fix treating "x26" as "&" character
  - Added virtual provide for gnulib according to http://fedoraproject.org/wiki/Packaging:No_Bundled_Libraries 
    Resolves: #812067 #821776


author: Martin Briza <mbriza@redhat.com> - 4.2.2-1
changelog:
  - New release
  - Dropping included patches: sed-4.2.1-data-loss.patch sed-4.2.1-fix-0x26-on-RHS.patch sed-4.2.1-makecheck.patch
  - Dropping unused patch sed-4.2.1-dummyparam.diff
  - Regenerated sed-4.2.{1,2}-copy.patch
  - Minor change to patching (creating backup files)


author: Jan Pacner <jpacner@redhat.com> - 4.2.2-5
changelog:
  - Related: #948598 (Man page scan results for sed; introduce -c argument, add
    help for -b --binary arguments, cleanup arguments & help)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-3
changelog:
  - add more securetty required for mainframes (#1067347)
  - set SHELL envvar to /bin/bash in bashrc (#1063552)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-5
changelog:
  - reserve uidgid pair 142:142 for activemq (#1086923)
  - add xfs to /etc/filesystems, fallback to /proc/filesystems
    (#1123832)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-6
changelog:
  - change reservation of 185:185 to jboss user (#1192413)
  - reserve uidgid pair 167:167 for ceph (#1221043)
  - reserve uidgid for systemd-network(192:192) (#1213820)
  - reserve uidgid for systemd-resolve(193:193) (#1213820)
  - mention systemd-jounal-gateway can be dynamic (#1213820)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-7
changelog:
  - add basic empty subuid/subgid files for docker (#1311278)
  - specify full path to utilities in /etc/profile and /etc/bashrc
    (#1331871)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-8
changelog:
  - fix group id for tape in /etc/group (should be 33) (#1433020)
  - provide a way how to override set envvars through sh.local file(#1344007)
  - provide a way how to override set ennvars through csh.local file


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.8.71-9.1
changelog:
  - Rebase on XenServer's 2.8.74-1, but keep versioning consistent with CentOS 7
  - Restore upstream CentOS changelog, that had been deleted by XenServer
  - Add setup-2.8.74-delete-telemetry-user-and-group.XCP-ng.patch
  - *** XenServer changelog ***
  - * Mon Apr 03 2023 Deli Zhang <dzhang@tibco.com> - 2.8.74-1
  - - CP-42642: Add certusers group
  - * Fri Mar 31 2023 Ming Lu <ming.lu@cloud.com> - 2.8.73-1
  - - CP-42024: Add telemetry user and group
  - * Wed Mar 29 2023 Tim Smith <tim.smith@citrix.com> - 2.8.72-2
  - - CP-42509 Merge new passwd and group files on package update
  - * Fri Mar 10 2023 Tim Smith <tim.smith@citrix.com> - 2.8.72-1
  - - Rebuild and move sources
  - * Tue Mar 07 2023 Deli Zhang <dzhang@tibco.com> - 2.8.71-10
  - - CP-41888: Add nagios and nrpe users/groups
  - * Tue Mar 07 2023 Deli Zhang <dzhang@tibco.com> - 2.8.71-9
  - - CP-41888: Import initial package


author: Dan Horák <dan@danny.cz> - 1.37-5
changelog:
  - fix various man pages (#948463)
  - add man page for the rescan-scsi-bus.sh script (#948463)
  - Resolves: #948463


author: David Sommerseth <davids@redhat.com> - 1.37-7
changelog:
  - Avoid deletion of /dev/null (#1298737)
  - Fix syntax error in rescan-scsi-bus related to multipath flushing (#1255564)
  - Add upstream updates to sg_inq, sg_rdac and sg_vpd (#1170719)


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-14
changelog:
  - label the newly created home dir correctly (#1077809)
  - mention that chage -d 0 forces password change (#1135010)
  - improve date parsing and error detecting in chage
  - avoid full group database scanning in newgrp in most common case
  - report error if usermod asked for moving homedir and it does not exist


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-16
changelog:
  - update auditing to cover more events and fix some incorrect audit
    records - patch by Steve Grubb (#1151580)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-19
changelog:
  - documentation fixes (#1292820)
  - usermod: make password unlocking compatible with passwd (#1185425)
  - usermod: disallow ':' in raw password setting (#1292815)
  - improve the gid and uid allocation mechanism (#1279321)
  - lastlog: add options to unexpire unused accounts (#1285547)


author: Bastien Nocera <bnocera@redhat.com> - 1.8-3
changelog:
  + shared-mime-info-1.8-3
  - Remove triggers, they're not supported in RHEL 7.4's RPM
  Resolves: #1433916


author: Bastien Nocera <bnocera@redhat.com> - 1.8-4
changelog:
  + shared-mime-info-1.8-4
  - Fix CSV files being associated with LibreOffice Math instead
    of LibreOffice Calc
  - Resolves: #1438589


author: Petr Pisar <ppisar@redhat.com> - 4.13.3-2
changelog:
  - Fix decoding from positional argument while overriding output file
    (bug #901895)
  - Fix decoding to standard output when output file is - or /dev/stdout
    (bug #901895)


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-16.1
changelog:
  - Rebase on 3.2.12-16
  - Sync patches with our latest 3.2.12-8.3 branch
  - Add new patches:
    - 0085-Stop-SMGC-service-on-SR-detach-to-prevent-orphaned-s.patch
    - 0086-fix-linstorvolumemanager-create-local-DB-path-when-r.patch
    - 0087-feat-linstorvolumemanager-raise-when-empty-device-pa.patch
    - 0088-fix-linstorvolumemanager-prevent-ops-on-version-mism.patch
    - 0089-fix-linstor-handle-deleted-volumes-during-UUID-updat.patch
    - 0090-fix-linstor-don-t-raise-if-volume-cannot-be-deleted-.patch
    - 0091-fix-linstor-print-DRBDs-open-during-chain-check-in-R.patch
    - 0092-metadata-improve-error-messages-when-vdi_type-is-mis.patch
    - 0093-Use-serial-instead-of-SCSI-ID-for-USB-devices-107.patch
  - *** Upstream changelog ***
    * Fri Nov 21 2025 Mark Syms <mark.syms@citrix.com> - 3.2.12-16
    - CA-420515: log errors in GC when running in foreground
    - CA-419706: fix incorrect print syntax
    - CA-421013: ensure repeated CBT enable/disable works
    * Mon Nov 10 2025 Mark Syms <mark.syms@citrix.com> - 3.2.12-15
    - CA-418775: ensure getsize and sg_readcap agree on resize
    - CA-420307: encode synthetic SCSI data correctly
    * Wed Oct 15 2025 Mark Syms <mark.syms@citrix.com> - 3.2.12-14
    - CA-416486: leaf coalesce wait for GC
    * Tue Sep 30 2025 Mark Syms <mark.syms@citrix.com> - 3.2.12-13
    - CP-309718: calculate a moving average of leaf size in GC
    * Tue Sep 09 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-12
    - CA-414438 Defend against unexpected VDI name_description contents
    - CA-413899: Rescan lvs when activating
    * Mon Aug 18 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-11
    - Rebuild


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-17.1
changelog:
  - Rebase on 3.2.12-17
  - Remove patches merged upstream:
    - 0092-metadata-improve-error-messages-when-vdi_type-is-mis.patch
  - Add new patches:
    - 0093-fix-linstorvolumemanager-fix-typo-106.patch
    - 0094-fix-linstorvolumemanager-don-t-allow-InUse-volumes-t.patch
    - 0095-fix-cleanup-ensure-VDI-is-active-before-relink-119.patch
    - 0096-feat-linstor-simplify-get_controller_uri-using-ss-co.patch
    - 0097-fix-linstor-ignore-unknown-res-to-get-volume-info-12.patch
    - 0098-feat-linstor-parallelize-SR.scan-cleanup-vhd-util-ca.patch
    - 0099-fix-cleanup-properly-handle-FileSR-exception-for-sla.patch
    - 0100-Ensure-DRBD-sync-before-resizing-volumes-in-thick-co.patch
  - *** Upstream changelog ***
    * Fri Dec 12 2025 Mark Syms <mark.syms@citrix.com> - 3.2.12-17
    - Backport changes from upstream.
    - remove flag gc_no_space from SR sm-config when not applicable
    - improve error messages when vdi_type is missing


author: Damien Thenot <damien.thenot@vates.tech> - 3.2.12-17.7
changelog:
  - Add 0143-fix-LVMSR-activate-chain-for-QCOW2-resize.patch
  - Add 0144-Fix-qcow2util-fix-exception-handling-in-coalesceOnli.patch
  - Add 0145-feat-use-preferred-image-formats-as-a-list.patch
  - Add 0146-fix-cleanup-online-coalesce-would-crash.patch


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-17.8
changelog:
  - Add 0147-fix-linstor-add-backward-compatibility-for-getInfo.patch
  - Add 0148-fix-linstor-add-backward-compatibility-for-manager-p.patch


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-1
changelog:
  - rebase to most up2date upstream tarball, remove patches already upstream, fix
    code movements in patches (#928758)
  - fix man-page-day objections (private #948866)
  - fix the build for aarch64 (#926571)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-2
changelog:
  - package spax and scpio separately (#959917)
  - fedora-review fixes, unapplied patch
  - make the spax to be pax alternative (#960007)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-7
changelog:
  - we should provide /etc/rmt symlink for a while (related to #968980)
  - use the ssh as the default remote access method


author: Manuel "lonely wolf" Wolfshant <wolfy@fedoraproject.org> - 2.64-7
changelog:
  - remove world readable permissions of the config file (#962988)
  - revive the authpass patch (#970123)
  - revive improved default config settings which were lost during rebase (#895708)


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-2
changelog:
  - Copy over changes in tests/ioctl_evdev-success.c (from cdd8206a
    "tests: test evdev bitset decoding more thoroughly")
    to tests-m32/ioctl_evdev-success.c and tests-mx32/ioctl_evdev-success.c
  - Copy over changes in tests/ioctl_evdev.c (from 5ee385e2
    "evdev: fix decoding of EVIOCGBIT(0, ...)") to tests-m32/ioctl_evdev.c
    and tests-mx32/ioctl_evdev.c
  - Resolves: #1746478


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-4
changelog:
  - Include upstream patches that fix issues reported by covscan:
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing", and
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register".
  - Resolves: #1747524


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-5
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790052):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache" and
    8e515c74 "tests: add strace-k-p test".
  - Add commit v5.4~97 "xlat: use unsgined type for mount_flags fallback values"
    (A leftover for #1747524).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-6
changelog:
  - Fix expected alignment for IPC tests (#1795261):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".


author: Andrii Sultanov <andriy.sultanov@vates.tech> 5.60-6.1
changelog:
  - Make the openssl BuildRequires conditional on tests being built
  - *** Upstream changelog ***
    * Wed Apr 15 2026 Ming Lu <ming.lu@cloud.com> - 5.60-6
    - CA-425922: verifyPeer failed when multi-same-DN self-signed certificates
    - Disable tests due to certificates used in tests have expired


author: Gael Duperrey <gduperrey@vates.tech> - 1.9.15-3.1
changelog:
  - Synced from sudo-1.9.15-3.xs8.src.rpm
  - Removed XS-specific test of dist macro to determine buildrequires


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.15-4.1
changelog:
  - Sync with 1.9.15-4
  - *** Upstream changelog ***
  - * Thu Jul 4 2024 Lin Liu <Lin.Liu01@cloud.com> - 1.9.15-4
  -- - Drop python plugin as not required


author: Gaëtan Lehmann <gaetan.lehmann@vates.tech> - 1.9.15-5.1
changelog:
  - Sync with 1.9.15-5
  - *** Upstream changelog ***
    * Tue Nov 12 2024 Lin Liu <Lin.Liu01@cloud.com> - 1.9.15-5
    - CP-50489: Remove selinux


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 0.7.3-8
changelog:
  - Add gnutls-compat.patch back to make compatible with xs8/xs9
  - CA-377995: Fix static analysis warnings


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-8
changelog:
  - resolves: #846699
    renamed nfsiostat to nfsiostat-sysstat, as nfsiostat is also provided
    by the nfs-utils package
  - resolves: #1224882
    fixed bug when pidstat could run out of pre-allocated space for PIDs
  - resolves: #1258990
    added support for more CPUs
  - resolves: #1267972
    fixed bug when iostat didn't display the full device name if it's too long
  - resolves: #1328490
    fixed bug, when sadc could forward SIGINIT to init process and couse reboot


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-9
changelog:
  - related: #846699
    do the renaming of nfsiostat properly, with patch
  - resolves: #1332662
    added tapestat utility for monitoring tape drives


author: Thomas Woerner <twoerner@redhat.com> 1.2.29-4
changelog:
  - fixed possible privilege escalation flaw via use of python pickle
    (CVE-2011-2520), replaced pickle by json (rhbz#717985) and (rhbz#722991)
  - stop D-BUS firewall mechanism on update


author: Lukas Nykryn <lnykryn@redhat.com> - 219-54
changelog:
  - automount: ack automount requests even when already mounted (#1535135)
  - udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
  - journald-native: Fix typo in MANDLOCK message (#1501017)
  - process-util: make our freeze() routine do something useful (#1540941)
  - dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
  - bus-util.c: fix TasksMax= property assignment (#1537147)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-55
changelog:
  - sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
  - core: Let two more booleans survive a daemon-reload (#1542391)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-57
changelog:
  - sd-journal: properly handle inotify queue overflow (#1540538)
  - sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
  - journalctl: Periodically call sd_journal_process in journalctl (#1540538)
  - sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-57.1
changelog:
  - umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
  - core: Implement timeout based umount/remount limit (#1571098)
  - core: Implement sync_with_progress() (#1571098)


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 219-57.3
changelog:
  - Maintenance: fix guilt apply failure
  - CA-334762: backport UDEV_DISABLE_PERSISTENT_STORAGE_RULES_FLAG
  - CP-38416: Enable static analysis


author: Tomas Repik <trepik@redhat.com> - 2:1.26-32
changelog:
  - restore incremental backups correctly, files were not being removed (rhbz#1184697)
  - fix the behavior of tar when --directory option is used together with
    --remove-files
  - repair the ignorance of --xattrs-exclude/include options (rhbz#1341786)
  - Intorduce new option '--keep-directory-symlink'


author: Pavel Raiskup <praiskup@redhat.com> - 1.26-33
changelog:
  - extract: deterministic archive type detection (rhbz#1437297)
  - avoid hang when extracting with --xattrs --skip-old-files (rhbz#1408168)
  - fix listing of large sparse members (rhbz#1347229)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.13-5
changelog:
  - Fixed fork, enabled threading (by notifier-thread-fork-fix patch)
    Resolves: rhbz#869315
  - Rebuild to fix systemtap on aarch64
    Resolves: rhbz#1238479


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-1
changelog:
  - New upstream version 4.9.0. Resolves: #1422473
  - Add legacy -P switch with warning. Related to #1422473 and #1292056


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-4
changelog:
  - Drop downstream patch (drop root privileges)
  - Add libcap-ng as a new build dependency
  - Related: #1262283


author: Martin Sehnoutka <msehnout@redhat.com> - 1:0.17-60
changelog:
  - Introduce new -i switch
  - ip addresses will be logged into utmp instead of hostname
  - Resolves: #1323094


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-63
changelog:
  - Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                      - additional info added to manpage


author: Michal Ruprich - 1:0.17-64
changelog:
  - Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                      - more clear formulation of man page note - previous note was a bit ambiguous


author: Petr Pisar <ppisar@redhat.com> - 1.7-39
changelog:
  - Fix maximal RSS report (bug #702826)
  - Clean spec file
  - Recompute CPU usage at finer level (bug #527276)


author: Patsy Griffin <patsy@redhat.com> - 2022d-1
changelog:
  - Rebase to tzdata-2022d
    - Palestine's DST transition will be on October 29, 2022,
      not October 28, 2022.
    - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.


author: Patsy Griffin <patsy@redhat.com> - 2022e-1
changelog:
  - Rebase to tzdata-2022e
    - Jordan and Syria cancelled the DST transition planned
      for 2022-10-28, remaining at +03 permanently.


author: Patsy Griffin <patsy@redhat.com> - 2022f-1
changelog:
  - Rebase to tzdata-2022f
    - Mexico will stop observing DST except near the US border.
    - Chihuahua moved to -06 year round starting on 2022-10-30.
    - Fiji no longer observes DST.


author: Patsy Griffin <patsy@redhat.com> - 2022g-1
changelog:
  - Rebase to tzdata-2022g
    - The northern edge of the Mexican state of Chihuahua will
      change time zone to agree with nearby US locations on
      2022-11-30.
    - Added a new Zone America/Ciudad_Juarez that splits from
      America/Ojinaga.


author: Patsy Griffin <patsy@redhat.com> - 2023a-1
changelog:
  - Rebase to tzdata-2023a
    - Egypt reintroduced DST, from April through October.
    - Morocco springs forward April 23, not April 30.
    - Palestine delayed the start of DST this year.


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-15
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196134 #1196122 #1196126 #1196130


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-16
changelog:
  - Added patch for build option "-Werror=format-security"
  - Added support of non-unicode non-latin charset
  - Fix print of non-ascii filenames
  - Fix troubles with symlinks for archives with many files
    Resolves: rhbz#1276746, rhbz#1286165, rhbz#1276744


author: Jakub Martisko <jamartis@redhat.com> - 6.0-19
changelog:
  - rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
  - make linking flags configurable from the specc file
  - set linking flags to use relro hardening
    Related: #1531116


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-2.1
changelog:
  - Sync with 1.2.0-2
  - *** Upstream changelog ***
  - * Fri Jan 26 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 1.2.0-2
  - - Rebuild against libxenstore.so.4


author: Thierry Escande <thierry.escande@vates.tech> - 1.2.0-2.2
changelog:
  - Auth: Add support to make KEK and DB files optional
  - Auth: Enable AUTH_ONLY_PK_REQUIRED build macro


author: Thierry Escande <thierry.escande@vates.tech> - 1.2.0-2.3
changelog:
  - Remove generation and installation of KEK and db files
  - Add helper script to remove pem file from source archive
  - Update source archive with pem files removed


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 1.2.0-2.4
changelog:
  - Add gen-sbvar.py
  - Add self-signed PK.auth blob
  - Generate {KEK,db,dbx}.auth using gen-sbvar.py
  - Update secureboot-certs to take builtin KEK/db/dbx
  - Update Secure Boot certs from microsoft/secureboot_objects@3f69ef4


author: Thierry Escande <thierry.escande@vates.tech> - 1.2.0-3.1
changelog:
  - Sync with 1.2.0-3
  - *** Upstream changelog ***
    * Wed Jan 22 2025 XenServer Rebuild <rebuild@xenserver.com> - 1.2.0-3
    - Add yangtze release branch
    - CP-53310: XenServer 9 rebuild


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 1.2.0-3.4
changelog:
  - Fix owner GUID of EFI_SIGNATURE_DATA structures
  - Restore dbx generation
  - Update dbx info to microsoft/secureboot_objects@e64d1a5c89e5 (v1.6.1)
  - Add fix-efivars.py script


author: Andriy Sultanov <andriy.sultanov@vates.tech> - 1.3.1-2.1
changelog:
  - Sync with 1.3.1-2
  - *** Upstream changelog ***
    * Mon Jan 12 2026 Andrew Cooper <andrew.cooper3@citrix.com> - 1.3.1-2
    - Fix for XSA-478 / CVE-2025-58151

    * Thu Nov 13 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.3.1-1
    - CA-419599: Check DATA_LIMIT when appending

    * Mon Oct 06 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.3.0-1
    - CP-309775: Add new Microsoft certificates
    - Fix varstore-sb-state exit code
    - Don't fail setup_keys if the optional dbx is missing


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 1.3.2-2.1
changelog:
  - Sync with 1.3.2-2
  - No change in auth data
  - *** Upstream changelog ***
    * Wed Apr 08 2026 Alex Brett <alex.brett@citrix.com> - 1.3.2-2
    - CP-311096: Use pre-signed auth data

    * Fri Mar 20 2026 Stephen Cheng <stephen.cheng@citrix.com> - 1.3.2-1
    - CP-311837: Add -g option for GUID in create-auth
    - CP-311836: Support detached signatures in create-auth utility
    - Remove xsa478.patch since the fix is now in upstream


author: Petr Pisar <ppisar@redhat.com> - 1.9-14
changelog:
  - Fix a security warning by compiler (bug #1037376)
  - Move the executable to /usr/sbin
  - Modernize the spec file


author: Edwin Török <edvin.torok@citrix.com> - 2.0.1-5
changelog:
  - Maintenance: move single source into .spec repo instead of separate repo
  - CP-38218: rename to .py so SonarQube can find it


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.1-1.1
changelog:
  - Update to 2.0.1-1
  - *** Upstream changelog ***
  - * Mon Jan 30 2023 Zhuangxuan Fei <zhuangxuan.fei@cloud.com> - 2.0.1-1
  - - CA-374882: Add new driver microsemi-aacraid as requires


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.2-1.1
changelog:
  - Rebase on 2.0.2-1
  - Keep dependency to our mpi3mr-module RPM instead of upstream's new but older broadcom-mpi3mr RPM
  - *** Upstream changelog ***
  - * Wed Nov 22 2023 Mark Syms <mark.syms@citrix.com> - 2.0.2-1
  - - Add broadcom-mpi3mr to required drivers


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.3-1.1
changelog:
  - Rebase on 2.0.3-1
  - Switch dependency from our igc-module to the new intel-igc
  - *** Upstream changelog ***
  - * Fri Apr 19 2024 Stephen Cheng <stephen.cheng@cloud.com> - 2.0.3-1
  - - Add intel-igc to required drivers


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.3.7-1.3
changelog:
  - Add import-trusted-keys one-shot service. Replaces old service...
  - ... from xenserver-firstboot (60-import-keys)


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-2
changelog:
  - 1383902 - CPU spikes to 100% and timeouts observed in strace when opening yaml extensions using vim


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-3
changelog:
  - 1267826 - Include c++11 syntax highlighting in vim
  - 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.629-1
changelog:
  - 1563419 - Vim in RHEL 7 is older than VIM in RHEL 6 (Rebase)
  - 1377316 - [RFE] make _remote_ vim doing the right decisions about 'set background'


author: Citrix Systems, Inc. <www.citrix.com>
changelog:
  - fix possible buffer overflow if many images are captured
  - fix format error
  - does not take capture twice


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 10.2.0-1
changelog:
  - Use xenstored.service rather than socket
  - Specify coredump limit in unit rather than wrapper script
  - CA-308916: Remove special coredump handling


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.1.0-3
changelog:
  - Do not require the debuginfo package anymore
  - Do not strip binaries nor produce the debuginfo package at all for now


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.2.0-1
changelog:
  - New version 1.2.0
  - Correctly report error codes when opening an emu stream using a non-sock file
  - Streams support pipes


author: Pau Ruiz Safont <pr.safont@vates.tech> - 1.2.0-1
changelog:
  - bin: fix unused variables
  - feature: experimental features
  - v6d is now restarted by `xe-toolstack-restart`


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3-5
changelog:
  - Remove dlm, dlm-lib, corosync and corosynclib
  - We don't use XS's clustering feature which means we don't need them


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.1.0-4
changelog:
  - Do not require the debuginfo package anymore
  - Do not strip binaries
  - Do not produce the debuginfo package at all for now


author: Gael Duperrey <gduperrey@vates.fr> - 8.2.0-11
changelog:
  - Switch RPMs to systemd by default and provide legacy RPMs for chkconfig.
  - Merge separate -xenstore RPMs back into xe-guest-utilities RPMs


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3-12
changelog:
  - Update release to match that of the RPM in XCP-ng 8.2, since this is what
    also defines the suffix of the version of the xe-guest-utilities packages
    in the ISO.


author: Gael Duperrey <gduperrey@vates.tech> - 8.3-14
changelog:
  - Remove noise from patches using git-format-patch options
  - Add patch to remove the invitation to reboot after install of the tools
  - Add patch to support RHEL 10 and derivatives in install.sh


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-28
changelog:
  - Update repo files for CentOS and EPEL
  - Point at repo.vates.tech for CentOS since mirrorlist.centos.org was cut
  - Add "(EOL)" to repo descriptions for EOL repos
  - Drop unused repos


author: Lucas Ravagnier <lucas.ravagnier@vates.tech> - 8.3.0-29
changelog:
  - Add 0001-fix-curl-resolve-TLS-issue-caused-by-restrictive-con.patch
  - This adds a cipher to '.curlrc' to fix a TLS Handshake Error with xoa.io


author: Yann Dirson <yann.dirson@vates.tech> - 8.3.0-30
changelog:
  - Sync with xenserver-release-8.4.0-14:
    - 0001-Sync-vm.slice-with-xenserver-release-v8.4.0-12.tar.g.patch
    - 0002-Sync-systemd-presets-with-xenserver-release-v8.4.0-1.patch
    - Pull xcp-python-libs-compat (dropped from xapi deps between
      4.19 and 4.39)
  - *** Upstream changelog ***
    * Thu Dec 05 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 8.4.0-14
    - CA-403415: Install xcp-python-libs-compat for XS8
    * Fri Oct 04 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 8.4.0-13
    - Enable new RRDD plugins
    * Fri Sep 20 2024 Mark Syms <mark.syms@cloud.com> - 8.4.0-12
    - CA-399511: Change systemd dependencies for vm.slice


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-31
changelog:
  - Rebuild for updated branding-xcp-ng
  - Loosely sync with xenserver-release-8.4.0-15 (no real change, just a merge point)
    * Thu Jan 23 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 8.4.0-15
    - CP-53338: Rebuild to pick up branding changes to 8.4


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 8.3.0-32
changelog:
  - Fix patches that weren't properly generated and included in the specfile:
    - 0002-Sync-vm.slice-with-xenserver-release-v8.4.0-12.tar.g.patch
    - 0003-Sync-systemd-presets-with-xenserver-release-v8.4.0-1.patch


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.8.0-1
changelog:
  - Add a way to install packages with updater.py
  - xcp-ng-linstor is now a default repo of updater.py


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1.11.0-1
changelog:
  - Update smartctl plugin to report status about megaraid devices.
  - Add a new ipmitool plugin to get information from ipmitool.
    - It returns information about sensors
    - It also returns ipmi lan information


author: David Morel <david.morel@vates.tech> - 1.15.0-1
changelog:
  - Heavy rework of sdncontroller plugin
  - Version 1.14.0 was skipped, as the lsblk plugin changes introduced
    performance issues and were reverted in this release.


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.7-2
changelog:
  - really remove the gcc-warning patch & remove old Makefile from git
  - s/Url/URL/, for both fixes thanks to pshiffer


author: Andrew Cooper <andrew.cooper3@citrix.com>
changelog:
  Version 2.4.0
  - Various bug fixes
  - Add debugging info for console rings
  - Allow detection of a Xen debug build
  - Doxygen updates
  - Move classes into namespaces


author: Roger Pau Monné <roger.pau@citrix.com> - 2.6.1
changelog:
  - Fix for fetching dom0 console with kernels >= 5.10
  - Fix to deal with Xen builds without PV32 support.


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.6-4.1
changelog:
  - Sync with XenServer 4.17.6-4
  - *** Upstream changelog ***
    * Mon Feb 23 2026 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.17.6-4
    - Improve migration performance
    * Mon Feb 09 2026 Roger Pau Monné <roger.pau@citrix.com> - 4.17.6-3
    - Fix Xen watchdog triggering during domain construction.


author: Lucas Pottier <lucas.pottier@vates.tech> - 4.17.6-5.1
changelog:
  - Sync with XenServer 4.17.6-5
  - Use xsa480.patch provided by XenServer
  - *** Upstream changelog ***
    * Thu Mar 05 2026 Roger Pau Monné <roger.pau@citrix.com> - 4.17.6-5
    - Fix for XSA-480 CVE-2026-23554


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.6-6.1
changelog:
  - Sync with XenServer 4.17.6-6
  - Use 0001-xen-mm-don-t-unconditionally-clear-_PGC_need_scrub-i.patch from
    XenServer
  - *** Upstream changelog ***
    * Wed Mar 18 2026 Roger Pau Monné <roger.pau@citrix.com> - 4.17.6-6
    - Fix for CVE-2026-4397.


author: Quentin Casasnovas <quentin.casasnovas@vates.tech> - 4.17.6-6.2
changelog:
  - Fix for XSA-483 / CVE-2026-23556
  - Fix for XSA-486 / CVE-2026-23558
  - Fix for XSA-488 / CVE-2025-54505


author: Lucas Pottier <lucas.pottier@vates.tech> - 4.17.6-8.1
changelog:
  - Sync with XenServer 4.17.6-8
  - Drop patches for nested-virt, XSA-483, XSA-486, XSA-488 from the XCP-ng patch queue,
    now provided in the main patch queue
  - Drop unused 0002-tools-golang-update-auto-generated-libxl-based-types.patch from the
    XCP-ng patch queue
  - *** Upstream changelog ***
    * Wed Apr 22 2026 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.6-8
    - Fix for XSA-483 CVE-2026-23556
    - Fix for XSA-484 CVE-2026-23557
    - Fix for XSA-486 CVE-2026-23558
    * Mon Apr 20 2026 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.6-7
    - Fix for XSA-488 CVE-2025-54505


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.6-9.1
changelog:
  - Sync with XenServer 4.17.6-9
  - *** Upstream changelog ***
    * Wed May  6 2026 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.6-9
    - Fix for XSA-490 CVE-2025-54518
    - Fix crash on boot when setting up shadow stacks
    - Fix hang on boot when configuring the IOMMU on certain AMD platforms
    - Fix a bug on AMD systems where a guests CR2 register value gets lost on
      migrate


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.6-9.3.1
changelog:
  - Fix for XSA-497 (CVE-2026-42494, CVE-2026-42495, CVE-2026-62423,
    CVE-2026-62424, CVE-2026-62425)
  - Fix for XSA-500 (CVE-2026-62428)
  - Fix for XSA-501
  - Fix for XSA-503 (CVE-2026-62430)
  - Fix for XSA-504 (CVE-2026-62431)
  - Fix for XSA-505 (CVE-2026-62432)
  - Fix for XSA-507 (CVE-2026-62434)


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 10-1
changelog:
  - Remove xenbuilder files
  - CA-323402: Avoid 900s delay during iSCSI boot when path is down
  - CA-323402: Don't wait for network interfaces to be setup


author: Ming Lu <ming.lu@cloud.com> - 2.0.11-1
changelog:
  - CP-52905: Add collection for license server telemetry logs
  - CA-403717: Make XEN_RT mode additive for entries


author: Stephen Cheng <stephen.cheng@cloud.com> - 2.0.12-1
changelog:
  - CA-399631: Increase the max size of xenserver-config for bug-tool
  - CP-52714: Include rolled over xha logs into a server status report


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.3.0-3.1
changelog:
  - Rebase on CH 8.3 Preview
  - Re-add xha-10.1.0-support-drbd.XCP-ng.patch patch to support DRBD devices


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.5.0-1.1
changelog:
  - Update to 10.5.0-1
  - Drop xha-10.3.0-support-ipv6.XCP-ng.patch, merged upstream
  - *** Upstream changelog ***
  - * Wed May 24 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 10.5.0-1
  - - lib: ensure the correct maximum amount of hosts
  - * Tue Apr 18 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 10.4.0-1
  - - CP-41049: Safely remove /proc/xen from dom0
  - - feat(heartbeat): support IPv6


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 25.0.0-1.1
changelog:
  - Update to 25.0.0-1
  - *** Upstream changelog ***
    * Fri Jan 10 2025 Rob Hoes <rob.hoes@citrix.com> - 25.0.0-1
    - CA-403139: Set scheduler policy and priority thread
    - CA-403683: Configurable syslog printing


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 25.1.0-1.1
changelog:
  - Update to 25.1.0-1
  - Sync patches and robustify access to NBD paths using O_SYNC
  - *** Upstream changelog ***
    * Thu Mar 06 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 25.1.0-1
    - CA-407106: Fix various static analyzer warnings
    - CA-404658: Separate heartbeat send and receive threads
    - CA-407313: Replace HA spinlock with rwlock
    - CA-407256: Call to xha-lc is a no-op
    - CA-406953: Fix pointer truncation in hypercall arguments and undefined behaviour
    * Thu Jan 30 2025 Alex Brett <alex.brett@cloud.com> - 25.0.1-1
    - CA-405454: Fix xha when using cgroup v2


author: Gael Duperrey <gduperrey@vates.tech> - 25.2.0-1.1
changelog:
  - Update to 25.2.0-1
  - *** Upstream changelog ***
    * Tue Sep 02 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.2.0-1
    - CP-53906: Print host index in query_liveset
    - fix xha logging typos in sm.c
    - ci: Add missing package
    - CA-404344: update service to systemd command


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.1.14-2.1
changelog:
  - Update to 10.1.14-2
  - *** Upstream changelog ***
  - * Fri Jul 14 2023 Alex Brett <alex.brett@cloud.com> - 10.1.14-2
  - - CP-43942: Remove Portable SR feature


author: Benjamin Reis <benjamin.reis@vates.tech> - 11.0.2-1.1
changelog:
  - Update to 11.0.2-1
  - Redo xsconsole-11.0.2-support-ipv6.XCP-ng.patch (now contains xsconsole-10.1.14-ipv6-autoconf.XCP-ng.patch)
  - Drop xsconsole-10.1.14-display-vlan.XCP-ng.patch
  - *** Upstream changelog ***
  - * Tue Mar 19 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 11.0.2-1
  - - CA-369899: Add NTP config control for DHCP|Default|Manual|None options
  - - CA-389475: Update the timezone when it changes
  - * Thu Feb 29 2024 Mark Syms <mark.syms@citrix.com> - 11.0.1-1
  - - CA-389275: return insrtype if no translation
  - * Thu Feb 29 2024 Fei Su<fei.su@cloud.com> - 11.0.0-2
  - - CP-48192 Requires glibc-langpack-en to fix the locale.Error on xs9
  - * Mon Feb 05 2024 Stephen Cheng <stephen.cheng@cloud.com> - 11.0.0-1
  - - CP-44690: Upgrade to python 3


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 11.0.6-1.1
changelog:
  - Sync with 11.0.6-1
  - *** Upstream changelog ***
  - * Fri Jun 07 2024 Stephen Cheng <stephen.cheng@cloud.com> - 11.0.6-1
  - - CA-388527: Fix 'timed out' when creating an ISCSI SR
  - * Thu May 16 2024 Lin Liu <Lin.Liu01@cloud.com> - 11.0.3-1
  - - CA-357771: Remove obsolete strings: StorageLink(CVSM/cslg) leftovers


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 11.0.8-1.1
changelog:
  - Sync with 11.0.8-1
  - *** Upstream changelog ***
    * Tue Jul 23 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 11.0.8-1
    - CA-390512: Improved xenapi error handling
    * Tue Jul 23 2024 Alex Brett <alex.brett@cloud.com> - 11.0.7-1
    - CP-49228: Reintroduce Portable SR feature


author: David Morel <david.morel@vates.tech> - 11.0.8-1.2
changelog:
  - Backport fix to sync network reset trigger file with current XAPI
  - Backport fix for IPv6 truncated in pool.conf on network reset


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 11.0.9.1-1.1
changelog:
  - Sync with 11.0.9.1-1
  - Drop xsconsole-11.0.8-sync-network-reset-trigger-file.patch
  - Drop xsconsole-11.0.8-do-not-truncate-ipv6-in-pool-config-on-reset.patch
  - *** Upstream changelog ***
    * Thu Jul 31 2025 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 11.0.9.1-1
    - CP-309227: Enable xsconsole to support control SSH and ssh-auto-mode
    * Thu Aug 1 2024 Lin Liu <Lin.Liu01@cloud.com> - 11.0.9-1
    - CA-395025: Local command shell login failed on XS9


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.3-2
changelog:
  - Correct License tag (command line tool is GPLv2+)
  - Adjust Source tag to get a more descriptive tarfile name


author: Pavel Raiskup <praiskup@redhat.com> - 5.1.2-5alpha
changelog:
  - fix manual page inconsistencies with help output (private #948533)
  - enable/fix the 'xzgrep -h' (private #850898)


author: Daniel P. Berrange <berrange@redhat.com> - 2.0.4-1
changelog:
  - Update to 2.0.4 release (rhbz #845777)
  - Fix License tag to reflect change in 2.0.0 series from BSD to ISC


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-151
changelog:
  - Add repo-id to repomd timestamp error message.
  - Resolves: bug#1389816
  - Don't recommend makecache if just running.
  - Resolves: bug#1369389
  - Add logging of bad update notice duplicates.
  - Resolves: bug#1194915


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-153
changelog:
  - Filter duplicates when counting security updates.
  - Resolves: bug#1399628
  - sqlitesack: fix filelist queries for duplicate pkgs.
  - Resolves: bug#1391507


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-154
changelog:
  - Add payload_gpgcheck option.
  - Resolves: bug#1343690
  - Add hint about rm -rf for yum clean all.
  - Resolves: bug#1357083
  - Have "yum check" ignore self conflicts.
  - Resolves: bug#1370134
  - Detect installed virtual provide in install().
  - Resolves: bug#1352585
  - Fix reget problems with simple md filenames.
  - Resolves: bug#1397829


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-155
changelog:
  - Don't pollute stderr in FIPS mode.
  - Resolves: bug#1287610
  - Don't require enabled repos for URL installs.
  - Resolves: bug#1175315
  - installonlypkgs: add "installonlypkg(kernel)
  - Resolves: bug#1358492
  - Manpage fixes.
  - Resolves: bug#1386597
  - Resolves: bug#1411575


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-156
changelog:
  - Preload shared libs that we may dlopen().
  - Resolves: bug#1458841
  - Update payload_gpgcheck documentation.
  - Resolves: bug#1451817
  - Make exactarchlist support wildcards and add docs.
  - Resolves: bug#1361609
  - Add usercache config option.
  - Resolves: bug#1432319


author: CentOS Sources <bugs@centos.org> - 3.4.3-158.el7.centos
changelog:
  - CentOS yum config
  -  use the CentOS bug tracker url
  -  retain installonly limit of 5
  -  ensure distrover is always from centos-release
  - Make yum require yum-plugin-fastestmirror


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-37
changelog:
  - needs-restarting: add option for reboot hint.
  - Resolves: bug#1192946
  - needs-restarting: add option to list services.
  - Resolves: bug#1335587
  - reposync: add --download-metadata to the man page.
  - Resolves: bug#1329649
  - debuginfo-install: also respect provides when testing for installonly.
  - Related: bug#1293707


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-40
changelog:
  - needs-restarting: rework reboothint logic.
  - Related: bug#1192946
  - needs-restarting: rebase patch for 1335587.
  - Related: bug#1335587


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-41
changelog:
  - yum-config-manager: only select exact matches from --setopt.
  - Resolves: bug#1403015
  - yum-plugin-verify: set exit status to 1 in case of problems.
  - Resolves: bug#1406891


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-43
changelog:
  - yumdownloader: fix crash on broken srpm metadata.
  - Resolves: bug#1458098
  - package-cleanup: don't remove required dupes.
  - Resolves: bug#1455318
  - fastestmirror: move the logic before MD retrieval.
  - Resolves: bug#1428210
  - yum-debug-dump: improve repo failure handling.
  - Resolves: bug#1445751


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-44
changelog:
  - Add pre-transaction-actions plugin.
  - Resolves: bug#1470647
  - yum-builddep: add --define option.
  - Resolves: bug#1437636
  - verifytree: handle no @core group gracefully.
  - Resolves: bug#1349433
  - verifytree: fix handling of missing comps.
  - Resolves: bug#1333353


author: Peter Schiffer <pschiffe@redhat.com> - 1.2.7-8
changelog:
  - related: #832545
    reverted changes for this bug, static libraries shouldn't be compiled with
    -fPIC flag


