# changelog

author: George Dunlap <george.dunlap@citrix.com> - 4.8.2-10.el7.centos
changelog:
  - Backport PVH functionality from 4.8.3pre-shim-comet branch
  - "Comet" shim functionality will come in a later update


author: Kevin Stange <kevin@steadfast.net> - 4.8.3-6.el7.centos
changelog:
  - Apply XSA-264, 265, 266, and 267
  - Note: This XSA-267 backport does not support the Eager FPU command line switch


author: Cole Robinson <crobinso@redhat.com> - 3.2.1-2
changelog:
  - Fix aarch64 gic default for non-kvm VMs (bz #1449837)
  - Don't run libvirtd in live environment, to avoid network collision (bz


author: Cole Robinson <crobinso@redhat.com> - 3.2.1-4
changelog:
  - Fix resuming qemu VMs suspended before libvirt 3.2.0
  - Fix issues with AMD CPU models, and some others


author: Karl Johnson <karljohnson.it@gmail.com> 4.9.135-33
changelog:
  - Upgraded to 4.9.135
  - Remove Patch10002 xsa270.patch, rolled in upstream since 4.9.133
  - Build with GCC 7 from devtoolset-7


author: Karl Johnson <karljohnson.it@gmail.com> 4.9.141-34
changelog:
  - Upgraded to 4.9.141
  - Switch CONFIG_BRIDGE and CONFIG_BRIDGE_NETFILTER from m to y
  - Remove Patch10003 tpm-Restore-functionality-to-xen-vtpm-driver, rolled in upstream since 4.9.137


author: Karl Johnson <karljohnson.it@gmail.com> 4.9.165-35
changelog:
  - Upgraded to 4.9.165
  - Revert GCC 7 to base GCC for now as it is not possible to use devtoolset on CBS
  - Revert CONFIG_BRIDGE and CONFIG_BRIDGE_NETFILTER to module


author: Johnny Hughes <johnny@centos.org> 4.9.39-29
changelog:
  - Upgraded to upstream 4.9.39
  - Switch from CONFIG_SLUB to CONFIG_SLAB to resolve some xen hypervisor
    related memory errors.


author: Johnny Hughes <johnny@centos.org> 4.9.48-29
changelog:
  - Upgraded to upstream 4.9.48
  - Added Destroy-ldisc-instance-hangup.patch
  - Remove XSA-229 patch (rolled in upstream)


author: Johnny Hughes <johnny@centos.org> 4.9.75-30
changelog:
  - Upgraded to upstream 4.9.75
  - Remove Destroy-ldisc-instance-hangup.patch
  - Allow for differnt c6 and c7 config files for x86_64 arch


author: Anthony PERARD <anthony.perard@citrix.com> - 4.8.2-4.el7.centos
changelog:
  - Import from upstream the updated optional patch from XSA-240, it is necessary
    to apply the update of XSA-240.
  - Import update of XSA-240 (v5)
  - Apply the new final patch from XSA-243 (v5)


author: Anthony PERARD <anthony.perard@citrix.com> - 4.8.4.42.gd95b5bb31e-1
changelog:
  - Use a snapshot of the xen git tree instead of a release tarball.
  - Have fixes for XSA 268, 269, 272 and 273.


author: Anthony PERARD <anthony.perard@citrix.com> - 4.8.4.42.gd95b5bb31e-3
changelog:
  - Fix xen version string, in e.g. xl info, so it match the RPM version.
  - Also remove the information a xen_changeset, as this information is an
    artefact of the package build.


author: Johnny Hughes <johnny@centos.org> 4.9.37-29
changelog:
  - Upgraded to upstream 4.9.37
  - Remove patch 10004, rolled in upstream
  - Modified x86_64 config to disable CONFIG_IO_STRICT_DEVMEM as it is
    causing issues with some iscsi configs


author: Johnny Hughes <johnny@centos.org> 4.9.75-30
changelog:
  - Upgraded to upstream 4.9.75
  - Remove Destroy-ldisc-instance-hangup.patch
  - Allow for different c6 and c7 config files for x86_64 arch


author: Anthony PERARD <anthony.perard@citrix.com> - 4.10.0-2.xen48
changelog:
  - Import libvirt-4.10.0-2.fc30
  - Also bump Epoch to avoid issue when CentOS's libvirt package is updated


author: Daniel P. Berrangé <berrange@redhat.com> - 5.1.0-3
changelog:
  - Fix upgrades for rbd on i686 (rhbz #1688121)
  - Add missing xfsprogs-devel dep
  - Fix use of deprecated RBD features
  - Avoid using firewalld if unprivileged
  - Don't require ipv6 firewall support at startup (rhbz #1688968)


author: Cole Robinson <crobinso@redhat.com> - 5.1.0-4
changelog:
  - Mouse cursor doubled on QEMU VNC on ppc64le (bz #1565253)
  - Fix VM startup with cgroupv2 (bz #1688736)


author: Daniel P. Berrangé <berrange@redhat.com> - 5.1.0-5
changelog:
  - Define md-clear CPUID bit
  - Resolves: rhbz #1709977 (CVE-2018-12126), rhbz #1709979 (CVE-2018-12127),
    rhbz #1709997 (CVE-2018-12130), rhbz #1709984 (CVE-2019-11091)


author: Cole Robinson <crobinso@redhat.com> - 5.1.0-9
changelog:
  - CVE-2019-10161: arbitrary file read/exec via virDomainSaveImageGetXMLDesc
    API (bz #1722463, bz #1720115)
  - CVE-2019-10166: virDomainManagedSaveDefineXML API exposed to readonly
    clients (bz #1722462, bz #1720114)
  - CVE-2019-10167: arbitrary command execution via
    virConnectGetDomainCapabilities API (bz #1722464, bz #1720117)
  - CVE-2019-10168: arbitrary command execution via
    virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs (bz
    - CVE-2019-3886: virsh domhostname command discloses guest hostname in
    readonly mode [fedora-rawhide
  - Cannot start VM with a CBR 2.0 TPM device (bz #1712556)
  - libvirtd does not update VM .xml configurations after virsh
    snapshot/blockcommit (bz #1722348)


author: Paolo Bonzini <pbonzini@redhat.com> - 20130515svn14365-6
changelog:
  - Revert previous change; firmware packages should be noarch, and building
    BaseTools twice is simply wrong.


author: Paolo Bonzini <pbonzini@redhat.com> - 20140328svn15376-3
changelog:
  - Rebase to get GCC48 configuration
  - Package EDK_TOOLS_PATH as /usr/share/edk2
  - Package "build" and LzmaF86Compress too, as well as the new
    tools Ecc and TianoCompress.


