# changelog

author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.55.5-2.3
changelog:
  - Fix a bad integer conversion that interrupts valid coalesce calls on large VDIs
  - Add 0002-CP-308382-fix-sign-conversion-in-coalesce.patch
  - Add 0003-Fix-coalesced-size-conversion-in-vhd-util-coalesce.patch


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 3.55.5-6.1
changelog:
  - Sync with 3.55.5-6
  - Revert openssl 3 dependency from XS specfile (no change compared to previous XCP-ng release)
  - Drop patch 0002-CP-308382-fix-sign-conversion-in-coalesce.patch, upstream now
  - Drop patch 0003-Fix-coalesced-size-conversion-in-vhd-util-coalesce.patch, upstream now
  - *** Upstream changelog ***
    * Thu Jul 31 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-6
    - Fix coalesced size conversion in vhd-util-coalesce (CP-308382)
    * Mon Jun 23 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-5
    - Backport fix for CA-408175
    - CP-308382: fix sign conversion in coalesce
    * Mon Apr 07 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-4
    - CP-54256: log when reporting EOPNOTSUPP
    * Fri Feb 21 2025 Deli Zhang <deli.zhang@cloud.com> - 3.55.5-3
    - CP-50273: Move CCM dependency to OpenSSL 3


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 3.55.5-9.1
changelog:
  - Sync with 3.55.5-9
  - Drop patch 0002-Prevent-segfault-of-vhd-util-scan-on-VHD-with-corrup.patch, upstream now
  - *** Upstream changelog ***
    * Thu Apr 09 2026 Mark Syms <mark.syms@citrix.com> - 3.55.5-9
    - Remove old, obsolete, udev rule override.
    * Wed Jan 28 2026 Mark Syms <mark.syms@citrix.com> - 3.55.5-8
    - Prevent segfault of vhd-util scan on VHD with corrupt footer
    * Thu Aug 28 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-7
    - CA-416464: return BLKIF_RSP_EOPNOTSUPP for EOPNOTSUPP


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 3.55.5-9.2
changelog:
  - Avoid concurrent access on vbd requests.
  - Fix deadlock on NBD export.
  - Fix use-after-free on VDI close.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.1.0-4
changelog:
  - Do not require the debuginfo package anymore
  - Do not strip binaries
  - Do not produce the debuginfo package at all for now


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.6-4.1
changelog:
  - Sync with XenServer 4.17.6-4
  - *** Upstream changelog ***
    * Mon Feb 23 2026 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.17.6-4
    - Improve migration performance
    * Mon Feb 09 2026 Roger Pau Monné <roger.pau@citrix.com> - 4.17.6-3
    - Fix Xen watchdog triggering during domain construction.


author: Lucas Pottier <lucas.pottier@vates.tech> - 4.17.6-5.1
changelog:
  - Sync with XenServer 4.17.6-5
  - Use xsa480.patch provided by XenServer
  - *** Upstream changelog ***
    * Thu Mar 05 2026 Roger Pau Monné <roger.pau@citrix.com> - 4.17.6-5
    - Fix for XSA-480 CVE-2026-23554


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.6-6.1
changelog:
  - Sync with XenServer 4.17.6-6
  - Use 0001-xen-mm-don-t-unconditionally-clear-_PGC_need_scrub-i.patch from
    XenServer
  - *** Upstream changelog ***
    * Wed Mar 18 2026 Roger Pau Monné <roger.pau@citrix.com> - 4.17.6-6
    - Fix for CVE-2026-4397.


author: Quentin Casasnovas <quentin.casasnovas@vates.tech> - 4.17.6-6.2
changelog:
  - Fix for XSA-483 / CVE-2026-23556
  - Fix for XSA-486 / CVE-2026-23558
  - Fix for XSA-488 / CVE-2025-54505


author: Lucas Pottier <lucas.pottier@vates.tech> - 4.17.6-8.1
changelog:
  - Sync with XenServer 4.17.6-8
  - Drop patches for nested-virt, XSA-483, XSA-486, XSA-488 from the XCP-ng patch queue,
    now provided in the main patch queue
  - Drop unused 0002-tools-golang-update-auto-generated-libxl-based-types.patch from the
    XCP-ng patch queue
  - *** Upstream changelog ***
    * Wed Apr 22 2026 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.6-8
    - Fix for XSA-483 CVE-2026-23556
    - Fix for XSA-484 CVE-2026-23557
    - Fix for XSA-486 CVE-2026-23558
    * Mon Apr 20 2026 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.6-7
    - Fix for XSA-488 CVE-2025-54505


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.6-9.1
changelog:
  - Sync with XenServer 4.17.6-9
  - *** Upstream changelog ***
    * Wed May  6 2026 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.6-9
    - Fix for XSA-490 CVE-2025-54518
    - Fix crash on boot when setting up shadow stacks
    - Fix hang on boot when configuring the IOMMU on certain AMD platforms
    - Fix a bug on AMD systems where a guests CR2 register value gets lost on
      migrate


