# changelog

author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.9-1.2
changelog:
  - Add xapi-1.249.9-fix-usb-device-reset.backport.patch
  - Fixes USB passthrough when combined with PCI device passthrough to same VM
  - Related to https://github.com/xcp-ng/xcp/issues/511


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.10-1.1
changelog:
  - Sync with hotfix XS82E031
  - Adapt `expose-host-xen-scheduler-granularity-in-xapi` patch to 1.249.10
  - *** Upstream changelog ***
  - * Fri Jul 16 2021 Ben Anson <ben.anson@citrix.com> - 1.249.10-1
  - - CP-36827: Backport XSI-989
  - - CA-353553 add API error for when NVidia GPU is misconfigured
  - - format
  - - CP-35523: Block access to the website on port 80
  - - CP-35523: Always accept requests from the unix socket
  - - CA-355657 XSI-1037 reduce load during bugtool
  - - XSI-995 handle case where pci doesn't exist in VM.power_stat- e_reset
  - - CA-329462 Cluster.create should clean up if it fails
  - - XSI-804 ensure HVM boot params consistent


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.10-1.2
changelog:
  - Fix handling of web-dir parameter
  - Reenable access to the website on port 80, to avoid a regression


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.19-1.1
changelog:
  - Sync with CH 8.2.1
  - Remove xapi-1.249.10-fix-web-dir-parameter.XCP-ng.patch, contributed and included upstream
  - Rediff xapi-1.249.19-expose-host-xen-scheduler-granularity-in-xapi.XCP-ng.patch
  - Disable requires to tdb-tools, samba-winbind and proprietary upgrade-pbis-to-winbind for now
  - *** Upstream changelog ***
  - * Fri Nov 26 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.249.19-1
  - - CA-361151: Use PBIS as the default AD backend
  - * Wed Nov 24 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.249.18-1
  - - CA-360951: Failed to lookup workgroup from domain as DNS cache
  - * Thu Oct 28 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.249.17-1
  - - CA-359975: set the IP in /etc/issue on first boot
  - * Tue Oct 12 2021 Christian Lindig <christian.lindig@citrix.com> - 1.249.16-1
  - - CA-341715: control-domain-params-init: skip on upgrade
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.249.15-4
  - - Bump package for libev dependency
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.249.15-3
  - - Bump package after xs-opam update
  - * Mon Sep 27 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.249.15-2
  - - Bump packages after ocaml-xen-api-libs-transitional update
  - * Thu Sep 23 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.249.15-1
  - - Fix handling of web-dir parameter
  - * Wed Sep 15 2021 Lin Liu <lin.liu@citrix.com> - 1.249.14-1
  - - CA-356959: Decide user account locked out by lockoutTime
  - - CA-358568: Password expired could not show on XenCenter
  - - CA-358816: Updated subject name in DC does not get updated in pam
  - * Wed Sep 8 2021 Lin Liu <lin.liu@citrix.com> - 1.249.13-1
  - - CP-36682: Backport replace PBIS with winbind
  - * Wed Sep 8 2021 Danilo Del Busso <Danilo.Del.Busso@citrix.com> - 1.249.12-1
  - - CP-37590: Replaced negative language with `pool member`
  - - CP-37590: Replaced negative language with `bond member`
  - * Mon Aug 23 2021 Pau Ruiz Safont <pau.safont@citrix.com> - 1.249.11-1
  - - CP-38064: update for rpclib 7 compatibility


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.19-1.2
changelog:
  - Disable HTTP webpage now that regressions were fixed
  - Remove patch xapi-1.249.10-reenable-http-webpage.XCP-ng.patch


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.249.19-1.3
changelog:
  - Add backport of CA-363207: SSH access failing when using AD groups with spaces in name
  - * xapi-1.249.19-fix-ssh-access-failure-when-ad-groups-names-with-spaces.backport.patch
  - * See: https://github.com/xapi-project/xen-api/pull/4617


author: Gael Duperrey <gduperrey@vates.fr> 1.249.25-2.1
changelog:
  - Sync to hotfix XS82ECU1011
  - Remove xapi-1.249.9-fix-usb-device-reset.backport.patch
  - Remove xapi-1.249.19-fix-ssh-access-failure-when-ad-groups-names-with-spaces.backport.patch
  - * Wed May 18 2022 Christian Lindig <christian.lindig@citrix.com> - 1.249.25-2
  - - XSI-791/CA-343760 Backport to yangtze
  - * Tue May 17 2022 Christian Lindig <christian.lindig@citrix.com> - 1.249.25-1
  - - XSI-1246/CA-367232: Daily license re-apply fails is HA is enabled
  - * Tue May 17 2022 Christian Lindig <christian.lindig@citrix.com> - 1.249.24-1
  - - CA-363633: Always take the generation-id directly from xapi
  - - CP-38462 UPD-825 Recognise ethtool-advertise on PIFs
  - - CA-366801 UPD-825 xsh: fix XAPI blob sync and EBADF
  - - CA-363391 UPD-825 fix wake-on-lan script
  - - CA-361209 UPD-825 backport utility functions in records.ml
  - - CA-361209 UPD-825 When using WoL find the remote physical PIF
  - - CA-361209 UPD-825 add vlan references to PIF's cli records
  - - CA-365112: Minor refine to keep code flat
  - - CA-365112: Fixup pep8 issues
  - - CA-365112: Permit pool admin username with space to ssh login
  - * Tue Feb 22 2022 Rob Hoes <rob.hoes@citrix.com> - 1.249.23-1
  - - Revert stunnel-on-demand commits
  - * Fri Feb 04 2022 Rob Hoes <rob.hoes@citrix.com> - 1.249.22-1
  - - CA-363207: SSH access failing when using AD groups with spaces in name
  - * Wed Feb 02 2022 Rob Hoes <rob.hoes@citrix.com> - 1.249.21-1
  - - CA-363068: Ensure that stunnel-on-demand shuts down after xapi
  - * Fri Jan 28 2022 Rob Hoes <rob.hoes@citrix.com> - 1.249.20-1
  - - CA-361220: xenopsd: avoid space leak in VM.import_metadata_async
  - - USB device reset for Privileged VMs (with PCI device attached) is not working due to bad argument '-r'
  - - CP-38978: Accept TCP4 connection
  - - CP-38978: Update xe-toolstack-restart
  - - CP-38978: Separate stunnel service and socket for fips off and on
  - - CP-38978: Separate stunnel conf file for fips
  - - CP-38978: Add systemd socket for on-demand stunnel


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.26-2.1
changelog:
  - Security update (and other fixes), synced from hotfix XS82ECU1019
  - Rediffed patches after upstream formatting changes (actually Benjamin Reis did)
  - *** Upstream changelog ***
  - * Thu Sep 08 2022 Rob Hoes <rob.hoes@citrix.com> - 1.249.26-2
  - - CA-368579: Mitigations against DoS attacks by unauthenticated clients
  - * Thu Sep 08 2022 Rob Hoes <rob.hoes@citrix.com> - 1.249.26-1
  - - CA-368910: Allow destruction of PVS_cache_storage if SR is already gone
  - - CA-365946: Block VIF hotplug into dom0
  - - CA-370084: Print PEMs containing DOS endlines
  - - CA-368806: Workaround pbis get wedged


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.249.26-2.3
changelog:
  - Rework xapi-1.249.26-redirect-fileserver-https.backport.patch to reflect upstream changes
  - Update xapi-1.249.26-update-xapi-conf.XCP-ng.patch to re-enable HTTP (prerequisite for HTTP to HTTPS redirect)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.249.28-1.1
changelog:
  - Rebase on hotfix XS82ECU1027
  - *** Upstream changelog ***
  - * Tue Feb 28 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 1.249.28-1
  - - CA-372128: Avoid extra comparisons in db_cache_types
  - - CA-342527: Remove unnecessary list traversals on rbac.check
  - - CA-352073: Ensure all serialized calls can pass rbac checks
  - - CA-370578 use subsystemId in NVidia GPU matching
  - - Change license to match the one in the source repo
  - - Fix xen BuildReqs
  - - Remove macro for dependency generator
  - * Thu Oct 13 2022 Rob Hoes <rob.hoes@citrix.com> - 1.249.27-1
  - - CA-368579: Patches upstreamed


author: Gael Duperrey <gduperrey@vates.fr> - 1.249.32-1.1
changelog:
  - Sync with hotfix XS82ECU1040
  - Remove and rebase XCP-ng patches to adapt them
  - *** Upstream changelog ***
  - * Thu Jul 20 2023 Rob Hoes <rob.hoes@citrix.com> - 1.249.32-1
  - - CA-378837 log results from Host.get_vms_which_prevent_evacuation
  - - xapi: switch CPU feature sets to the abstract type and don't interpret them
  - - Remove CPUID tests from xapi and add to xenopsd
  - * Mon Jun 19 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.31-2
  - - Bump release and rebuild
  - * Thu Jun 08 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.31-1
  - - CA-377824 fix FD leak in xapi
  - * Mon May 22 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.30-1
  - - CA-333441, CA-377454 create /var/lock/sm/iscsiadm
  - * Mon May 15 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.29-1
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 1/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 2/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 3/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 4/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 5/6
  - - CP-41796 Close Port 80 (Encrypt Data Transfer During VM Migrations) 6/6
  - - CP-41796 enable HTTPS migration by default
  - - CP-41796 prevent changes to https_only in CC_PREPARATIONS=true
  - - CA-376297: Test that mirage-crypto accepts all valid RSA keys
  - - CA-376448: explicitly validate refs in PVS_cache_storage.create
  - - CA-333441 - restarting ISCSI daemon after setting initiator IQN
  - - CA-333441: Do not fail the startup sequence if the iSCSI initiator cannot be set
  - - CP-42835: Allow changing DNS servers when HA or clustering enabled
  - - maintenance: fix formatting
  - * Fri May 12 2023 Christian Lindig <christian.lindig@citrix.com> - 1.249.28-2
  - - Bump release and rebuild


