# changelog

author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.4-3
changelog:
  - Pass all MSI-X vector control writes to the device model
  - Distinguish "ucode already up to date" and treat it as success
  - Optimise HVMLoader AP bringup
  - Fix xentop cpu% sort order
  - Fix possible watchdog timeouts or NULL pointer deference with CPU hotplug


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.4-4
changelog:
  - Don't link oxenstored against libsystemd, and remove systemd-devel as a
    build dependency
  - Fix population of the online vCPU bitmap for PVH guests
  - Drop unused openssl-devel build dependency


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.4-6
changelog:
  - Fix for XSA-458 CVE-2024-31143
  - Fix early detection of CPU features on hardware with the CPUID Limit active
    in firmware
  - Fix a bug whereby dynamic XSTATE CPUID information was provided to all
    guests, even those with XSAVE disabled
  - Fix a bug on Intel where HVM guests may have MMIO mappings forced to UC even
    if the guest kernel wanted a different cacheability
  - Fix multiple bugs with interrupt affinity handling around CPU hotplug


author: Matthew Barnes <matthew.barnes@cloud.com> - 4.17.4-7
changelog:
  - Fix CLOEXEC handling in libxenstore
  - Don't package Ocaml Xenbus library
  - Inject #DF instead of overwriting RIP in xen-hvmcrash


author: Roger Pau Monné <roger.pau@citrix.com> - 4.17.4-8
changelog:
  - Fix for XSA-460 CVE-2024-31145
  - Fix IO breakpoint recognition in PV guests
  - Fix libxenstore.so to not modify SIGBUS behind the back of the application
  - Fix a integer overflow in Xen's bunzip2(), leading to a rare decompression
    faliure


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-2
changelog:
  - Fix x2APIC cluster handling across S3
  - Avoid clobbering firmware memory during the load-base calculation
  - Fix ASAN issues identified in `xentop` and `xl dmesg`


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-4
changelog:
  - Fixes for
    - XSA-463 CVE-2024-45818
    - XSA-464 CVE-2024-45819
  - Fix IO-APIC directed EOIs when using AMD-Vi interrupt remapping
  - Fix a crash during livepatch loading caused by an incorrect order of checks
  - Switch xAPIC flat driver to use physical destination mode for external
    interrupts
  - Remove an overly strict check when parsing AMD IVRS ACPI tables
  - Fix a leak of pending interrupts during CPU offline


