# changelog

author: Lucas Pottier <lucas.pottier@vates.tech> - 4.17.6-5.1
changelog:
  - Sync with XenServer 4.17.6-5
  - Use xsa480.patch provided by XenServer
  - *** Upstream changelog ***
    * Thu Mar 05 2026 Roger Pau Monné <roger.pau@citrix.com> - 4.17.6-5
    - Fix for XSA-480 CVE-2026-23554


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.6-6.1
changelog:
  - Sync with XenServer 4.17.6-6
  - Use 0001-xen-mm-don-t-unconditionally-clear-_PGC_need_scrub-i.patch from
    XenServer
  - *** Upstream changelog ***
    * Wed Mar 18 2026 Roger Pau Monné <roger.pau@citrix.com> - 4.17.6-6
    - Fix for CVE-2026-4397.


author: Quentin Casasnovas <quentin.casasnovas@vates.tech> - 4.17.6-6.2
changelog:
  - Fix for XSA-483 / CVE-2026-23556
  - Fix for XSA-486 / CVE-2026-23558
  - Fix for XSA-488 / CVE-2025-54505


author: Lucas Pottier <lucas.pottier@vates.tech> - 4.17.6-8.1
changelog:
  - Sync with XenServer 4.17.6-8
  - Drop patches for nested-virt, XSA-483, XSA-486, XSA-488 from the XCP-ng patch queue,
    now provided in the main patch queue
  - Drop unused 0002-tools-golang-update-auto-generated-libxl-based-types.patch from the
    XCP-ng patch queue
  - *** Upstream changelog ***
    * Wed Apr 22 2026 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.6-8
    - Fix for XSA-483 CVE-2026-23556
    - Fix for XSA-484 CVE-2026-23557
    - Fix for XSA-486 CVE-2026-23558
    * Mon Apr 20 2026 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.6-7
    - Fix for XSA-488 CVE-2025-54505


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.6-9.1
changelog:
  - Sync with XenServer 4.17.6-9
  - *** Upstream changelog ***
    * Wed May  6 2026 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.6-9
    - Fix for XSA-490 CVE-2025-54518
    - Fix crash on boot when setting up shadow stacks
    - Fix hang on boot when configuring the IOMMU on certain AMD platforms
    - Fix a bug on AMD systems where a guests CR2 register value gets lost on
      migrate


author: Teddy Astie <teddy.astie@vates.tech> - 4.17.6-9.5
changelog:
  - Backport UEFI GOP bugfixes fixing ignored vga=... cmdline and erroneously
    forced maximum resolution.


