# changelog

author: Sérgio M. Basto <sergio@serjux.com> - 2.7.11-1
changelog:
  - Release 2.7.11 (Julian Andres Klode)
  - Show a separate list of upgrades deferred due to phasing (Julian Andres Klode)
  - Add the ?security pattern (Julian Andres Klode)
  - Add a new ?phasing pattern (Julian Andres Klode)
  - Add public phased update API (Julian Andres Klode)
  - For phasing, check if current version is a security update, not just previous ones (Julian Andres Klode)
  - Support -a for setting host architecture in apt-get source -b (David Kalnischkies)
  - Remove erroneous -a flag from apt-get synopsis in manpage (David Kalnischkies)


author: Packit <hello@packit.dev> - 2.7.12-1
changelog:
  - Release 2.7.12 (Julian Andres Klode)
  - Move systemd units to /usr/lib (Julian Andres Klode)
  - test-snapshot: Add test case for automatic snapshot (Julian Andres Klode)
  - test-snapshot: Fix a test case (Julian Andres Klode)
  - Delete SHADOWED metaIndex if we don't actually use snapshots (Julian Andres Klode)
  - Automatically enable snapshots where supported (Julian Andres Klode)
  - Modernize standard library includes (Julian Andres Klode)
  - Bump Ubuntu apt-key deprecation notice to 24.04 (Julian Andres Klode)


author: Packit <hello@packit.dev> - 2.7.14-1
changelog:
  - Release 2.7.14 (Julian Andres Klode)
  - Add an artificial Conflicts: against libnettle8 (Steve Langasek)
  - Revert "debrecords: Do not reparse if given same location" (Julian Andres Klode)
  - debrecords: Do not reparse if given same location (Julian Andres Klode)
  - pkgTagFile::Jump: Use lookback buffer to rejump to current position (Julian Andres Klode)
  - s#http://bugs.debian.org/src/#https://bugs.debian.org/src# (Wesley Schwengle)
  - Update VCG tool URI to new location (Wesley Schwengle)
  - Update Graphviz URL to https://graphviz.org/ (Wesley Schwengle)
  - Include Dutch translation for apt/apt-get upgrade documenation update (Wesley Schwengle)
  - Update documentation for apt upgrade with pkg arg (Wesley Schwengle)
  - Update documentation for apt-get upgrade with pkg arg (Wesley Schwengle)
  - Dutch manpages translation update (Frans Spiesschaert)
  - Dutch program translation update (Frans Spiesschaert)
  - Parse unsupported != relation in dependencies (David Kalnischkies)
  - Remove non-existent Debug::BuildDeps from apt.conf(5) (David Kalnischkies)
  - Handle EINTR in the static FileFd::Write overload (David Kalnischkies)
  - Support building without gnutls (Steve Langasek)
  - Resolves rhbz#2270952


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.10.3-0]
changelog:
  - Bluetooth: hci_event: Fix setting DISCOVERY_FINDING for passive scanning (Luiz Augusto von Dentz)
  - Linux v6.10.3


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.10.4-0]
changelog:
  - wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion (Janne Grunau)
  - New config for 6.10.3 (Justin M. Forbes)
  - Linux v6.10.4


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.10.5-0]
changelog:
  - Revert "ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error" (Niklas Cassel)
  - Linux v6.10.5


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.10.6-0]
changelog:
  - Add to BugsFixed (Justin M. Forbes)
  - selinux: revert our use of vma_is_initial_heap() (Paul Moore)
  - Linux v6.10.6


author: Augusto Caringi <acaringi@redhat.com> [6.10.7-0]
changelog:
  - KVM: PPC: Book3S HV nestedv2: Keep nested guest HASHPKEYR in sync (Shivaprasad G Bhat)
  - KVM: PPC: Book3S HV: Add one-reg interface for HASHPKEYR register (Shivaprasad G Bhat)
  - KVM: PPC: Book3S HV nestedv2: Keep nested guest HASHKEYR in sync (Shivaprasad G Bhat)
  - KVM: PPC: Book3S HV: Add one-reg interface for HASHKEYR register (Shivaprasad G Bhat)
  - KVM: PPC: Book3S HV nestedv2: Keep nested guest DEXCR in sync (Shivaprasad G Bhat)
  - KVM: PPC: Book3S HV: Add one-reg interface for DEXCR register (Shivaprasad G Bhat)
  - Revert the F39 commits which should not have pushed (Justin M. Forbes)
  - Turn off libbpf dynamic for perf on F39 (Justin M. Forbes)
  - Revert "cpupower: Bump soname version" (Justin M. Forbes)
  - Drop soname for libcpupower.so since we reverted the bump (Justin M. Forbes)
  - Linux v6.10.7


author: Augusto Caringi <acaringi@redhat.com> [6.10.8-0]
changelog:
  - Add to BugsFixed (Augusto Caringi)
  - xfs: xfs_finobt_count_blocks() walks the wrong btree (Dave Chinner)
  - Linux v6.10.8


author: Augusto Caringi <acaringi@redhat.com> [6.10.10-0]
changelog:
  - Add entry for BugsFixed (Justin M. Forbes)
  - drm/nouveau/fb: restore init() for ramgp102 (Ben Skeggs)
  - Linux v6.10.10


author: Augusto Caringi <acaringi@redhat.com> [6.10.10-100]
changelog:
  - Turn off libbpf dynamic for perf on F39 (Justin M. Forbes)
  - Revert "cpupower: Bump soname version" (Justin M. Forbes)
  - Drop soname for libcpupower.so since we reverted the bump (Justin M. Forbes)


author: Kamil Dudka <kdudka@redhat.com> - 3.4.1-1
changelog:
  - introduce the csdiff-static subpackage with the csgrep-static executable
  - update to latest upstream release


author: Tomas Korbar <tkorbar@redhat.com> - 2.6.3-1
changelog:
  - Rebase to version 2.6.3
  - Resolves: rhbz#2309690
  - Resolves: CVE-2024-45492
  - Resolves: CVE-2024-45491
  - Resolves: CVE-2024-45490


author: Sérgio Basto <sergio@serjux.com> - 1.35.1-1
changelog:
  - Update to 1.35.1
  - Update to version 1.35 (Wed Jun 05 2024 Packit <hello@packit.dev>)
  - Resolves: rhbz#2290632


author: Dan Horák <dan[at]danny.cz> - 3.0.0-1.20230308git7de967c
changelog:
  - updated to ghdl 3.0.0
  - updated to gcc 14.0.1
  - updated to llvm 17
  - Resolves: rhbz#2161618 rhbz#2225826


author: Packit <hello@packit.dev> - 12.2-1
changelog:
  - Translated using Weblate (Catalan) (raf)
  - Translated using Weblate (Hungarian) (99 efi)
  - Translated using Weblate (Turkish) (Oğuz Ersen)
  - Translated using Weblate (Swedish) (Åke Engelbrektson)
  - Fixed DEM cache size configuration (Martin Tůma)
  - Translation update (Martin Tůma)
  - Localization update (Martin Tůma)
  - Removed unnecessary metadata from icons (Martin Tůma)
  - Add outlines to some more marine icons (Martin Tůma)
  - Make the DEM cache configurable (Martin Tůma)
  - Some more missing outlines (Martin Tůma)
  - Decreased the oversize church icon (Martin Tůma)
  - Redesigned marine icons (Martin Tůma)
  - Fixed build with older Qt versions (Martin Tůma)
  - Added support for 0.5" (7201x7201) DEM tiles (Martin Tůma)
  - Marine maps draw order fix (Martin Tůma)
  - Fixed broken handling of IMG "multi-maps" (maps with overviews) (Martin Tůma)
  - Fix multiple MSVC warnings (Martin Tůma)
  - Do not compile empty files (Martin Tůma)
  - Added "brew update" (Martin Tůma)
  - Fixed marine charts rendering (Martin Tůma)
  - Do not unnecessary convert the image tiles to pixmaps (Martin Tůma)
  - Make the MSVC2019 Debug builds compile (Martin Tůma)
  - Version++ (Martin Tůma)
  - Remove the qpainter/qimage draw workaround (Martin Tůma)
  - Allow arbitrary large images (Martin Tůma)
  - Fixed centroid computation (Martin Tůma)


author: Packit <hello@packit.dev> - 12.3-1
changelog:
  - Added currents rendering (Martin Tůma)
  - Render masts as pylons (Martin Tůma)
  - Label sizes adjustment (Martin Tůma)
  - Properly crop the image (Martin Tůma)
  - Various ENC rendering improvements (Martin Tůma)
  - Translated using Weblate (Catalan) (raf)
  - A better point items layout algorithm (Martin Tůma)
  - A better "entry prohibited" line (Martin Tůma)
  - Added fog signals rendering (Martin Tůma)
  - Render lights merged with the root objects, not as separate objects (Martin Tůma)
  - Translated using Weblate (Norwegian Bokmål) (ovl-1)
  - Removed duplicit map error debug output (Martin Tůma)
  - Properly chceck for GCS/PCS files (Martin Tůma)
  - Do not try to load the style when it does not exist (Martin Tůma)
  - Version++ (Martin Tůma)
  - Render international border lines (Martin Tůma)
  - Fixed header length check (Martin Tůma)
  - Added missing nmea serial port baudrate setting (Martin Tůma)
  - Translated using Weblate (Esperanto) (Nikolay Korotkiy)
  - Translated using Weblate (Ukrainian) (Nikolay Korotkiy)
  - Translated using Weblate (Russian) (Nikolay Korotkiy)
  - Translated using Weblate (Finnish) (Nikolay Korotkiy)
  - Translated using Weblate (Chinese (Simplified)) (mtriau)


author: Packit <hello@packit.dev> - 13.5-1
changelog:
  - Yet another one-way arrows improvement (Martin Tůma)
  - Use less agressive one-way street arrows (Martin Tůma)
  - Properly mark one-way streets in data from NET links (Martin Tůma)
  - Display one-way streets info in IMG maps (Martin Tůma)
  - Build universal x86_64/arm64 binaries on OS X (Martin Tůma)
  - Yet another ENV path fix (Martin Tůma)
  - Fixed ENV file path (Martin Tůma)
  - Switched to MSVC 2022 and Qt 6.5 (Martin Tůma)
  - Do not affect the map object scaling when resizing the tiles (Martin Tůma)
  - Removed obsolete include (Martin Tůma)
  - Added graph pinch zooming (Martin Tůma)
  - Revert "Removed SDK/buildtools workaround" (Martin Tůma)
  - Removed SDK/buildtools workaround (Martin Tůma)
  - Code cleanup (Martin Tůma)
  - Version++ (Martin Tůma)
  - Make the Mapsforge tiles sufficient large for the layout (Martin Tůma)
  - Back to Qt 6.4 on Windows (Martin Tůma)
  - Switched Qt 6 CI builds to Qt 6.5 (Martin Tůma)


author: Packit <hello@packit.dev> - 13.9-1
changelog:
  - Fixed storing of WMTS tiles with file system incompatible tile matrix names (Martin Tůma)
  - Decreased map zoom level treshold to 80% (Martin Tůma)
  - Fixed map resolution computation for maps > world/2 (Martin Tůma)
  - Use OpenSSL v3 for Windows Qt6 builds (Martin Tůma)
  - Fixed Qt6 build (Martin Tůma)
  - Yet another TrekBuddy compatability enhancement & fixes + related map API refactoring (Martin Tůma)
  - Check for bounds overflow in the computed/approximated case (Martin Tůma)
  - Support all variants of TrekBuddy maps/atlases (Martin Tůma)
  - Allow arbitrary .map file names in TrekBuddy TAR maps (Martin Tůma)
  - Contiguous zones (Martin Tůma)
  - Distinguish silos and tanks (Martin Tůma)
  - Version++ (Martin Tůma)
  - Refactoring (Martin Tůma)
  - Reference the exact S-57 document describing the catalogue (Martin Tůma)
  - Less aggressive anchor/no-anchor lines (Martin Tůma)


author: Packit <hello@packit.dev> - 13.12-1
changelog:
  - Code cleanup (Martin Tůma)
  - Fixed broken TMS maps rendering (Martin Tůma)
  - Asynchronous rendering of online vector maps (Martin Tůma)
  - Added support for online vector maps overzoom (Martin Tůma)
  - Limit the overzoom to max 3 levels (Martin Tůma)
  - Added support for MVT overzoom (Martin Tůma)
  - Code cleanup (Martin Tůma)
  - Provide the zoom level to QImageReader when fetching the tile size (Martin Tůma)
  - Cosmetics (Martin Tůma)
  - Added workaround for broken Qt SVG image plugin colliding with the MVT plugin (Martin Tůma)
  - Translated using Weblate (Ukrainian) (Vadym Nekhai)
  - Translated using Weblate (Esperanto) (Nikolay Korotkiy)
  - Translated using Weblate (Ukrainian) (Nikolay Korotkiy)
  - Translated using Weblate (Russian) (Nikolay Korotkiy)
  - Translated using Weblate (Finnish) (Nikolay Korotkiy)
  - Fixed possible double delete (Martin Tůma)
  - Improved error reporting (Martin Tůma)
  - Fixed crash on empty MBTiles files (Martin Tůma)
  - Version++ (Martin Tůma)
  - Metadata update (Martin Tůma)
  - Translated using Weblate (Catalan) (raf)
  - Translated using Weblate (Hungarian) (99 efi)
  - Translated using Weblate (Swedish) (bittin1ddc447d824349b2)
  - Code cleanup (Martin Tůma)
  - Resolves rhbz#2231722


author: Packit <hello@packit.dev> - 13.13-1
changelog:
  - Increase the default pixmap cache size on Android to 384MB (Martin Tůma)
  - Fixed broken map scale (ruler) on HiDPI maps (Martin Tůma)
  - Limit the overzoom by the resulting tile size rather than number of levels (Martin Tůma)
  - Version++ (Martin Tůma)
  - Resolves rhbz#2255189


author: Mike FABIAN <mfabian@redhat.com> - 1.4.23-1
changelog:
  - Update to 1.4.23
  - Do not translate the Multi_key when using the option “☑️ Use US keyboard layout”
  - Fix option “☑️ Use US keyboard layout”
    (Resolves: https://github.com/ibus/ibus-m17n/issues/66)
  - Translation update from Weblate: new language Hindi, hi 100%


author: Mike FABIAN <mfabian@redhat.com> - 1.4.24-1
changelog:
  - Update to 1.4.24
  - Make IBusEngineSimple read ~/.XCompose
    (Resolves: https://github.com/ibus/ibus-m17n/issues/70)
  - Do not hide empty preedit text before committing text.
    (Resolves: https://github.com/ibus/ibus-m17n/pull/64).
    Together with ibus >= 1.5.29 this solves the preedit flicker problem perfectly.
  - Use “<developer><name>…</name></developer>” in m17n.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.4.27-1
changelog:
  - Update to 1.4.27
  - Prefer commit to "return FALSE;" for space, and other keys
    where the msymbol name is exactly one character, add a
    sleep for Return.  This is to avoid ordering problems in
    mutter.
    (Resolves: https://github.com/ibus/ibus-m17n/issues/72)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.28-1
changelog:
  - Update to 1.4.28
  - Translation update from Weblate (Russian (ru), new, 100%)
  - Build against gtk3 by default (Resolves:
    https://github.com/ibus/ibus-m17n/issues/73)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-1
changelog:
  - Update to 1.4.29
  - Translation update from Weblate (Malayalam (ml), new, 100%, Swedish (sv)
    100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.30-1
changelog:
  - Update to 1.4.30
  - Name of Sinhala input method changed: si-wijesekera ➡️ si-wijesekara
    (This changes comes when m17n-db is updated to 1.8.6)
  - Translation update from Weblate (si 100%)


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.0-5
changelog:
  - Use curl instead of wget, since wget2 is broken
    (https://gitlab.com/gnuwget/wget2/-/issues/652)
  - Remove yajl daemon dep and replace with jansson.


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.20.0-1
changelog:
  - Update to 0.20.0, fixes OSM upload by adding OAuth2 support (#2299157)
  - Specfile cleanups (remove %auto* and %forge* macros, rename patches)
  - Rebase system-qtsingleapplication patch
  - Use cmake() instead of pkgconfig() for Qt BuildRequires
  - Fix missing BuildRequires: cmake(Qt6NetworkAuth)
  - Remove obsolete BuildRequires: pkgconfig(QtWebKit)
  - Document disabled build options
  - System qtsingleapplication-qt6 only available on F40+/EL10+


author: Didier Fabert <didier.fabert@gmail.com> 1.46.3-3
changelog:
  - Change BuildRequires from pkgconfig(libxenlight) and pkgconfig(libxenstat) to xen-devel package
  - Enable go plugin only for Fedora 40+


author: Didier Fabert <didier.fabert@gmail.com> 1.46.3-4
changelog:
  - Remove closed source parts from binary rpms
    See https://bugzilla.redhat.com/show_bug.cgi?id=2304167


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.0.1-1
changelog:
  - Update to version 5.0.1
  - Drop patch oidc-agent-webkit.patch (previously backported
  - Drop patch oidc-agent.patch (accepted upstram)


author: Sahana Prasad <sahana@redhat.com> - 1:3.1.1-1
changelog:
  - Rebase to upstream version 3.1.1
    Resolves: CVE-2023-0464
    Resolves: CVE-2023-0465
    Resolves: CVE-2023-0466
    Resolves: CVE-2023-1255
    Resolves: CVE-2023-2650


author: Remi Collet <remi@remirepo.net> - 1.17.0-1
changelog:
  - update to 1.17.0
  - raise dependency on PHP 7.4
  - raise dependency on libmongoc 1.25.1
  - raise dependency on libmongocrypt 1.8.2
  - open https://github.com/mongodb/mongo-php-driver/pull/1490 drop ICU information


author: Remi Collet <remi@remirepo.net> - 1.19.0-1
changelog:
  - update to 1.19.0
  - raise dependency on libbson and libmongc 1.27.0
  - raise dependency on libmongocrypt 1.10.0


author: Remi Collet <remi@remirepo.net> - 1.19.4-1
changelog:
  - update to 1.19.4
  - raise dependency on libbson and libmongc 1.27.6
  - raise dependency on libmongocrypt 1.10.1


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.8-1
changelog:
  - Update to version 5.6.8
  - Disable tests that require file attributes if the file system doesn't
    support them


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.6.9-2
changelog:
  - Reduce socket path lengths used by tests for rpm 4.20 compatibility
  - Avoid test failures due to using the same port numbers in different tests


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.7.0-1
changelog:
  - Update to version 5.7.0
  - Drop patches accepted upstream
  - Drop EPEL 7 support from spec file (EOL)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.7.0-2
changelog:
  - Fix compilation error due to hidden overloaded virtual
  - Make documentation package not noarch due to non-reproducible filenames


author: Miro Hrončok <mhroncok@redhat.com> - 3.12.2-3
changelog:
  - Move all test modules to the python3-test package, namely:
     - __phello__
     - _xxsubinterpreters
     - xxlimited
     - xxlimited_35
     - xxsubtype


author: Miro Hrončok <mhroncok@redhat.com> - 3.13.0~b4-2
changelog:
  - Explicitly BuildRequire systemtap-sdt-devel
    https://fedoraproject.org/wiki/Changes/Separate_dtrace_package


author: Miro Hrončok <mhroncok@redhat.com> - 3.13.0~b4-3
changelog:
  - Preserve AST nodes for f-string with single-element format specifiers
  - Fixes https://github.com/python/cpython/issues/122300


author: Miro Hrončok <mhroncok@redhat.com> - 3.13.0~rc1-2
changelog:
  - Fix SystemError in PyEval_GetLocals()
  - Fixes: rhbz#2303107
  - Security fix for CVE-2024-6923
  - Fixes: rhbz#2303160


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.15-20
changelog:
  - Remove extra distro-applied CFLAGS passed to user built C extensions
  - https://fedoraproject.org/wiki/Changes/Python_Extension_Flags_Reduction


author: Yaakov Selkowitz <yselkowi@redhat.com> - 3.1.3-175
changelog:
  - Use SHA256 instead of SHA1 where needed in Openssl tests
  - Let OpenSSL choose the digest if digest for Openssl::OCSP::BasicResponse#sign is nil


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-13
changelog:
  - Rebuild (xorg-x11-server)
    CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and CVE-2024-31083


author: Jan Grulich <jgrulich@redhat.com> - 1.14.0-2
changelog:
  - vncsession: use /bin/sh if the user shell is not set
  - add missing comma in default security type list


author: Jan Grulich <jgrulich@redhat.com> - 1.14.0-3
changelog:
  - Correctly handle ZRLE cursors
  - Move old log to log.old if present
  - Handle existing config directory in vncpasswd


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-4
changelog:
  - xenstored: A transaction conflict can crash C Xenstored [XSA-440,
  	CVE-2023-34323]
  - x86/AMD: missing IOMMU TLB flushing [XSA-442, CVE-2023-34326]
  - Multiple vulnerabilities in libfsimage disk handling [XSA-443,
  	CVE-2023-34325]
  - x86/AMD: Debug Mask handling [XSA-444, CVE-2023-34327,
  	CVE-2023-34328]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-5
changelog:
  - x86/AMD: mismatch in IOMMU quarantine page table levels [XSA-445,
  	CVE-2023-46835]
  - x86: BTC/SRSO fixes not fully effective [XSA-446, CVE-2023-46836]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-6
changelog:
  - arm32: The cache may not be properly cleaned/invalidated (take two)
  	[XSA-447, CVE-2023-46837]
  - pci: phantom functions assigned to incorrect contexts [XSA-449,
  	CVE-2023-46839]
  - VT-d: Failure to quarantine devices in !HVM build [XSA-450,
  	CVE-2023-46840]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-7
changelog:
  - x86: shadow stack vs exceptions from emulation stubs - [XSA-451,
          CVE-2023-46841] (#2266326)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-8
changelog:
  - x86: Register File Data Sampling [XSA-452, CVE-2023-28746]
  - GhostRace: Speculative Race Conditions [XSA-453, CVE-2024-2193]
  - additional patches so above applies cleanly


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-1
changelog:
  - x86: Native Branch History Injection [XSA-456, CVE-2024-2201]
  - update to xen 4.17.4, remove patches now included upstream
    rebase xen.gcc12.fixes.patch
  - x86 HVM hypercalls may trigger Xen bug check [XSA-454, CVE-2023-46842]
  - x86: Incorrect logic for BTC/SRSO mitigations [XSA-455, CVE-2024-31142]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-2
changelog:
  - x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201]
  - double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143]
  	(#2298690)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-3
changelog:
  - error handling in x86 IOMMU identity mapping [XSA-460, CVE-2024-31145]
  - PCI device pass-through with shared resources [XSA-461, CVE-2024-31146]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.5-1
changelog:
  - update to xen-4.17.5
    remove or adjust patches now included or superceded upstream
    now need to enable systemd explicitly


