- 1.2.7 release

- 1.2.4 release

- 1.2.2 release

- 1.2.1 release

- python3-module-msgpack requires added

- rebuild with system liblz4, libzstd, libxxhash

- 1.2.0 release

- build with bundled xxhash

- 2.7 release

- 1.1.17 release

- 4.14.1 release

- restored selftest.py and testsuite module

- removed unittest selftest.py

- xen version corrected
- kernel modules preload

- 4.14.0 release

- 2.6 release
- logrotate post-rotate script systemd/sysvinit detection

- 1.1.14 release

- 1.1.13 release

- 2.5 release

- update version to 1.1.11

- 2.4 release

- set explicit python interpreter: /usr/bin/python2

- 2.3 release

- enable build for aarch64 architecture

- 4.12.1 release

- rebuilder with external libzstd

- 4.10.1 release
- upstream updates upto 7842419a6b

- 4.10.2 release
- upstream updates upto e907460fd

- update version to 1.1.9

- 2.32 release

- update version to 1.1.8

- update version to 1.1.7

- upstream updates upto 87c83af333

- update version to 1.1.6

- fix: xen-licenses package should be noarch

- 4.10.1 release
- upstream updates upto 7b35e7807, including:
  + x86/HVM: guard against emulator driving ioreq state in weird ways
    (thx Jan Beulich) (XSA-262)
  + x86/vpt: add support for IO-APIC routed interrupts (part of XSA-261)
  + x86/traps: Fix handling of #DB exceptions in hypervisor context
    x86/traps: Use an Interrupt Stack Table for #DB
    x86/pv: Move exception injection into {,compat_}test_all_events()
    x86/traps: Fix %dr6 handing in #DB handler
    (thx Andrew Cooper) (part of XSA-260 / CVE-2018-8897)

- update version to 1.1.5

- upstream updates:
  + xen/arm: Flush TLBs before turning on the MMU to avoid stale
    entries (thx Julien Grall).
  + xen/arm: vgic: Make sure the number of SPIs is a multiple of 32 (thx Julien Grall).
  + x86/hvm: Disallow the creation of HVM domains without Local
    APIC emulation (thx Andrew Cooper).
  + gnttab: don't blindly free status pages upon version change (thx Jan Beulich).
  + gnttab/ARM: don't corrupt shared GFN array (thx Jan Beulich).
  + memory: don't implicitly unpin for decrease-reservation (thx Jan Beulich).
  + xen/arm: cpuerrata: Actually check errata on non-boot CPUs (thx Julien Grall).
  + xen/arm: vsmc: Don't implement function IDs that don't exist (thx Julien Grall).
  + xen/arm: vpsci: Removing dummy MIGRATE and MIGRATE_INFO_UP_CPU (thx Julien Grall).
  + x86/idle: Clear SPEC_CTRL while idle (thx Andrew Cooper).
  + x86/cpuid: Offer Indirect Branch Controls to guests (thx Andrew Cooper).
  + x86/ctxt: Issue a speculation barrier between vcpu contexts (thx Andrew Cooper).
  + x86/boot: Calculate the most appropriate BTI mitigation to use (thx Andrew Cooper).
  + x86/entry: Avoid using alternatives in NMI/#MC paths (thx Andrew Cooper).
  + x86/entry: Organise the clobbering of the RSB/RAS on entry to Xen (thx Andrew Cooper).
  + x86/entry: Organise the use of MSR_SPEC_CTRL at each entry/exit
    point (thx Andrew Cooper).
  + x86/hvm: Permit guests direct access to MSR_{SPEC_CTRL,PRED_CMD} (thx Andrew Cooper).
  + x86/migrate: Move MSR_SPEC_CTRL on migrate (thx Andrew Cooper).
  + x86/msr: Emulation of MSR_{SPEC_CTRL,PRED_CMD} for guests (thx Andrew Cooper).
  + x86/cpuid: Handling of IBRS/IBPB, STIBP and IBRS for guests (thx Andrew Cooper).
  + x86: fix GET_STACK_END (thx Wei Liu).
  + x86/acpi: process softirqs while printing CPU ACPI data (thx Roger Pau Monne).
  + xen/x86: report domain id on cpuid (thx Roger Pau Monne).
  + x86/svm: Offer CPUID Faulting to AMD HVM guests as well (thx Andrew Cooper).
  + x86/cmdline: Introduce a command line option to disable
    IBRS/IBPB, STIBP and IBPB (thx Andrew Cooper).
  + x86/feature: Definitions for Indirect Branch Controls (thx Andrew Cooper).
  + x86: Introduce alternative indirect thunks (thx Andrew Cooper).
  + x86/amd: Try to set lfence as being Dispatch Serialising (thx Andrew Cooper).
  + x86/boot: Report details of speculative mitigations (thx Andrew Cooper).
  + x86: Support indirect thunks from assembly code (thx Andrew Cooper).
  + x86: Support compiling with indirect branch thunks (thx Andrew Cooper).
  + common/wait: Clarifications to wait infrastructure (thx Andrew Cooper).
  + x86/entry: Erase guest GPR state on entry to Xen (thx Andrew Cooper).
  + x86/hvm: Use SAVE_ALL to construct the cpu_user_regs frame
    after VMExit (thx Andrew Cooper).
  + x86/entry: Rearrange RESTORE_ALL to restore register in stack
    order (thx Andrew Cooper).
  + x86: Introduce a common cpuid_policy_updated() (thx Andrew Cooper).
  + x86/hvm: Rename update_guest_vendor() callback to
    cpuid_policy_changed() (thx Andrew Cooper).
  + x86/alt: Introduce ALTERNATIVE{,_2} macros (thx Andrew Cooper).
  + x86/alt: Break out alternative-asm into a separate header file (thx Andrew Cooper).
  + xen/arm32: entry: Document the purpose of r11 in the traps
    handler (thx Julien Grall).
  + xen/arm32: Invalidate icache on guest exist for Cortex-A15 (thx Julien Grall).
  + xen/arm32: Invalidate BTB on guest exit for Cortex A17 and 12 (thx Julien Grall).
  + xen/arm32: Add skeleton to harden branch predictor aliasing
    attacks (thx Julien Grall).
  + xen/arm32: entry: Add missing trap_reset entry (thx Julien Grall).
  + xen/arm32: Add missing MIDR values for Cortex-A17 and A12 (thx Julien Grall).
  + xen/arm32: entry: Consolidate DEFINE_TRAP_ENTRY_* macros (thx Julien Grall).
  + SUPPORT.md: Fix version and Initial-Release (thx Ian Jackson).
  + xen/arm: cpuerrata: Remove percpu.h include (thx Julien Grall).
  + xen/arm64: Implement branch predictor hardening for affected
    Cortex-A CPUs (thx Julien Grall).
  + xen/arm64: Add skeleton to harden the branch predictor aliasing
    attacks (thx Julien Grall).
  + xen/arm: cpuerrata: Add MIDR_ALL_VERSIONS (thx Julien Grall).
  + xen/arm64: Add missing MIDR values for Cortex-A72, A73 and A75 (thx Julien Grall).
  + xen/arm: Introduce enable callback to enable a capabilities on
    each online CPU (thx Julien Grall).

- upstream updates (Xen hypervisor):
  + x86: allow Meltdown band-aid to be disabled (thx Jan Beulich).
  + x86: Meltdown band-aid against malicious 64-bit PV guests (thx Jan Beulich).
  + x86/mm: Always set _PAGE_ACCESSED on L4e updates (thx Andrew Cooper).
  + x86: Don't use potentially incorrect CPUID values for topology
    information (thx Jan H. Schonherr).
  + x86/entry: Remove support for partial cpu_user_regs frames (thx Andrew Cooper).
  + x86/upcall: inject a spurious event after setting upcall vector (thx Roger Pau Monne).
  + x86/E820: don't overrun array (thx Jan Beulich).
  + x86/IRQ: conditionally preserve access permission on map
    error paths (thx Jan Beulich).
  + xen/arm: bootfdt: Use proper default for #address-cells and
      + xen/arm: gic-v3: Bail out if gicv3_cpu_init fail (thx Julien Grall).
- upstream updates (Qemu-xen device-model):
  + Update version for 2.10.2 release (thx Michael Roth).
  + spapr: don't initialize PATB entry if max-cpu-compat < power9 (thx Laurent Vivier).
  + target/ppc: Update setting of cpu features to account for
    compat modes (thx Suraj Jitindar Singh).
  + vfio: Fix vfio-kvm group registration (thx Alex Williamson).
  + spapr: Include "pre-plugged" DIMMS in ram size calculation
    at reset (thx David Gibson).
  + vga: handle cirrus vbe mode wraparounds. (thx Gerd Hoffmann).
  + vga: drop line_offset variable (thx Gerd Hoffmann).
  + nbd/client: Don't hard-disconnect on ESHUTDOWN from server (thx Eric Blake).
  + nbd-client: Refuse read-only client with BDRV_O_RDWR (thx Eric Blake).
  + nbd/server: fix nbd_negotiate_handle_info (thx Vladimir Sementsov-Ogievskiy).
  + vhost: fix error check in vhost_verify_ring_mappings() (thx Greg Kurz).
  + nbd/server: CVE-2017-15118 Stack smash on large export name (thx Eric Blake).
  + nbd/server: CVE-2017-15119 Reject options larger than 32M (thx Eric Blake).
  + virtio-net: don't touch virtqueue if vm is stopped (thx Jason Wang).
  + block/nfs: fix nfs_client_open for filesize greater than 1TB (thx Peter Lieven).
  + scripts/make-release: ship u-boot source as a tarball (thx Michael Roth).
  + spapr: reset DRCs after devices (thx Greg Kurz).
  + hw/ppc: clear pending_events on machine reset (thx Daniel Henrique Barboza).
  + vhost: restore avail index from vring used index on disconnection (thx Maxime Coquelin).
  + virtio: Add queue interface to restore avail index from vring
    used index (thx Maxime Coquelin).
  + util/stats64: Fix min/max comparisons (thx Max Reitz).
  + nbd/client: Use error_prepend() correctly (thx Eric Blake).
  + net: fix check for number of parameters to -netdev socket (thx Jens Freimann).
  + net/socket: fix coverity issue (thx Jens Freimann).
  + hw/intc/arm_gicv3_its: Don't abort on table save failure (thx Eric Auger).
  + translate.c: Fix usermode big-endian AArch32 LDREXD and STREXD (thx Peter Maydell).
  + ppc: fix setting of compat mode (thx Greg Kurz).
  + io: monitor encoutput buffer size from websocket GSource (thx Daniel P. Berrange).
  + nios2: define tcg_env (thx Paolo Bonzini).
  + iotests: Add cluster_size=64k to 125 (thx Max Reitz).
  + qcow2: Always execute preallocate() in a coroutine (thx Max Reitz).
  + qcow2: Fix unaligned preallocated truncation (thx Max Reitz).
  + hw/sd: fix out-of-bounds check for multi block reads (thx Michael Olbrich).
  + memory: fix off-by-one error in memory_region_notify_one() (thx Maxime Coquelin).
  + exec: simplify address_space_get_iotlb_entry (thx Peter Xu).
  + exec: add page_mask for flatview_do_translate (thx Peter Xu).
  + memory: Share special empty FlatView (thx Alexey Kardashevskiy).
  + memory: seek FlatView sharing candidates among children
    subregions (thx Paolo Bonzini).
  + memory: trace FlatView creation and destruction (thx Paolo Bonzini).
  + memory: Create FlatView directly (thx Alexey Kardashevskiy).
  + memory: Get rid of address_space_init_shareable (thx Alexey Kardashevskiy).
  + memory: Do not allocate FlatView in address_space_init (thx Alexey Kardashevskiy).
  + memory: Share FlatView's and dispatch trees between address
    spaces (thx Alexey Kardashevskiy).
  + memory: Move address_space_update_ioeventfds (thx Alexey Kardashevskiy).
  + memory: Alloc dispatch tree where topology is generared (thx Alexey Kardashevskiy).
  + memory: Store physical root MR in FlatView (thx Alexey Kardashevskiy).
  + memory: Rename mem_begin/mem_commit/mem_add helpers (thx Alexey Kardashevskiy).
  + memory: Cleanup after switching to FlatView (thx Alexey Kardashevskiy).
  + memory: Switch memory from using AddressSpace to FlatView (thx Alexey Kardashevskiy).
  + memory: avoid "resurrection" of dead FlatViews (thx Paolo Bonzini).
  + memory: Remove AddressSpace pointer from AddressSpaceDispatch (thx Alexey Kardashevskiy).
  + memory: Move AddressSpaceDispatch from AddressSpace to FlatView (thx Alexey Kardashevskiy).
  + memory: Move FlatView allocation to a helper (thx Alexey Kardashevskiy).
  + memory: Open code FlatView rendering (thx Alexey Kardashevskiy).
  + exec: Explicitly export target AS from
    address_space_translate_internal (thx Alexey Kardashevskiy).
  + block: Perform copy-on-read in loop (thx Eric Blake).
  + kvmclock: use the updated system_timer_msr (thx Jim Somerville).
  + block/mirror: check backing in bdrv_mirror_top_flush (thx Vladimir Sementsov-Ogievskiy).
  + hw/usb/bus: Remove bad object_unparent() from
    usb_try_create_simple() (thx Thomas Huth).

- update version to 1.1.4

- upstream updates:
  + x86/msr: Free msr_vcpu_policy during vcpu destruction (thx Andrew Cooper).
  + x86/vmx: Don't use hvm_inject_hw_exception() in
    long_mode_do_msr_write() (thx Andrew Cooper).
  + xen/efi: Fix build with clang-5.0 (thx Andrew Cooper).
  + gnttab: improve GNTTABOP_cache_flush locking (thx Jan Beulich).
  + gnttab: correct GNTTABOP_cache_flush empty batch handling (thx Jan Beulich).
  + x86/microcode: Add support for fam17h microcode loading (thx Tom Lendacky).
  + x86/mm: drop bogus paging mode assertion (thx Jan Beulich).
  + x86/mb2: avoid Xen image when looking for module/crashkernel
    position (thx Daniel Kiper).
  + x86/vvmx: don't enable vmcs shadowing for nested guests (thx Sergey Dyasli).
  + xen/pv: Construct d0v0's GDT properly (thx Andrew Cooper).
  + update Xen version to 4.10.1-pre (thx Jan Beulich).
  + migration, xen: Fix block image lock issue on live migration (thx Anthony PERARD).

- fix gear rules: previous (4.10.0-alt2.S1) build was actually 4.8.2-alt2.S1
- 4.10.0 release

- 4.10.0 release

- upstream updates:
  + p2m: Check return value of p2m_set_entry() when decreasing reservation (thx George Dunlap) (XSA-247).
  + p2m: Always check to see if removing a p2m entry actually worked (thx George Dunlap). (XSA-247)
  + x86/pod: prevent infinite loop when shattering large pages (thx Julien Grall). (XSA-246)
  + x86/shadow: correct SH_LINEAR mapping detection in sh_guess_wrmap() (thx Andrew Cooper). (XSA-243)
  + x86: don't wrongly trigger linear page table assertion (thx Jan Beulich). (XSA-240)
  + x86/mm: fix race condition in modify_xen_mappings() (thx Yu Zhang).
  + x86/mm: fix race conditions in map_pages_to_xen() (thx Min He).
  + x86/hvm: do not register hpet mmio during s3 cycle (thx Eric Chanudet).
  + x86/mm: Make PV linear pagetables optional (thx George Dunlap).
  + x86: fix asm() constraint for GS selector update (thx Jan Beulich).
  + x86: don't latch wrong (stale) GS base addresses (thx Jan Beulich).
  + x86: also show FS/GS base addresses when dumping registers (thx Jan Beulich).
  + x86: fix GS-base-dirty determination (thx Jan Beulich).
  + ui/gtk: Fix deprecation of vte_terminal_copy_clipboard (thx Anthony PERARD).
  + xen/pt: allow QEMU to request MSI unmasking at bind time (thx Roger Pau Monne).

- update version to 1.1.3

- update version to 1.1.2

- 4.8.2 release
- upstream updates:
  + x86emul: handle address wrapping (thx Jan Beulich).
  + VMX: PLATFORM_INFO MSR is r/o (thx Jan Beulich).
  + x86: avoid #GP for PV guest MSR accesses (thx Jan Beulich).
  + x86/vvmx: Fix WRMSR interception of VMX MSRs (thx Andrew Cooper).
  + x86: fix do_update_va_mapping_otherdomain() wrt translated
    domains (thx Jan Beulich).
  + x86: request page table page-in for the correct domain (thx Jan Beulich).
  + xen/domctl: Fix Xen heap leak via XEN_DOMCTL_getvcpucontext (thx Andrew Cooper).
  + x86/PV: fix/generalize guest nul selector handling (thx Jan Beulich).
  + x86/msr: Correct the definition of MSR_IA32_APICBASE_BASE (thx Andrew Cooper).
  + x86/svm: Fix a livelock when trying to run shadowed unpaged
    guests (thx Andrew Cooper).
  + gnttab: fix pin count / page reference race (thx Jan Beulich).
  + tools/libxc/xc_dom_arm: add missing variable initialization (thx Bernd Kuhls).
  + x86/cpu: Fix IST handling during PCPU bringup (thx Andrew Cooper).
  + x86/shadow: Don't create self-linear shadow mappings for 4-level
    translated guests (thx Andrew Cooper).
  + x86: don't allow page_unlock() to drop the last type reference (thx Jan Beulich).
  + x86: don't store possibly stale TLB flush time stamp (thx Jan Beulich).
  + x86: limit linear page table use to a single level (thx Jan Beulich).
  + x86/HVM: prefill partially used variable on emulation paths (thx Jan Beulich).
  + x86/ioreq server: correctly handle bogus
    XEN_DMOP_{,un}map_io_range_to_ioreq_server arguments (thx Vitaly Kuznetsov).
  + x86/FLASK: fix unmap-domain-IRQ XSM hook (thx Jan Beulich).
  + x86/IRQ: conditionally preserve irq <-> pirq mapping on map
    error paths (thx Jan Beulich).
  + x86/MSI: disallow redundant enabling (thx Jan Beulich).
  + x86: enforce proper privilege when (un)mapping pIRQ-s (thx Jan Beulich).
  + x86: don't allow MSI pIRQ mapping on unowned device (thx Jan Beulich).
  + xen/arm: p2m: Read *_mapped_gfn with the p2m lock taken (thx Julien Grall).
  + xen/arm: Fix the issue in cmp_mmio_handler used in
    find_mmio_handler (thx Bhupinder Thakur).
  + xen/arm: Correctly report the memory region in the dummy
    NUMA helpers (thx Julien Grall).
  + xen/page_alloc: Cover memory unreserved after boot in
    first_valid_mfn (thx Julien Grall).
  + x86: introduce and use setup_force_cpu_cap() (thx Jan Beulich).
  + x86/emul: Fix the handling of unimplemented Grp7 instructions (thx Andrew Cooper).
  + VT-d: use correct BDF for VF to search VT-d unit (thx Chao Gao).
  + hvmloader: use base instead of pci_mem_start for find_next_rmrr() (thx Xiong Zhang).
  + x86/efi: don't write relocations in efi_arch_relocate_image()
    first pass (thx David Woodhouse).
  + x86: check for allocation errors in modify_xen_mappings() (thx Jan Beulich).
  + vga: stop passing pointers to vga_draw_line* functions (thx Gerd Hoffmann).
  + gnttab: also validate PTE permissions upon destroy/replace (thx Jan Beulich).
  + tools/xenstore: dont unlink connection object twice (thx Juergen Gross).
  + grant_table: fix GNTTABOP_cache_flush handling (thx Andrew Cooper).
  + xen/mm: make sure node is less than MAX_NUMNODES (thx George Dunlap).

- update version to 1.1.1

- update version to 1.1.0

- update version to 1.1.0rc4