# changelog

author: Paul Howarth <paul@city-fan.org> - 1.5.0-5
changelog:
  - Make GeoIP.dat -> GeoIP-initial.dat symlink in %install, not %post,
    and don't %ghost it
  - Run geoipupdate silently in %post and cron job
  - Create empty database files for %ghost to work with old rpm versions
  - Don't try to use noarch subpackages on old rpm versions
  - Update %description to mention database updates
  - Drop outdated README.Fedora


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-7
changelog:
  - Don't download the database in %post (#1029807)
  - Don't download GeoLiteASNum as it's no longer provided.


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-10
changelog:
  - Added base IPv6 database to GeoIP package
  - Added GeoIP-data subpackage with all other databases (#1201857)


author: Michal Ruprich <mruprich@redhat.com> - 1.5.0-12
changelog:
  - Removed clean section
  - Resolves: #1589860 - Update GeoIP legacy databases
  - Resolves: #1409060 -  Missing symlink at the GeoIP-update package


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 6.7.8.9-7
changelog:
  - add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)


author: Jan Horak <jhorak@redhat.com> - 6.7.8.9-15
changelog:
  - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
    rhbz#1326834, rhbz#1334188, rhbz#1269553


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-0.3.20190408git43d9187c14
changelog:
  - infiniband: allow large MTU (rh #1534869) (rh #1653494)
  - sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)


author: Francesco Giudici <fgiudici@redhat.com> - 1:1.18.0-0.4.20190408git43d9187c14
changelog:
  - keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
  - dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.0-1
changelog:
  - Update to 1.18.0 release
  - cli: fix crash handling gsm secrets (rh #1698495)
  - rules: fix duplicate policy routing rules (rh #1652653)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-2
changelog:
  - cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
  - device: fix reapply of MTU (rh #1702657)
  - settings: fix failed assertion when adding connections (rh #1707261)
  - core: ensure software devices are managed when networking gets enabled (rh #1701585)
  - device: restore IPv6 configuration on link up (rh #1548237)
  - dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
  - core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
  - tc: add suppor for mired action an fq_codel qdisc (rh #1546802)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-3
changelog:
  - team: don't kill teamd for external devices (rh #1711952)
  - ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
  - po: update translations (rh #1689962)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-4
changelog:
  - cli: don't wait forever in the editor on update connection failure (rh #1702203)
  - team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)


author: Nicolas Chauvet <kwizart@gmail.com> - 1.7.1-1
changelog:
  - Update to 1.7.1

  -* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.0-5
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild


author: Boris Ranto <branto@redhat.com> - 2.0.19-12
changelog:
  - New release
  - Move OpenIPMI modprobe conf to /usr/lib/modprobe.d/ (#1195289)
  - Avoid warning on update/removal (#1256798)
  - Stop manually creating and shipping /var/run/OpenIPMI (#1296560)


author: Igor Yozhikov <iyozhikov@mirantis.com> - 3.11-9~mos1
changelog:
  - bd4b877 Suffix update for PyYAML  * Modification made according to https://github.com/openstack/fuel-specs/blob/master/specs/8.0/separate-mos-from-centos.rst#rpm-packages-versioning
  - ebb64fa Version 3.11
  - 24cd351 Added .gitreview


author: Petr Pisar <ppisar@redhat.com> - 1.2.15-14
changelog:
  - Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
    environment variable to enable it.
  - Resolves: rhbz#1245417


author: Jindrich Novy <novyjindrich@gmail.com> - 1.99.1-1
changelog:
  - update to 1.99.1 (#928733)
  - fix configure script to detect/compile against Guile-1.8
  - compiling against Guile-1.8 fixes crashes on startup (#957417, #1028754)
  - add HAS_GS_EXE option (#1105932) - thanks to Yaakov Selkowitz


author: CentOS Sources <bugs@centos.org> - 2.1.11-48.el7.centos
changelog:
  - Drop RHTS hint
  -  Change by David Mansfield <david@orthanc.cobite.com>
  -  Per http://bugs.centos.org/view.php?id=7192
  - Remove cli suggestion text patch
  - set URL to retrace server
  - update to not run sosreport
  -  Per http://bugs.centos.org/view.php?id=7913


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-49
changelog:
  - Translation updates
  - Stop creating uReports for unpackaged executables
  - koops: add detailed taint flag description for kernel oopses
  - koops: fix kernel oops and fatal MCE recognition
  - python: provide more information about Python exceptions
  - vmcore: fix replication of vmcore files
  - Related: #1271213, #1460224, #1374648, #1361116, #1228344,
  - Related: #1395285, #1214730, #1446410, #1319828, #1501718


author: Matej Marusak <mmarusak@redhat.com> - 2.1.11-51
changelog:
  - a-a-s-p-data: fix segfault if GPGKeysDir isn't configured
  - spec: turn on --enable-native-unwinder aarch64
  - plugins: a-a-g-machine-id use dmidecode command
  - spec: use dmidecode instead of python-dmidecode
  - Related: #1566707, #1566707, #1260074, #1591141


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-53
changelog:
  - cli: load config file at the beginning
  - ccpp: fast dumping and abrt core limit
  - conf: increase MaxCrashReportsSize to 5GiB
  - vmcore: /var/tmp/abrt is no longer a dump location
  - koops: Filter kernel oopses based on logged hostname
  - daemon: Fix double closed fd race condition
  - Related: #1618818, #1647841, #1613236, #1613182, #1655241


author: Kamil Dudka <dkdudka@redhat.com> - 2.2.51-13
changelog:
  - avoid failure of %check when building as root (#1085389)
  - setfacl.1: document the meaning of '-' in perms (#1337039)


author: Konstantin Volkov <wolf@virtuozzo.com> - 21.48.22.156-1.vz7.7
changelog:
  - Use kickstart flag for packages installation without registration, see #PSBM-97433
  - Do not configure va repos for HCI case


author: VZ Auto Builder <dsilakov@virtuozzo.com> 1.8.80
changelog:
  - [AR][BUILD] Adjusted makefiles to account for a change of libpcs_io's major
  version. (Artem Anisimov <artem.anisimov@acronis.com>)
   - [PROTOv2] Do not call mark_needs_reopen() under appender.submit_lock. (Artem
  Anisimov <artem.anisimov@acronis.com>)
   - [PROTOv2] minor: do not leak errno from pcs_rlimit_user_wait_account().
  (Artem Anisimov <artem.anisimov@acronis.com>)
   - [VSTOR-29591] Do not trigger reclaims after pcs_rlimit_user_del(). (Artem
  Anisimov <artem.anisimov@acronis.com>)
   - Drop patch - merged to the source tree (Denis Silakov
  <dsilakov@virtuozzo.com>)
   - Drop patch - merged to the source tree (Denis Silakov
  <dsilakov@virtuozzo.com>)


author: VZ Auto Builder <dsilakov@virtuozzo.com> 1.8.82
changelog:
  - [ASTOR] Use pcs_co_mutex_lock_cancelable() where appropriate. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [AR][BUILD] Adjusted makefiles to account for a change of libpcs_io's major
  version. (Artem Anisimov <artem.anisimov@acronis.com>)
   - [PROTOv2] Do not call mark_needs_reopen() under appender.submit_lock. (Artem
  Anisimov <artem.anisimov@acronis.com>)
   - [PROTOv2] minor: do not leak errno from pcs_rlimit_user_wait_account().
  (Artem Anisimov <artem.anisimov@acronis.com>)
   - [VSTOR-29591] Do not trigger reclaims after pcs_rlimit_user_del(). (Artem
  Anisimov <artem.anisimov@acronis.com>)


author: VZ Auto Builder <dsilakov@virtuozzo.com> 1.8.86
changelog:
  - [ASTOR] Handle partial io (Denis Greshilov <Denis.Greshilov@acronis.com>)
   - [ASTOR] Use msr_session_inject_fault() instead of
  msr_session_inject_fault_atomic() where possible (Denis Greshilov
  <Denis.Greshilov@acronis.com>)
   - [ASTOR] fix windows build: extern definitions need ASTOR_API, too. (Artem
  Anisimov <artem.anisimov@acronis.com>)
   - [ASTOR] Added missing ASTOR_API annotations. (Artem Anisimov
  <artem.anisimov@acronis.com>)


author: Inga Pyass <ipyass@virtuozzo.com> 1.8.89
changelog:
  - [AR][BUILD] Changed targets.list to 3.5.2. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [ASTOR] minor: check that v2 handshake's {client,conn,session}_id are non-
  zero. (Artem Anisimov <artem.anisimov@acronis.com>)
   - [ASTOR] Export msr_conn_{read,write,readv,writev}. (Artem Anisimov
  <artem.anisimov@acronis.com>)


author: Inga Pyass <ipyass@virtuozzo.com> 1.8.90
changelog:
  - [AR][BUILD] Changed targets.list to 3.5.2. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [ASTOR] minor: check that v2 handshake's {client,conn,session}_id are non-
  zero. (Artem Anisimov <artem.anisimov@acronis.com>)
   - [ASTOR] Export msr_conn_{read,write,readv,writev}. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - Reset vstorage-libs-shared requires to 3.5.1 one (Konstantin Volkov
  <wolf@virtuozzo.com>)


author: Inga Pyass <ipyass@virtuozzo.com> 1.8.91
changelog:
  - [ASTOR] Do not require non-zero session_id in v2 handshake. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [AR][BUILD] Changed targets.list to 3.5.2. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [ASTOR] minor: check that v2 handshake's {client,conn,session}_id are non-
  zero. (Artem Anisimov <artem.anisimov@acronis.com>)
   - [ASTOR] Export msr_conn_{read,write,readv,writev}. (Artem Anisimov
  <artem.anisimov@acronis.com>)


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-5
changelog:
  - fix issues reported by static analysis tools
    Resolves: rhbz#1027762
  - add man-pages for arptables-{save,restore}
    Resolves: rhbz#1025726


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-8
changelog:
  - Add missing long option --set-counters and update documentation
    Corrosponding short option -c was implemented, but undocumented.
    Resolves: rhbz#1050854


author: Andrey Bondrov <abondrov@virtuozzo.com> - 0.0.4-8.2
changelog:
  - Restore and re-diff Virtuozzo patch from arptables_jf package
  - Restore Provides arptables-wdog_tmo


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16
changelog:
  - the correct solution is remove smp_flags, they don't work properly on ppc with
    the option mpower7
  - Related: rhbz#1048745


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-21
changelog:
  - correct the DST correction when using UTC time specification (#1328832)
  - clear non-job files from at dir and test for write error on fclose
    to fix bogus syslog messages


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-23
changelog:
  - fix the ownership of the spool directory (#1414228)
  - document the -n option of atd (#739870)
  - fix handling of the aborted jobs (due to possibly
    temporary conditions) and avoid flooding the syslog


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-7
changelog:
  - change x86_64 archdef to P4, prefetch instruction from hammer is illegal on some pentium 4
  - add -fstack-protector-strong to flags
  - Resolves: rhbz#1070783


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-9
changelog:
  - ppcle patches (conflicting patches modified)
  - tests on ppcle disabled to shorten build time and fit into 24 hour limit
  - resolves bug 1125475
  - aarch64 patches
  - Resolves: rhbz#1061956


author: Jaromir Capik <jcapik@redhat.com> - 3.10.1-10
changelog:
  - patching for Power8 to pass performance tunings and tests on P8 builders
  - re-enabling tests on ppc64le
  - Resolves: rhbz#1125475


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-11
changelog:
  - apply patches 99 and 110 to all ppc variants
  - build lapack with -frecursive flag (#1176026)
  - fix possible memory leak (#1350536)
  - fix wrong sed substitutions (#1402627)
  - Resolves: rhbz#1350536
  - Related: rhbz#1176026


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-12
changelog:
  - cleanup: merge the application of ppc patches from previous commit
    into single block
  - Related: rhbz#1350536


author: Steve Grubb <sgrubb@redhat.com> 2.8.4-1
changelog:
  resolves: #1559032 - Rebase audit package to 2.8.4 to pick up bug fixes
  resolves: #1573889 - auditd busy loop in rotate_logs() with num_logs < 2
  resolves: #1534748 - incorrect addr field when using IPv6 for remote logging
  resolves: #1515903 - ausearch-expression man page missing \timestamp_ex
  resolves: #1511606 - aureport AVC report header is incomplete
  resolves: #1504251 - make auditd dump internal state for log writing status


author: Steve Grubb <sgrubb@redhat.com> 2.8.5-1
changelog:
  resolves: #1651761 - Rebase audit package to 2.8.5 to pick up bug fixes
  resolves: #1462178 - audit rule arch changed from b32 to b64 on ppc64le
  resolves: #1614833 - audispd loops reloading config 
  resolves: #1622194 - audisp-remote memory leak when using krb5 
  resolves: #1625156 - audisp-remote wont connect if remote ending action not reconnect
  resolves: #1628626 - aureport -a --failed does not display user_avc events 
  resolves: #1648005 - tcp listener socket fails when ipv6.disable=1 boot command
  resolves: #1650670 - space left in auditd.conf expressed as a percentage 
  resolves: #1663285 - ausearch device/inode missing when using a single file 
  resolves: #1672287 - max_log_file_action "keep_logs" doesn't behave as described


author: Dominic Cleal <dcleal@redhat.com> - 1.4.0-1
changelog:
  - Rebase to Augeas 1.4.0
  - Revert some changes for better compatibility with 1.1.0-17:
    * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
    * Dnsmasq: revert splitting of address/server options
    * Dovecot: restore quotes within values
    * Jaas: revert semicolon and line break changes
    * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
    * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
    * Syslog: restore tree without protocol for UDP hosts
    * UpdateDB: keep Simplevars to load config by default


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-4
changelog:
  - Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
  - Skip testSaveNoPermission when running as root (RHBZ#1269817)
  - Chrony: allow signed numbers (RHBZ#1302017)
  - Krb5: support includedir (RHBZ#1406111)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-5
changelog:
  - Cgconfig: allow fperm & dperm in admin & task (RHBZ#1325741)
  - Grub: handle top-level "boot" directive (RHBZ#1484261)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-9
changelog:
  - Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
    (RHBZ#1653766)
  - Anaconda: new lens (RHBZ#1657189)


author: Pavel Březina <pbrezina@redhat.com> - 6.2.8-26
changelog:
  - CVE-2017-7488 authconfig: Information leak when SSSD is used for authentication against remote server (#1441604)


author: Ian Kent <ikent@redhat.com> - 5.0.7-97
changelog:
  - bz1358887 - On Red Hat 7.x systems if you try to access local
    filesystems using the automounter through /net then the shell
    and mount could lock up *if* the filesystem your accessing is
    double exported.
    - set bind mount as propagation slave.
    - add master map pseudo options for mount propagation.
  - Resolves: rhbz#1358887


author: Ian Kent <ikent@redhat.com> - 5.0.7-98
changelog:
  - bz1627502 - after upgrading to autofs-5.0.7-83.el7.x86_64 on RHEL 7 clients,
    amd maps /defaults key mount options are no longer working
    - fix amd parser opts option handling.
  - Resolves: rrhbz#1627502


author: Ian Kent <ikent@redhat.com> - 5.0.7-98
changelog:
  - bz1630189 - yum update hanging while restarting autofs
    - fix incorrect locking in sss lookup.
  -Resolves: rhbz#1630189


author: Ian Kent <ikent@redhat.com> - 5.0.7-100
changelog:
  - bz1599516 - [autofs] The log no longer print PID of automount process
    - add NULL check in prepare_attempt_prefix().
    - update build info with systemd.
    - use flags for startup boolean options.
    - move close stdio descriptors to become_daemon().
    - add systemd service command line option.
  - Resolves: rhbz#1599516


author: Ian Kent <ikent@redhat.com> - 5.0.7-101
changelog:
  - bz1640448 - path_resolution on an autofs managed path resets the timer. Can
    this be made configurable?
    - support strictexpire mount option.
  - Resolves: rhbz#1640448


author: Ian Kent <ikent@redhat.com> - 5.0.7-102
changelog:
  - bz1644910 - [RFE] Enable additional logging information for autofs
    - add NULL check for get_addr_string() return.
    - use malloc(3) in spawn.c.
    - add mount_verbose configuration option.
    - optionally log mount requestor process info.
    - log mount call arguments if mount_verbose is set.
  - Resolves: rhbz#1644910


author: Ian Kent <ikent@redhat.com> - 5.0.7-103
changelog:
  - bz1644933 - Segmentation fault in err_string_data_LHASH_COMP
    - openssl workaround.
  - Resolves: rhbz#1644933


author: Ian Kent <ikent@redhat.com> - 5.0.7-104
changelog:
  - bz1442063 - Parameter ghost not documented in the man pages
    - document ghost option in auto.master man page.
  - Resolves: rhbz#1442063


author: Ian Kent <ikent@redhat.com> - 5.0.7-105
changelog:
  - bz1680582 - Sanitize autofs logging
    - make expire remaining log level debug.
  - Resolves: rhbz#1680582


author: Ian Kent <ikent@redhat.com> - 5.0.7-106
changelog:
  - bz1685804 - autofs doesn't expand macros in amd map selectors
    - workaround getaddrinfo(3) ai_canonname bug.
    - improve hostname lookup error logging.
    - allow period following macro in selector value.
    - fix macro expansion in selector values.
  - Resolves: rhbz#1685804


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18-1
changelog:
  - Update to 5.18
  - Fix multilib conflicts (#831379)
  - Make some dependencies arch-specific
  - Remove obsolete macros


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-15
changelog:
  - enable hardened build (#1092506)
  - fix short option for --version, document -t option of avahi-autoipd (#948583)
  - fix crashes in D-Bus methods GetAlternativeHostName and GetAlternativeServiceName (#1003688)
  - fix bug when avahi-daemon ended up in a tight loop (#1081801)
  - remove prefix /home/lennart/tmp/avahi from references in man pages (#1120233)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-17
changelog:
  - fix crash due to use of deprecated Gtk3 API (#1263720)
  - don't add 0pointer.de and zeroconf.org to default browse list (#1340837)
  - fix not publishing entries if a probing interface is removed (#1222646)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-18
changelog:
  - create home directory for avahi-autoipd user (#1416287)
  - get rid of the dangling symlink to avahi-discover in debuginfo package (#1421229)


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.2.8-2
changelog:
  - Replaced summary information
  - Updated BuildRequires and Requires information
  - Replaced "{_mandir}/man1/bakefil*.gz" to "{_mandir}/man1/bakefil*"
  - Correct URL and source URL
  - Replaced "%{_libdir}/*" to "%{_libdir}/bakefile*"
  - Removed useless line: "%doc"


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.2.8-3
changelog:
  - Fixed Source url
  - Updated BuildRequires and Requires info
  - Empy python module packaged independently
  - Removed files of uuid and subprocess python modules
  - Removed .la files


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2
changelog:
  - Rebase features patches
  - Disable autodetected eddsa algorithm ED448
  - Add versioned depends to all library subpackages
  - Fix multilib conflict of devel packages


author: Nick Clifton <nickc@redhat.com> 2.27-33.base
changelog:
  - Fix seg-fault parsing ELF files.  (#1578979)
  - Fix seg-fault parsing DWARF-2 information.  (#1579065)
  - Fix seg-fault parsing DWARF-2 information.  (#1579051)
  - Fix seg-fault parsing a PE format file.  (#1579019)


author: Nick Clifton <nickc@redhat.com> 2.27-34.base
changelog:
  - Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
  - Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
  - Fix seg-fault parsing corrupt ELF format files.  (#1579801)


author: Nick Clifton <nickc@redhat.com> 2.27-41.base.1
changelog:
  - Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)


author: Michal Sekletár <msekleta@redhat.com> - 0.7.3-2
changelog:
  - prevent infinite recursion in dmidecode.c::smbios_setslot (#1642706)
  - fix indentation in the man page (#1642706)


author: Eric Sandeen <sandeen@redhat.com> - 1.0.5-7
changelog:
  - Add upstream cpu scalability patches (#1032368)
  - Remove "-k" option from manpage (#1300354)
  - Fix potential deadlock when calling stop_tracers (#1263189)


author: Orion Poplawski <orion@cora.nwra.com> - 1.9.0-1
changelog:
  - Update to 1.9.0 (#1211599)
  - Update URL
  - Disable parallel build
  - Run all tests
  - Ship license files


author: Petr Machata <pmachata@redhat.com> - 1.53.0-18
changelog:
  - Turn off build flags pre-set by Boost distribution.
    (boost-1.53.0-buildflags.patch)
  - Pass RPM_OPT_FLAGS through user-config.jam.


author: Petr Machata <pmachata@redhat.com> - 1.53.0-21
changelog:
  - Fix atomic_cas32 (thanks Jaroslav Škarvada for figuring out where
    the problem is) (boost-1.54.0-interprocess-atomic_cas32-ppc.patch)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - do not use arch-specific BuildRequires (#1268268)
  - support TLS libraries without SSLv3 (#1298227)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - Install unpatched gcc.jam (#1305019).
  - Build libboost_python and libboost_python3 such that they depend on
    their respective libpython (#1302120).
    (boost-1.53.0-python-libpython_dep.patch,
    boost-1.53.0-python-abi_letters.patch)
  - Fix Boost.Python test suite so that PyImport_AppendInittab is called
    before PyInitialize, which broke the test suite with Python 3.
    (boost-1.53.0-python-test-PyImport_AppendInittab.patch)
  - Patch gcc.jam to not add bogus rpaths.


author: Haïkel Guémar <hguemar@fedoraproject.org> - 1.59.0-2
changelog:
  - Backport rpath patch from Fedora Rawhide
  - Remove obsoletes
  - Fix python-devel BR to python2-devel


author: Bruno Meneguele <bmeneg@redhat.com> [3.10.0-1062.3.1.el7]
changelog:
  - [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
  - [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
  - [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
  - [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
  - [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
  - [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
  - [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
  - [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
  - [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
  - [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
  - [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
  - [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
  - [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
  - [block] block: blk_init_allocated_queue() set q->fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
  - [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
  - [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
  - [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
  - [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
  - [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
  - [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
  - [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
  - [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
  - [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
  - [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
  - [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
  - [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
  - [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
  - [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
  - [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
  - [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
  - [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
  - [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
  - [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
  - [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
  - [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
  - [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
  - [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
  - [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
  - [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
  - [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
  - [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
  - [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
  - [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
  - [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
  - [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
  - [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
  - [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
  - [ipc] standardize code comments (Waiman Long) [1740178 1373519]
  - [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
  - [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
  - [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
  - [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
  - [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
  - [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
  - [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
  - [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
  - [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
  - [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
  - [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
  - [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]


author: Bruno Meneguele <bmeneg@redhat.com> [3.10.0-1062.4.2.el7]
changelog:
  - [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
  - [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
  - [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-1062.4.2.vz7.116.1]
changelog:
  - config.OpenVZ.[debug.]minimal: update up to 3.10.0-1062.4.2.el7 (Konstantin Khorenko) [PSBM-99401]
  - ve/kmod: enable autoload for nf_tables_inet module from inside a CT (Konstantin Khorenko) [PSBM-99406]
  - ve/kmod: enable autoload for iptables security tables from inside CT (Vasily Averin) [PSBM-98212]
  - rh/dcache: work around buggy iso images (Vasily Averin) [PSBM-95941]
  - fs/fuse kio: share bandwith/IOPS for prometheus stats (Sergey Lysanov) [VSTOR-20601]
  - ms/tun: Add ioctl() TUNGETDEVNETNS cmd to allow obtaining real net ns of tun device (Alexander Mikhalitsyn) [PSBM-99027]
  - ms/nbd: quiesce request queues to make sure no submissions are inflight (Sagi Grimberg) [PSBM-99114]
  - ms/nbd: only clear the queue on device teardown (Josef Bacik) [PSBM-99114]
  - ms/KVM: coalesced_mmio: add bounds checking (Matt Delco) [PSBM-99242]
  - nbd: move setting the bd_invalidated out of the loop (Andrey Ryabinin)
  - nbd: move nbd_size_update() of of the loop. (Andrey Ryabinin)
  - ms/fs/seq_file.c: simplify seq_file iteration code and interface (NeilBrown) [PSBM-99126]
  - configs.minimal: enable CPU_IDLE_GOV_HALTPOLL/HALTPOLL_CPUIDLE (Konstantin Khorenko)
  - fuse: don't perform getattr on each write (Vasily Averin) [PSBM-99138]
  - nbd: invalidate bdev after size update (Andrey Ryabinin) [PSBM-99102]
  - ms/nbd: use bd_set_size when updating disk size (Josef Bacik) [PSBM-99102]
  - ms/nbd: update size when connected (Josef Bacik) [PSBM-99102]
  - ms/nbd: fix nbd device deletion (Josef Bacik) [PSBM-99102]
  - ms/nbd: don't set the device size until we're connected (Josef Bacik) [PSBM-99102]
  - ms/nbd: fix use after free on module unload (Josef Bacik) [PSBM-99102]
  - ms/nbd: add device refcounting (Josef Bacik) [PSBM-99102]
  - ms/nbd: stop using the bdev everywhere (Josef Bacik) [PSBM-99102]
  - sctp: suppress warnings on high order memory allocation on packet transmit (Konstantin Khorenko) [PSBM-99098]
  - ve/kmod: allow "nft_compat" module autoload from inside a Container (Konstantin Khorenko) [PSBM-98948]
  - ms/nbd: fix how we set bd_invalidated (Josef Bacik) [PSBM-98887]
  - ms/treewide: Add __GFP_NOWARN to k.alloc calls with v.alloc fallbacks (Joe Perches) [PSBM-99042]
  - rdma/i40iw: use proper GFP flag for hiding high-order-allocation warning (Konstantin Khorenko) [VSTOR-27273]
  - sctp: suppress warnings on high order memory allocation on sctp chunk creation (Konstantin Khorenko) [PSBM-93798]
  - block/ndb: add WQ_UNBOUND to the knbd-recv workqueue (Dan Melnic)
  - nbd: ignore non-nbd ioctl's (Josef Bacik)
  - nbd: take tx_lock before disconnecting (Josef Bacik)
  - nbd: don't leak nbd_config (Ilya Dryomov)
  - nbd: separate out the config information (Josef Bacik)
  - nbd: handle single path failures gracefully (Josef Bacik)
  - nbd: replace kill_bdev() with __invalidate_device() (Ratna Manoj Bolla)
  - nbd: set queue timeout properly (Josef Bacik)
  - nbd: set rq->errors to actual error code (Josef Bacik)
  - nbd: put socket in error cases (Josef Bacik)
  - nbd: handle ERESTARTSYS properly (Josef Bacik)
  - ms/ext4: handle the rest of ext4_mb_load_buddy() ENOMEM errors (Konstantin Khlebnikov) [PSBM-98265]
  - ms/ext4: use __GFP_NOFAIL in ext4_free_blocks() (Konstantin Khlebnikov) [PSBM-98265]
  - ms/block: Fix list corruption of blk stats callback list (Jan Kara) [PSBM-99021]
  - ms/block: fix leak of q->rq_wb (Omar Sandoval) [PSBM-99021]
  - ms/cfq-iosched: don't call wbt_disable_default() with IRQs disabled (Jens Axboe) [PSBM-99021]
  - ms/ext4: use jbd2_inode dirty range scoping (Ross Zwisler)
  - ms/jbd2: introduce jbd2_inode dirty range scoping (Ross Zwisler)
  - ms/mm: add filemap_fdatawait_range_keep_errors() (Ross Zwisler)
  - ms/ext4: do not ask jbd2 to write data for delalloc buffers (Jan Kara)
  - ms/jbd2: add support for avoiding data writes during transaction commits (Jan Kara)
  - fs-writeback: add cond_resched() in wb_do_writeback() (Andrey Ryabinin) [PSBM-97743]
  - ve: add a comment about possible pseudosuper race (Pavel Tikhomirov)
  - blk-wbt: increase maximum queue depth to increase performance of writes (Pavel Tikhomirov) [PSBM-96243 PSBM-96243]
  - block: enable CONFIG_BLK_WBT* (Pavel Tikhomirov) [PSBM-96243 PSBM-96243]
  - ms/block: hook up writeback throttling (Jens Axboe) [PSBM-96243 PSBM-96243]
  - ms/blk-wbt: add general throttling mechanism (Jens Axboe) [PSBM-96243 PSBM-96243]
  - ms/block: get rid of struct blk_issue_stat (Omar Sandoval) [PSBM-96243 PSBM-96243]
  - ms/writeback: track if we're sleeping on progress in balance_dirty_pages() (Jens Axboe) [PSBM-96243 PSBM-96243]
  - ms/writeback: mark background writeback as such (Jens Axboe) [PSBM-96243 PSBM-96243]
  - ms/writeback: add wbc_to_write_flags() (Jens Axboe) [PSBM-96243 PSBM-96243]
  - ms/block: add REQ_BACKGROUND (Jens Axboe) [PSBM-96243 PSBM-96243]
  - x86/asm: remove the unused get_limit() method (Pavel Tikhomirov) [PSBM-96243 PSBM-96243]
  - ve/net/core: allow to call setsockopt(SO_SNDBUFFORCE) from Containers (Konstantin Khorenko) [PSBM-98794]
  - ms/af_key: do not use GFP_KERNEL in atomic contexts (Eric Dumazet) [PSBM-94668]
  - ms/net: Fix RCU splat in af_key (David Ahern) [PSBM-94668]
  - ms/tun, bpf: fix suspicious RCU usage in tun_{attach, detach}_filter (Daniel Borkmann) [PSBM-94755]
  - ms/tcp: Clear sk_send_head after purging the write queue (Ben Hutchings) [PSBM-97312]
  - fs/fuse kio: don't wait read requests in case of fsync/flush (Ildar Ismagilov) [VSTOR-11372]
  - ve: use host ipt_mask for pseudosuper in setsockopt and request module (Pavel Tikhomirov) [PSBM-98702]
  - ms/netfilter: nf_tables: avoid global info storage (Vasily Averin) [PSBM-98682]
  - rdma/i40iw: hide high-order-allocation warning in i40iw_save_msix_info() (Vasily Averin) [VSTOR-27273]
  - ve/exec: allow trusted exec change both on boot and on running system (Pavel Tikhomirov) [PSBM-98702 PSBM-98702]
  - ve/fs/exec: send SIGSEGV to a process trying to execute untrusted files (Pavel Tikhomirov) [PSBM-98702]
  - sysfs/ploop: add new device option trusted (Pavel Tikhomirov) [PSBM-98234]
  - ve/fs/exec: don't allow a privileged user to execute untrusted files (Pavel Tikhomirov) [PSBM-98094]
  - mm/slab: Fix deadlock on attempt to shrink slab. (Andrey Ryabinin)
  - mm/memcg: restore lost css_put() in memcg_kmem_cache_create_func() (Andrey Ryabinin) [PSBM-98444]
  - ve/net/netfilter/core: Don't allow container to crash the kernel. (Andrey Ryabinin) [PSBM-98211]
  - ve/kmod, nf_tables: allow nf_tables.ko autoloading on request from ve. (Andrey Ryabinin) [PSBM-98211]
  - ploop: Kill noop complete_merge method (Kirill Tkhai)
  - ploop: Assign holes_bitmap before merge on merge-no-return point (Kirill Tkhai) [PSBM-98313]
  - ms/NFS: Fix a double unlock from nfs_match,get_client (Benjamin Coddington) [PSBM-98297]
  - ms/NFS: Cleanup if nfs_match_client is interrupted (Benjamin Coddington) [PSBM-98297]
  - ms/NFS: make nfs_match_client killable (Roberto Bergantinos Corpas) [PSBM-98297]
  - ms/perf/x86/intel: make reusable LBR initialization code, part 2/2 (Jan Dakinevich) [PSBM-75679 PSBM-94406]
  - ms/perf/x86/intel: make reusable LBR initialization code, part 1/2 (Jan Dakinevich) [PSBM-75679]
  - Revert "ms/perf/x86/intel: make reusable LBR initialization code" (Jan Dakinevich)
  - ms/x86/CPU: Add more Icelake model numbers (Kan Liang)
  - ms/x86/cpu: Sanitize FAM6_ATOM naming (Peter Zijlstra)
  - ms/x86/cpu: Keep model defines sorted by model number (Andy Shevchenko)
  - ms/KVM: x86: set ctxt->have_exception in x86_decode_insn() (Jan Dakinevich) [PSBM-68018]
  - ms/KVM: x86: always stop emulation on page fault (Jan Dakinevich) [PSBM-68018]
  - ms/KVM: x86: inject exceptions produced by x86_decode_insn (Paolo Bonzini) [PSBM-68018]
  - ve/cpu: handle sysfs attributes for CTs (Jan Dakinevich) [PSBM-91808]
  - ms/pagemap: Port diff-ms-pagemap-do-not-leak-physical-addresses-to-non-privileged-userspace (Vladimir Davydov) [PSBM-32308 PSBM-33640 PSBM-97881]
  - ms/tun: allow positive return values on dev_get_valid_name() call (Julien Gomes) [PSBM-96332 PSBM-96332]
  - ms/tun: call dev_get_valid_name() before register_netdevice() (Cong Wang) [PSBM-96332 PSBM-96332]
  - nbd: don't allow invalid blocksize settings (Jens Axboe)
  - nbd: stop leaking sockets (Josef Bacik)
  - nbd: cleanup workqueue on error properly (Josef Bacik)
  - nbd: set the logical and physical blocksize properly (Josef Bacik)
  - nbd: cleanup ioctl handling (Josef Bacik)
  - nbd: use an idr to keep track of nbd devices (Josef Bacik)
  - nbd: use our own workqueue for recv threads (Josef Bacik)
  - nbd: move request validity checking into nbd_send_cmd (Christoph Hellwig)
  - nbd: remove REQ_TYPE_DRV_PRIV leftovers (Christoph Hellwig)
  - nbd: only set MSG_MORE when we have more to send (Josef Bacik)
  - nbd: blk_mq_init_queue returns an error code on failure, not NULL (Jeff Moyer)
  - nbd: s/<asm/uaccess.h>/<linux/uaccess.h> (Andrey Ryabinin)
  - nbd: use dev_err_ratelimited in io path (Josef Bacik)
  - nbd: reset the setup task for NBD_CLEAR_SOCK (Josef Bacik)
  - nbd: fix 64-bit division (Jens Axboe)
  - nbd: use loff_t for blocksize and nbd_set_size args (Josef Bacik)
  - nbd: fix setting of 'error' in NBD_DO_IT ioctl (Jens Axboe)
  - nbd: add multi-connection support (Josef Bacik)
  - nbd: fix use-after-free of rq/bio in the xmit path (Jens Axboe)
  - nbd: use BLK_MQ_F_BLOCKING (Josef Bacik)
  - nbd: allow block mq to deal with timeouts (Josef Bacik)
  - nbd: use flags instead of bool (Josef Bacik)
  - nbd: don't shutdown sock with irq's disabled (Josef Bacik)
  - nbd: convert to blkmq (Josef Bacik)
  - nbd: fix race in ioctl (Vegard Nossum)
  - nbd: pass the nbd pointer for flags debugfs (Josef Bacik)
  - drivers: use req op accessor (Mike Christie)
  - nbd: use correct div_s64 helper (Arnd Bergmann)
  - nbd: Create size change events for userspace (Markus Pargmann)
  - nbd: ratelimit error msgs after socket close (Dan Streetman)
  - nbd: Move flag parsing to a function (Markus Pargmann)
  - nbd: Cleanup reset of nbd and bdev after a disconnect (Markus Pargmann)
  - nbd: Timeouts are not user requested disconnects (Markus Pargmann)
  - nbd: Remove signal usage (Markus Pargmann)
  - nbd: Fix debugfs error handling (Markus Pargmann)
  - nbd: use ->compat_ioctl() (Al Viro)
  - signal: turn dequeue_signal_lock() into kernel_dequeue_signal() (Oleg Nesterov)
  - nbd: Add locking for tasks (Markus Pargmann)
  - nbd: flags is a u32 variable (Markus Pargmann)
  - nbd: Rename functions for clearness of recv/send path (Markus Pargmann)
  - nbd: Change 'disconnect' to be boolean (Markus Pargmann)
  - nbd: Add debugfs entries (Markus Pargmann)
  - nbd: Remove variable 'pid' (Markus Pargmann)
  - nbd: Move clear queue debug message (Markus Pargmann)
  - nbd: Remove 'harderror' and propagate error properly (Markus Pargmann)
  - nbd: restructure sock_shutdown (Markus Pargmann)
  - nbd: sock_shutdown, remove conditional lock (Markus Pargmann)
  - nbd: Fix timeout detection (Markus Pargmann)
  - block: have drivers use blk_queue_max_discard_sectors() (Jens Axboe)
  - nbd: stop using req->cmd (Christoph Hellwig)
  - nbd: Return error pointer directly (Markus Pargmann)
  - nbd: Return error code directly (Markus Pargmann)
  - nbd: Remove fixme that was already fixed (Markus Pargmann)
  - nbd: Restructure debugging prints (Markus Pargmann)
  - nbd: Fix device bytesize type (Markus Pargmann)
  - nbd: Replace kthread_create with kthread_run (Markus Pargmann)
  - nbd: Remove kernel internal header (Markus Pargmann)
  - nbd: fix possible memory leak (Sudip Mukherjee)
  - nbd: zero from and len fields in NBD_CMD_DISCONNECT. (Hani Benhabiles)
  - switch nbd to sockfd_lookup/sockfd_put (Al Viro)
  - nbd: remove bogus BUG_ON in NBD_CLEAR_QUE (Michal Belczyk)
  - ms/fs/writeback: fix lazyatime dirty inode writeback (Andrey Ryabinin)
  - ve/modules: Add ts_kmp to allowed modules (Kirill Tkhai) [PSBM-97729]
  - ms/libata: Fix ATA request sense (Damien Le Moal) [VSTOR-26930 VSTOR-26930]
  - ms/libata: fixup ZAC device disabling (Hannes Reinecke) [VSTOR-26930 VSTOR-26930]
  - ms/libata: Implement support for sense data reporting (Hannes Reinecke) [VSTOR-26930 VSTOR-26930]
  - ms/libata: Implement NCQ autosense (Hannes Reinecke) [VSTOR-26930 VSTOR-26930]
  - ms/libata-scsi: Update SATL for ZAC drives (Hannes Reinecke) [VSTOR-26930 VSTOR-26930]
  - ms/libata: Implement ATA_DEV_ZAC (Hannes Reinecke) [VSTOR-26930 VSTOR-26930]
  - fuse: allow kernel to access "direct_io" files again (Andrey Ryabinin) [PSBM-97905]
  - sunrpc: fix crash when cache_head become valid before update (Pavel Tikhomirov) [PSBM-97738]
  - ms/prctl: propagate has_child_subreaper flag to every descendant (Pavel Tikhomirov) [PSBM-96263]
  - ms/prctl: introduce the walk_process_tree() helper (Oleg Nesterov) [PSBM-96263]
  - ploop: remove module param ploop_major as it can break everything (Pavel Tikhomirov)
  - fuse: Wait inflight requests only in case of close_wait (Kirill Tkhai) [PSBM-98031]
  - ploop: Fallback to maintaince_mode in ploop v1 format (Kirill Tkhai) [PSBM-97319]
  - vhost: suppress high-order-allocation warning for vhost_log (Vasily Averin) [PSBM-97775]
  - rh/vhost: fixed allocation size of indirect array (Vasily Averin) [PSBM-97524]
  - kvm: use kvzalloc for struct kvm allocation (Vasiliy Averin) [PSBM-97483]
  - fuse: locking fixup in fuse_open_common() (Vasiliy Averin)
  - fuse: optimize writepages search (Maxim Patlasov) [PSBM-59254]
  - fuse: remove WARN_ON from fuse_write_file_get() (Vasiliy Averin) [PSBM-97311]
  - fuse: fix ->end() vs ->waitq ordering (Vasiliy Averin) [PSBM-80680 PSBM-97298]
  - ploop: Fix the check that nobody writes to ZERO_PAGE() (Konstantin Khorenko) [PSBM-97043]
  - ms/ext4: cleanup clean_bdev_aliases() calls (zhangyi (F)) [PSBM-96719 PSBM-96719]
  - ms/jbd2: discard dirty data when forgetting an un-journalled buffer (zhangyi (F)) [PSBM-96719 PSBM-96719]
  - ms/jbd2: clear dirty flag when revoking a buffer from an older transaction (zhangyi (F)) [PSBM-96719 PSBM-96719]
  - fs/fuse kio: add a sanity check on statistic inc (Konstantin Khorenko) [PSBM-96128]
  - ploop: Add comment about ploop_pvd_header::m_FirstBlockOffset (Kirill Tkhai)
  - mm/memcg: close potential race of kmem unharge and reparent. (Andrey Ryabinin) [PSBM-97012]
  - mm/memcg: fix race with WARN_ON() check and kmem uncharging. (Andrey Ryabinin) [PSBM-97012]
  - ploop/nfs: kill unused sync vec functions (Konstantin Khorenko) [PSBM-96333]
  - ploop/nfs: use ploop_submit_alloc() helper (Konstantin Khorenko) [PSBM-92367 VSTOR-19972 PSBM-96333]
  - ploop/nfs: ploop: Make submit_alloc() return int value (Konstantin Khorenko) [PSBM-92367 VSTOR-19972 PSBM-96333]
  - ploop/nfs: add NFS backend support (Konstantin Khorenko) [PSBM-96333]
  - ploop/nfs: introduce "verf" ploop_request field (Konstantin Khorenko) [PSBM-96333]
  - mm/memcontrol: warn if memcg reparenting failed to succeed in 20 min (Andrey Ryabinin) [PSBM-96003 VSTOR-24241 PSBM-96533 PSBM-96889 VSTOR-25631 PSBM-94117]
  - configs: Enable doublefault exception handler (Konstantin Khorenko)
  - ploop: Check that nobody writes to ZERO_PAGE() (Kirill Tkhai)
  - fs/nfs: more leaks for busy inodes case. (Andrey Ryabinin)
  - fs/super: don't destroy super_block in case of leaked inodes (Andrey Ryabinin) [PSBM-95177]
  - ms/x86/build/64: Force the linker to use 2MB page size (H.J. Lu)
  - ms/x86: Extend #DF debugging aid to 64-bit (Borislav Petkov)
  - ms/mm: vmscan: check if mem cgroup is disabled or not before calling memcg slab shrinker (Yang Shi)
  - mm/memcg: reclaim memory.cache.limit_in_bytes from background (Andrey Ryabinin) [VSTOR-24395 PSBM-94761]
  - mm/memcontrol: fix memory.high (Andrey Ryabinin)
  - fallocate: Unexport FALLOC_FL_CONVERT_UNWRITTEN (Kirill Tkhai)
  - ploop: Remove useless variable (Kirill Tkhai)
  - ploop: Add comment about S_SWAPFILE (Kirill Tkhai)
  - ploop: Kill __dio_io_page() (Kirill Tkhai)
  - ploop: Extract extent-related logic from dio_io_page() (Kirill Tkhai)
  - ploop: Extrack extent-related logic from dio_sync_io() (Kirill Tkhai)
  - ploop: Kill unused sync vec functions (Kirill Tkhai)
  - ploop: Use BIO_EMPTY_LIST for cleanup (Kirill Tkhai)
  - fs/fuse kio: set NULL to stat->kio_stat in failure case (Pavel Butsykin)
  - fs/fuse kio: fix fuse_mutex leak in pcs_fuse_stat_fini() (Pavel Butsykin)
  - ms/fix inode leaks on d_splice_alias() failure exits (Al Viro)
  - ms/fs/dcache: Fix incorrect nr_dentry_unused accounting in shrink_dcache_sb() (Waiman Long)
  - ms/fs/dcache.c: fix spin lockup issue on nlru->lock (Sahitya Tummala)
  - ms/lock_parent() needs to recheck if dentry got __dentry_kill'ed under it (Al Viro)
  - ms/root dentries need RCU-delayed freeing (Al Viro)
  - ploop: Do not split discard bio in kaio (Kirill Tkhai) [PSBM-95772 PSBM-95948]
  - vziolimit: fix race by putting throttle.speed check under ub_lock (Pavel Tikhomirov) [PSBM-95815]
  - i40iw: use kvzalloc for large allocation of iwdev->mem_resources (Andrey Ryabinin) [VSTOR-23649]
  - scsi: aacraid: resurrect correct arc ctrl checks for Series-6 (Konstantin Khorenko) [PSBM-95736]
  - fs/fuse kio: reset write_iter for canceled msg (Pavel Butsykin) [VSTOR-21044]
  - fs/fuse kio: drop maps on file close (Pavel Butsykin) [VSTOR-24004 PSBM-96165 PSBM-96165]
  - ploop: Also decrement active_reqs before bio_endio() in ploop_complete_request() (Kirill Tkhai) [PSBM-95750]
  - ploop: Decrement active_reqs before bio_endio() (Kirill Tkhai) [PSBM-95654]
  - kvm/x86: add log printing on emulation failure (Denis Plotnikov) [PSBM-95474 PSBM-68018]
  - config.OpenVZ: RHEL77 rebase: disable new options which depend on EXPERT (Vasiliy Averin)
  - config.OpenVZ.minimal: update up to 3.10.0-1062.el7 (Vasiliy Averin) [PSBM-97159]
  - configs: disable FUSE_KIO_NOOP and _NULLIO in debug.minimal config (Vasiliy Averin)
  - config.OpenVZ.minimal: add support for e1000[e] and r8169 network cards (Konstantin Khorenko)
  - config.OpenVZ.debug: disable CONFIG_AMD_MEM_ENCRYPT (Konstantin Khorenko) [PSBM-93777]
  - config.OpenVZ.minimal: enable R8169, PATA_ATIIXP, X86_AMD_PLATFORM_DEVICE, NET_DEVLINK (Konstantin Khorenko) [PSBM-93812]
  - configs: disable cpu partial slab support (Konstantin Khorenko) [PSBM-83199]
  - config.OpenVZ.debug.minimal: update up to 3.10.0-957.el7 (Konstantin Khorenko) [PSBM-89580]
  - configs.OpenVZ: add minimal debug kernel config (Konstantin Khorenko)
  - config.OpenVZ.minimal: update up to 3.10.0-957.el7 (Konstantin Khorenko) [PSBM-89580]
  - net/netfilter/xt_wdog_tmo.c: author email updated (Konstantin Khorenko) [PSBM-94979]
  - net/ipv4/udp_diag.c: author email updated (Konstantin Khorenko) [PSBM-94979]
  - tools/testing/selftests/memfd/memfd_test.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - tools/testing/selftests/memfd/fuse_test.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - tools/testing/selftests/memfd/fuse_mnt.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - tools/testing/selftests/memfd/Makefile: copyright update (Konstantin Khorenko) [PSBM-94979]
  - net/netfilter/xt_wdog_tmo.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - net/ipv6/netfilter/ip6_vzprivnet.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - net/ipv4/udp_memcontrol.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - net/ipv4/netfilter/ip_vzprivnet.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - mm/tswap.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - mm/tcache.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - mm/page_idle.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - mm/oom_group.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - mm/iov-iter.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - lib/kmapset.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/vzwdog.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/vzstat_core.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/vzstat.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/vznetstat/vznetstat.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/vznetstat/ip_vznetstat.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/vznetstat/ip6_vznetstat.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/vznetstat/Makefile: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/vzlist.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/vziolimit.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/vzevent.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/vzdev.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/veowner.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/vecalls.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/ve.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/hooks.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/dummy/pio_nfs.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/dummy/ip_vzprivnet.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/dummy/ip6_vzprivnet.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/dummy/Makefile: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/ve/Makefile: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/fence-watchdog.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/bc/vm_pages.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/bc/sys.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/bc/statd.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/bc/proc.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/bc/misc.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/bc/io_prio.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/bc/io_acct.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/bc/beancounter.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/bc/Makefile: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/bc/Kconfig: copyright update (Konstantin Khorenko) [PSBM-94979]
  - kernel/Kconfig.openvz: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/uapi/linux/vzlist.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/uapi/linux/vziptable_defs.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/uapi/linux/vzctl_veth.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/uapi/linux/vzctl_venet.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/uapi/linux/vzctl_netstat.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/uapi/linux/vzcalluser.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/uapi/linux/venet-netlink.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/uapi/linux/beancounter.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/uapi/linux/bc/statd.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/net/udp_memcontrol.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/vzstat.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/vzprivnet.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/vznetstat.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/vziptable_defs.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/vziolimit.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/vzevent.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/vzctl.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/virtinfo.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/venet.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/veip.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/ve_proto.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/ve.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/ploop/ploop_stat.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/ploop/ploop_if.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/ploop/ploop.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/ploop/compat.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/pfcache.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/kmapset.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/linux/fence-watchdog.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/bc/vmpages.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/bc/task.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/bc/proc.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/bc/misc.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/bc/io_acct.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/bc/decl.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - include/bc/beancounter.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - fs/ext4/pfcache.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/scsi/scsi_dbg.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/net/venetdev.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/net/veip_mgmt.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/tracker.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/sysfs.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/push_backup.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/push_backup.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/ploop_events.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/ploop_events.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/ploop1_image.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/map.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/io_kaio_map.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/io_kaio.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/io_direct_map.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/io_direct_map.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/io_direct_events.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/io_direct.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/io.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/freeblks.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/freeblks.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/fmt_raw.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/fmt_ploop1.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/events.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/discard.h: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/discard.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/dev.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - drivers/block/ploop/Makefile: copyright update (Konstantin Khorenko) [PSBM-94979]
  - block/blk-cbt.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - arch/x86/kernel/cpuid_fault.c: copyright update (Konstantin Khorenko) [PSBM-94979]
  - ploop: Fix wrong argument passed to ploop_set_holes_bitmap_bit() (Kirill Tkhai) [PSBM-95509]
  - ploop: Add sanity check on stop (Kirill Tkhai) [PSBM-95247 PSBM-95347]
  - ploop: Ignore clusters above holes_bitmap (Kirill Tkhai)
  - ploop: Introduce set- and clear- holes_bitmap wrappers (Kirill Tkhai)
  - ploop: Do not warn when BAT is wider than disk size (Kirill Tkhai) [PSBM-95293]
  - fs/fuse kio: fix length overflow in FALLOC_FL_KEEP_SIZE (Pavel Butsykin) [VSTOR-23781]
  - fs/fuse kio: fix FALLOC_FL_ZERO_RANGE outside end of file (Pavel Butsykin) [VSTOR-23781]
  - fs/fuse kio: skip iostat count for unknown req types (Pavel Butsykin) [VSTOR-23620]
  - fs/fuse kio: fix stack overrun in request_end() (Pavel Butsykin)
  - fs/fuse kio: fix inode leak in pcs_fuse_submit() (Pavel Butsykin)
  - fs/fuse kio: cosmetic changes in pcs_fuse_prep_rw() (Pavel Butsykin)
  - fs/fuse kio: fix gcc warning maybe-uninitialized in do_show_cs_stats() (Pavel Butsykin)
  - fs/fuse kio: implement cs_stats statistics info (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: convert rpc state id to string (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement cs statistics accounting (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: remove useless pcs_cs initialization (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement fstat_lat statistics info (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement fstat statistics info (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement requests statistics info (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement pcs_strerror() (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: add retry counter for kio requests (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: make interface pcs_kio_req_list() for listing kio reqs (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: make interface pcs_kio_file_list() for listing kio files (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement iostat statistics info (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: create sysfs stat directory (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse: add conn_ctl to fuse_conn struct (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse: fix locked kio request send (Pavel Butsykin)
  - fs/fuse kio: simplify processing and sending kio requests (Pavel Butsykin)
  - fs/fuse kio: make req_classify callback (Pavel Butsykin)
  - fs/fuse kio: fix latency time count (Pavel Butsykin)
  - ploop: Add lockout on discard requests (Kirill Tkhai)
  - ploop: Fix maintaince_type obtaining design problem (Kirill Tkhai) [PSBM-94727]
  - fs/fuse kio: keep fuse_file for requests waiting for shrink (Pavel Butsykin) [VSTOR-23034]
  - fs/fuse kio: style fix in pcs_fuse_submit() (Pavel Butsykin) [VSTOR-23034]
  - fs/fuse kio: add pending kio requests to kqueue (Pavel Butsykin) [VSTOR-23034]
  - fs/fuse kio: forward fuse_file pointer to kpcs_req_send() (Pavel Butsykin) [VSTOR-23034]
  - ploop: Show whether device supports native discard (Kirill Tkhai) [PSBM-94662]
  - ploop: Return maintaince mode ioctls again (Kirill Tkhai) [PSBM-94662]
  - Partial revert "ploop: Enable native discard support for kaio engine" (Kirill Tkhai) [PSBM-94662]
  - ploop: Check for top_delta in ploop_congested() (Kirill Tkhai) [PSBM-94270]
  - fuse: Check for req->ff in fuse_request_queue_background() (Kirill Tkhai)
  - fuse: do not take fc->lock in fuse_request_send_background() - fixup (Kirill Tkhai)
  - ploop: Remove unused leftover (Kirill Tkhai)
  - ploop: Enable native discard support for kaio engine (Kirill Tkhai)
  - fs/fuse kio: add warning about jumbo chunks (Pavel Butsykin)
  - fs/fuse kio: sync pcs_mds_sys_info struct (Pavel Butsykin)
  - fs/fuse kio: export io_locality (Pavel Butsykin) [VSTOR-11050]
  - fs/fuse kio: add missed sock write in pcs_sock_sendmsg() (Pavel Butsykin) [VSTOR-11050]
  - fs/fuse kio: relax congestion avoidance limits (backport from usermode) (Pavel Butsykin) [VSTOR-11050]
  - fs/fuse kio: fix a typo in worth_to_grow() (Pavel Butsykin) [VSTOR-11050]
  - fs/fuse kio: export fastpath protocol version (Pavel Butsykin) [PSBM-93637]
  - fs/fuse kio: fix getting a non-existent pcs inode in kpcs_kill_requests() (Pavel Butsykin)
  - fs/fuse kio: fix double free of pfc in process_pcs_init_reply() (Pavel Butsykin) [VSTOR-20922]
  - ploop: kaio: Enter standby mode on EIO as well (Kirill Tkhai)
  - ploop: Clear abort bit on replace delta (Kirill Tkhai) [VSTOR-22414]
  - ploop: Repopulate holes_bitmap on changing delta (Kirill Tkhai)
  - ploop: Make PLOOP_IOC_FREEBLKS always return 0 (Kirill Tkhai)
  - ploop: Add native discard support parameter (Kirill Tkhai) [PSBM-93731]
  - ploop: Fix huge grow with head clusters relocation (Kirill Tkhai) [PSBM-93243]
  - ploop: Populate and maintain holes bitmap (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Fallocate cluster in cached_submit() during hole reuse (Kirill Tkhai) [PSBM-92367 VSTOR-19972 PSBM-93873]
  - ploop: Zero indexes on discard (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Add .complete_merge method (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Introduce data_off_in_clusters() helper (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Prohibit PLOOP_IOC_UPDATE_INDEX on singular list (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Prohibit discard ioctls (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Introduce ploop_submit_alloc() helper (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Make submit_alloc() return int value (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Export map defines to separate header file (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Fix race between .prepare_merge and .submit_alloc (Kirill Tkhai)
  - ploop: Merge repeating prepare_merge patterns in single function (Kirill Tkhai)
  - ploop: Do not forget to put io context (Kirill Tkhai)
  - ploop: Prohibit discard in case of multi-delta case (Kirill Tkhai) [PSBM-92785]
  - ploop: Prohibit custom discard alignment and granuality (Kirill Tkhai)
  - ploop: Skip repeated discard (Kirill Tkhai) [PSBM-92656]
  - ploop: Enable discard support for ploop1 format backed by io_direct (Kirill Tkhai)
  - ploop: Online discard support for dio engine (Kirill Tkhai) [VSTOR-19972]
  - ploop: Introduce ploop_can_issue_discard() helper (Kirill Tkhai) [VSTOR-19972]
  - ploop: Set up discard limits (Kirill Tkhai) [VSTOR-19972]
  - ploop: Never merge discard requests (Kirill Tkhai) [VSTOR-19972]
  - ploop: Introduce local variable in ploop_start() (Kirill Tkhai) [VSTOR-19972]
  - ploop: Add trim_extent_mappings_tail() helper (Kirill Tkhai) [VSTOR-19972]
  - ploop: Add cluster_log local variable (Kirill Tkhai) [VSTOR-19972]
  - ploop: Add local variable into dio_submit() (Kirill Tkhai) [VSTOR-19972]
  - ploop: Add cluster_size_in_sec() helper (Kirill Tkhai) [VSTOR-19972]
  - ploop: Add cluster_size_in_bytes() helper (Kirill Tkhai) [VSTOR-19972]
  - ploop: Export whole_block() (Kirill Tkhai) [VSTOR-19972]
  - ploop: introduce dio_may_fallocate() helper (Kirill Tkhai) [VSTOR-19972]
  - DMA-API: exceeded 7 overlapping mappings of cacheline share (Michael S. Tsirkin) [PSBM-93919]
  - memcg: optimize the "Search everything else" loop in mm_update_next_owner() (Oleg Nesterov) [VSTOR-23975]
  - memcg: mm_update_next_owner() should skip kthreads (Oleg Nesterov) [VSTOR-23975]
  - ms/Documentation: add watermark_scale_factor to the list of vm systcl file (Jerome Marchand) [PSBM-94102]
  - mm: extend generic iov iterator API (Dmitry Monakhov) [PSBM-80680]
  - ms/mm: scale kswapd watermarks in proportion to memory (Johannes Weiner) [PSBM-94102]
  - mm/workingset: Fix workingset_activation() with disabled mem cgroups. (Konstantin Khorenko) [VSTOR-23299]
  - mm/workingset: Fix memcg_inc_ws_activate() with disabled mem cgroups. (Andrey Ryabinin)
  - mm/workingset: fix workingset_activation() with memcgroups enabled (Andrey Ryabinin)
  - mm/workingset: fix possible race with memcg deletion. (Andrey Ryabinin)
  - mm/memcg: Don't sleep on reparenting of every page. (Andrey Ryabinin)
  - mm, memcg, oom_gurantee: change memcg oom overdraft formula (Andrey Ryabinin) [VSTOR-22575]
  - ms/mm/slub.c: run free_partial() outside of the kmem_cache_node->list_lock (Chris Wilson) [PSBM-93885]
  - kernfs: keep kernfs node alive for __kernfs_remove() (Konstantin Khorenko) [PSBM-93611]
  - net: Allow autoloading conntrack nft-helper-* modules (Kirill Tkhai) [PSBM-90319]
  - prctl: Fix false positive in validate_prctl_map (Kirill Gorkunov) [PSBM-93526]
  - ms/net: use skb_clone to avoid alloc_pages failure. (Martin Zhang) [PSBM-93713]
  - ms/tcp: fix potential huge kmalloc() calls in TCP_REPAIR (Eric Dumazet) [PSBM-93672]
  - net/skuff: WARN if kmalloc_reserve() fails to allocate memory. (Andrey Ryabinin) [VSTOR-21390]
  - net/skbuff: Don't waste memory reserves (Andrey Ryabinin) [VSTOR-21390]
  - RDMA/ocrdma: Remove unused STAG array. (Andrey Ryabinin) [VSTOR-21732]
  - mm/vmscan: don't shrink active list once more in case we reached nr_to_reclaim (Andrey Ryabinin) [PSBM-92480]
  - mm/vmscan: scan active file and anon lists if inactive file list is too short (Andrey Ryabinin) [PSBM-92480]
  - mm/page_alloc: fix allocation failure of zone-restricted allocation (Andrey Ryabinin) [PSBM-92274]
  - mm: Change formula of calculation of default min_free_kbytes (Kirill Tkhai) [PSBM-69296 VSTOR-21390]
  - net: silence high-order allocation warning from UDP with big headers. (Andrey Ryabinin) [PSBM-94717]
  - tty/vt: avoid high order pages allocation on GIO_UNIMAP ioctl (Konstantin Khorenko) [PSBM-93812]
  - mm/slub: Don't compact memory for high-order optimistic allocation. (Andrey Ryabinin) [VSTOR-20830]
  - mm/swap: activate swapped in pages on fault (Andrey Ryabinin) [VSTOR-20859]
  - mm/vmscan: active lru protection fixups. (Andrey Ryabinin) [VSTOR-20859]
  - ms/mm: workingset: make shadow node shrinker memcg aware (Vladimir Davydov) [VSTOR-19037]
  - ms/mm: workingset: per-cgroup cache thrash detection (Johannes Weiner) [VSTOR-19037 PSBM-92480]
  - mm/memcg: initialize mem_cgroup_per_zone_info earlier. (Andrey Ryabinin) [PSBM-91933 PSBM-91933]
  - ms/mm: workingset: eviction buckets for bigmem/lowbit machines (Johannes Weiner) [VSTOR-19037]
  - ms/mm: workingset: separate shadow unpacking and refault calculation (Johannes Weiner) [VSTOR-19037 PSBM-91933]
  - ms/mm: workingset: #define radix entry eviction mask (Johannes Weiner) [VSTOR-19037]
  - ms/mm: vmscan: pass memcg to get_scan_count() (Vladimir Davydov) [VSTOR-19037]
  - i40iw: Use kvzalloc in i40iw_allocate_virt_mem() (Andrey Ryabinin) [VSTOR-20675]
  - i40iw: Use kvzalloc to allocate i40iw_handler (Andrey Ryabinin) [VSTOR-20675]
  - i40iw: use kvzalloc to allocate array of control qp requests (Andrey Ryabinin) [VSTOR-20675]
  - x86: Add __GFP_ORDER_NOWARN to dma allocations (Andrey Ryabinin) [VSTOR-20675]
  - ploop: Remove unused argument of __map_extent() (Kirill Tkhai)
  - mm/page_alloc: use sched_clock() instead of jiffies to measure latency (Andrey Ryabinin) [VSTOR-19040]
  - mm/vmscan: Don't shrink active lrus on the first try. (Andrey Ryabinin) [VSTOR-19037]
  - pfcache: don't get inodes which are beeing freed (Konstantin Khorenko) [PSBM-91819]
  - ploop: Kill unneeded PLOOP_S_WAIT_PROCESS bit (Kirill Tkhai)
  - ploop: Remove dead "pcss"-related code (Kirill Tkhai)
  - ploop: Remove unused argument get_block (Kirill Tkhai)
  - fs/fuse kio: add warning about jumbo chunks (Pavel Butsykin) [VSTOR-20372]
  - x86/pci-dma: don't warn about high order in dma_alloc (Andrey Ryabinin) [VSTOR-20383 VSTOR-20349]
  - ms/virtio_balloon: fix another race between migration and ballooning (Jiang Biao) [PSBM-91532]
  - mm: allow kmem limit bypassing if reclaimable slabs detected (Konstantin Khorenko) [PSBM-91566]
  - ploop compact: remove alloc_head BUG_ON before truncate call (Vasily Averin) [PSBM-90794 PSBM-90794]
  - net: export net/core/somaxconn sysctl for unprivileged users (Jan Dakinevich) [PSBM-91032]
  - fs/fuse: fix unsafe killing fiq->pending requests (Pavel Butsykin)
  - fs/fuse kio: add FUSE_S_FAIL_IMMEDIATELY check in pcs_fuse_submit() (Pavel Butsykin)
  - ploop: Fix discard BIOs mis accounting (Kirill Tkhai)
  - fs/fuse kio: invalidate files for kio (Pavel Butsykin) [VSTOR-19620]
  - fs: Export symbols replace_fd() and create_pipe_files() (Sergey Lysanov) [VSTOR-10187]
  - ms/ipvs: remove an annoying printk in netns init (Kirill Tkhai)
  - pfcache: silently drop "trusted.pfcache" xattr when set on inappropriate fs (Konstantin Khorenko) [PSBM-90740]
  - ms/sunrpc: use SVC_NET() in svcauth_gss_* functions (Vasily Averin) [PSBM-89609]
  - seccomp: Add PT_SUSPEND_SECCOMP in __secure_computing (Kirill Gorkunov) [PSBM-90760 PSBM-90547]
  - net/ip6ip: Consider VE_FEATURE_IPIP on new net creation (Kirill Gorkunov) [PSBM-84241]
  - net/gre: Consider VE_FEATURE_IPGRE on new net creation (Kirill Gorkunov) [PSBM-84241]
  - ms/mm/slub: set slub_max_order = 0 by default. (Andrey Ryabinin) [PSBM-83199]
  - ms/slub: Make cpu partial slab support configurable (Joonsoo Kim) [PSBM-83199]
  - ms/mm: workingset: update shadow limit to reflect bigger active list (Johannes Weiner)
  - ms/mm: workingset: size shadow nodes lru basing on file cache size (Vladimir Davydov) [PSBM-83199]
  - ms/mm: select HAVE_MOVE_PMD on x86 for faster mremap (Joel Fernandes (Google))
  - ms/mm: speed up mremap by 20x on large regions (Joel Fernandes (Google))
  - ms/huge pagecache: extend mremap pmd rmap lockout to files (Hugh Dickins)
  - fs/fuse kio: make it possible to enable TRACE/DTRACE in the release kernel (Pavel Butsykin) [VSTOR-18383]
  - fs/fuse kio: disable duplication FUSE_K* messages to debugfs by default (Pavel Butsykin) [VSTOR-18383]
  - fs/fuse kio: bring fuse ktraces to a common view (Pavel Butsykin) [VSTOR-18383]
  - fs/fuse kio: deny unavailable ioctl's in kio (Pavel Butsykin)
  - fs/fuse kio: add support PCS_CS_IO_SYNC flag (Pavel Butsykin) [VSTOR-19396]
  - fs/fuse kio: backport immediate-write attribute handle (Pavel Butsykin) [VSTOR-19396]
  - fs/fuse kio: satisfy pure FALLOC_FL_KEEP_SIZE immediately (Pavel Butsykin) [VSTOR-19317]
  - fs/fuse kio: fix mapping dereference in a dead map (Pavel Butsykin) [VSTOR-19267]
  - ms/drivers/gpu/vga: allocate vga_arb_write() buffer on stack (Dmitry Vyukov) [PSBM-90315]
  - fuse: do not wait for completion of inessential writes in fuse fsync (Alexey Kuznetsov) [VSTOR-17311 VSTOR-17311]
  - fs/fuse kio: missed cleanup for interrupted shrink request (Pavel Butsykin) [VSTOR-19074]
  - mm/page_alloc: add latency to the page_alloc tracepoint (Andrey Ryabinin)
  - fs/fuse kio: missed clean di->size.op in failed shrink request (Pavel Butsykin) [VSTOR-18947]
  - tcache/tswap: don't shrink tcache/tswap until they are initialized (Konstantin Khorenko) [VSTOR-18694]
  - mm/memcg: Fix NULL-ptr dereference when memcg diabled at boot. (Andrey Ryabinin) [VSTOR-18694]
  - fs/fuse kio: retry allocation PCS_IREQ_FLUSH request (Pavel Butsykin) [VSTOR-18475]
  - fs/fuse kio: fix sreq and msg leak in prepare_map_flush_ireq() (Pavel Butsykin) [VSTOR-18475]
  - fs/fuse kio: fix loss of FUSE_FSYNC/FUSE_FLUSH reqs (Pavel Butsykin) [VSTOR-18475]
  - ms/sock_diag: fix autoloading of the raw_diag module (Andrei Vagin)
  - sunrpc: cache_head leak due queued request (Vasily Averin) [PSBM-80869]
  - nfsd: disable UMH client tracking in nested net namespaces (Vasily Averin) [PSBM-90024]
  - ms/ksm: replace jhash2 with xxhash (Timofey Titovets) [PSBM-90044]
  - ms/xxHash: create arch dependent 32/64-bit xxhash() (Timofey Titovets) [PSBM-90044]
  - ms/lib: Add xxhash module (Nick Terrell) [PSBM-90044]
  - fuse kio: never ignore fuse_req error during PCS_IOC_GETMAP (Anton Nefedov)
  - fuse kio: fix timer setup so it actually delays ireq (Anton Nefedov)
  - fuse kio: Round down extent start in fiemap_process_one() (Alexey Kuznetsov) [VSTOR-15535]
  - ploop: move to standby after -ENOTCONN too (Anton Nefedov) [VSTOR-17613]
  - ploop: move to standby mode after fsync() error too (Anton Nefedov) [VSTOR-17613]
  - ploop: move standby mode setting to separate function (Anton Nefedov) [VSTOR-17613]
  - fs/fuse kio_pcs: replenish netaddr_cmp() with rdma type (Pavel Butsykin) [VSTOR-17784]
  - fbcon: use kvmalloc() for scrollback buffer (Konstantin Khorenko) [VSTOR-17781]
  - ms/dlm: fix possible call to kfree() for non-initialized pointer (Denis V. Lunev) [VSTOR-17522]
  - vzstat: account "page_in" and "swap_in" in nanoseconds (Konstantin Khorenko) [VSTOR-16659]
  - fs/fuse kio_pcs: fix update cs state after receiving new map (Pavel Butsykin) [VSTOR-17413]
  - ploop: convert prealloced_size to absolute offset (Pavel Tikhomirov) [PSBM-89565]
  - fs/fuse kio_pcs: invalidation maps in setattr kio (Pavel Butsykin) [VSTOR-16863]
  - fs/fuse kio_pcs: cleanup kpcs_setattr_end() (Pavel Butsykin) [VSTOR-16863]
  - fs/fuse kio_pcs: make pcs_map_truncate() easier (Pavel Butsykin) [VSTOR-16863]
  - mm: cleancache: fix corruption on missed inode invalidation (Pavel Tikhomirov) [PSBM-89050]
  - fs/fuse: add assert on i_mutex in fuse_send_write() (Pavel Butsykin) [VSTOR-16876]
  - fs/fuse kio_pcs: add assert on i_mutex for PUNCH_HOLE and ZERO_RANGE (Pavel Butsykin) [VSTOR-16876]
  - fs/fuse: add assert on i_mutex in fuse_send_unmap() (Pavel Butsykin) [VSTOR-16876]
  - ploop kaio: successfull alloc should adjust alloc_head (Vasily Averin) [VSTOR-15471]
  - ploop: fix negative discard size in preprocess_discard_req() (Pavel Butsykin)
  - ploop: change default of discard granularity and alignment attrs to PAGE_SIZE (Pavel Butsykin)
  - ploop: add separate tree for existing discard requests (Denis V. Lunev) [VSTOR-16344]
  - ploop: create helper to access ploop_device->entry_tree (Denis V. Lunev) [VSTOR-16344]
  - ms/vmscan: memcg: always use swappiness of the reclaimed memcg (Michal Hocko) [PSBM-89726]
  - fs/fuse kio_pcs: cleanup in truncate (backport) (Alexey Kuznetsov)
  - fs/fuse kio_pcs: NULL pointer dereference in map_submit()->MAP_ARGS() (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: NULL pointer dereference on access m->mapping->chunk_size_bits (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: fix map leaks in process_ireq_truncate() (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: simplify pcs_mapping_truncate() (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: fix map leak in pcs_mapping_truncate() (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: protect valid_for_truncate() by m->lock's (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: fix condition for map resolving in pcs_mapping_truncate() (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: forgotten setting of the next phase (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: make map_truncate_tail() working as the original from libpcs_client (Pavel Butsykin) [PSBM-89539]
  - fuse: Switch unused engines off in Kconfig (Kirill Tkhai) [VSTOR-16325]
  - fuse: Prohibit kio engine from containers (Kirill Tkhai) [VSTOR-16325]
  - fuse: Fix parse_fuse_opt() return values wrong interpretation (Kirill Tkhai)
  - ms/x86/unwind: Disable KASAN checks for non-current tasks (Josh Poimboeuf)
  - ms/sched/x86: Add 'struct inactive_task_frame' to better document the sleeping task stack frame (Brian Gerst)
  - ms/kprobes: Unpoison stack in jprobe_return() for KASAN (Dmitry Vyukov) [VSTOR-16798]
  - ms/kasan: add functions to clear stack poison (Mark Rutland) [VSTOR-16798]
  - ms/kprobes: Avoid false KASAN reports during stack copy (Dmitry Vyukov) [VSTOR-16798]
  - lib/kmapset: fix undefined behavior in kmapset_cmp() (Pavel Butsykin)
  - ms/ksm: React on changing "sleep_millisecs" parameter faster (Kirill Tkhai)
  - kexec, kasan: increase KEXEC_AUTO_RESERVED_SIZE under CONFIG_KASAN=y up to 1G (Konstantin Khorenko)
  - memcg/debug: warn early when releasing memcg css with non-zero kmem (Konstantin Khorenko) [PSBM-89892]
  - ploop: fix int overflow when calculating used_pos (Pavel Tikhomirov) [PSBM-89565]
  - fuse kio: Unexport pcs_ioconn_close() and pcs_ioconn_unregister() (Kirill Tkhai)
  - fs/fuse kio_pcs: fix NULL pointer dereference in pcs_mapping_truncate() (Pavel Butsykin)
  - ms/ipc/shm: fix use-after-free of shm file via remap_file_pages() (Eric Biggers) [VSTOR-15440]
  - mm/vmscan: shrink tcache, tswap upfront everything else (Andrey Ryabinin) [PSBM-89403]
  - mm/tcache: rebalance tree if isolation failed (Andrey Ryabinin) [PSBM-89403]
  - mm/tcache: don't insert empty reclaim node (Andrey Ryabinin) [PSBM-89403]
  - fuse kio: Fix deadlock at pcs_fuse_submit() error path (Kirill Tkhai) [VSTOR-16246]
  - fs/fuse kio_pcs: flush rpc work inside pcs_rpc_destroy() (Pavel Butsykin) [VSTOR-16236]
  - fuse kio: Move abort & destroy block up in pcs_rpc_send() (Kirill Tkhai) [VSTOR-16236]
  - fuse kio: Check for null ep in pcs_rpc_deaccount_msg() (Kirill Tkhai) [VSTOR-16236]
  - fuse kio: Stop self-abuse of rpc counter in rpc_queue_work() (Kirill Tkhai) [VSTOR-16236]
  - x86,ia32: Restore 32bit personality (Cyrill Gorcunov) [PSBM-76965]
  - fs/fuse kio_pcs: drop old mapping after size growth (Pavel Butsykin)
  - ms/mm, mempolicy: migrate_to_node should only migrate to node (David Rientjes) [PSBM-89512]
  - fuse kio: Hold pcs_rpc counter till sio may be freed (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Fix rpc socket leak on rpc_abort() (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Dereference sk_user_data under rcu (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Introduce pcs_sk_kick_queue() (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Destroy rpc in work func (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Add pcs_cleanup_wq (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Reorder callback assignment (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Use sio eof instead of parent to determ abort (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Use __maybe_unused (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Port "ignore uninitialized CS addresses" commit (Kirill Tkhai) [VSTOR-3415 VSTOR-3415 VSTOR-16083]
  - fuse kio: Refactoring in struct pcs_rpc (Kirill Tkhai)
  - fuse kio: Differ fuse_pcs_kdirect_claim_op() return values (Kirill Tkhai)
  - fuse kio: Do not try to populate fuse_inode::private on second open (Kirill Tkhai)
  - ms/x86/asm/64: Clear AC on NMI entries (Andy Lutomirski)
  - ms/x86/asm/traps: Disable tracing and kprobes in fixup_bad_iret and sync_regs (Andy Lutomirski)
  - ms/x86_64, traps: Rework bad_iret (Andy Lutomirski) [PSBM-89221]
  - fuse kio: Fix spelling in process_pcs_init_reply() (Kirill Tkhai)
  - fuse kio: Return possibility to handle files served in userspace (Kirill Tkhai) [VSTOR-15947]
  - fuse kio: Fix deadlock in kpcs_req_send() (Kirill Tkhai) [VSTOR-15924]
  - fs/fuse kio_pcs: fix double free of synchronous requests (Pavel Butsykin)
  - fs/fuse kio_pcs: prevention of falling kio reqs to usermode (Pavel Butsykin) [VSTOR-15447]
  - fs/fuse kio_pcs: split kpcs_req_send() (Pavel Butsykin) [VSTOR-15447]
  - fs/fuse: initialize req->io_inode in fuse_send_unmap() (Pavel Butsykin) [VSTOR-15447]
  - fs/fuse: fix mutually exclusive flags in fuse_send_unmap() (Pavel Butsykin) [VSTOR-15447]
  - fuse kio: Add debug printk into process_pcs_init_reply() (Kirill Tkhai)
  - fuse kio: Protect struct pcs_rpc_engine::{unhashed, ht, nrpcs} (Kirill Tkhai) [VSTOR-15727]
  - fuse kio: Fallback to plain fuse in case of version mismatch (Kirill Tkhai)
  - fuse kio: Reorder process_pcs_init_reply() and free memory on failure (Kirill Tkhai)
  - fuse kio: Introduce cached_op (Kirill Tkhai)
  - fuse kio: Refactoring in fuse_show_options() (Kirill Tkhai)
  - fuse kio: Revert fuse_request_free() changes (Kirill Tkhai)
  - fuse kio: Do not get useless fuse.ko module reference (Kirill Tkhai)
  - fuse kio: Add schedule_timeout() into pcs_rpc_fini_verify() (Kirill Tkhai)
  - fuse kio: initialize batch in pcs_map shrinker (Konstantin Khorenko) [VSTOR-15801]
  - x86/mm/kaiser: Fix build with CONFIG_XEN=n (Andrey Ryabinin)
  - fs/fuse kio_pcs: drop rpc connection close in pcs_rpc_engine_fini() (Pavel Butsykin) [VSTOR-15378]
  - fs/fuse kio_pcs: remove fuse destroy request (Pavel Butsykin) [VSTOR-15378]
  - fs/fuse kio_pcs: fix race between req->end() and request_wait_answer() (Pavel Butsykin) [VSTOR-15378]
  - fs/fuse kio_pcs: rollback default rpc_affinity_mode to RPC_AFFINITY_RETENT (Pavel Butsykin)
  - mm: Fix int overflow in callers of do_shrink_slab() (Kirill Tkhai)
  - mm/swap: use kvzalloc for swap_info_struct allocation (Vasily Averin) [PSBM-89600]
  - md/bcache: add queue parameter to part_round_stats() call (Konstantin Khorenko) [PSBM-89580]
  - mm/init: hide most of start_kernel() from KAsan (Konstantin Khorenko) [PSBM-89047]
  - net: reorganize skb_gso_size_check() description to make htmldocs happy (Konstantin Khorenko)
  - ms/kasan: depend on CONFIG_SLUB_DEBUG (Jason A. Donenfeld)
  - ms/slab, slub: skip unnecessary kasan_cache_shutdown() (Shakeel Butt) [PSBM-89434]
  - mm/slab: use monotonic serial number for naming per memcg caches (Konstantin Khorenko) [PSBM-89047]
  - ms: Add braces to avoid "ambiguous ‘else’" compiler warnings (Linus Torvalds)
  - ms/inode: don't softlockup when evicting inodes (Josef Bacik)
  - ms/mm/slub: fix slab double-free in case of duplicate sysfs filename (Konstantin Khlebnikov) [PSBM-89047]
  - ms/slub: fix leak of 'name' in sysfs_slab_add (Dave Jones) [PSBM-89047]
  - ms/slub: Fix possible format string bug. (Tetsuo Handa) [PSBM-89047]
  - IB/core: use kvzalloc to allocate ib_device (Jan Dakinevich)
  - fs/fuse kio_pcs: time slice for rpc rebinding (Pavel Butsykin) [VSTOR-14031]
  - fs/fuse kio_pcs: improve rpc to cpu binding (Pavel Butsykin) [VSTOR-14031]
  - pfcache: don't inherit vm_private_data on split and copy (Pavel Tikhomirov) [PSBM-88809]
  - fuse kio: Do not zero already zeroed fields in pcs_sockio_init (Kirill Tkhai)
  - mm/vmstat: Add more vmstats in containers /proc/vmstat (Andrey Ryabinin) [PSBM-88323]
  - mm/vmstat, io_acct: fix PGPGIN/PGPGOUT in container's /proc/vmstat. (Andrey Ryabinin) [PSBM-88323]
  - ms/unix: add ioctl to open a unix socket file with O_PATH (Andrey Vagin) [PSBM-88786]
  - fuse kio: Do not zero already zeroed fields in pcs_find_get_map() (Kirill Tkhai)
  - ploop: kthread_create() errors processing (Vasily Averin) [PSBM-88561]
  - x86/kvm/vmx: suppress warning on high-order allocation (Jan Dakinevich)
  - mm/mempool: Use kvmalloc to allocate array of element pointers (Andrey Ryabinin) [VSTOR-14758]
  - ms/mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags (Michal Hocko) [VSTOR-14758]
  - /proc/vz/latency: Show max latency in 2 min instead of 5sec. (Andrey Ryabinin)
  - fuse kio: Async queueing of fiemap from work (Kirill Tkhai)
  - fuse kio: Introduce fiemap_work (Kirill Tkhai)
  - fuse kio: Move fiter ireq iocount assignment (Kirill Tkhai)
  - fuse kio: Move position advance in fiemap_process_one() (Kirill Tkhai)
  - fuse kio: Kill fiemap_worker() thread (Kirill Tkhai)
  - fuse kio: Move it variable from stack to struct fiemap_iterator (Kirill Tkhai)
  - fuse kio: Extract fiemap iteration from fiemap_worker() to separate function (Kirill Tkhai)
  - fuse kio: Cleanup in pcs_fuse_submit() (Kirill Tkhai)
  - ms/mm/vmscan.c: clear shrinker bit if there are no objects related to memcg (Kirill Tkhai) [PSBM-88027 PSBM-88027]
  - ms/mm: add SHRINK_EMPTY shrinker methods return value (Kirill Tkhai) [PSBM-88027]
  - ms/mm/vmscan.c: generalize shrink_slab() calls in shrink_node() (Vladimir Davydov) [PSBM-88027]
  - ms/mm/vmscan.c: iterate only over charged shrinkers during memcg shrink_slab() (Kirill Tkhai) [PSBM-88027]
  - ms/mm/memcontrol.c: export mem_cgroup_is_root() (Kirill Tkhai) [PSBM-88027]
  - ms/mm/list_lru.c: set bit in memcg shrinker bitmap on first list_lru item appearance (Kirill Tkhai) [PSBM-88027]
  - ms/mm/list_lru.c: pass lru argument to memcg_drain_list_lru_node() (Kirill Tkhai) [PSBM-88027]
  - ms/mm/list_lru: pass dst_memcg argument to memcg_drain_list_lru_node() (Kirill Tkhai) [PSBM-88027]
  - ms/mm/list_lru.c: add memcg argument to list_lru_from_kmem() (Kirill Tkhai) [PSBM-88027]
  - ms/fs: propagate shrinker::id to list_lru (Kirill Tkhai) [PSBM-88027]
  - ms/mm, memcg: assign memcg-aware shrinkers bitmap to memcg (Kirill Tkhai) [PSBM-88027]
  - ms/mm/memcontrol.c: move up for_each_mem_cgroup{, _tree} defines (Kirill Tkhai) [PSBM-88027]
  - ms/mm: assign id to every memcg-aware shrinker (Kirill Tkhai) [PSBM-88027]
  - /proc/<pid>/vz_latency: Add scheduling stats (Andrey Ryabinin) [PSBM-87797]
  - /proc/<pid>/vz_latency: Show maximal allocation latency in the last second. (Andrey Ryabinin) [PSBM-87797 PSBM-93675]
  - /proc/vz/latency: distinguish atomic allocations in irq from in task atomics. (Andrey Ryabinin) [PSBM-87797]
  - vz_latency: don't account allocations in interrupts to random tasks (Andrey Ryabinin) [PSBM-87797]
  - ploop: avoid crash if ploop request has uninitialized preq_ub (Pavel Tikhomirov) [PSBM-88112]
  - ploop: initialize preq_ub for zero ploop requests as well (Konstantin Khorenko) [PSBM-88112]
  - ms/sget(): handle failures of register_shrinker() (Al Viro)
  - fs/fuse kio_pcs: disable TRACE/DTRACE for release kernel (Pavel Butsykin)
  - block: store exec_ub on struct request and use it (Konstantin Khorenko) [PSBM-86910]
  - ploop: store exec_ub in ploop request and use it while processing requests (Konstantin Khorenko) [PSBM-86910]
  - config.OpenVZ.minimal: add some hardware drivers support (Konstantin Khorenko)
  - fs/fuse kio_pcs: missed *msg_size setting in rpc_get_hdr() (Pavel Butsykin) [VSTOR-13602]
  - rh/fs/dcache.c: Revert "fs/dcache.c: add cond_resched() in shrink_dentry_list()" (Konstantin Khorenko) [PSBM-87864]
  - ms/rpc_pipefs: fix double-dput() (Al Viro) [PSBM-73001]
  - bc: implement ubc "numproc" limit based on pids cgroup (Konstantin Khorenko) [PSBM-86044 PSBM-86044 PSBM-87662]
  - fuse/kio: Add socket io fault injection (Kirill Tkhai)
  - fuse kio: Allocate pcs_map from kmem_cache with SLAB_RECLAIM_ACCOUNT flag (Kirill Tkhai) [PSBM-87665]
  - fuse kio: Move map_chunk_start() and map_chunk_end() checks (Kirill Tkhai) [PSBM-87665]
  - mm/memcg: don't swap cgroup's pages during offline (Andrey Ryabinin) [PSBM-87281]
  - fs/fuse kio_pcs: fix NULL pointer dereference in pcs_flushreq_complete() (Pavel Butsykin) [VSTOR-12570]
  - fs/fuse kio_pcs: style fix in pcs_fuse_submit() (Pavel Butsykin)
  - fuse kio: kio must not fail when not being able to claim a file (Alexey Kuznetsov) [PSBM-86866]
  - fs/fuse kio_pcs: throttle async KIO requests (Pavel Butsykin) [VSTOR-12335]
  - fs/fuse: add non-blocking request flag (Pavel Butsykin) [VSTOR-12335]
  - x86/microcode/intel: hide warning on high order allocation for microcode area (Konstantin Khorenko) [PSBM-86662]
  - proc/cpu/cgroup: make boottime in CT reveal the real start time (Pavel Tikhomirov) [PSBM-94263]
  - ve/cgroup: do not link a CT cpu cgroup twice into ve_root_list (Konstantin Khorenko) [PSBM-88251]
  - kernel/sched: Use kvzalloc to allocate the array of ctl_tables (Andrey Ryabinin)
  - sched: fix cfs_rq::nr_iowait accounting (Jan Dakinevich) [PSBM-93850]
  - sched: Call calc_load_ve() out of jiffies_lock (Kirill Tkhai) [PSBM-84967 PSBM-84967]
  - sched: Export calc_load_ve() (Kirill Tkhai) [PSBM-84967]
  - sched: Make calc_global_load() return true when it's need to update ve statistic (Kirill Tkhai) [PSBM-84967]
  - cgroup: fix css_tryget() to not succeed on offlined css (Andrey Ryabinin) [PSBM-75892]
  - fuse kio: control internal tracing with module parameter pcs_loglevel (Alexey Kuznetsov)
  - fuse kio: avoid spurious uncork setsockopt on unix socket (Alexey Kuznetsov)
  - fuse kio: logging improvements (Alexey Kuznetsov)
  - mnt_ns: introduce global list of mount namespaces for debug (Konstantin Khorenko) [PSBM-80869]
  - mm/memcg: Bypass charges to offlined cgroup (Andrey Ryabinin) [PSBM-86092]
  - fuse kio: Make struct fuse_inode::num_openers int (Kirill Tkhai)
  - rcuupdate.h: Switch to READ_ONCE and fix NULL-deref in __task_pid_nr_ns() again (Andrey Ryabinin)
  - fs/fuse kio_pcs: fix NULL pointer dereference inside a dead map (Pavel Butsykin)
  - fuse kio: Fix NULL pointer dereference in pcs_map_get_locked() (Kirill Tkhai) [PSBM-86458]
  - fuse: Relax BUG_ON() in fuse_direct_IO_bvec() (Kirill Tkhai) [PSBM-86446]
  - fs/fuse kio_pcs: bugs in integrity protocol for fallocate (Pavel Butsykin) [PSBM-68465]
  - fuse kio: missing local client ID initialization (Alexey Kuznetsov) [VSTOR-11651]
  - IPoIB: use kvzalloc to allocate an array of bucket pointers (Jan Dakinevich)
  - fuse kio: Read file attributes every first open (Maxim Patlasov) [PSBM-86234]
  - fuse: Refactor fuse_open_common() (Kirill Tkhai)
  - fuse kio: Make KIO to require writeback_cache (Kirill Tkhai)
  - ms/proc: do not access cmdline nor environ from file-backed areas (Willy Tarreau) [PSBM-86221]
  - ms/lockd: fix "list_add double add" caused by legacy signal interface (Vasily Averin) [PSBM-86390]
  - fs/fuse kio_pcs: fix grow work execution with zero (Pavel Butsykin) [PSBM-85945]
  - mm/tswap: fix lockup in tswap_evict_page() (Andrey Ryabinin) [PSBM-86344]
  - fuse kio: error PCS_ERR_CSD_LACKING is non-fatal (Alexey Kuznetsov) [VSTOR-11692]
  - ms/x86/efi-bgrt: Replace early_memremap() with memremap() (Matt Fleming) [PSBM-85888]
  - ms/mm, swap: fix race between swap count continuation operations (Huang Ying) [PSBM-86091]
  - fuse: Teach fuse_blocked_for_wb() handle no files case (Kirill Tkhai)
  - fs/fuse kio_pcs: replace pr_info() with ktrace for ireq fatal error (Pavel Butsykin) [VSTOR-11391]
  - fs/fuse kio_pcs: enable traces for cs sync (Pavel Butsykin) [VSTOR-11651]
  - fuse kio: Check returned FUSE_SETATTR size (Kirill Tkhai)
  - fs/fuse kio_pcs: increment PCS_FAST_PATH_VERSION to 1.1 (Pavel Butsykin)
  - fs/fuse kio_pcs: add handling FUSE_FLUSH in kio_pcs (Pavel Butsykin) [VSTOR-11064]
  - fs/fuse: set inode entry for FUSE_FLUSH request (Pavel Butsykin) [VSTOR-11064]
  - mm/memory: Don't charged cowed private pages as cache (Andrey Ryabinin)
  - uprobes: Fix the memcg accounting (Oleg Nesterov)
  - fs/fuse kio_pcs: fix missing hbuf.uid update for ireq split case (Pavel Butsykin) [VSTOR-11315]
  - fs/fuse kio_pcs: handle old map in pcs_cs_submit() (Pavel Butsykin) [VSTOR-11315]
  - fuse kio: support unix socket for local CSes (Alexey Kuznetsov) [VSTOR-9817]
  - fs/fuse kio_pcs: mapped requests have map version preinitialized (Pavel Butsykin)
  - fuse kio: Skip processing of messages above PAGE_SIZE size (Kirill Tkhai) [VSTOR-11208 VSTOR-11208]
  - fuse kio: Get msg size in second argument of pcs_sockio::get_msg() (Kirill Tkhai) [VSTOR-11208 VSTOR-11208]
  - fs/fuse kio_pcs: add more traces for cs requests (Pavel Butsykin)
  - fuse kio: Fix unbalanced queueing and dequeueing pcs_map_entry::sync_work (Kirill Tkhai)
  - fuse kio: Add missed spin_lock into sync_timer_work() (Kirill Tkhai)
  - fuse kio: Add comment to fuse_release() (Kirill Tkhai)
  - fuse kio: Place more pcs_cs_link::cs under rcu dereference (Kirill Tkhai)
  - fuse kio: Wait pending requests on final fput() (Kirill Tkhai)
  - ms/mm: have filemap_check_and_advance_wb_err clear AS_EIO/AS_ENOSPC (Vasily Averin) [VSTOR-10912]
  - ms/fs: use mapping_set_error instead of opencoded set_bit (Vasily Averin) [VSTOR-10912]
  - ms/errseq: Always report a writeback error once (Vasily Averin) [VSTOR-10912]
  - ms/mm: remove optimizations based on i_size in mapping writeback waits (Vasily Averin) [VSTOR-10912]
  - ms/fs: convert sync_file_range to use errseq_t based error-tracking (Vasily Averin) [VSTOR-10912]
  - ms/mm: add file_fdatawait_range and file_write_and_wait (Vasily Averin) [VSTOR-10912]
  - ms/mm: consolidate dax / non-dax checks for writeback (Vasily Averin) [VSTOR-10912]
  - ms/Documentation: add some docs for errseq_t (Vasily Averin) [VSTOR-10912]
  - ms/errseq: rename __errseq_set to errseq_set (Vasily Averin) [VSTOR-10912]
  - fs/fuse: remove extra check for empty active_list (Pavel Butsykin)
  - fs/fuse kio_pcs: fix NULL pointer dereference in cs_keep_waiting() (Pavel Butsykin)
  - fuse kio: Do not NULL used pcs_cs_link::cs during connection destruction (Kirill Tkhai)
  - fuse kio: Delete excess unlist in pcs_csset_fini() (Kirill Tkhai)
  - fs/fuse kio_pcs: fix out of bounds roles_str[] array access (Pavel Butsykin)
  - fs/fuse kio_pcs: fix double unlock of m->lock in pcs_map_get_locked() (Pavel Butsykin)
  - fs/fuse kio_pcs: pass the file handle for FUSE_SETATTR request (Pavel Butsykin) [VSTOR-10635]
  - fs/fuse: export fuse_release_ff() and fuse_write_file() (Pavel Butsykin) [VSTOR-10635]
  - fs/fuse kio_pcs: handle error of submit_size_grow() (Pavel Butsykin) [VSTOR-10635]
  - fs/fuse kio_pcs: move pcs_ireq_queue_fail() (Pavel Butsykin) [VSTOR-10635]
  - fuse kio: infinite loop in processing congestion queue (Alexey Kuznetsov) [VSTOR-10928]
  - fuse kio: Use dereferenced cs in cslist_destroy() (Kirill Tkhai)
  - fs/fuse: disable optimization fuse and kio_pcs in debug kernel (Pavel Butsykin)
  - fuse kio: Arrange rcu modifiers around accesses to pcs_cs_link::cs (Kirill Tkhai)
  - fuse kio: Handle fuse_map_resolve() failure in pcs_map_queue_resolve() (Kirill Tkhai)
  - fs/fuse kio_pcs: some cleanup ireq_on_error_() (Pavel Butsykin)
  - fuse kio: Fix dereferencing of NULL cs in map_replicating() (Kirill Tkhai) [VSTOR-10820]
  - fuse kio: Fix fix deadlock during change CS address (Kirill Tkhai)
  - fuse kio: Change order around pcs_map_notify_addr_change() (Kirill Tkhai)
  - fuse kio: Wait till cs is unused in pcs_csset_fini() (Kirill Tkhai)
  - fuse kio: Introduce pcs_cs::use_count instead of ::is_probing (Kirill Tkhai)
  - fuse kio: Fix possible use after free in cslist_destroy() (Kirill Tkhai)
  - fuse kio: Fix potential use after free (Kirill Tkhai)
  - fuse kio: Introduce pcs_cs_list_of_cs_link() (Kirill Tkhai)
  - kernel/panic.c: don't dump_stack() in add_taint() (Andrey Ryabinin)
  - fuse kio: Remove useless code in pcs_cs_destroy() (Kirill Tkhai)
  - fuse kio: invalid assertion (Alexey Kuznetsov)
  - fuse kio: cleanup in token enqueue (Alexey Kuznetsov)
  - fuse kio: Introduce fast path protocol version, (Kirill Tkhai) [VSTOR-10131]
  - fs/locks: add more info for unexpected lock (Pavel Tikhomirov)
  - fs/fuse kio_pcs: remove s_subtype check (Pavel Butsykin)
  - fuse kio: Cleanup in struct pcs_rpc (Kirill Tkhai)
  - fuse kio: Declare pcs_sockio::parent type (Kirill Tkhai)
  - fuse kio: Do not requeue requests when connection is dead (Kirill Tkhai) [VSTOR-10354]
  - mm/tcache: fix rcu_read_lock()/rcu_read_unlock() imbalance (Andrey Ryabinin) [PSBM-81731]
  - fuse kio_pcs: ports from new user-space (Alexey Kuznetsov)
  - fs/fuse kio_pcs: check fuse_conn args (Pavel Butsykin)
  - fs/fuse: move FUSE_SUPER_MAGIC to magic.h (Pavel Butsykin)
  - kio: Stop always breaking connection in pcs_sockio_send() in case of EAGAIN. (Kirill Tkhai) [VSTOR-9848]
  - fuse: Try automatically load kio module (Kirill Tkhai)
  - nfsd: use kvzalloc() to allocate memory for drc_hashtbl (Oleg Babin) [PSBM-84234 PSBM-84234]
  - ms/nfsd: more robust allocation failure handling in nfsd_reply_cache_init (Jeff Layton) [PSBM-84234 PSBM-84234]
  - fuse/kio_pcs: use kvmalloc for pcs_fuse_cluster allocation (Oleg Babin)
  - tty: use kvmalloc for screenbuffer allocation (Oleg Babin)
  - ms/tty: limit terminal size to 4M chars (Dmitry Vyukov)
  - ms/relay: Use per CPU constructs for the relay channel buffer pointers (Akash Goel)
  - cpuid_fault: Log table updates (Cyrill Gorcunov) [PSBM-84029]
  - blkcg: implement bio_associate_blkcg() (Tejun Heo)
  - fuse: pcs_kio cancel requests after fused crash (Dmitry Monakhov)
  - fuse/kio_pcs: read is broken by FIEMAP patch (Alexey Kuznetsov) [VSTOR-9727]
  - mm/memcontrol: try to free all memcg during offline (Andrey Ryabinin) [PSBM-83628]
  - mm/vmscan: shrink slabs from offlined cgroups (Andrey Ryabinin) [PSBM-83628]
  - sched/rt: Stop for_each_process_thread() iterations in tg_has_rt_tasks() (Kirill Tkhai) [PSBM-83624]
  - mm/memcg: use seqlock to protect reclaim_iter updates (Andrey Ryabinin) [PSBM-83369]
  - ms/KEYS: add missing permission check for request_key() destination (Eric Biggers) [PSBM-83637]
  - ms/fs: Don't leak MNT_INTERNAL away from internal mounts (Al Viro)
  - ms/Revert "mm: page_alloc: skip over regions of invalid pfns where possible" (Daniel Vacek) [PSBM-83746]
  - ms/Revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Ard Biesheuvel) [PSBM-83746]
  - fuse/kio_pcs/pcs_map: fix process_flush_req lock leakage (Dmitry Monakhov) [VSTOR-8116]
  - fuse/kio_pcs: FIEMAP support (Alexey Kuznetsov)
  - fuse/kio_pcs: full fallocate() support (Alexey Kuznetsov)
  - fuse/kio_pcs: fallocate support at low pcs protocol level (Alexey Kuznetsov)
  - fuse/kio_pcs: adapt prometheus statistics to current vstorage state (Alexey Kuznetsov)
  - fuse: support FS_IOC_FIEMAP in i386 compat mode (Alexey Kuznetsov) [PSBM-83731]
  - fuse/kio_pcs: support FUSE_FSYNC (Alexey Kuznetsov)
  - kernel/lockdep: allow lockdep_set_no_validate_class() (Andrey Ryabinin)
  - net: Change number of netlink repair (Kirill Tkhai) [PSBM-83415]
  - config.OpenVZ.minimal: enable conntrack netlink interface module (Konstantin Khorenko) [PSBM-85052]
  - ms/btrfs: minimal conversion to errseq_t writeback error reporting on fsync (Vasily Averin)
  - ms/xfs: minimal conversion to errseq_t writeback error reporting (Vasily Averin)
  - ms/ext4: use errseq_t based error handling for reporting data writeback errors (Vasily Averin)
  - ms/block: convert to errseq_t based writeback error tracking (Vasily Averin)
  - ms/dax: set errors in mapping when writeback fails (Vasily Averin)
  - ms/Documentation: flesh out the section in vfs.txt on storing and reporting writeback errors (Vasily Averin)
  - ms/mm: set both AS_EIO/AS_ENOSPC and errseq_t in mapping_set_error (Vasily Averin)
  - ms/fs: new infrastructure for writeback error handling and reporting (Vasily Averin)
  - ms/lib: add errseq_t type and infrastructure for handling it (Vasily Averin)
  - ms/mm: don't TestClearPageError in __filemap_fdatawait_range (Vasily Averin)
  - ms/mm: clear AS_EIO/AS_ENOSPC when writeback initiation fails (Vasily Averin)
  - ms/jbd2: don't clear and reset errors after waiting on writeback (Vasily Averin)
  - ms/fs: check for writeback errors after syncing out buffers in generic_file_fsync (Vasily Averin)
  - ms/mm: fix mapping_set_error call in me_pagecache_dirty (Vasily Averin) [VSTOR-10912]
  - ms/x86/mm: Disable various instrumentations of mm/mem_encrypt.c and mm/tlb.c (Tom Lendacky)
  - ms/staging: rtl8712: fix some confusing indenting (Dan Carpenter)
  - ms/tty: nozomi: avoid a harmless gcc warning (Arnd Bergmann)
  - ms/memstick: mspro_block: add missing curly braces (Dan Carpenter)
  - ms/net-sysfs: remove unused fmt_long_hex (Colin Ian King)
  - ms/net/rtnetlink: remove dead code (Eric Engestrom)
  - ms/rtnetlink: remove unused ifla_stats_policy (stephen hemminger)
  - ms/ACPI / dock: Drop dock_device_ids[] table (Rafael J. Wysocki)
  - cifs: drop unused mapping_table_ERRHRD (Konstantin Khorenko)
  - venetdev: fix race between veip shutdown and add veip entry (Konstantin Khorenko) [PSBM-90395]
  - venetdev: drop src_lh/dst_lh lists from veip_struct (Konstantin Khorenko) [PSBM-90395]
  - ve/time/ntp: allow CT ntp adjustment time tuning under VE_FEATURE_TIME feature (Konstantin Khorenko) [PSBM-94635]
  - ve/time: introduce CT feature to allow setting date/time (Konstantin Khorenko) [PSBM-94635]
  - ve/capability: introduce capable() wrapper which honors CT features (Konstantin Khorenko) [PSBM-94635]
  - ve: don't hide cgroup mount root from pseudosuper (Pavel Tikhomirov) [PSBM-86686]
  - ve/netfilter/ipset: allow nfnetlink_queue module autoload (Konstantin Khorenko) [PSBM-92694]
  - ve/net: allow to change max number of net devices for running CT (Konstantin Khorenko) [PSBM-92132]
  - ve/net: warn in case a Container hits ve::netif_max_nr (Konstantin Khorenko) [PSBM-92132]
  - ve: prohibit opening proc/self/exe from VE for VD_VE_ENTER_TASK (Pavel Tikhomirov) [PSBM-91689 PSBM-91042]
  - ve/meminfo: show "MemAvailable: ..." line in CT's meminfo (Jan Dakinevich) [PSBM-90190]
  - ve/sunrpc: prohibit mounting rpc_pipefs in CT without nfsd feature (Pavel Tikhomirov) [PSBM-87836]
  - ve/net/neighbour: per-ct limit for neighbour entries (Vasily Averin) [PSBM-87155]
  - ve/devmnt: initialize s_mode before deactivate_locked_super to suppress warning (Pavel Tikhomirov) [PSBM-80743]
  - ve/mount: allow pseudosuper to temporary exceed the container limit (Pavel Tikhomirov) [PSBM-86511]
  - ve/sunrpc: enable rpc_pipefs mounts inside non-init user namespaces (Vasily Averin) [PSBM-86395]
  - ve/fs/namespace: allow submounts in non-init userns (Konstantin Khorenko) [PSBM-86277]
  - ve/fs: allow mount fs in init userns if it's mounted in another userns (Konstantin Khorenko) [PSBM-68599]
  - ve/module: export sysfs dentries in containers (Stanislav Kinsburskiy) [PSBM-63892]
  - ve/sysfs: generic sysfs_set_def_perms() helper introduced (Stanislav Kinsburskiy)
  - ve/sysfs: relax sanity check for ns equality in kernfs_find_ns() (Konstantin Khorenko) [PSBM-82259 PSBM-83607]
  - ve/kernfs: export kernfs_perms_set() helper (Stanislav Kinsburskiy) [PSBM-83607]
  - ve/sysfs: add dentries visibility filter (Stanislav Kinsburskiy) [PSBM-83607]
  - ve/kernfs: add new interface to control per-VE nodes visibility (Stanislav Kinsburskiy) [PSBM-83607]
  - ve/kernfs: hide forbidden entries in container (Stanislav Kinsburskiy) [PSBM-83607]
  - ve/kernfs: fix lookup for kernfs superblock (Konstantin Khorenko) [PSBM-85052]
  - ve/kernfs: implement ve-based permissions (Stanislav Kinsburskiy) [PSBM-20892 PSBM-34682 PSBM-83607]
  - ms/ACPI / video: remove unused device_decode array (Colin Ian King)
  - ms/Disable the __builtin_return_address() warning globally after all (Linus Torvalds)
  - ms/arch/x86/kernel/ptrace.c: Remove unused arg_offs_table (chengang@emindsoft.com.cn)
  - ms/x86/xen: fix upper bound of pmd loop in xen_cleanhighmap() (Juergen Gross)
  - retpoline/objtool: Disable some objtool warnings (Josh Poimboeuf)
  - ms/objtool: Fix memory leak in decode_instructions() (Kamalesh Babulal)
  - fasync: Fix deadlock between task-context and interrupt-context kill_fasync() (Kirill Tkhai) [PSBM-83102]
  - ms/dccp: purge write queue in dccp_destroy_sock() (Eric Dumazet) [PSBM-83692]
  - net/dccp: fix use after free in tw_timer_handler() (Andrey Ryabinin) [PSBM-80708]
  - ms/dccp: Unlock sock before calling sk_free() (Arnaldo Carvalho de Melo) [PSBM-80708]
  - ms/dccp: defer ccid_hc_tx_delete() at dismantle time (Eric Dumazet) [PSBM-80708]
  - net/sctp: Replace in/out stream arrays with flex_array (Oleg Babin) [PSBM-82552]
  - ms/ipv6: fix backtracking for throw routes (Steven Barth) [PSBM-81798]
  - ms/net: add an ioctl to get a socket network namespace (Andrey Vagin) [PSBM-79229]
  - drivers/igb: increase link detection timeout up to 10 sec (Konstantin Khorenko) [PSBM-95074 VSTOR-14627]
  - net/drivers/i40e: suppress warning on skb linearization (Jan Dakinevich) [VSTOR-22811]
  - bonding: show full hw address in sysfs for slave entries (Konstantin Khorenko) [PSBM-93117]
  - drivers/igb: increase link detection timeout up to 5 sec (Konstantin Khorenko) [VSTOR-14627]
  - net/drivers/i40e: suppress high order allocation warning (Konstantin Khorenko) [VSTOR-18622]
  - bnx2: use kvzalloc() to allocate certain internal data (Jan Dakinevich)
  - bnx2x: suppress warnings on DMA memory allocation (Jan Dakinevich)
  - ib/mlx4: adjust gfp flags for DMA allocations (Jan Dakinevich)
  - cnic: use kvzalloc to allocate memory for csk_tbl (Jan Dakinevich) [PSBM-85534]
  - ms/tun: Add ioctl() SIOCGSKNS cmd to allow obtaining net ns of tun device (Kirill Tkhai) [PSBM-79229]
  - fs: Fix race with old fdt parallel reuse (Kirill Tkhai) [PSBM-82984]
  - ve: fix reading container state from cgroup (Pavel Tikhomirov) [PSBM-82766]
  - x86/cpu: compilation fix for CONFIG_PAGE_TABLE_ISOLATION disabled case (Konstantin Khorenko)
  - ve/kthread: fix race when work can be added to stopped kthread worker (Pavel Tikhomirov) [PSBM-82490]
  - ve/kthread: pass ve to __call_usermodehelper_exec (Pavel Tikhomirov) [PSBM-82490]
  - net/sock: teach sock_kmalloc() to call kvmalloc() when possible (Konstantin Khorenko) [PSBM-82593]
  - mm: introduce kvmalloc_check() for safe calls to kvmalloc() (Konstantin Khorenko) [PSBM-82593]
  - net/setsockopt: switch high order allocations to kvmalloc() in do_ip_setsockopt() (Konstantin Khorenko) [PSBM-82646]
  - ms/x86/ACPI/PCI: Recognize that Interrupt Line 255 means "not connected" (Chen Fan) [PSBM-82172]
  - ms/mm: Allow to kill tasks doing pcpu_alloc() and waiting for pcpu_balance_workfn() (Kirill Tkhai)
  - config.OpenVZ.debug: disable kcov code coverage by default (Konstantin Khorenko) [PSBM-69083]
  - mm/tcache: initialize 'repeat' variable only once (Andrey Ryabinin)
  - mm/tcache: Reset index before repeating invalidation (Andrey Ryabinin) [PSBM-81760]
  - mm/memcg: fix margin computation for kmem limit. (Andrey Ryabinin) [PSBM-81818]
  - ploop: move discard_* attributes in the tune_attributes group (Andrei Vagin)
  - ploop: add a standby mode (Andrei Vagin) [VSTOR-7879]
  - fuse pcs_kio: fix page zeroing beond EOF (Dmitry Monakhov)
  - fuse kio_pcs: ignore special inodes (Dmitry Monakhov) [VSTOR-8078]
  - ploop: Discard bios of size not aligned at 512 bytes (Kirill Tkhai) [PSBM-81576]
  - sched/ve: Use cfs_rq::h_nr_running to count loadavg (Kirill Tkhai) [PSBM-81572]
  - sched/ve: Iterate only VE root cpu cgroups to count loadavg (Kirill Tkhai) [PSBM-81572]
  - sched/ve: Do not show loadavg in child VE cpu cgroups (Kirill Tkhai) [PSBM-81572]
  - sched/ve: Link VE root cpu cgroups in separate list (Kirill Tkhai) [PSBM-81572]
  - ve/cgroup: Get correct VE init css when ve init_task is moved to child cgroup (Kirill Tkhai) [PSBM-81572 PSBM-81572]
  - config.OpenVZ.minimal: disable CONFIG_X86_DECODER_SELFTEST (Dmitry Monakhov)
  - fuse kio pcs: implement logging and prometheus statistics collection v2 (Dmitry Monakhov) [PSBM-81741]
  - ms/[media] drxk_hard: fix bad alignments (Mauro Carvalho Chehab)
  - mm/memcg: fix overcharging in cgroup try_charge() for !cache_charge (Andrey Ryabinin) [PSBM-81750]
  - mm/memcg: Don't charge anon pages as cache (Andrey Ryabinin) [PSBM-81750]
  - ve/fs/proc: Make per-thread and per-process allocation latencies. (Andrey Ryabinin) [PSBM-81395]
  - ve/kstat/alloc_lat: Initialize alloc_lat to zero at start (Andrey Ryabinin) [PSBM-81395]
  - ve/tty: Provide interface for current tty inheritance (Cyrill Gorcunov) [PSBM-76490 PSBM-81687]
  - config.OpenVZ: enable modules for in-kernel fast path for vStorage (Konstantin Khorenko) [PSBM-80680]
  - fuse_kio_pcs: implement truncate (Dmitry Monakhov) [PSBM-80680]
  - fio kio: PCS unblock writepath (Dmitry Monakhov) [PSBM-80680]
  - fuse kio: Add pcs engine combo v0.8 (Dmitry Monakhov) [PSBM-80680]
  - fuse kio: Add nullio engine (Dmitry Monakhov) [PSBM-80680]
  - fuse kio: minimal noop engine skeleton (Dmitry Monakhov) [PSBM-80680]
  - fuse: add kdirect io engine v0.1 (Dmitry Monakhov) [PSBM-80680]
  - fuse: separate iqueue for clones (Maxim Patlasov)
  - fuse: assert i_size boundaries for fuse_direct_IO_bvec (Dmitry Monakhov) [PSBM-80680]
  - fuse: remove direct_IO_page (Dmitry Monakhov) [PSBM-80680]
  - ploop: io_kaio remove direct_IO_page requirement (Dmitry Monakhov) [PSBM-80680]
  - ploop: kaio_io_page switch to bvec iter (Dmitry Monakhov) [PSBM-80680]
  - ploop: kaio_kreq_alloc specify nr_segs (Dmitry Monakhov) [PSBM-80680]
  - ve/page_alloc, kstat: account allocation latencies per-task (Andrey Ryabinin) [PSBM-81395]
  - ve/vzstat.h: move some kstat definitions into new header (Andrey Ryabinin) [PSBM-81395]
  - ve/kstat/alloc_lat: Don't separate GFP_HIGHMEM and !GFP_HIGHMEM allocation latencies (Andrey Ryabinin) [PSBM-81395]
  - ploop: give aligned regions into fuse fallocate() (Andrei Vagin)
  - ploop: allow to set discard granularity and alignment attributes (Andrei Vagin)
  - ploop: handle discard requests via fallocate (Andrei Vagin)
  - fuse: add a new async operation to unmap regions (Andrei Vagin)
  - ploop: don't forget to dec preq->io_count on a error path (Andrei Vagin)
  - configs.OpenVZ: more options to disable (Konstantin Khorenko)
  - ms/inotify: Extend ioctl to allow to request id of new watch descriptor (Kirill Tkhai) [PSBM-81411]
  - ms/x86/kvm/vmx: do not use vm-exit instruction length for fast MMIO when running nested (Vitaly Kuznetsov) [PSBM-81462]
  - fs/pipe: Use kvmalloc for pipe buffers (Cyrill Gorcunov) [PSBM-69201]
  - ms/net: don't wait for order-3 page allocation (Shaohua Li) [PSBM-81488]
  - mm/memcontrol: Fix memcg swpin/swpout stats accounting (Andrey Ryabinin)
  - configs.OpenVZ: add minimal kernel config for a KVM VM (Konstantin Khorenko) [PSBM-86445]
  - mm: fix memory cgroup leak in case mem cgroup gets offline before kmem counter is 0 (Konstantin Khorenko) [PSBM-81264]
  - ms/dm crypt: replace RCU read-side section with rwsem (Konstantin Khorenko)
  - ms/mm/memcontrol.c: try harder to decrease [memory,memsw].limit_in_bytes (Andrey Ryabinin) [PSBM-80732]
  - mm: try harder to decrease cache.limit_in_bytes (Andrey Ryabinin) [PSBM-80732]
  - ms/memcg: refactor mem_cgroup_resize_limit() (Yu Zhao) [PSBM-80732]
  - ms/mm: memcontrol: fix transparent huge page allocations under pressure (Johannes Weiner) [PSBM-80732]
  - ms/mm: memcontrol: simplify detecting when the memory+swap limit is hit (Johannes Weiner) [PSBM-80732]
  - mm/vmscan: call wait_iff_congested() only if we have troubles in recaliming (Andrey Ryabinin) [PSBM-61409]
  - mm/vmscan: Use per-zone sum of reclaim_stat to change zone state. (Andrey Ryabinin) [PSBM-61409]
  - mm/vmscan: collect reclaim stats across zone (Andrey Ryabinin) [PSBM-61409]
  - ms/mm: throttle on IO only when there are too many dirty and writeback pages (Michal Hocko) [PSBM-61409]
  - ms/mm, vmscan: enhance mm_vmscan_lru_shrink_inactive tracepoint (Michal Hocko) [PSBM-61409]
  - ms/mm, vmscan: extract shrink_page_list reclaim counters into a struct (Michal Hocko) [PSBM-61409]
  - ms/mm, vmscan: add active list aging tracepoint (Michal Hocko) [PSBM-61409]
  - ms/mm: fix direct reclaim writeback regression (Hugh Dickins)
  - ms/mm/compaction: fix wrong order check in compact_finished() (Joonsoo Kim)
  - ms/mm/compaction: avoid rescanning pageblocks in isolate_freepages (Vlastimil Babka)
  - ms/mm/compaction: do not count migratepages when unnecessary (Vlastimil Babka)
  - ms/mm, compaction: embed migration mode in compact_control (David Rientjes)
  - ms/mm, compaction: add per-zone migration pfn cache for async compaction (David Rientjes)
  - ms/mm, compaction: return failed migration target pages back to freelist (David Rientjes)
  - ms/mm, migration: add destination page freeing callback (David Rientjes)
  - ms/mm/compaction: clean up unused code lines (Heesub Shin) [PSBM-87699]
  - ms/mm, compaction: ignore pageblock skip when manually invoking compaction (David Rientjes)
  - ms/mm, compaction: determine isolation mode only once (David Rientjes)
  - ms/mm/compaction: clean-up code on success of ballon isolation (Joonsoo Kim)
  - ms/mm/compaction: check pageblock suitability once per pageblock (Joonsoo Kim)
  - ms/mm/compaction: do not call suitable_migration_target() on every page (Joonsoo Kim)
  - ms/mm/compaction: disallow high-order page for migration target (Joonsoo Kim)
  - ms/mm, compaction: avoid isolating pinned pages (David Rientjes)
  - ms/mm: compaction: reset scanner positions immediately when they meet (Vlastimil Babka)
  - ms/mm: compaction: do not mark unmovable pageblocks as skipped in async compaction (Vlastimil Babka)
  - ms/mm: compaction: trace compaction begin and end (Mel Gorman)
  - ms/kbuild: add -fno-PIE (Sebastian Andrzej Siewior)
  - ms/scripts/has-stack-protector: add -fno-PIE (Sebastian Andrzej Siewior)
  - fence-watchdog: print alive messages (Pavel Tikhomirov)
  - tcache: Fix race between tcache_invalidate_node() and tcache_attach_page() (Kirill Tkhai)
  - tcache: Refactor tcache_shrink_scan() (Kirill Tkhai)
  - mm/tcache: invalidate existing page during cleancache_put_page() (Andrey Ryabinin) [PSBM-80712]
  - ms/fs, mm: account filp cache to kmemcg (Shakeel Butt) [PSBM-80839]
  - tty: Use RCU read lock to iterate tasks and threads in __do_SAK() (Kirill Tkhai) [PSBM-80340]
  - tty: Avoid threads files iterations in __do_SAK() (Kirill Tkhai) [PSBM-80340]
  - Revert "do_SAK: Don't recursively take the tasklist_lock" (Kirill Tkhai) [PSBM-80340]
  - ve/net: partially return ms permission check for ethtool commands (Pavel Tikhomirov)
  - ve/fs/files: Shrink big fdtable on close in is_pseudosuper mode (Kirill Tkhai) [PSBM-78827]
  - ve/fs/files: Add fdtable_align() helper (Kirill Tkhai) [PSBM-78827]
  - ve/fs/files: Add new argument to expand_files() (Kirill Tkhai) [PSBM-78827]
  - ve/cgroup: hide ve and ub cgroups in CT (Pavel Tikhomirov) [PSBM-80421]
  - mm: add __GFP_ flag to hide verified high order allocation warnings (Andrey Ryabinin) [VSTOR-20383 VSTOR-20349]
  - mm: add warning about high order allocations (Andrey Ryabinin) [PSBM-79892 PSBM-82202]
  - target: use to_stat_tgt_port() to handle files in scsi_tgt_port/ (Andrei Vagin) [VSTOR-13021]
  - target: rename user_helper back to alua_user_helper (Andrei Vagin) [VSTOR-12238]
  - target: move blkio_cgroup from attrib/ to param/ (Andrei Vagin) [VSTOR-10194]
  - target: fix a locking scheme of persistent reservations (Andrei Vagin) [VSTOR-10675]
  - target: allow to set a blkio cgroup for a backstore (Andrei Vagin)
  - target: set ALUA_TG_PT_STANDBY if a backing store is in standby mode (Andrei Vagin) [VSTOR-7879]
  - target: call alua helper before reporting group states to initiator (Andrei Vagin)
  - target: move alua user helper from group to device (Andrei Vagin)
  - target: pass a device name to an alua user helper (Andrei Vagin)
  - target: add an user-mode helper to handle changes of a group state (Andrei Vagin)
  - target: add read/write/sync latency counter (Andrey Grafin)
  - target: add histogram for LUN statistics (Andrey Grafin)
  - target: add extra counters for LUN statistics (Konstantin Khorenko)
  - target: don't call an unmap callback if a range length is zero (Andrei Vagin) [PSBM-79534]
  - ms/vhost: synchronize IOTLB message with dev cleanup (Jason Wang) [PSBM-90318]
  - net/vhost: Replace kmalloc with kvmalloc for order>=3 (Oleg Babin) [PSBM-81803]
  - vhost-net: enable zerocopy tx by default (Michael S. Tsirkin) [PSBM-52390]
  - ms/scsi: virtio: Reduce BUG if total_sg > virtqueue size to WARN. (Richard W.M. Jones) [PSBM-79523 PSBM-78839]
  - KVM: x86/vPMU: handle access to LBR stack regardless of PMU counters presence (Jan Dakinevich) [PSBM-94429]
  - KVM: x86: Don't re-execute instruction when not passing CR2 value (Liran Alon) [PSBM-89859]
  - ms/KVM: X86: Fix scan ioapic use-before-initialization (Wanpeng Li) [PSBM-90292]
  - ms/KVM: hyperv: idr_find needs RCU protection (Paolo Bonzini)
  - ms/KVM: x86: Add support for VMware backdoor Pseudo-PMCs (Arbel Moshe)
  - ms/KVM: x86: SVM: Intercept #GP to support access to VMware backdoor ports (Liran Alon)
  - ms/KVM: x86: VMX: Intercept #GP to support access to VMware backdoor ports (Liran Alon)
  - ms/KVM: x86: Emulate only IN/OUT instructions when accessing VMware backdoor (Liran Alon)
  - ms/KVM: x86: Add emulation_type to not raise #UD on emulation failure (Liran Alon)
  - ms/KVM: x86: Always allow access to VMware backdoor I/O ports (Liran Alon)
  - ms/KVM: x86: Add module parameter for supporting VMware backdoor (Liran Alon) [PSBM-84046 PSBM-84046]
  - kvm: use _safe version of list iteration in mmu_shrink_scan() (Konstantin Khorenko) [PSBM-95077]
  - kvm: fix race between mmu_shrink_scan() and VM destroy (Konstantin Khorenko) [PSBM-95077]
  - KVM: x86: add a stub for MSR_PLATFORM_INFO (Denis Plotnikov) [PSBM-95187]
  - kvm: move actual VM memory shrink out of kvm_lock (Konstantin Khorenko) [PSBM-95077]
  - kvm: move VMs which we skip during shrink to vm_list tail (Konstantin Khorenko) [PSBM-95077]
  - ms/KVM: x86: Do not clear RFLAGS.TF when a singlestep trap occurs. (Kyle Huey) [PSBM-92865]
  - ms/KVM: x86: Add kvm_skip_emulated_instruction and use it. (Kyle Huey) [PSBM-92865]
  - ms/KVM: VMX: Reorder some skip_emulated_instruction calls (Kyle Huey) [PSBM-92865]
  - ms/KVM: x86: Add a return value to kvm_emulate_cpuid (Kyle Huey) [PSBM-92865]
  - ms/kvm: x86: vmx: fix vpid leak (Roman Kagan) [PSBM-86479]
  - ms/KVM: x86: thoroughly disarm LAPIC timer around TSC deadline switch (Radim Krčmář) [PSBM-86578 PSBM-86578]
  - ms/KVM: x86: really disarm lapic timer when clearing TMICT (Radim Krčmář) [PSBM-86578 PSBM-86578]
  - ms/KVM: x86: handle 0 write to TSC_DEADLINE MSR (Radim Krčmář) [PSBM-86578 PSBM-86578]
  - ms/KVM: LAPIC: Keep timer running when switching between one-shot and periodic mode (Wanpeng Li) [PSBM-86578 PSBM-86578]
  - ms/KVM: LAPIC: Introduce limit_periodic_timer_frequency (Wanpeng Li) [PSBM-86578 PSBM-86578]
  - ms/KVM: LAPIC: Fix lapic timer mode transition (Wanpeng Li) [PSBM-86578 PSBM-86578]
  - kvm: Map PFN-type memory regions as writable (if possible) (KarimAllah Ahmed) [PSBM-84046]
  - kvm: x86: hyperv: delete dead code in kvm_hv_hypercall() (Dan Carpenter)
  - kvm: x86: hyperv: guest->host event signaling via eventfd (Roman Kagan)
  - kvm: x86: factor out kvm.arch.hyperv (de)init (Roman Kagan)
  - ms/KVM: x86/vPMU: ignore access to LBR-related MSRs (Jan Dakinevich) [PSBM-75679]
  - KVM: async_pf: Let guest support delivery of async_pf from guest mode (Wanpeng Li) [PSBM-56498]
  - Revert "ms/KVM: x86: reset MMU on KVM_SET_VCPU_EVENTS" (Konstantin Khorenko) [PSBM-62341 PSBM-63993 PSBM-64259 PSBM-63253 PSBM-63962]
  - ms/KVM: i8254: use atomic_t instead of pit.inject_lock (Radim Krčmář) [PSBM-56972]
  - ms/KVM: i8254: add kvm_pit_reset_reinject (Radim Krčmář) [PSBM-56972]
  - ms/KVM: i8254: simplify atomics in kvm_pit_ack_irq (Radim Krčmář) [PSBM-56972]
  - ms/kvm:vmx: more complete state update on APICv on/off (Roman Kagan) [PSBM-46939]
  - ms/kvm/x86: Pass return code of kvm_emulate_hypercall (Andrey Smetanin) [PSBM-44419]
  - kvm: do not SetPageDirty for file mappings (Maxim Patlasov) [PSBM-43243]
  - ve/kvm: Allow scheduler throttling in __vcpu_run() (Kirill Tkhai) [PSBM-42358]
  - md: add support for dm-crypted ploops (Maxim Patlasov) [PSBM-53386]
  - ms/crypto: skcipher - Fix blkcipher walk OOM crash (Herbert Xu)
  - ms/crypto: cryptd - initialize child shash_desc on import (Ard Biesheuvel)
  - ms/crypto: scatterwalk - Fix test in scatterwalk_done (Herbert Xu)
  - ms/crypto: gcm - Filter out async ghash if necessary (Herbert Xu)
  - ms/crypto: hash - Fix page length clamping in hash walk (Herbert Xu)
  - ms/crypto: user - lock crypto_alg_list on alg dump (Mathias Krause)
  - ms/crypto: algif_skcipher - Fix race condition in skcipher_check_key (Herbert Xu) [PSBM-53860]
  - ms/crypto: algif_hash - Fix race condition in hash_check_key (Herbert Xu) [PSBM-53860]
  - ms/crypto: af_alg - Forbid bind(2) when nokey child sockets are present (Herbert Xu) [PSBM-53860]
  - ms/crypto: af_alg - Allow af_af_alg_release_parent to be called on nokey path (Herbert Xu) [PSBM-53860]
  - ms/crypto: skcipher - Add crypto_skcipher_has_setkey (Herbert Xu) [PSBM-53860]
  - ploop: fix trim_extent_mappings() locking (Vasily Averin) [PSBM-78538 PSBM-45999]
  - ploop: fix dio_invalidate_cache() (Maxim Patlasov) [PSBM-73999]
  - ploop: add dependency for CBT in Kconfig (Cyrill Gorcunov)
  - ploop/modules: set module author for Virtuozzo modules (Konstantin Khorenko) [PSBM-43847]
  - ploop/license: put correct copyrights into file headers (Konstantin Khorenko) [PSBM-43847]
  - ploop: make error messages about intersecting extents more verbose (v2) (Maxim Patlasov)
  - ploop: fix race on map->levels[] update (Maxim Patlasov)
  - ploop: push_backup: ploop_pb_get_pending should wait again instead of ENOENT (Maxim Patlasov) [PSBM-68608]
  - ploop: show ino and sdev for ploop images in sysfs (Andrei Vagin) [PSBM-68404]
  - ploop: fix typo in ploop_pb_get_first_req_from_tree (Maxim Patlasov) [PSBM-67513]
  - block/ploop: Add resched points in ploop thread. (Andrey Ryabinin) [PSBM-66617]
  - ploop: push_backup: BUG() on list corruption in ploop_pb_add_req_to_tree() (Maxim Patlasov) [PSBM-65786 PSBM-65786]
  - ploop: fix IS_PSTORAGE() macro: add check for "vstorage" (Maxim Patlasov)
  - ploop: pio_nfs does not require PLOOP_REQ_ISSUE_FLUSH (v2) (Maxim Patlasov)
  - ploop: add comments about possible leaks (Konstantin Khorenko) [PSBM-52219]
  - ploop: don't leak ploop_freeblks_ctl_extent (Dmitry Safonov) [PSBM-51362]
  - ploop: push_backup: ploop_pb_init must always spawn health_monitor (Maxim Patlasov)
  - ploop: push_backup: avoid deadlock on PLOOP_PEEK (Maxim Patlasov)
  - ploop: push_backup: avoid preq->state corruption (Maxim Patlasov)
  - ploop: ploop_grow must nullify holes (Maxim Patlasov) [PSBM-55685]
  - ploop: push_backup: fix pbd->ppb_lock deadlock (Maxim Patlasov)
  - ploop: add support for dm-crypted ploops (Andrey Ryabinin) [PSBM-50858]
  - ploop: keep frozen block device pointer instead of super_block pointer (Andrey Ryabinin) [PSBM-50858]
  - ploop: drop bdev refcounter on freeze_bdev() failure (Andrey Ryabinin)
  - ploop: io_direct: delay f_op->fsync() until index_update for reloc requests (v3) (Maxim Patlasov) [PSBM-47026 PSBM-47026]
  - ploop: factor out add preq to fsync_queue (Maxim Patlasov)
  - ploop: factor ->write_page() out (Maxim Patlasov)
  - ploop: fix freeze/thaw ioctls (Maxim Patlasov) [PSBM-49699]
  - ploop: fix free_list starvation (Maxim Patlasov) [PSBM-49454]
  - ploop: introduce plo->blockable_reqs counter (Maxim Patlasov) [PSBM-49454]
  - ploop: introduce plo->free_qlen counter (Maxim Patlasov) [PSBM-49454]
  - ploop: fix fsync_reqs accounting (Maxim Patlasov) [PSBM-49454]
  - ploop: release plo->ctl_mutex for thaw_bdev in PLOOP_IOC_THAW handler (Vladimir Davydov) [PSBM-49699]
  - ploop: add PLOOP_IOC_FREEZE and PLOOP_IOC_THAW ioctls (Maxim Patlasov) [PSBM-49091]
  - ploop: reloc vs extent_conversion race fix (Dmitry Monakhov) [PSBM-47107 PSBM-49143]
  - ploop: push_backup: implement timeout functions (Maxim Patlasov) [PSBM-48082]
  - ploop: push_backup: health monitor thread (Maxim Patlasov) [PSBM-48082]
  - ploop: push_backup: add timeout tunable (Maxim Patlasov)
  - ploop: push_backup: extend pb_set (Maxim Patlasov)
  - ploop: push_backup: factor rb_erase() out (Maxim Patlasov)
  - ploop: push_backup: introduce pb_set structure (Maxim Patlasov) [PSBM-48082 PSBM-48082]
  - ploop: fixup barrier handling during relocation (Maxim Patlasov)
  - ploop: fix barriers for PLOOP_E_RELOC_NULLIFY (Maxim Patlasov)
  - ploop: generalize issue_flush (Dmitry Monakhov)
  - ploop: remove preflush from dio_submit (Maxim Patlasov)
  - ploop: resurrect delay_fua for io_direct (Maxim Patlasov)
  - ploop: minor rework of ->write_page() io method (Dmitry Monakhov)
  - ploop: resurrect delayed_fua for io_kaio (Maxim Patlasov)
  - ploop: minor rework of ploop_req_delay_fua_possible (Maxim Patlasov) [PSBM-47107]
  - ploop: deadcode cleanup in dio_submit() (Dmitry Monakhov)
  - ploop: skip redundant fsync for REQ_FUA in post_submit (Dmitry Monakhov)
  - ploop: fix barriers for ordinary requests (Maxim Patlasov)
  - ploop: io_kaio: fix silly bug in kaio_complete_io_state() (Maxim Patlasov)
  - ploop: fix counting bio_qlen (Maxim Patlasov)
  - ploop: fix gendisk disk_stats to be seen on partition (Maxim Patlasov) [PSBM-48266]
  - ploop: "Parallels loopback device" -> "Virtuozzo loopback device" (Konstantin Khorenko) [PSBM-43847]
  - ploop: push_backup: PLOOP_PEEK mode of ioctl(PLOOP_IOC_PUSH_BACKUP_IO) (Maxim Patlasov) [PSBM-47764]
  - ploop: push_backup: rework lockout machinery (Maxim Patlasov) [PSBM-47680 PSBM-47680]
  - ploop: push_backup: copy stop status back to userspace (Maxim Patlasov) [PSBM-47429]
  - ploop: io_direct: delay f_op->fsync() until FLUSH|FUA (v2) (Maxim Patlasov) [PSBM-47026]
  - ploop: push_backup: merge pbd->cbt_map back to CBT (Maxim Patlasov) [PSBM-47429]
  - ploop: push_backup: improve ioctl(PLOOP_IOC_PUSH_BACKUP_IO) (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: introduce ppb->reported_map (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: implement auto destroy (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: factor out destroy (Maxim Patlasov) [PSBM-45000]
  - ploop: get rid of direct calls to file->f_op->fsync() (Maxim Patlasov)
  - ploop: get rid of dio_fsync() (Maxim Patlasov)
  - ploop: io_direct: check for fsync fop on startup (Maxim Patlasov)
  - ploop: get rid of FOP_FSYNC (Maxim Patlasov)
  - ploop: avoid costly user-controllable kmalloc() calls (Andrey Ryabinin) [PSBM-47303]
  - ploop: push_backup: optimize ploop_pb_put_reported() (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: optimize ploop_pb_get_pending() (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: show uuid (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: fix ploop_push_backup_io_read() (Maxim Patlasov) [PSBM-45000]
  - ploop: force journal commit after dio_post_submit() (Dmitry Monakhov) [PSBM-45730]
  - ploop: push_backup cleanup (Maxim Patlasov)
  - ploop: wire push_backup into state-machine (Maxim Patlasov)
  - ploop: implement PLOOP_IOC_PUSH_BACKUP_IO (Maxim Patlasov) [PSBM-45000]
  - ploop: introduce pbd (Maxim Patlasov) [PSBM-45000]
  - ploop: io_direct must fsync after fallocate (Maxim Patlasov) [PSBM-45326 PSBM-46146]
  - ploop: must acquire write access on space allocation (Maxim Patlasov) [PSBM-20150]
  - ploop: use FALLOC_FL_CONVERT_UNWRITTEN in io_direct (Maxim Patlasov) [PSBM-22381]
  - ploop: replace BLOCK_UNINIT (Maxim Patlasov) [PSBM-22381]
  - ploop: fix direct_io prealloc checks (Maxim Patlasov) [PSBM-22381]
  - ploop: update gendisk disk_stats (Maxim Patlasov) [PSBM-41247]
  - ploop: rename extent maps management funtions (Alexey V. Vissarionov)
  - ploop: disable WRITE SAME for io_kaio (Maxim Patlasov) [PSBM-41965]
  - ploop: release io_context on ploop_thread() exit (Maxim Patlasov) [PSBM-39956]
  - ploop: do not use fiemap beyond eof (Maxim Patlasov) [PSBM-26762 PSBM-39251]
  - ploop: use GFP_NOIO in ploop_make_request (Vladimir Davydov) [PSBM-38842]
  - ploop: fix race on prealloc request (Maxim Patlasov) [PSBM-35095]
  - ploop: dio_fastmap() must refresh bvec_merge_data (Maxim Patlasov)
  - ploop: fix processing sync bios (Maxim Patlasov) [PSBM-33630]
  - ploop: added into pvd header new close signatures (Andrey Smetanin) [PSBM-33882]
  - ploop: fix busyloop on secondary discard bio (Andrey Smetanin) [PSBM-30451]
  - ploop: add a separate queue for discard bio-s (v2) (Andrey Smetanin) [PSBM-27676]
  - ploop: added printk of function, line, backtrace before ploop_set_error (Andrey Smetanin)
  - ploop: force FUA of nullified blocks for BAT grow (Andrey Smetanin) [PSBM-31969]
  - ploop: mark reloc reqs to force FUA/fsync(kaio) for index update I/O (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: mark reloc reqs to force FUA before write of relocated data (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: make image fsync at I/O complete if it's required by FUA/fsync force flag or by req->req_rw (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: do preflush or postfua according force FUA/flush flags, and delay FUA if possible but add force FLUSH to req if so (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: direct: to support truly FLUSH/FUA of req we need mark first bio FLUSH, write all bios and mark last bio as FLUSH/FUA (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: define struct ploop_request->state flags to force pre FLUSH before write IO and FUA/fsync at I/O complete (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: added ploop_req_delay_fua_possible() func that detects possible delaying of upcoming FUA to index update stage (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: notify blktrace about bio completions (Andrey Smetanin)
  - ploop: warning on "disk full" condition (Andrey Smetanin)
  - ploop: make manual abort transition verbose (Andrey Smetanin)
  - ploop: zero blocks on reuse (Andrey Smetanin) [PSBM-25391]
  - ploop: roll back alloc_head on ENOSPC (Andrey Smetanin) [PSBM-24694]
  - ploop: put top-delta back if merge failed (Andrey Smetanin) [PSBM-25252]
  - ploop: fix spurious hole complains (Andrey Smetanin)
  - ploop: expose open_count to sysfs (Andrey Smetanin) [PSBM-24754]
  - ploop: ensure non-empty delta list on running ploop (Andrey Smetanin) [PSBM-25102]
  - ploop: bug on bad fiemap (v2) (Andrey Smetanin) [PSBM-26762]
  - ploop: add ioctl to limit size of top delta (v2) (Andrey Smetanin) [PSBM-22002]
  - ploop: prioritize BAT operations (Andrey Smetanin)
  - ploop: fix race in ploop_tracker_init() (Andrey Smetanin) [PSBM-22993]
  - ploop: fix check_zero optimization v2 (Andrey Smetanin) [PSBM-23452]
  - ploop: fix a race condition on relocation of blocks (Andrey Smetanin) [PSBM-23905]
  - ploop: support 4K block-size of host block-device (Andrey Smetanin) [PSBM-21989]
  - ploop: skip writes of zeroes to unallocated blocks by default (Andrey Smetanin) [PSBM-22506 PSBM-22381]
  - ploop: reverse order of fdatawait and fsync fop (Andrey Smetanin)
  - ploop: fix sync delay for sync requests (Andrey Smetanin) [PSBM-22381]
  - ploop: fix iblk-to-sector calculations (Andrey Smetanin) [PSBM-22961]
  - ploop: rework accounting images_size (Andrey Smetanin) [PSBM-20432]
  - ploop: report holes in pio_direct (v2) (Andrey Smetanin) [PSBM-20770]
  - ploop: prevent disclosure 4 bytes of the stack kernel (Andrey Smetanin)
  - ploop: prevent dangerous ploop-umount (Andrey Smetanin) [PSBM-21474]
  - ploop: check new size of block device on ioctl(GROW) (Andrey Smetanin) [PSBM-21027]
  - ploop: fix dio_fsync wait (Andrey Smetanin) [PSBM-18049]
  - ploop: fix accounting ploop_io_images_size (Andrey Smetanin) [PSBM-19906]
  - ploop: fixed deadlock by interrupts off inside lookup_extent_mapping (Andrey Smetanin) [PSBM-32614]
  - ploop: fix deadlock inside dio_alloc_sync - lock inside while() but unlock outside (Andrey Smetanin)
  - ploop: purge plo->map on merge (Maxim Patlasov) [PSBM-27891]
  - ploop: set PLOOP_MAP_IDENTICAL bit on merge (Maxim Patlasov) [PSBM-24408]
  - ploop: update i_size on preallocation (Maxim Patlasov)
  - ploop: support of explicit unplug: unplug callback (Maxim Patlasov) [PSBM-18168]
  - ploop: support of explicit unplug: start and stop plugging (Maxim Patlasov) [PSBM-18168]
  - ploop: check ENOSPC callback (Maxim Patlasov) [PSBM-18168]
  - ploop: port io_kaio module (Maxim Patlasov) [PSBM-18168]
  - ploop: congestion detection (Maxim Patlasov) [PSBM-18168 PSBM-11585]
  - ploop: generic support of writeback control (Maxim Patlasov) [PSBM-18168 PSBM-11585]
  - ploop: check error from freeze_bdev (Maxim Patlasov) [PSBM-28460]
  - ploop: fix file->f_count leak in raw_complete_snapshot() (Kirill Tkhai)
  - ploop: add ploop to the tree (Maxim V. Patlasov) [PSBM-51358 PSBM-51358]
  - cbt: selfdeadlock in __blk_cbt_set() (Vasily Averin) [PSBM-89323]
  - cbt: bitmap corruption caused by ipi (Vasily Averin) [PSBM-89323]
  - block: cbt: fix potential deadlock (Maxim Patlasov)
  - cbt: license: put correct copyrights into file headers (Konstantin Khorenko) [PSBM-43847]
  - cbt: don't leak ce_reserved64 in cbt_ito userspace (Dmitry Safonov) [PSBM-51361]
  - cbt: blk_cbt_update_size() must return if cbt->block_max not changed (Maxim Patlasov)
  - cbt: blk_cbt_update_size() should not copy uninitialized data (Maxim Patlasov) [PSBM-48120]
  - cbt: fix possible race on alloc_page() (Maxim Patlasov)
  - cbt: new api: blk_cbt_map_merge() (Maxim Patlasov) [PSBM-47429 PSBM-47429]
  - cbt: fix panic in blk_cbt_map_copy_once() (Maxim Patlasov) [PSBM-47416]
  - cbt: fix cbt->block_max calculation (Maxim Patlasov)
  - cbt: add uuid arg to blk_cbt_map_copy_once() (Maxim Patlasov) [PSBM-45000]
  - cbt: add blk_cbt_map_copy_once() helper (Maxim Patlasov) [PSBM-45000]
  - cbt: fix page allocation (Maxim Patlasov)
  - cbt: make __blk_cbt_set() smarter (Maxim Patlasov)
  - cbt: introduce CBT_PAGE_MISSED (Maxim Patlasov)
  - cbt: factor out alloc_page (Maxim Patlasov) [PSBM-45000]
  - config.OpenVZ: enable cbt - changed block tracking (Konstantin Khorenko) [PSBM-34156]
  - cbt: introduce changed block tracking (Dmitry Monakhov) [PSBM-34156 PSBM-54928]
  - fuse: skip invalidate_inode_pages2 on truncate (Maxim Patlasov) [PSBM-76437]
  - fuse: ioctl(FIEMAP) support (Maxim Patlasov) [PSBM-68226]
  - fuse: fallocate must return error if mode is not supported (Maxim Patlasov)
  - fuse: add support for fallocate(FL_ZERO_RANGE) (Maxim Patlasov)
  - fuse: allow to mount if process is in init_user_ns (Stanislav Kinsburskiy) [PSBM-67185]
  - fuse: ioctl() to bind fuse device to input queue (Maxim Patlasov)
  - fuse: fuse_prepare_write() cannot handle page from killed request (Maxim Patlasov) [PSBM-54547]
  - fuse: cleanup fuse_wait_on_page_writeback (Maxim Patlasov)
  - fuse: fuse_blocked_for_wb must check rw_files (Maxim Patlasov) [PSBM-57460]
  - fuse: trust server file size unless opened (Maxim Patlasov) [PSBM-57047]
  - fuse: ratelimint dio complains (Maxim Patlasov) [PSBM-55782]
  - fuse: fuse_send_writepage() must check FUSE_S_FAIL_IMMEDIATELY (Maxim Patlasov)
  - fuse: relax i_mutex coverage in fuse_fsync (Maxim Patlasov) [PSBM-55919]
  - fuse: queue work for aio_complete (v3) (Maxim Patlasov) [PSBM-54547]
  - fuse: process small sync direct reads synchronously (Maxim Patlasov)
  - fuse: enable synchronous close for both "pstorage://" and "vstorage://" fs types (Andrey Zaitsev) [PSBM-47206]
  - fuse: increase min/max_dirty_pages up to 256/512 MB (Vladimir Davydov)
  - fuse: resend interrupted release (Maxim Patlasov) [PSBM-45428 VSTOR-11275]
  - fuse: allow to mount fuse filesystems inside CT (Andrey Ryabinin) [PSBM-41075]
  - fuse: virtualize file system (Stanislav Kinsburskiy) [OVZ-6498 PSBM-85886]
  - fuse: release cleanup (Maxim Patlasov)
  - fuse: fix deadlock in fuse_flush() (Maxim Patlasov) [PSBM-29381]
  - fuse: invalidate_files backward compatibility mode (Maxim Patlasov)
  - fuse: report details of aio failure (Maxim Patlasov) [PSBM-23696]
  - fuse: fail lost-lease notification if async_read (Maxim Patlasov)
  - fuse: skip waiting for fuse writeback (Maxim Patlasov)
  - fuse: prevent queueing new requests after (Maxim Patlasov)
  - fuse: kill requests on "lost-lease" event (Maxim Patlasov)
  - fuse: add "killed" bit to fuse request (Maxim Patlasov)
  - fuse: add page_cache bit to fuse request (Maxim Patlasov)
  - fuse: the list of all opened files (Maxim Patlasov)
  - fuse: do not flush files opened ro (Maxim Patlasov) [PSBM-20562]
  - fuse: add mount option to disable close_wait (Maxim Patlasov)
  - fuse: make umount synchronous (Maxim Patlasov) [PSBM-19305]
  - fuse: print initialized flag in conn info (Maxim Patlasov)
  - fuse: extend report on pstorage errors (Maxim Patlasov)
  - fuse: do not use RELEASE on directory (Maxim Patlasov) [PSBM-17195]
  - fuse: add missed fuse_file_put() (Maxim Patlasov)
  - fuse: cleanups in fuse writeback (Maxim Patlasov) [PSBM-16442 PSBM-16442]
  - fuse: pass "fc" to fuse_invalidate_files() (Maxim Patlasov)
  - fuse: implement invalidate_files notification (Maxim Patlasov) [PSBM-16105]
  - fuse: account read/write requests into iopslimit (Maxim Patlasov)
  - fuse: improve bdi dirty memory limits for fuse (Maxim Patlasov) [PSBM-13700 PSBM-45497]
  - fuse: enable async_dio for pcs (Maxim Patlasov)
  - fuse: optimize fuse_vma_close() (Maxim Patlasov)
  - fuse: account directio requests into ioacct (Maxim Patlasov)
  - fuse: wire iolimit sleep-hook into directio path. (Maxim Patlasov)
  - fuse: account read/write requests into iostat (Maxim Patlasov)
  - fuse: i_size to be updated on first open (Maxim Patlasov) [PSBM-13636]
  - fuse: reimplement synchronous close (Maxim Patlasov)
  - fuse: Wait for real writeback to finish on file (Maxim Patlasov)
  - fuse: some fairness in handling writeback (Maxim Patlasov)
  - fuse: Fuse ctl file with connection info (Maxim Patlasov)
  - fuse: Show open files in fusectl (Maxim Patlasov)
  - fuse: Show active requests in fusectl files (Maxim Patlasov)
  - fuse: fuse-ve-odirect sysctl (Maxim Patlasov) [PSBM-18167]
  - fuse: direct_enable mount option (Maxim Patlasov) [PSBM-18167]
  - fuse: Turn writeback cache on (Maxim V. Patlasov)
  - fuse: kaio support (Maxim Patlasov) [PSBM-18167]
  - ms/fuse: Protect ff->reserved_req via corresponding fi->lock (Kirill Tkhai)
  - ms/fuse: Protect fi->nlookup with fi->lock (Kirill Tkhai)
  - ms/fuse: Introduce fi->lock to protect write related fields (Kirill Tkhai)
  - ms/fuse: Convert fc->attr_version into atomic64_t (Kirill Tkhai)
  - ms/fuse: Add fuse_inode argument to fuse_prepare_release() (Kirill Tkhai)
  - ms/fuse: Wake up req->waitq of only if not background (Kirill Tkhai)
  - ms/fuse: Optimize request_end() by not taking fiq->waitq.lock (Kirill Tkhai)
  - ms/fuse: umount should wait for all requests (Miklos Szeredi)
  - ms/fuse: fix double request_end() (Miklos Szeredi)
  - ms/fuse: Kill fasync only if interrupt is queued in queue_interrupt() (Kirill Tkhai)
  - ms/fuse: Use hash table to link processing request (Kirill Tkhai)
  - ms/fuse: fix unlocked access to processing queue (Miklos Szeredi)
  - ms/fuse: kill req->intr_unique (Kirill Tkhai)
  - ms/fuse: change interrupt requests allocation algorithm (Kirill Tkhai)
  - ms/fuse: do not take fc->lock in fuse_request_send_background() (Kirill Tkhai)
  - ms/fuse: introduce fc->bg_lock (Kirill Tkhai)
  - ms/fuse: use list_first_entry() in flush_bg_queue() (Kirill Tkhai)
  - ms/fuse: set FR_SENT while locked (Miklos Szeredi)
  - ms/fuse: Fix use-after-free in fuse_dev_do_write() (Kirill Tkhai)
  - ms/fuse: Fix use-after-free in fuse_dev_do_read() (Kirill Tkhai)
  - ms/fuse: reduce allocation size for splice_write (Andrey Ryabinin)
  - ms/fuse: use kvmalloc to allocate array of pipe_buffer structs. (Andrey Ryabinin)
  - ms/fuse: convert to errseq_t based error tracking for fsync (Jeff Layton)
  - ms/fuse: fix use after free issue in fuse_dev_do_read() (Sahitya Tummala)
  - ms/fuse: clear FR_PENDING flag when moving requests out of pending queue (Tahsin Erdogan)
  - ms/fuse: use filemap_check_errors() (Miklos Szeredi)
  - ms/fuse: don't mess with blocking signals (Al Viro)
  - ms/fs/fuse: fix ioctl type confusion (Jann Horn)
  - ms/fuse: separate pqueue for clones (Miklos Szeredi)
  - ms/fuse: introduce per-instance fuse_dev structure (Miklos Szeredi)
  - ms/fuse: device fd clone (Miklos Szeredi)
  - ms/fuse: abort: no fc->lock needed for request ending (Miklos Szeredi)
  - ms/fuse: no fc->lock for pqueue parts (Miklos Szeredi)
  - ms/fuse: no fc->lock in request_end() (Miklos Szeredi)
  - ms/fuse: cleanup request_end() (Miklos Szeredi)
  - ms/fuse: request_end(): do once (Miklos Szeredi)
  - ms/fuse: add req flag for private list (Miklos Szeredi)
  - ms/fuse: pqueue locking (Miklos Szeredi)
  - ms/fuse: abort: group pqueue accesses (Miklos Szeredi)
  - ms/fuse: cleanup fuse_dev_do_read() (Miklos Szeredi)
  - ms/fuse: move list_del_init() from request_end() into callers (Miklos Szeredi)
  - ms/fuse: duplicate ->connected in pqueue (Miklos Szeredi)
  - ms/fuse: separate out processing queue (Miklos Szeredi)
  - ms/fuse: simplify request_wait() (Miklos Szeredi)
  - ms/fuse: no fc->lock for iqueue parts (Miklos Szeredi)
  - ms/fuse: allow interrupt queuing without fc->lock (Miklos Szeredi)
  - ms/fuse: iqueue locking (Miklos Szeredi)
  - ms/fuse: dev read: split list_move (Miklos Szeredi)
  - ms/fuse: abort: group iqueue accesses (Miklos Szeredi)
  - ms/fuse: duplicate ->connected in iqueue (Miklos Szeredi)
  - ms/fuse: separate out input queue (Miklos Szeredi)
  - ms/fuse: req state use flags (Miklos Szeredi)
  - ms/fuse: simplify req states (Miklos Szeredi)
  - ms/fuse: don't hold lock over request_wait_answer() (Miklos Szeredi)
  - ms/fuse: simplify unique ctr (Miklos Szeredi)
  - ms/fuse: rework abort (Miklos Szeredi)
  - ms/fuse: fold helpers into abort (Miklos Szeredi)
  - ms/fuse: use per req lock for lock/unlock_request() (Miklos Szeredi)
  - ms/fuse: req use bitops (Miklos Szeredi)
  - ms/fuse: simplify request abort (Miklos Szeredi)
  - ms/fuse: call fuse_abort_conn() in dev release (Miklos Szeredi)
  - ms/fuse: fold fuse_request_send_nowait() into single caller (Miklos Szeredi)
  - ms/fuse: check conn_error earlier (Miklos Szeredi)
  - ms/fuse: account as waiting before queuing for background (Miklos Szeredi)
  - ms/fuse: reset waiting (Miklos Szeredi)
  - ms/fuse: fix background request if not connected (Miklos Szeredi)
  - ms/fuse: add memory barrier to INIT (Miklos Szeredi)
  - ms/fuse: flush requests on umount (Miklos Szeredi)
  - ms/fuse: use list_for_each_entry() for list traversing (Dong Fang)
  - netfilter/vzprivnet: Fix memleaks of 'struct seq_operations' (Andrey Ryabinin)
  - vzprivnet: classify_write() cleanup (Vasily Averin)
  - vzprivnet: Enable module in configs (Pavel Tikhomirov) [PSBM-43685]
  - ip6_vzprivnet: Add ip6_vzprivnet driver (Konstantin Khorenko)
  - ip_vzprivnet: Add ip_vzprivnet driver (Konstantin Khorenko)
  - fence-watchdog/arptables: add ability to filter by watchdog timeout (Pavel Tikhomirov)
  - fence-watchdog: Add xt_wdog_tmo netfilter match (Pavel Tikhomirov) [PSBM-23253]
  - fence-watchdog: Add fence-watchdog driver (Pavel Tikhomirov)
  - connector: add VE SS hook (Stanislav Kinsburskiy) [PSBM-60227]
  - connector: take VE from socket upon callback (Stanislav Kinsburskiy)
  - connector: containerize "connector" proc entry (Stanislav Kinsburskiy)
  - proc connector: send events to both VEs if not in VE#0 (Stanislav Kinsburskiy)
  - proc connector: use per-ve netlink sender helper (Stanislav Kinsburskiy)
  - proc connector: take namespaces from VE (Stanislav Kinsburskiy)
  - proc connector: pass VE to event fillers (Stanislav Kinsburskiy)
  - proc connector: take number of listeners and per-cpu conters from VE (Stanislav Kinsburskiy)
  - proc connector: call proc-related init and fini routines explicitly (Stanislav Kinsburskiy)
  - proc connector: add per-ve init and fini foutines (Stanislav Kinsburskiy)
  - proc connector: add pid namespace awareness (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for exit event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for coredump event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for comm event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for ptrace event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for sid event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for id event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for exec event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for fork event (Stanislav Kinsburskiy)
  - proc connector: generic proc_event_connector() helper introduced (Stanislav Kinsburskiy)
  - connector: take cn_already_initialized from VE (Stanislav Kinsburskiy)
  - connector: per-ve helpers intoruduced (Stanislav Kinsburskiy)
  - connector: use device stored in VE (Stanislav Kinsburskiy)
  - connector: per-ve init and fini helpers introduced (Stanislav Kinsburskiy)
  - connector: introduce VE-aware get_cdev() helper (Stanislav Kinsburskiy)
  - connector: store all private data on VE structure (Stanislav Kinsburskiy)
  - connector: remove redundant input callback from cn_dev (Stanislav Kinsburskiy) [PSBM-60227]
  - connector: bump skb->users before callback invocation (Florian Westphal) [PSBM-71904]
  - ms/kernel/ucount.c: mark user_header with kmemleak_ignore() (Luis R. Rodriguez) [PSBM-76924]
  - ms/module: Fix load_module() error path (Peter Zijlstra) [PSBM-69081]
  - ms/module: Optimize __module_address() using a latched RB-tree (Peter Zijlstra) [PSBM-69081]
  - ms/new helper: wait_event_killable_exclusive() (Stanislav Kinsburskiy) [PSBM-53581]
  - ms/pidns: fix NULL dereference in __task_pid_nr_ns() (Eric Dumazet) [PSBM-75247]
  - ms/trylock_super(): replacement for grab_super_passive() (Konstantin Khlebnikov) [PSBM-73370]
  - ms/kernel/kcmp.c: drop branch leftover typo (Cyrill Gorcunov)
  - ms/x86: Fix norandmaps/ADDR_NO_RANDOMIZE (Oleg Nesterov)
  - ms/workqueue: fix ghost PENDING flag while doing MQ IO (Roman Pen) [PSBM-69788]
  - ms/devpts: fix null pointer dereference on failed memory allocation (Colin Ian King) [PSBM-67757]
  - ms/pty: Remove pty_unix98_shutdown() (Peter Hurley) [PSBM-67757]
  - ms/ipvs: fix memory leak in ip_vs_ctl.c (Tommi Rantala) [PSBM-65033]
  - ms/x86/spinlocks/paravirt: Fix memory corruption on unlock (Raghavendra K T) [PSBM-68212]
  - ms/x86/ticketlock: Fix spin_unlock_wait() livelock (Oleg Nesterov) [PSBM-68212]
  - ms/x86/spinlock: Replace ACCESS_ONCE with READ_ONCE (Christian Borntraeger) [PSBM-68212]
  - ms/ /proc/PID/status: show all sets of pid according to ns (Chen Hanxiao) [PSBM-62139]
  - ms/ipv6: fix a lockdep splat (Eric Dumazet) [PSBM-61714]
  - ms/kprobes/x86: Return correct length in __copy_instruction() (Eugene Shatokhin) [PSBM-66876]
  - ms/kcmp: fs/epoll: wrap kcmp code with CONFIG_CHECKPOINT_RESTORE (Cyrill Gorcunov) [PSBM-60161]
  - ms/procfs: fdinfo: extend information about epoll target files (Cyrill Gorcunov) [PSBM-60161]
  - ms/kcmp: add KCMP_EPOLL_TFD mode to compare epoll target files (Cyrill Gorcunov) [PSBM-60161]
  - ms/pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes (Eric W. Biederman)
  - ms/pid_ns: Fix race between setns'ed fork() and zap_pid_ns_processes() (Kirill Tkhai)
  - ms/prctl: Allow local CAP_SYS_ADMIN changing exe_file (Kirill Tkhai) [PSBM-66313]
  - nsfs: add ioctl to get a parent namespace (Pavel Tikhomirov) [PSBM-57362 PSBM-57362]
  - kernel: add a helper to get an owning user namespace for a namespace (Pavel Tikhomirov) [PSBM-57362 PSBM-57362]
  - nsfs: add ioctl to get an owning user namespace for ns file descriptor (Pavel Tikhomirov) [PSBM-57362 PSBM-57362]
  - ms/pidns: expose task pid_ns_for_children to userspace (Kirill Tkhai) [PSBM-58669]
  - ms/ns: allow ns_entries to have custom symlink content (Kirill Tkhai) [PSBM-58669]
  - ms/ipc/shm: Fix shmat mmap nil-page protection (Davidlohr Bueso) [PSBM-61275]
  - ms/pidns: fix free_pid() to handle the first fork failure (Kirill Tkhai) [PSBM-56705]
  - ms/tracing/filter: Do not allow infix to exceed end of string (Steven Rostedt (Red Hat)) [PSBM-60885]
  - ms/futex: Fix potential use-after-free in FUTEX_REQUEUE_PI (Peter Zijlstra) [PSBM-62103]
  - ms/ipsec: Fix aborted xfrm policy dump crash (Evgenii Shatokhin) [PSBM-78287]
  - ms/xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Andy Whitcroft) [PSBM-63199]
  - ms/xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Andy Whitcroft) [PSBM-63199]
  - ms/pvclock: introduce seqcount-like API (Paolo Bonzini) [PSBM-60589]
  - ms/iovec: make sure the caller actually wants anything in memcpy_fromiovecend (Sasha Levin) [PSBM-59577]
  - ms/kernel/groups: Account group_info allocations (Andrey Ryabinin) [PSBM-56703]
  - ms/percpu: fix this_cpu_sub() subtrahend casting for unsigneds (Greg Thelen) [PSBM-63424]
  - ms/cgroup: fix rmdir EBUSY regression in 3.11 (Hugh Dickins) [PSBM-53314]
  - ms/kernel/groups: Use __GFP_NOWARN on user triggerable allocation (Andrey Ryabinin) [PSBM-56703]
  - ms/posix_acl: Clear SGID bit when setting file permissions (Jan Kara)
  - ms/block: fix use-after-free in sys_ioprio_get() (Omar Sandoval)
  - block/nbd: use REQ_TYPE_DRV_PRIV instead of REQ_TYPE_SPECIAL (Konstantin Khorenko) [PSBM-54928]
  - dm-crypt: add ability to use keys from the kernel key retention service (Andrey Ryabinin) [PSBM-44218]
  - ms/keys: fallback to user_match if type->match is not available. (Andrey Ryabinin) [PSBM-60876]
  - ms/KEYS: don't let add_key() update an uninstantiated key (Eric Biggers) [PSBM-73342]
  - sunrpc: take net from task client only is available (Stanislav Kinsburskiy) [PSBM-69434]
  - sunrpc: do not place task to sleep if has to be killed (Stanislav Kinsburskiy) [PSBM-68214]
  - sunrpc: use rpc_killall_tasks helper when "kill_tasks" toggle is raised (Stanislav Kinsburskiy)
  - sunrpc: fix race between "kill_tasks" set and actual task killing (Stanislav Kinsburskiy) [PSBM-68214]
  - sunrpc: pending tasks kill helper added (Stanislav Kinsburskiy) [PSBM-66510]
  - sunrpc: bring back SUNRPC task abort logic (Stanislav Kinsburskiy) [PSBM-66510]
  - sunrpc: add "kill-tasks" proc entry (Stanislav Kinsburskiy) [PSBM-66510]
  - lib/stackdepot.c: bump stackdepot capacity from 16MB to 128MB (Dmitry Vyukov) [PSBM-69081]
  - kcov: do not instrument lib/stackdepot.c (Alexander Potapenko) [PSBM-69081]
  - config.OpenVZ: add kcov code coverage (Konstantin Khorenko) [PSBM-56169]
  - ms/kcov: properly check if we are in an interrupt (Andrey Konovalov) [PSBM-56169]
  - ms/kcov: don't profile branches in kcov (Andrey Ryabinin) [PSBM-56169]
  - ms/kcov: don't trace the code coverage code (James Morse) [PSBM-56169]
  - ms/kernel: add kcov code coverage (Dmitry Vyukov) [PSBM-56169 PSBM-56169]
  - modules: set module author for Virtuozzo modules (Konstantin Khorenko) [PSBM-43847]
  - license: put correct copyrights into file headers (Konstantin Khorenko) [PSBM-43847 PSBM-40069]
  - kernel: call task_work_run() before exit_task_namespaces() (Andrei Vagin) [PSBM-68266]
  - wait: Teach do_wait() to know entered tasks (Kirill Tkhai)
  - irq: make definition of irq_set_vcpu_affinity() static (Alexey V. Vissarionov)
  - trace: add debug prints to nail down busyloop in tracing_read_pipe (Stanislav Kinsburskiy) [PSBM-53928 PSBM-53928]
  - iscsi: fall back to sendmsg for slab pages (Vasily Averin) [PSBM-90529]
  - scsi: don't allocate memory under spinlock in scsi_register_device_handler() (Konstantin Khorenko) [PSBM-87859]
  - ms/scsi: libsas: fix error when getting phy events (Jason Yan) [PSBM-85057 PSBM-85057]
  - scsi: rollback to reset request in a request timer handler (Denis Plotnikov) [PSBM-92312]
  - ms/mvsas: fix misleading indentation (Luis de Bethencourt)
  - scsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly (Xin Long)
  - scsi/eh: fix hang adding ehandler wakeups after decrementing host_busy (Pavel Tikhomirov) [PSBM-69788]
  - debug/scsi: debug Scsi_Host recovery (Maxim Patlasov) [PSBM-44228]
  - scsi/debug: make scsi error loud (Dmitry Monakhov) [PSBM-54665]
  - rh/drm: fix compilation (Konstantin Khorenko) [PSBM-69674]
  - Kconfig.openvz: force CGROUP_PERF if compiling VZ Containers code (Konstantin Khorenko) [PSBM-51360]
  - config: Enable CONFIG_TCM_QLA2XXX module (Konstantin Khorenko) [PSBM-73161]
  - config.OpenVZ: increase default value for vm.mmap_min_addr (Konstantin Khorenko) [PSBM-56697]
  - config-vz: add DISABLE_DEV_COREDUMP=n option (Konstantin Khorenko) [PSBM-54194]
  - config.OpenVZ: add more options (disabled) which depend on EXPERT (Konstantin Khorenko) [PSBM-69674]
  - config.OpenVZ: add mhvtl virtual tape module (Konstantin Khorenko) [PSBM-69293]
  - drivers/target/mhvtl: introduce a virtual tape module (Konstantin Khorenko) [PSBM-69293]
  - drivers/bnx2x: Limit setting of the max mtu (Andrey Ryabinin) [PSBM-77016]
  - config.OpenVZ.debug: enable panic-on-oops in debug kernel (Konstantin Khorenko)
  - config.OpenVZ: disable RH_KABI_SIZE_ALIGN_CHECKS (Andrey Ryabinin)
  - config.OpenVZ: enable TAP accounting (Konstantin Khorenko) [PSBM-27713]
  - config.OpenVZ.debug: Enable audit subsystem in config" (Konstantin Khorenko) [PSBM-38898]
  - config.OpenVZ: enable NBD module (Konstantin Khorenko) [PSBM-31858]
  - x86: "pages zeroing on free" option introduced (Stanislav Kinsburskiy) [PSBM-33071]
  - config.OpenVZ: enable fencing watchdog for HA cluster support (Konstantin Khorenko) [PSBM-40736]
  - config.OpenVZ: enable CONFIG_LOCALVERSION_AUTO (Konstantin Khorenko) [PSBM-34957]
  - ve/seccomp, ptrace: Save original BPF program when setting the filer (Cyrill Gorcunov) [PSBM-55593]
  - ms/seccomp, ptrace: add support for dumping seccomp filters (Tycho Andersen) [PSBM-55322 PSBM-55593]
  - ms/seccomp: add ptrace options for suspend/resume (Andrew Vagin) [PSBM-39517 PSBM-90547]
  - x86: Show vcpu cpuflags in cpuinfo (Kirill Tkhai)
  - x86: cpuinfo: Refactor c_start() (Kirill Tkhai)
  - arch/x86: disable cpuid faulting on reboot and cpu offline (Vladimir Davydov) [PSBM-30548 PSBM-33638]
  - arch/x86: only enable cpuid faulting for containers (Vladimir Davydov) [PSBM-30516 PSBM-33638]
  - arch/x86: introduce cpuid override (Vladimir Davydov) [PSBM-28682 PSBM-33638]
  - ms/x86: drop _PAGE_FILE and pte_file()-related helpers (Kirill A. Shutemov) [PSBM-52992 PSBM-54928]
  - ms/asm-generic: drop unused pte_file* helpers (Kirill A. Shutemov) [PSBM-52992]
  - ms/ipc/shm: handle removed segments gracefully in shm_mmap() (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d() (Kirill Tkhai) [PSBM-78359]
  - mm/memcg: limit page cache in memcg hack (Andrey Ryabinin) [PSBM-77547]
  - ms/mm: memcontrol: use vmalloc fallback for large kmem memcg arrays (Johannes Weiner) [PSBM-76752]
  - ms/mm: introduce kv[mz]alloc helpers (Andrey Ryabinin) [PSBM-76752]
  - ms/x86/mm: Make in_compat_syscall() work during exec (Dmitry Safonov)
  - ms/x86/hugetlb: Adjust to the new native/compat mmap bases (Dmitry Safonov)
  - ms/x86/mm: Make mmap(MAP_32BIT) work correctly (Dmitry Safonov)
  - ms/x86/mm: Introduce mmap_compat_base() for 32-bit mmap() (Dmitry Safonov)
  - ms/x86/mm: Add task_size parameter to mmap_base() (Dmitry Safonov)
  - ms/x86/mm: Introduce arch_rnd() to compute 32/64 mmap random base (Dmitry Safonov)
  - ms/x86: standardize mmap_rnd() usage (Kees Cook)
  - x86/mm: Support mremap()'ing vdso vma (Dmitry Safonov)
  - x86/vdso: Add 64-bit vdso map API (Dmitry Safonov) [PSBM-67017]
  - ve/vdso: virtualized monotonic gettime through vdso (Andrey Ryabinin) [PSBM-66451 PSBM-66888 PSBM-68050]
  - x86/vdso/prctl: Return size of vdso blob for ARCH_MAP_VDSO_32 (Dmitry Safonov)
  - x86/vdso/prctl: fail if vdso present in ARCH_MAP_VDSO_32 (Dmitry Safonov) [PSBM-66485]
  - x86/arch_prctl/vdso: add ARCH_MAP_VDSO_* (Dmitry Safonov) [PSBM-28517]
  - x86/vdso: Fix build failure with GCC5 (Andrey Ryabinin)
  - ve/vdso: x86 -- Disable virtualization in native x86-32 mode (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86 -- Eliminate race in vdso allocation, v2 (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86-32 -- Implement kernel version virtualization (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86-64 -- Implement kernel version virtualization (Cyrill Gorcunov) [PSBM-30093]
  - perf/x86/intel: fix Intel processors define's naming (Konstantin Khorenko) [PSBM-94406]
  - ms/perf/x86/intel: make reusable LBR initialization code (Jan Dakinevich) [PSBM-75679]
  - arch: x86: perf_event_intel: do not taint kernel when irq loop is stuck (Vladimir Davydov) [PSBM-49258]
  - mm/memcg: get precise stat2 counters for statistics. (Andrey Ryabinin) [PSBM-69332]
  - mm/memcg: improve mem_cgroup_dcache_is_low() performance. (Andrey Ryabinin) [PSBM-68644 PSBM-69145]
  - mm: memcontrol: add stats for reclaimable and unreclaimable stats (Vladimir Davydov) [PSBM-54816 PSBM-54816 PSBM-54816 PSBM-54816]
  - memcg/bc: account dcache size (Vladimir Davydov) [PSBM-20089]
  - vziolimit/fs/ext4: allow to throttle due to iolimit while reading directory blocks (Vladimir Davydov)
  - config.OpenVZ: add "vziolimit" module (Konstantin Khorenko) [PSBM-20104]
  - cfq/vziolimits: add virtinfo hook for vziolimits (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-iostat-wire-vziolimit-into-deadline-io_scheduler (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: add bc cgroup control (Dmitry Monakhov) [PSBM-32281]
  - vziolimit: Add vziolimit driver (Dmitry Monakhov) [PSBM-20104]
  - sched/vziolimit: Port diff-fairsched-do-not-account-iothrottled-tasks-in-loadavg-core (Vladimir Davydov) [PSBM-33642]
  - mm/iolimits: fix double I/O accounting for iolimits (Andrew Perepechko)
  - pfcache/fork: don't inherit vm_private_data on fork (Pavel Tikhomirov) [PSBM-44587]
  - pfcache/ub: account pfcache peer files in ub0 (Andrey Ryabinin) [PSBM-56167]
  - pfcache: hide trusted.pfcache from listxattr (Pavel Tikhomirov) [PSBM-52180]
  - ve/xattr: allow to set trusted.xxx for container admin (Pavel Tikhomirov) [PSBM-51102 OVZ-6791 PSBM-51009]
  - ve/xattr: prohibit getxattr/setxattr trusted.pfcache (Pavel Tikhomirov) [PSBM-51102 OVZ-6791]
  - ext4: don't iterate over sbi->s_es_list more than the number of elements (Konstantin Khorenko) [PSBM-83335]
  - ext4: Make cache hits/misses per-cpu counts (Waiman Long) [PSBM-83335]
  - ms/ext4: move handling of list of shrinkable inodes into extent status code (Jan Kara) [PSBM-83335]
  - rh/ext4: release leaked posix acl in ext4_xattr_set_acl (Stanislav Kinsburskiy) [PSBM-81384]
  - rh/ext4: release leaked posix acl in ext4_acl_chmod (Stanislav Kinsburskiy) [PSBM-81384]
  - pfcache: do not account peer files to memcg (Vladimir Davydov)
  - pfcache/ext4: drop pfcache csum on fallocate (Dmitry Monakhov) [PSBM-33644]
  - ms/ext4: fix lazytime optimization (Dmitry Monakhov)
  - ms/ext4: add optimization for the lazytime mount option (Dmitry Monakhov)
  - ext4: Add ioctl EXT4_IOC_SET_RSV_BLOCKS V2 (Dmitry Monakhov) [PSBM-25929]
  - ext4: add mfsync support (Dmitry Monakhov) [PSBM-18567 PSBM-34909 PSBM-34910]
  - pfcache: iterate peer list only for shared pages (Maxim Patlasov)
  - pfcache: add hashed peers for ext4 (Konstantin Khorenko) [PSBM-20098]
  - pfcache: add generic mapping peers (Konstantin Khlebnikov) [PSBM-20098 PSBM-52992 PSBM-52992 PSBM-89047]
  - ms/vfs: Remove second variable named error in __dentry_path (Pavel Tikhomirov) [PSBM-34245]
  - ms/vfs: reinitialize error for resetart in prepend_path as in ms (Pavel Tikhomirov) [PSBM-34245]
  - xfs: allow to mount xfs fs inside a Container (Konstantin Khorenko) [PSBM-72401 PSBM-72401 PSBM-86369]
  - ms/xfs: rework buffer dispose list tracking (Dmitry Monakhov) [PSBM-55577]
  - ms/xfs-convert-buftarg-lru-to-generic-code-fix (Andrew Morton) [PSBM-55577]
  - ms/xfs: convert buftarg LRU to generic code (Dmitry Monakhov) [PSBM-55577]
  - Revert: [fs] xfs: rework buffer dispose list tracking (Dmitry Monakhov) [PSBM-55577]
  - ms/xfs_qm: lost hunk from "ms/list_lru: add helpers to isolate items" (Vladimir Davydov) [PSBM-42319]
  - ms/xfs_qm: lost hunk from "ms/list_lru: introduce list_lru_shrink_{count,walk}" (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: fix dquot isolation hang (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: convert dquot cache lru to list_lru (Vladimir Davydov) [PSBM-42319 PSBM-42319]
  - ve/xfs: add missing ub_io_account_dirty in set_page_dirty (Vladimir Davydov)
  - ms/ext4: limit number of scanned extents in status tree shrinker (Jan Kara) [PSBM-78944]
  - ms/ext4: change LRU to round-robin in extent status tree shrinker (Zheng Liu) [PSBM-70858]
  - ms/ext4: track extent status tree shrinker delay statictics (Zheng Liu) [PSBM-70858]
  - ms/ext4: improve extents status tree trace point (Zheng Liu) [PSBM-70858]
  - ms/fs/ext4: __ext4_es_shrink() rename 'ret' to 'shrunk' (Andrey Ryabinin)
  - ext4: send abort uevent on ext4 journal abort (Dmitry Monakhov) [PSBM-68848]
  - ve/fs/ext4: allow container's root to change immutable attribute. (Andrey Ryabinin) [PSBM-60148]
  - ext4: add generic uevent infrastructure (Dmitry Monakhov) [PSBM-66618]
  - ext4: Discard preallocated block before swap_extents (Dmitry Monakhov)
  - ms/ext4: improve ext4lazyinit scalability (Dmitry Monakhov) [PSBM-49658]
  - ve/ext4: treat panic_on_errors as remount-ro_on_errors in CTs (Dmitry Monakhov)
  - ext4: fix race aio-dio vs freeze_fs (Dmitry Monakhov) [PSBM-39352]
  - ms/fs: add dirtytime_expire_seconds sysctl (Dmitry Monakhov)
  - ms/fs: make sure the timestamps for lazytime inodes eventually get written (Dmitry Monakhov)
  - ms/vfs: add find_inode_nowait() function (Dmitry Monakhov)
  - ms/vfs: add support for a lazytime mount option (Dmitry Monakhov) [PSBM-20411]
  - jbd2: raid amnesia protection for the journal (Dmitry Monakhov) [PSBM-15484]
  - ext4: fallocate mode - convert and extend (Dmitry Monakhov) [PSBM-22381]
  - ms/ext4: use ext4_ext_next_allocated_block instead of mext_next_extent (Dmitry Monakhov)
  - ext4: update defragmentation codebase (Konstantin Khorenko)
  - ext4: Fix error handling after filesystem abort (Dmitry Monakhov)
  - jbd2: make shure that we do not miss aborted state (Dmitry Monakhov)
  - ext4: pfcache_csum mount option (Konstantin Khlebnikov)
  - ext4: make data=writeback mode safe (Kirill Tkhai)
  - ext4: quarantee rename atomic behavior (Kirill Tkhai)
  - ext4: Provide a balloon nipple for management (Konstantin Khorenko) [PSBM-41222]
  - ext4: Don't show the active balloon to user (Maxim V. Patlasov)
  - ext4: Teach statfs to report reduced disk usage (Maxim V. Patlasov)
  - ext4: Teach the fs where the balloon inode is (Maxim V. Patlasov)
  - fs/ext4: ext4_ioctl should check for CAP_SYS_ADMIN, not for CAP_SYS_RESOURCE (Konstantin Khorenko)
  - fs/ext3: add_dirent_to_buf() should return an error, not always 0 (Konstantin Khorenko)
  - fs/ext3: check for CAP_SYS_ADMIN, not CAP_SYS_RESOURCE in ext3_ioctl() (Konstantin Khorenko)
  - blk/ploop: Add BLKPG_GET_PARTITION operation (Kirill Tkhai)
  - ext4/ploop: ask ploop about ENOSPC condition (Kirill Tkhai)
  - block/ploop: export put_io_context_active() (Maxim V. Patlasov)
  - vzstat: initial patch (Konstantin Khorenko) [PSBM-54928 PSBM-89684 VSTOR-16659]
  - ve/mm/kstat: Port diff-ve-kstat-disable-interrupts-around-seqcount-write-lock (Vladimir Davydov) [PSBM-33650]
  - sched: Account task_group::cpustat,taskstats,avenrun (Konstantin Khorenko) [PSBM-33642]
  - core: Add glob_kstat, percpu kstat and account mm stat (Kirill Tkhai)
  - ipv6/sit: account and don't WARN on ip_tunnel_prl structs allocation (Andrey Ryabinin) [PSBM-58330]
  - ms/net: ipv4: Fix memory leak in network namespace dismantle (Ido Schimmel) [PSBM-94535]
  - net: fix false-positive deadlock detection for sk_receive_queue lock (Pavel Tikhomirov) [VSTOR-18951]
  - tcp: sendpage should not handle Slab objects (Vasily Averin) [PSBM-90529]
  - ms/udp: must lock the socket in udp_disconnect() (Eric Dumazet) [PSBM-57512]
  - ms/neigh: disallow un-init_net to change thresh of neigh (Gao feng) [PSBM-59964 PSBM-63020]
  - net: cleanup headers inclusion (Stanislav Kinsburskiy)
  - ms/net: fix creation adjacent device symlinks (Alexander Y. Fomichev) [PSBM-58300]
  - ms/net: prevent of emerging cross-namespace symlinks (Alexander Y. Fomichev) [PSBM-58300 PSBM-58300]
  - config.OpenVZ: add and enable INET_RAW_DIAG - RAW: socket monitoring interface (Konstantin Khorenko) [PSBM-51614]
  - ms/net: sysctl: fix a kmemleak warning (Li RongQing) [PSBM-76924]
  - ms/net: raw sockets diag interface compilation fix (Konstantin Khorenko)
  - ms/ipv6: add IPV6_HDRINCL option for raw sockets (Hannes Frederic Sowa) [PSBM-51614]
  - ms/net: ip, raw_diag -- Use jump for exiting from nested loop (Cyrill Gorcunov) [PSBM-51614]
  - ms/net: ip, diag: include net/inet_sock.h (Arnd Bergmann) [PSBM-51614]
  - ms/net: ip, diag -- Add diag interface for raw sockets (Cyrill Gorcunov) [PSBM-51614]
  - rh/net: add recursion limit to GRO (sd@queasysnail) [PSBM-53507]
  - net: Iterate only online cpus in __snmp6_fill_stats64() (Kirill Tkhai) [PSBM-50993]
  - net: Allow pass cpu mask into snmp_fold_field{, 64}() (Kirill Tkhai)
  - net: Add ipv6 statistics cpu notifier (Kirill Tkhai)
  - net: limit a number of namespaces which can be cleaned up concurrently (Andrei Vagin)
  - ve/pid: Export kernel.pid_max via ve cgroup (Pavel Tikhomirov) [PSBM-48397]
  - ve/netns: limit number of network namespaces per container (Andrei Vagin) [PSBM-49690]
  - net: packet: rework rx/tx ring pages accounting (Vladimir Davydov) [PSBM-47873 PSBM-63654]
  - ms/af_packet: remove a stray tab in packet_set_ring() (Dan Carpenter)
  - ms/af_unix: move unix_mknod() out of bindlock (WANG Cong) [PSBM-56179]
  - ms/af_unix: split 'u->readlock' into two: 'iolock' and 'bindlock' (Linus Torvalds) [PSBM-56179]
  - net/af_unix: charge buffers to kmemcg (Vladimir Davydov) [PSBM-34562]
  - ms/net: sock: move ->sk_shutdown out of bitfields (Andrey Ryabinin) [PSBM-47023]
  - ms/netfilter: account ebt_table_info to kmemcg (Kirill Tkhai)
  - ms/netfilter: ipset: fix ip_set_list allocation failure (Andrey Ryabinin) [PSBM-87338]
  - ms/netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user (Eric Dumazet)
  - ms/netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize (Liping Zhang)
  - ve/modules: allow NFS modules autoload in Containers (Stanislav Kinsburskiy) [PSBM-58178]
  - ve/net/ip6tables: fix autoloading of the ip6table_raw module from CT (Andrey Ryabinin) [PSBM-50548 PSBM-54244]
  - ve/netfilter/ipset: allow modules autoload (Pavel Tikhomirov) [PSBM-46102]
  - ve/netlink: allow IPVS netlink messages to CT init userns (Pavel Tikhomirov) [PSBM-63883]
  - ve/net/ipvs: allow IPVS modules autoload in CT (Pavel Tikhomirov) [PSBM-63883]
  - ve/net/vxlan: enable support and autoload in a container (Pavel Tikhomirov) [PSBM-53629]
  - ve/kmod/ebtable: allow to autoload ebtable_* modules from inside a CT (Konstantin Khorenko) [PSBM-66435]
  - ve/kmod/whitelist: allow dummy module autoloading (Pavel Tikhomirov) [PSBM-43329 PSBM-52061]
  - ve/kmod/whitelist: allow overlay fs module autoloading (Dmitry Safonov) [PSBM-51043]
  - ms/kmod: remove false positive warning "waiting module removal not supported: please upgrade" (Rusty Russell) [PSBM-27580 OVZ-6748 PSBM-47877]
  - FIXME: to drop: ve/kernel/taint: Port diff-taint-message-enhanced-with-dump (Vladimir Davydov) [PSBM-25867 PSBM-33650 PSBM-52719]
  - ve/kmod: Allow netfilter conntrack inside VE (Cyrill Gorcunov) [PSBM-47359]
  - ve/kmod: Add modules to whitelist for c/r sake (Cyrill Gorcunov) [PSBM-46789 PSBM-46789]
  - ve/kmod: list of allowed to autoload in CT modules (Dmitry Safonov) [PSBM-41216 PSBM-41216]
  - ve/kmod: allow to autoload nf_log_ipv[46] (Vladimir Davydov) [PSBM-38573]
  - ve/kmod: Add rules for new {ip, ip6, x}table modules (Kirill Tkhai) [PSBM-33631]
  - ve/kmod: Add rules for autoloading (new) nf_tables (Kirill Tkhai) [PSBM-33631]
  - ve/kmod: Port autoloading from CT (Konstantin Khorenko) [PSBM-28910 PSBM-38666]
  - ms/tty: n_hdlc: get rid of racy n_hdlc.tbuf (Alexander Popov) [PSBM-61962]
  - ms/TTY: n_hdlc, fix lockdep false positive (Jiri Slaby) [PSBM-61963]
  - ms/tty: Fix unsafe ldisc reference via ioctl(TIOCGETD) (Peter Hurley) [PSBM-53939]
  - ve/vtty: Don't free console mapping until no clients left (Cyrill Gorcunov) [PSBM-39463]
  - ve/tty: vtty -- Drop TTY_PINNED_BY_OTHER bit (Cyrill Gorcunov)
  - ve/vtty: Don't close unread master peer if slave is nonzero (Cyrill Gorcunov) [PSBM-41985 PSBM-41672]
  - ve/vtty: n_tty -- Allow write on sole slave vtty peer (Cyrill Gorcunov) [PSBM-40740]
  - ve/vtty: Don't zap termios fields on slave peer (Cyrill Gorcunov) [PSBM-41057]
  - ve/vtty: Make indices to match pcs6 scheme (Cyrill Gorcunov) [PSBM-40088]
  - ve/tty: Use ve_capable in vhangup syscall (Cyrill Gorcunov) [PSBM-40053]
  - ve/tty: vt -- Implement per VE support for console and terminals (Cyrill Gorcunov) [PSBM-34533 PSBM-34532 PSBM-34107 PSBM-32686 PSBM-32685 PSBM-80049]
  - ve/tty: vt -- Fix nil dereference due to race (Cyrill Gorcunov) [PSBM-37929]
  - ve/vt: Drop debug vars from console code (Cyrill Gorcunov)
  - ve/tty: vt -- Add dummy stubs (Cyrill Gorcunov) [PSBM-34324]
  - ve/tty: console -- Enhance container console to support per VE ops (Cyrill Gorcunov) [PSBM-34357]
  - ve/tty: vzcon -- Add container dummy console support (Cyrill Gorcunov) [PSBM-32686]
  - ve/tty: Disable /dev/console in VE environment (Cyrill Gorcunov) [PSBM-32686 PSBM-32728]
  - ms/audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore)
  - ve/audit: allow changing loginuid for VE root (Pavel Tikhomirov) [PSBM-64487]
  - ms/x86/coredump: Always use user_regs_struct for compat_elf_gregset_t (Dmitry Safonov)
  - ms/x86/signal: Remove bogus user_64bit_mode() check from sigaction_compat_abi() (Dmitry Safonov)
  - ms/x86/signal: add SA_{X32,IA32}_ABI sa_flags (Dmitry Safonov) [PSBM-28517]
  - ms/x86/ptrace: down with test_thread_flag(TIF_IA32) (Dmitry Safonov) [PSBM-28517]
  - ms/x86/coredump: use pr_reg size, rather that TIF_IA32 flag (Dmitry Safonov) [PSBM-28517]
  - memcg: charge kmem allocations accounted to UBC in PCS6 to memcg (Konstantin Khorenko) [PSBM-54928 PSBM-54928]
  - mm/memcg: Don't enable interrupts too soon. (Andrey Ryabinin) [PSBM-76011]
  - mm: issue panic() on bad page/pte bugs if panic_on_warn is set (Andrey Ryabinin) [PSBM-70168]
  - ms/kasan: support panic_on_warn (Dmitry Vyukov) [PSBM-75786]
  - ms/mm: mempool: kasan: don't poot mempool objects in quarantine (Andrey Ryabinin) [PSBM-73165]
  - kasan: fix races in quarantine_remove_cache() (Dmitry Vyukov) [PSBM-69081]
  - kasan: drain quarantine of memcg slab objects (Greg Thelen) [PSBM-69081]
  - kasan: eliminate long stalls during quarantine reduction (Dmitry Vyukov) [PSBM-69081]
  - kasan: update kasan_global for gcc 7 (Dmitry Vyukov) [PSBM-69081]
  - ms/mm/mempolicy: Add cond_resched() in queue_pages_pte_range() (Andrey Ryabinin) [PSBM-79273]
  - mm, mempolicy: task->mempolicy must be NULL before dropping final reference (David Rientjes) [PSBM-69081]
  - kasan: remove the unnecessary WARN_ONCE from quarantine.c (Alexander Potapenko) [PSBM-69081]
  - x86, kasan, ftrace: Put APIC interrupt handlers into .irqentry.text (Alexander Potapenko) [PSBM-69081]
  - kasan: avoid overflowing quarantine size on low memory systems (Alexander Potapenko) [PSBM-69081]
  - kasan: improve double-free reports (Andrey Ryabinin) [PSBM-69081]
  - mm/kasan: get rid of ->state in struct kasan_alloc_meta (Andrey Ryabinin) [PSBM-69081]
  - mm/kasan: get rid of ->alloc_size in struct kasan_alloc_meta (Andrey Ryabinin) [PSBM-69081]
  - mm/kasan, slub: don't disable interrupts when object leaves quarantine (Andrey Ryabinin) [PSBM-69081]
  - mm/kasan: fix corruptions and false positive reports (Andrey Ryabinin) [PSBM-69081]
  - lib/stackdepot.c: use __GFP_NOWARN for stack allocations (Kirill A. Shutemov) [PSBM-69081]
  - mm, kasan: switch SLUB to stackdepot, enable memory quarantine for SLUB (Alexander Potapenko) [PSBM-69081]
  - kasan/quarantine: fix bugs on qlist_move_cache() (Joonsoo Kim) [PSBM-69081]
  - kasan: add newline to messages (Dmitry Vyukov) [PSBM-69081]
  - mm, kasan: don't call kasan_krealloc() from ksize(). (Alexander Potapenko) [PSBM-69081]
  - lib/stackdepot: avoid to return 0 handle (Joonsoo Kim) [PSBM-69081]
  - lib/stackdepot.c: allow the stack trace hash to be zero (Alexander Potapenko) [PSBM-69081]
  - mm: kasan: initial memory quarantine implementation (Alexander Potapenko) [PSBM-69081]
  - mm, kasan: fix compilation for CONFIG_SLAB (Alexander Potapenko) [PSBM-69081]
  - mm, kasan: stackdepot implementation. Enable stackdepot for SLAB (Alexander Potapenko) [PSBM-69081]
  - arch, ftrace: for KASAN put hard/soft IRQ entries into separate sections (Alexander Potapenko) [PSBM-69081]
  - mm, kasan: add GFP flags to KASAN API (Alexander Potapenko) [PSBM-69081]
  - mm/mempool: avoid KASAN marking mempool poison checks as use-after-free (Matthew Dawson) [PSBM-69081]
  - mm, kasan: SLAB support (Alexander Potapenko) [PSBM-69081]
  - kasan: various fixes in documentation (Andrey Konovalov) [PSBM-69081]
  - Documentation: kasan: fix a typo (Wang Long) [PSBM-69081]
  - kasan: show gcc version requirements in Kconfig and Documentation (Joe Perches) [PSBM-69081]
  - mm/memcg: sleep if mem_cgroup_force_empty_list() stumped on busy page (Andrey Ryabinin) [PSBM-70021 PSBM-76011]
  - mm: Count list_lru_one::nr_items lockless (Kirill Tkhai) [PSBM-69296]
  - mm: Make list_lru_node::memcg_lrus RCU protected (Kirill Tkhai)
  - mm: Add rcu field to struct list_lru_memcg (Kirill Tkhai) [PSBM-69296]
  - ms/mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp (Keno Fischer) [PSBM-70151]
  - mm/memcg: reclaim only kmem if kmem limit reached (Andrey Ryabinin) [PSBM-69226]
  - ms/mm: use sc->priority for slab shrink targets (Josef Bacik) [PSBM-69226]
  - ms/x86, efi, kasan: #undef memset/memcpy/memmove per arch (Andrey Ryabinin)
  - mm/memcg: reclaim memory on reaching kmem limit. (Andrey Ryabinin) [PSBM-68242 PSBM-70556]
  - ms/mm: fix sleeping function warning from __put_anon_vma (Hugh Dickins) [PSBM-65033]
  - ms/mm: vmscan: fix IO/refault regression in cache workingset transition (Andrey Ryabinin) [PSBM-68029]
  - ms/mm: vmscan: reduce size of inactive file list (Rik van Riel) [PSBM-68029]
  - ms/vmscan: fix increasing nr_isolated incurred by putback unevictable pages (Jaewon Kim) [PSBM-68029]
  - ms/mm: Follow-up for "larger stack guard gap, between vmas" (Hugh Dickins) [PSBM-67431]
  - ms/mm: larger stack guard gap, between vmas (Hugh Dickins) [PSBM-67431]
  - ms/memcg: make mem_cgroup_read_stat() unsigned (Greg Thelen) [PSBM-56256]
  - ms/mm/list_lru.c: avoid error-path NULL pointer deref (Alexander Polakov) [PSBM-67300]
  - ms/mm/memcontrol.c: fix the margin computation in mem_cgroup_margin() (Li RongQing) [PSBM-67076]
  - mm/memcg, ub: fix overflow in mem_cgroup_apply_beancounter() (Andrey Ryabinin)
  - ms/mm: prevent KASAN false positives in kmemleak (Dmitry Vyukov) [PSBM-66617]
  - mm: fix false positive WARN on fs reenterence (Andrey Ryabinin) [PSBM-58279]
  - ms/mm/memcontrol.c: fix order calculation in try_charge() (Andrey Ryabinin) [PSBM-62827]
  - mm/memcg: don't release memcg->css too early (Andrey Ryabinin) [PSBM-62827]
  - ve/memcg: enable kmem accounting for all cgroups (Vladimir Davydov) [PSBM-62827]
  - mm/memcg: make __memcg_activate_kmem() to actually activate kmem (Andrey Ryabinin) [PSBM-62827]
  - mm/memcg: fix kmem pages uncharging uncharge_batch() (Andrey Ryabinin) [PSBM-62827]
  - ms/mm: memcg: fix race condition between memcg teardown and swapin (Johannes Weiner) [PSBM-62080]
  - ms/mm, oom: remove task_lock protecting comm printing (David Rientjes) [PSBM-56178]
  - mm/memcontrol: fix shmem accounting (Andrey Ryabinin) [PSBM-58984]
  - ms/mm: memcontrol: only mark charged pages with PageKmemcg (Vladimir Davydov) [PSBM-51558]
  - ms/mm: memcontrol: teach uncharge_list to deal with kmem pages (Vladimir Davydov) [PSBM-51558]
  - ms/mm: memcontrol: revert use of root_mem_cgroup res_counter (Johannes Weiner) [PSBM-51558 PSBM-58993]
  - ms/userns, pidns: Force thread group sharing, not signal handler sharing. (Eric W. Biederman) [PSBM-44152]
  - ms/mm: memcontrol: use page lists for uncharge batching (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: rewrite uncharge API (Johannes Weiner) [PSBM-51558 PSBM-70742]
  - ms/mm: memcontrol: rewrite charge API (Johannes Weiner) [PSBM-51558 PSBM-70741]
  - ms/mm: memcontrol: remove ordering between pc->mem_cgroup and PageCgroupUsed (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: catch root bypass in move precharge (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: simplify move precharge function (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: remove explicit OOM parameter in charge path (Michal Hocko) [PSBM-51558]
  - ms/mm: memcontrol: retry reclaim for oom-disabled and __GFP_NOFAIL charges (Johannes Weiner) [PSBM-51558]
  - ms/mm: huge_memory: use GFP_TRANSHUGE when charging huge pages (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: reclaim at least once for __GFP_NORETRY (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: rearrange charging fast path (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: fold mem_cgroup_do_charge() (Johannes Weiner) [PSBM-51558]
  - ms/memcg: sanitize __mem_cgroup_try_charge() call protocol (Johannes Weiner) [PSBM-51558]
  - ms/memcg: do not replicate get_mem_cgroup_from_mm in __mem_cgroup_try_charge (Michal Hocko) [PSBM-51558]
  - ms/memcg: get_mem_cgroup_from_mm() (Johannes Weiner) [PSBM-51558]
  - ms/memcg: remove unnecessary !mm check from try_get_mem_cgroup_from_mm() (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcg: push !mm handling out to page cache charge function (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcg: inline mem_cgroup_charge_common() (Johannes Weiner) [PSBM-51558]
  - mm/memcontrol: res_counter -> page_counter transition (Andrey Ryabinin) [PSBM-54816 PSBM-54816 PSBM-54816 PSBM-54816 PSBM-91915]
  - mm: memcontrol: fix meminfo:SUnreclaim output in containers (Vladimir Davydov)
  - memcg: add mem_cgroup_get/put helpers (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - net/mm/packet: Pre-account maximum socket buffer into cg memory (v3) (Pavel Emelyanov) [PSBM-33584]
  - mm/netlink: Make all in-cg memory be kmem accounted (Pavel Emelyanov) [PSBM-33584 PSBM-93761]
  - net/mm/udp: Charge ingress buffers into cg memory (Pavel Emelyanov) [PSBM-33584 PSBM-39084]
  - net/mm/tcp: Limit orphan sockets per-cg (Pavel Emelyanov) [PSBM-33584 PSBM-34215]
  - net: resurrect parent_cg_proto() (Konstantin Khorenko) [PSBM-89047]
  - net/mm/tcp: Charge socket buffers into cg memory (v3) (Pavel Emelyanov) [PSBM-33584]
  - kernel/freezer: don't freeze stopped & about to be ptraced task (Andrey Ryabinin) [PSBM-40683]
  - ms/freezer: Do not freeze tasks killed by OOM killer (Cong Wang) [PSBM-38758]
  - oom: fix NULL ptr deref on oom if memory cgroup is disabled (Vladimir Davydov) [PSBM-43328]
  - oom: make berserker more aggressive (Vladimir Davydov)
  - oom: zap unused oom_scan_process_thread arguments (Vladimir Davydov)
  - oom: do not ignore score of exiting tasks (Vladimir Davydov)
  - mm: memcontrol: check more carefully if current is oom killed (Vladimir Davydov)
  - oom: do not select child that has already been killed (Vladimir Davydov) [PSBM-40842]
  - ve/memcg: do not ignore oom_guarantee for unlimited cgroups (Vladimir Davydov) [PSBM-44683]
  - oom: resurrect berserker mode (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-17930]
  - oom: pass points and overdraft to oom_kill_process (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: rework logic behind memory.oom_guarantee (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-37915]
  - oom: drop OOM_SCAN_ABORT (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: introduce oom timeout (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-38581]
  - oom: rework locking design (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - memcg: add lock for protecting memcg->oom_notify list (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - exit: clear TIF_MEMDIE after exit_task_work (Vladimir Davydov) [PSBM-44683]
  - ms/mm: oom_kill: clean up victim marking and exiting interfaces (Vladimir Davydov) [PSBM-26973]
  - ms/oom: thaw the OOM victim if it is frozen (Vladimir Davydov) [PSBM-26973]
  - ms/oom: add helpers for setting and clearing TIF_MEMDIE (Vladimir Davydov) [PSBM-26973]
  - ms/oom: make sure that TIF_MEMDIE is set under task_lock (Vladimir Davydov) [PSBM-26973]
  - ms/oom: don't count on mm-less current process (Vladimir Davydov) [PSBM-26973]
  - ms/mm, oom: remove unnecessary exit_state check (Vladimir Davydov) [PSBM-26973]
  - oom: do not dump all tasks info on each oom kill (Vladimir Davydov)
  - ms/vhost/net: extend device allocation to vmalloc (Michael S. Tsirkin) [PSBM-42199]
  - ms/mm: replace vma->sharead.linear with vma->shared (Kirill A. Shutemov) [PSBM-52992]
  - ms/rmap: drop support of non-linear mappings (Kirill A. Shutemov) [PSBM-52992]
  - ms/selftests: add memfd/sealing page-pinning tests (Andrew Vagin) [PSBM-39834]
  - ms/selftests: add memfd_create() + sealing tests (Andrew Vagin) [PSBM-39834]
  - ms/shm: add memfd_create() syscall (Andrew Vagin) [PSBM-39834]
  - prctl: remove one-shot limitation for changing exe link (Stanislav Kinsburskiy) [PSBM-26967 PSBM-47315]
  - prctl: reduce requirements to exe link change (Stanislav Kinsburskiy) [PSBM-50867]
  - ve/prctl_set_mm: allow to change mm content in ve (Stanislav Kinsburskiy) [PSBM-26967]
  - ms/mm/slub.c: list_lock may not be held in some circumstances (David Rientjes)
  - ms/memcg: rework memcg_update_kmem_limit synchronization (Vladimir Davydov) [PSBM-54816]
  - mm: memcontrol: fix race between kmem uncharge and charge reparenting (Vladimir Davydov) [OVZ-6756 PSBM-54816 PSBM-62827 PSBM-62827]
  - ms/mm: fix regression in remap_file_pages() emulation (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: remove rest usage of VM_NONLINEAR and pte_file() (Kirill A. Shutemov) [PSBM-52992 PSBM-70740]
  - ms/proc: drop handling non-linear mappings (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: drop vm_ops->remap_pages and generic_file_remap_pages() stub (Kirill A. Shutemov) [PSBM-52992 PSBM-54928]
  - ms/mm: drop support of non-linear mapping from fault codepath (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: drop support of non-linear mapping from unmap/zap codepath (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: replace remap_file_pages() syscall with emulation (Kirill A. Shutemov) [PSBM-52992]
  - mm: memcontrol: add memory.numa_migrate file (Vladimir Davydov) [PSBM-50875 PSBM-76970]
  - mm/page_alloc: don't return freed pages from alloc_pages() (Andrey Ryabinin) [PSBM-49918]
  - mm: default collapse huge pages if there's at least 1/4th ptes mapped (Vladimir Davydov) [PSBM-48885]
  - mm: memcontrol: fix race between user memory reparent and charge (Vladimir Davydov) [PSBM-49117]
  - config: disable numa balancing by default (Vladimir Davydov) [PSBM-49131]
  - mm: vmscan: never wait on writeback pages (Vladimir Davydov) [PSBM-48115]
  - ms/mm: memcontrol: reclaim when shrinking memory.high below usage (Johannes Weiner) [PSBM-48546]
  - mm: charge/uncharge kmemcg from generic page allocator paths (Vladimir Davydov)
  - mm: memcontrol: drop memcg_kmem_commit_charge (Vladimir Davydov)
  - arch: x86: don't charge kernel page tables to kmemcg (Vladimir Davydov)
  - ms/x86/kasan: instrument user memory access API (Andrey Ryabinin)
  - ms/mm/kasan: add API to check memory regions (Andrey Ryabinin)
  - ms/mm/kasan: print name of mem[set,cpy,move]() caller in report (Andrey Ryabinin)
  - ms/kernel/sysrq: restore touch_nmi_watchdog() in show_state_filter() (Andrey Ryabinin) [PSBM-47486]
  - kernel/sysrq: reset watchdog on all cpus while during sysrq-w (Andrey Ryabinin) [PSBM-47486]
  - ms/dcache: lift the "already marked killed" case into shrink_dentry_list() (Al Viro)
  - ms/dcache: don't need rcu in shrink_dentry_list() (Miklos Szeredi) [PSBM-87815]
  - ve/mm: introduce min threshold for dcache (Vladimir Davydov) [PSBM-34161]
  - dcache: zap dentry_lru_del() (Vladimir Davydov)
  - ms/dcache: don't remove from shrink list in select_collect() (Al Viro) [PSBM-44210]
  - ms/dcache: dentry_kill(): don't try to remove from shrink list (Vladimir Davydov) [PSBM-44210]
  - ms/memcg: make mem_cgroup_read_{stat|event}() iterate possible cpus instead of online (Tejun Heo)
  - mm: memcontrol: account shmem pages (Vladimir Davydov)
  - arch: x86: fix accounting page tables to kmemcg (Vladimir Davydov)
  - mm/vmalloc: add v[mz]alloc_account helpers (Vladimir Davydov)
  - ms/slab: add SLAB_ACCOUNT flag (Vladimir Davydov)
  - ms/memcg: only account kmem allocations marked as __GFP_ACCOUNT (Vladimir Davydov)
  - mm: memcontrol: add swapin/out stats (Vladimir Davydov) [PSBM-46104]
  - ms/mm: slab: free kmem_cache_node after destroy sysfs file (Dmitry Safonov) [PSBM-43010]
  - ms/slub: do not assert not having lock in removing freed partial (Steven Rostedt) [PSBM-43010]
  - ms/slub: use lockdep_assert_held (Peter Zijlstra) [PSBM-43010]
  - memcg: ignore memory.low for cgroups w/o tasks (Vladimir Davydov) [PSBM-44192]
  - ms/vmscan: do not force-scan file lru if its absolute size is small (Vladimir Davydov)
  - memcg: never fail kmem allocations (Vladimir Davydov)
  - ub/mm/writeback: do not check dirty limits for ub0 (Vladimir Davydov)
  - ve/mm/page-writeback: Introduce per-CT dirty memory limit (Andrey Ryabinin) [PSBM-33841]
  - ve/mm: allow container's root to ignore mlock limit (Andrey Ryabinin) [PSBM-41405]
  - ms/kasan: fix kmemleak false-positive in kasan_module_alloc() (Andrey Ryabinin) [PSBM-41328]
  - ms/include/linux/kmemleak.h: needs slab.h (Andrew Morton)
  - ve/mm,oom: print information about ve of killed task (Andrey Ryabinin) [PSBM-40610]
  - ms/mmu-notifier: add clear_young callback (Vladimir Davydov) [PSBM-32460]
  - ms/proc: add kpagecgroup file (Vladimir Davydov) [PSBM-32460]
  - ms/memcg: add page_cgroup_ino helper (Vladimir Davydov) [PSBM-32460]
  - ms/x86/mm, kasan: Silence KASAN warnings in get_wchan() (Andrey Ryabinin)
  - ms/x86/process: Unify 32bit and 64bit implementations of get_wchan() (Thomas Gleixner)
  - ms/x86/process: Add proper bound checks in 64bit get_wchan() (Thomas Gleixner)
  - ms/x86/asm/entry: Create and use a 'TOP_OF_KERNEL_STACK_PADDING' macro (Andrey Ryabinin)
  - memcg: do not allow to disable oom from inside a container (Vladimir Davydov)
  - ms/memcg: change oom_info_lock to mutex (Michal Hocko)
  - ms/memcg, oom: lock mem_cgroup_print_oom_info (Michal Hocko)
  - memcg: do not loop in mem_cgroup_reclaim if killed (Vladimir Davydov)
  - kexec, kasan: increase KEXEC_AUTO_RESERVED_SIZE under CONFIG_KASAN=y (Andrey Ryabinin) [PSBM-39339 PSBM-56847]
  - kasan: introduce single-shot mode and enable it by default (Andrey Ryabinin) [PSBM-39339]
  - kasan: always taint kernel on report. (Andrey Ryabinin) [PSBM-39339]
  - kasan: update reported bug types for not user nor kernel memory accesses (Andrey Konovalov) [PSBM-39339]
  - mm, slub, kasan: enable user tracking by default. (Andrey Ryabinin) [PSBM-39339]
  - arch: x86: charge page tables to memcg/kmem (Vladimir Davydov) [PSBM-33840 PSBM-34562]
  - gfp: add __get_free_kmem_pages helper (Vladimir Davydov)
  - gfp: inc __GFP_BITS_SHIFT (Konstantin Khorenko)
  - pipe: uncharge page on ->steal (Vladimir Davydov)
  - fs: account anon pipe buffers to memcg/kmem (Vladimir Davydov) [PSBM-39052]
  - vmalloc: account to memcg/kmem (Vladimir Davydov) [PSBM-33839]
  - mm: vmscan: fix do_try_to_free_pages() livelock (Lisa Du) [PSBM-35155]
  - mm: vmscan: fix the page state calculation in too_many_isolated (Vinayak Menon) [PSBM-35155]
  - config.OpenVZ: add KASan support for debug kernels (Konstantin Khorenko) [PSBM-39339]
  - ms/x86/kasan: Add message about KASAN being initialized (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Fix boot crash on AMD processors (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Flush TLBs after switching CR3 (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Fix KASAN shadow region page tables (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: Makefile: shut up warnings if CONFIG_COMPILE_TEST=y (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/mempool.c: kasan: poison mempool elements (Andrey Ryabinin) [PSBM-26429]
  - ms/mm, mempool: poison elements backed by slab allocator (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan, module: move MODULE_ALIGN macro into <linux/moduleloader.h> (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan, module, vmalloc: rework shadow allocation for modules (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: enable instrumentation of global variables (Andrey Ryabinin) [PSBM-26429]
  - ms/kernel: add support for .init_array.* constructors (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: vmalloc: pass additional vm_flags to __vmalloc_node_range() (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: vmalloc: add flag preventing guard hole allocation (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: enable stack instrumentation (Andrey Ryabinin) [PSBM-26429]
  - ms/x86_64: kasan: add interceptors for memset/memmove/memcpy functions (Andrey Ryabinin) [PSBM-26429]
  - ms/lib: add kasan test module (Andrey Ryabinin) [PSBM-26429]
  - ms/kmemleak: disable kasan instrumentation for kmemleak (Andrey Ryabinin) [PSBM-26429]
  - ms/fs: dcache: manually unpoison dname after allocation to shut up kasan's reports (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: add kernel address sanitizer support for slub allocator (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: introduce metadata_access_enable()/metadata_access_disable() (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: share object_err function (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: introduce virt_to_obj function (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: page_alloc: add kasan hooks on alloc and free paths (Andrey Ryabinin) [PSBM-26429]
  - ms/x86_64: add KASan support (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: disable memory hotplug (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: add kernel address sanitizer infrastructure (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: SLUB_DEBUG=n: use the same alloc/free hooks as for SLUB_DEBUG=y (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: move slab related stuff from util.c to slab_common.c (Andrey Ryabinin) [PSBM-26429]
  - ms/MIPS: Use NUMA_NO_NODE instead of -1 for node ID. (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/vmalloc: use wrapper function get_vm_area_size to caculate size of vm area (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: memcontrol: reclaim at least once for __GFP_NORETRY (Johannes Weiner)
  - ms/mm/vmscan: never isolate more pages than necessary (Vladimir Davydov) [PSBM-35275]
  - mm/compaction: fix too_many_isolated() (Konstantin Khorenko)
  - mm: Port diff-mm-add-sysctl-vm.force_scan_thresh (Vladimir Davydov) [PSBM-29968 PSBM-33640 PSBM-77547]
  - mm: Port diff-mm-vmscan-disable-fs-related-activity-for-direct-direct-reclaim (Vladimir Davydov) [PSBM-20210 PSBM-33640]
  - ms/headers: Support GCC 5 (Cyrill Gorcunov)
  - ms/memcg: issue memory.high reclaim after refilling percpu stock (Vladimir Davydov)
  - ms/memcg: do not call high reclaim if !__GFP_WAIT (Konstantin Khorenko)
  - ms/memcg: port memory.high (Vladimir Davydov)
  - memcg: count oom kills (Vladimir Davydov) [PSBM-20089]
  - memcg: add oom_guarantee (Vladimir Davydov) [PSBM-20089]
  - ms/mm/memcg: do not use vmalloc for mem_cgroup allocations (Vladimir Davydov)
  - mm/memcg: remove memcg from kmemcg_sharers list on css free (Vladimir Davydov)
  - ms/mm/vmscan.c: don't forget to free shrinker->nr_deferred (Vladimir Davydov)
  - tswap: Add optimization for zero-filled pages (Kirill Tkhai) [PSBM-66499]
  - ve/mm/cleancache: count only successful put in the cleancache_puts counter (Andrey Ryabinin) [PSBM-63964]
  - fs/block_dev: always invalidate cleancache in invalidate_bdev() (Andrey Ryabinin) [PSBM-63908]
  - cleancache: avoid pointless cleancache_invalidate_inode() calls. (Andrey Ryabinin) [PSBM-63908]
  - fs/cleancache: fix data invalidation in the cleancache during direct_io (Andrey Ryabinin) [PSBM-63908]
  - meminfo: show size of tswap (Andrey Ryabinin)
  - meminfo: show size of tcache (Vladimir Davydov)
  - mm: transcendent swap cache (Vladimir Davydov) [PSBM-32063 PSBM-72584 PSBM-77015]
  - mm/frontswap: invalidate expired data on a dup-store failure (Vladimir Davydov) [PSBM-34269 PSBM-34269]
  - memcg: allow to disable cleancache per memcg (Vladimir Davydov) [PSBM-34163]
  - mm: introduce transcendent file cache (Vladimir Davydov) [PSBM-31757 PSBM-72584 PSBM-77015 PSBM-77154 PSBM-78354]
  - mm/vmscan: Introduce PF_MEMCG_RECLAIM task flag to identify memcg reclaim. (Andrey Ryabinin)
  - ms/cleancache: remove limit on the number of cleancache enabled filesystems (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: forbid overriding cleancache_ops (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: zap uuid arg of cleancache_init_shared_fs (Vladimir Davydov) [PSBM-31915]
  - ms/fs/ocfs2: copy fs uuid to superblock (Vladimir Davydov) [PSBM-31915]
  - ms/memcg: port low limit (Vladimir Davydov) [PSBM-31752]
  - ms/slub: make dead caches discard free slabs immediately (Vladimir Davydov) [PSBM-25018]
  - ms/slub: never fail to shrink cache (Vladimir Davydov) [PSBM-25018]
  - ms/slub: fix off by one in number of slab tests (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: reparent list_lrus and free kmemcg_id on css offline (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: add helpers to isolate items (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: free memcg_caches slot on css offline (Vladimir Davydov) [PSBM-25018]
  - ms/slab: link memcg caches of the same kind into a list (Vladimir Davydov) [PSBM-25018]
  - ms/slab: embed memcg_cache_params to kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab_common: move kmem_cache definition to internal header (Vladimir Davydov) [PSBM-25018]
  - ms/fs: make shrinker memcg aware (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: introduce per-memcg lists (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: organize all list_lrus to list (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: get rid of ->active_nodes (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: add rwsem to synchronize against memcg_caches arrays relocation (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: rename some cache id related variables (Vladimir Davydov) [PSBM-25018]
  - ms/vmscan: per memory cgroup slab shrinkers (Vladimir Davydov) [PSBM-25018]
  - ms/fs: consolidate {nr,free}_cached_objects args in shrink_control (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: introduce list_lru_shrink_{count,walk} (Vladimir Davydov) [PSBM-25018]
  - ms/mm: vmscan: invoke slab shrinkers from shrink_zone() (Konstantin Khorenko) [PSBM-25018]
  - ms/memcg: zap memcg_slab_caches and memcg_slab_mutex (Vladimir Davydov) [PSBM-25018]
  - ms/slub: use sysfs'es release mechanism for kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/slub: fix memcg_propagate_slab_attrs (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_name argument of memcg_create_kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap __memcg_{charge,uncharge}_slab (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: fix possible use-after-free in memcg_kmem_get_cache() (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: use generic slab iterators for showing slabinfo (Vladimir Davydov) [PSBM-25018]
  - ms/slab: print slabinfo header in seq show (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab: Give s_next and s_stop slab-specific names (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab: Sharing s_next and s_stop between slab and slub (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_can_account_kmem (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: move memcg_update_cache_size to slab_common.c (Vladimir Davydov)
  - ms/memcg: don't call memcg_update_all_caches if new cache id fits (Vladimir Davydov)
  - ms/memcg: move memcg_{alloc,free}_cache_params to slab_common.c (Vladimir Davydov)
  - ms/mm: vmscan: remove shrink_control arg from do_try_to_free_pages() (Vladimir Davydov)
  - ms/mm: vmscan: move call to shrink_slab() to shrink_zones() (Vladimir Davydov)
  - ms/mm: vmscan: respect NUMA policy mask when shrinking slab on direct reclaim (Vladimir Davydov)
  - ms/mm: vmscan: call NUMA-unaware shrinkers irrespective of nodemask (Vladimir Davydov)
  - ms/slab: delete cache from list after __kmem_cache_shutdown succeeds (Vladimir Davydov)
  - ms/memcg: cleanup kmem cache creation/destruction functions naming (Vladimir Davydov)
  - ms/memcg: memcg_kmem_create_cache: make memcg_name_buf statically allocated (Vladimir Davydov)
  - ms/memcg: get rid of memcg_create_cache_name (Vladimir Davydov)
  - ms/memcg, slab: merge memcg_{bind,release}_pages to memcg_{un}charge_slab (Vladimir Davydov)
  - ms/mm/sl[aou]b: Move kmallocXXX functions to common code (Christoph Lameter)
  - ms/slob: Rework #ifdeffery in slab.h (Christoph Lameter)
  - ms/sl[au]b: charge slabs to kmemcg explicitly (Vladimir Davydov)
  - ms/slub: rework sysfs layout for memcg caches (Vladimir Davydov)
  - ms/slub: adjust memcg caches when creating cache alias (Vladimir Davydov)
  - ms/memcg, slab: unregister cache from memcg before starting to destroy it (Vladimir Davydov)
  - ms/memcg, kmem: use is_root_cache instead of hard code (Qiang Huang)
  - ms/memcg: don't need to free memcg via RCU or workqueue (Li Zefan)
  - ms/memcg: kill memcg refcnt (Li Zefan)
  - ms/memcg: don't need to get a reference to the parent (Li Zefan)
  - ms/memcg: use css_get/put for swap memcg (Li Zefan)
  - ms/memcg: use css_get/put when charging/uncharging kmem (Li Zefan)
  - ms/memcg: don't use mem_cgroup_get() when creating a kmemcg cache (Li Zefan)
  - ms/memcg: use css_get() in sock_update_memcg() (Li Zefan)
  - ms/vfs: fix dentry LRU list handling and nr_dentry_unused accounting (Linus Torvalds) [PSBM-83551]
  - ms/fs/super.c: fix lru_list leak for real (Al Viro)
  - ms/super: fix for destroy lrus (Glauber Costa)
  - ms/list_lru: dynamically adjust node arrays (Glauber Costa) [PSBM-42319]
  - mm: workingset: convert shrinker to count/scan API (Vladimir Davydov)
  - ms/fs: convert inode and dentry shrinking to be node aware (Dave Chinner)
  - ms/list_lru: remove special case function list_lru_dispose_all. (Glauber Costa)
  - ms/dcache: convert to use new lru list infrastructure (Dave Chinner)
  - ms/shrinker: Kill old ->shrink API. (Dave Chinner)
  - md/raid5: use new shrinker API (Dmitry Safonov)
  - ms/shrinker: convert remaining shrinkers to count/scan API (Dave Chinner)
  - ms/hugepage: convert huge zero page shrinker to new shrinker API (Glauber Costa)
  - ms/drivers: convert shrinkers to new count/scan API (Vladimir Davydov) [PSBM-34838 PSBM-42317]
  - ms/fs: convert fs shrinkers to new scan/count API (Vladimir Davydov) [PSBM-34838]
  - ms/vmscan: per-node deferred work (Glauber Costa)
  - ms/shrinker: add node awareness (Dave Chinner)
  - ms/inode: move inode to a different list inside lock (Glauber Costa)
  - ms/inode: convert inode lru list to generic lru list code. (Dave Chinner)
  - ms/shrinker: convert superblock shrinkers to new API (Dave Chinner) [OVZ-6646 PSBM-42760]
  - ms/mm: new shrinker API (Dave Chinner)
  - ms/dcache: remove dentries from LRU before putting on dispose list (Dave Chinner) [PSBM-83551]
  - ms/dentry: move to per-sb LRU locks (Dave Chinner)
  - ms/super: fix calculation of shrinkable objects for small numbers (Glauber Costa)
  - mm: make task with TIF_MEMDIE die faster (Kirill Tkhai)
  - mm: add independed bio pool for swapout (Kirill Tkhai) [PSBM-14619]
  - mm/fuse/oom: Show writeback_temp stats in oom message (Maxim Patlasov)
  - mm/swap: do not uncharge on reuse_swap_page (Vladimir Davydov)
  - mm/swap: comment about managing swap inside a CT (Konstantin Khorenko)
  - mm: Do not leak node data to CT's /proc/vmstat (Kirill Tkhai)
  - mm: Add oom_group to set custom oom_score_adj (Kirill Tkhai)
  - rh/mm: Drop off Live Kernel Self Migration (TRACK_DIRTY_PAGES) (Cyrill Gorcunov)
  - ms/mm: softdirty: keep bit when zapping file pte (Peter Feiner)
  - ms/mm: softdirty: clear VM_SOFTDIRTY flag inside clear_refs_write() instead of clear_soft_dirty() (Cyrill Gorcunov)
  - ms/kmemcg: don't allocate extra memory for root memcg_cache_params (Andrey Vagin)
  - ms/mm: save soft-dirty bits on swapped pages (Cyrill Gorcunov)
  - Makefile: make VZVERSION evaluated dynamically (Konstantin Khorenko) [PSBM-34957]
  - dummy: add dummy modules for service vz init script (Konstantin Khorenko) [PSBM-31333 PSBM-20104 PSBM-31333]
  - vzlist: add vzlist from 2.6.32-x as is (Dmitry Guryanov) [PSBM-20095 PSBM-20095 PSBM-20095 PSBM-19217]
  - vznetstat: Port diff-vznetstat-support-of-resetting-of-traffic-statistics-on-running-CTs (Vladimir Davydov) [PSBM-21243 PSBM-21243 PSBM-33650]
  - vznetstat: apply vznetstat patches from 2.6.32 as is (Stanislav Kinsburskiy) [PSBM-20094 PSBM-20094 PSBM-32912 PSBM-20094 PSBM-32072 PSBM-19217 PSBM-33650 PSBM-34837 PSBM-35011 PSBM-35178 PSBM-35178 PSBM-52219 PSBM-79502]
  - ub: add heuristic check for memory overcommit (Stanislav Kinsburskiy) [PSBM-45695 PSBM-48891]
  - ub: show swapin/out in /proc/bc/<bc>/vmaux (Vladimir Davydov) [PSBM-46104]
  - ve/fs/sync: per containter sync and syncfs (Stanislav Kinsburskiy) [PSBM-39583 PSBM-39583 PSBM-44125 PSBM-44125 PSBM-44684]
  - ub/fs/writeback: per-CT fs writeback (Andrey Ryabinin) [PSBM-33841 PSBM-43375]
  - ubc: proc show stats in ve user ns (Pavel Tikhomirov) [PSBM-40433]
  - ub: sync exec_ub on fork (Vladimir Davydov) [PSBM-54928]
  - ub/fs: resurrect sync accounting (Vladimir Davydov) [PSBM-34007]
  - ub/fs: account writeback io (Stanislav Kinsburskiy) [PSBM-34007 PSBM-34007]
  - ub: ressurrect iostat and ioprio reporting (Stanislav Kinsburskiy) [PSBM-34007]
  - ub: ressurrect ioprio_set IOPRIO_WHO_UBC (Vladimir Davydov) [PSBM-34007]
  - ub/memcg: introduce ub_total_pages (Stanislav Kinsburskiy) [PSBM-33849 PSBM-34035 PSBM-47147]
  - mm/bc: Port diff-bc-shmem-fix-accounting-on-error-path (Vladimir Davydov) [PSBM-22198 PSBM-33637]
  - ub/netfilter: account x_tables to ub (Vladimir Davydov) [PSBM-20089]
  - ubc: initial patch (Konstantin Khorenko) [PSBM-20665 PSBM-20540 PSBM-24622 PSBM-28377 PSBM-26039 PSBM-15568 PSBM-20089 PSBM-39435 PSBM-20089 PSBM-20089 PSBM-29895 PSBM-31973 PSBM-33729 PSBM-33732 PSBM-20089 PSBM-20089 PSBM-20089 PSBM-33487 PSBM-20089 PSBM-20089 PSBM-20089 PSBM-20089 PSBM-28682 PSBM-31006 PSBM-33637 PSBM-34035 PSBM-34035 PSBM-34035 PSBM-34007 PSBM-34007 PSBM-34007 PSBM-39327 PSBM-52219 PSBM-86044 PSBM-86044]
  - ub: Track task mm ub (Kirill Tkhai)
  - ub: Execute posix timers in ub0 (Kirill Tkhai)
  - ub: Add dirty page accounting (Kirill Tkhai)
  - ub: Set ub0 to do softirq (Kirill Tkhai)
  - ub: Account siginfo (Kirill Tkhai)
  - ub: Show task ub info in /proc/[pid]/status etc (Kirill Tkhai)
  - ve/proc: Port diff-ve-proc-add-buffers-field-to-meminfo (Vladimir Davydov) [PSBM-19448 PSBM-34444 PSBM-33650]
  - ub: Split meminfo_proc_show() (Kirill Tkhai)
  - ub: Add address_space::dirtied_ub (Kirill Tkhai)
  - ub: Account file struct (Kirill Tkhai)
  - ub: Show ub memory on sysrq mem show (Kirill Tkhai)
  - ub: Add flock accounting (Kirill Tkhai)
  - ub: Add pty accounting (Kirill Tkhai)
  - ms/netlink: fix an use-after-free issue for nlk groups (Vasily Averin) [PSBM-71747]
  - ve/netlink: allow messages with family PF_BRIDGE type RTM_xxxNEIGH in CT (Pavel Tikhomirov) [PSBM-53629]
  - netlink/diag: report flags for netlink sockets (Andrey Vagin) [PSBM-28386]
  - netlink: add an ability to restore messages in a receive queue (Andrey Vagin) [PSBM-28386]
  - netlink: allow to set peeking offset for sockets (Stanislav Kinsburskiy) [PSBM-28386 PSBM-48484 PSBM-28386 PSBM-57921]
  - ve/net/ip6tables: fix autoloading of the ip6table_raw module from CT (Andrey Ryabinin) [PSBM-50548 PSBM-54244]
  - net: Add dependence xt_socket match on nf_conntrack_ipv4 (Kirill Tkhai) [PSBM-69269]
  - net: Mark conntrack users in nftables (Kirill Tkhai) [PSBM-51050]
  - net: Mark conntrack users in xtables (Kirill Tkhai) [PSBM-51050 PSBM-54823 PSBM-54823]
  - net: Primitives to enable conntrack allocation (Stanislav Kinsburskiy) [PSBM-51050 PSBM-54823 PSBM-56500]
  - ve/nf_conntrack: expose "nf_conntrack_events*" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_acct" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_max" in containers (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: allow expose of priviledged sysctl inside containers (Stanislav Kinsburskiy) [PSBM-40044 PSBM-40044 PSBM-54530]
  - ms/netfilter: Restore xt_connlimit version 0 (Kirill Tkhai) [PSBM-40186]
  - config.OpenVZ: enable netfilter module xt_match_wdog_tmo (Konstantin Khorenko) [PSBM-40736]
  - ms/netfilter: Allow xt_owner in any user namespace (Eric W. Biederman) [PSBM-69409]
  - netfilter: always create netfilter per-net objects for ipv4/ipv6 (Stanislav Kinsburskiy) [PSBM-68767]
  - netfilter: always create per-net "filter" tables objects (Stanislav Kinsburskiy) [PSBM-58574]
  - netfilter: check per-ve netfilter status on actual operation (Stanislav Kinsburskiy) [PSBM-58574]
  - netfilter: ve_ipt_permitted() helper introduced (Stanislav Kinsburskiy) [PSBM-58574]
  - ms/bridge: drop netfilter fake rtable unconditionally (Florian Westphal) [PSBM-64412]
  - ms/netfilter: x_tables: avoid warn and OOM killer on vmalloc call (Marcelo Ricardo Leitner) [PSBM-62203]
  - ms/netfilter: nfnetlink: correctly validate length of batch messages (Phil Turnbull) [PSBM-57511]
  - netfilter/x_tables: account entry offsets allocations (Andrey Ryabinin) [PSBM-54407]
  - ve/netfilter: rectify ebtlog inside CT (Dmitry Safonov) [PSBM-54183]
  - ve/netfilter: rectify nflog inside CT (Dmitry Safonov) [PSBM-54183 PSBM-83551]
  - ve/netfilter: use ve_printk for BUGPRINT in ebtables (Dmitry Safonov) [PSBM-56707]
  - ms/netfilter: x_tables: check for bogus target offset (Cyrill Gorcunov) [PSBM-49001]
  - ve/netfilter: get UID and GID from container user ns on rule match (Stanislav Kinsburskiy) [PSBM-43609]
  - ve/netfilter: allow adding matches from the container initial user namespace (Stanislav Kinsburskiy) [PSBM-43609]
  - ve/netfilter: ve_printk for "nf_conntrack: table full" (Vasily Averin)
  - ve/netfilter: Check for permittions while looking for target and match (Kirill Tkhai) [PSBM-28910]
  - ve/netfilter/cred: add ve_capable to check capabilities relative to the current VE (v2) (Konstantin Khorenko) [PSBM-39077]
  - ve/netfilter: Add autoloading of sockopt modules (Kirill Tkhai) [PSBM-28910]
  - ve/netfilter: Implement pernet net->ct.max / virtualize "nf_conntrack_max" sysctl (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Implement pernet expect_max / virtualize "net.netfilter.nf_conntrack_expect_max" sysctl (Konstantin Khorenko) [PSBM-18322]
  - ve/netfilter: Add pernet permission checks in ip_tables (Kirill Tkhai) [PSBM-18322 PSBM-27181 PSBM-34192 PSBM-34657]
  - ve/netfilter: Implement net_ipt_permitted() etc (Kirill Tkhai) [PSBM-18322 PSBM-31451]
  - ve/netfilter: Implement ip_conntrack_disable_ve0 module option (Stanislav Kinsburskiy) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "conntrack" match support (Kirill Tkhai) [PSBM-18322 PSBM-51365]
  - ve/netfilter: Restore revision 0 "owner" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: MARK -- drop off @table entity to support rhel5 containers, v2 (Kirill Tkhai) [PSBM-30390]
  - ve/netfilter: Restore revision 0 "connmark" match / "CONNMARK" target support (Kirill Tkhai) [PSBM-18322 PSBM-51365]
  - ve/netfilter: Restore revision 0 "TOS" target support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "tos" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "mark" match and "MARK" target support (Stanislav Kinsburskiy) [PSBM-18322 PSBM-51365]
  - ve/netfilter: Restore revision 0 "iprange" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Basic ve transformations (Stanislav Kinsburskiy) [PSBM-18322 PSBM-39077]
  - ms/netfilter: Add {ipt,ip6t}_osf aliases for xt_osf (Kirill Tkhai) [PSBM-33929]
  - ve/futex/timeout: adjust futex timeout to absolule (Kirill Tkhai) [PSBM-14471]
  - ve: Use @real_start_timespec in uptime_proc_show (Cyrill Gorcunov) [PSBM-41406]
  - ve: Add interface for @start_timespec and @real_start_timespec adjustmen (Cyrill Gorcunov) [PSBM-41311 PSBM-41406]
  - timers should not get negative argument (Vasily Averin) [PSBM-48475]
  - ve/posix-timers: reference ve monotonic clock from ve start (v2) (Kirill Tkhai) [PSBM-13860 PSBM-34017 PSBM-18284 PSBM-18284]
  - radix-tree: save previous gfp_t tags in radix tree for dirty memory accounting (Konstantin Khorenko) [PSBM-18056 PSBM-27696 PSBM-83551 PSBM-83551]
  - VE/sysrq-trigger: make it VE-namespace aware (Stanislav Kinsbursky) [PSBM-20664]
  - config: enable BCACHE as a module" (Konstantin Khorenko) [PSBM-55594 PSBM-79461]
  - bcache: check correctly for bcache cgroup subsystem presence (Konstantin Khorenko)
  - config.OpenVZ: OpenVZ related config options are added (Stanislav Kinsburskiy) [PSBM-32460 PSBM-34741]
  - mpi: export arithmetic functions required for in-kernel DSA implementation (Konstantin Khorenko)
  - ms/mpi: revert "Revert "crypto: GnuPG based MPI lib - (Stanislav Kinsburskiy)
  - ms/mpi: revert "Remove unused code from MPI library" (Dmitry Kasatkin)
  - ve/kthread: khelper kthread in a container introduced (Stanislav Kinsbursky)
  - ve/kthread: introduce kthread_run_ve() helper (Stanislav Kinsbursky)
  - ve/kthread: kthreads creation facility introduced (Stanislav Kinsbursky)
  - kthread: make of a new kthread's queuing code to a callback (Stanislav Kinsbursky)
  - block: suppress hard lockup warning in elv_drain_elevator (Vladimir Davydov) [PSBM-44480]
  - block: Export disk_type,block_class and disk_name (Kirill Tkhai)
  - ms/cfq-iosched: fix oom cfq_queue ref leak in cfq_set_request() (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: fix async oom queue handling (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: simplify control flow in cfq_get_queue() (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: remove @gfp_mask from cfq_find_alloc_queue() (Maxim Patlasov) [PSBM-39956]
  - drivers/core/sysfs: respect ns when removing sys dev link (Vladimir Davydov) [PSBM-25801]
  - KMAPSET: set of key-value mappings with build-in (Stanislav Kinsburskiy) [PSBM-34437]
  - ve: add one more SHUTDOWN hook chain (Stanislav Kinsburskiy)
  - Use ve init task's css instead of opening cgroup via vfs (Vladimir Davydov) [PSBM-48629 PSBM-74490 PSBM-48721]
  - signal: don't rearm a posix-timer if siginfo was queued from user-space (Author: Thomas Gleixner) [PSBM-67221]
  - ve/signal: Ignore signals from wrong ve (Stanislav Kinsburskiy) [PSBM-17903 PSBM-40896 PSBM-17903]
  - signal: make SIGKILL top priority signal (Konstantin Khorenko)
  - pidns: add proc mount option 'hidepidns=0|1' (Konstantin Khlebnikov)
  - pidns: Disable pid allocation if pid_ns_prepare_proc() is failed in alloc_pid() (Kirill Tkhai) [PSBM-56705]
  - pid: export symbol nex_pidmap (Dmitry Guryanov) [PSBM-20095]
  - ms/pidns: Make the pidns proc mount/umount logic (Konstantin Khlebnikov)
  - PIDNS: implement change_pid_ns() (Konstantin Khlebnikov)
  - pid_ns: Virtualize pid_max (Kirill Tkhai)
  - fs/ceph: honor kernel direct aio changes v2 (Dmitry Monakhov) [PSBM-54817]
  - ve/aio: Add a handle to checkpoint/restore AIO context (Stanislav Kinsburskiy) [PSBM-42488 PSBM-41425 PSBM-42488 PSBM-42488 PSBM-42488]
  - ms/aio: Multiply passed nr_events in io_setup() (Kirill Tkhai) [PSBM-47075 PSBM-47209]
  - ve/fs: Export fs.aio-max-nr via ve cgroup (Cyrill Gorcunov) [PSBM-45646]
  - ve/fs/aio: aio_nr & aio_max_nr variables virtualization (Stanislav Kinsburskiy) [PSBM-29017 PSBM-47209 PSBM-47209]
  - overlayfs: unmark overlayfs as tech preview (Konstantin Khorenko) [PSBM-52379]
  - ve/fs/overlay: allow overlayfs to be used inside a Container (Pavel Tikhomirov) [PSBM-47280 PSBM-86153]
  - ve/fs/writeback: filter per-container inodes earlier (Andrey Ryabinin) [PSBM-39583]
  - fs: ioctl_fiemap must check what filemap_write_and_wait_range returns (Maxim Patlasov) [PSBM-68454]
  - fs: FIEMAP should sync only required range with FIEMAP_FLAG_SYNC (Maxim Patlasov) [PSBM-68226]
  - ms/fs: Fix race when checking i_size on direct i/o read (Steven Whitehouse)
  - ms/fs/file.c:fdtable: avoid triggering OOMs from alloc_fdmem (Eric W. Biederman)
  - vfs: panic in guard_bio_eod() if truncated_bytes > bvec->bv_len (Pavel Tikhomirov) [PSBM-55105]
  - fs/block_dev: fix NULL ptr deref in freeze_bdev() (Andrey Ryabinin) [PSBM-50858]
  - ms/fs/super.c: fix WARN on alloc_super() fail path (Pavel Tikhomirov) [PSBM-43294]
  - ve: remove sync_mutex (Andrey Ryabinin)
  - fs: fix accounting pipe buffers to kmemcg (Vladimir Davydov)
  - ve: remove sysctl_fsync_enable and use ve_fsync_behavior instead (Pavel Tikhomirov) [PSBM-34286 PSBM-34285]
  - ve/fs: namespace -- Don't fail on permissions if @ve->devmnt_list is empty (Cyrill Gorcunov) [PSBM-48188 PSBM-58329]
  - ve/fs: namespace -- Ignore device permissions during restore (Cyrill Gorcunov) [PSBM-48188]
  - ve/fs: add per-VE limit of mount points (Stanislav Kinsburskiy) [PSBM-34438 PSBM-42825 PSBM-42825 PSBM-69880 PSBM-69880 PSBM-69880 OVZ-7039]
  - ms/fsnotify: Make fdinfo to always success (Cyrill Gorcunov) [PSBM-40337]
  - ve/fs: Allow to mount ext4 and binfmt_misc under non-root ns (Kirill Tkhai) [PSBM-40100]
  - ve/fs/inotify: do not impose limit on the number of instances by default (Vladimir Davydov) [PSBM-39048]
  - ve/fs: Port diff-ve-fs-security-check-for-mount (Vladimir Davydov) [PSBM-33650]
  - mm/fs: Port diff-mm-debug-memallocation-caused-fs-reentrance (Vladimir Davydov) [PSBM-34112]
  - ve/fs/ioprio: confine ioprio_{set, get}(IOPRIO_WHO_USER) to current ve (Vladimir Davydov)
  - fs: add fadvise file_operation (Kirill Tkhai) [PSBM-54928 PSBM-54928]
  - tmpfs: shmem_fallocate must return ERESTARTSYS (Maxim Patlasov) [PSBM-43399]
  - fs/shmem: skip "relatime" in shmem_parse_options() (Kirill Tkhai)
  - vfs/nfs: add set_flags wrapper (Kirill Tkhai)
  - rh/fs: unwind changes on shift_arg_pages error path (Kirill Tkhai)
  - rh/fs: introduce "fs.relatime_interval" sysctl (Kirill Tkhai)
  - ve/fs: introduce "fs.fsync-enable" and "fs.odirect_enable" sysctls (Konstantin Khorenko) [PSBM-17903 PSBM-17157 PSBM-34286 PSBM-34285 PSBM-34286]
  - ve/binfmt_misc: destroy all nodes on ve stop (Vladimir Davydov) [PSBM-39154]
  - ve/fs/binfmt: virtualization (Stanislav Kinsburskiy) [PSBM-39154 PSBM-39154 PSBM-17903 PSBM-40100 PSBM-47737 PSBM-85685 PSBM-85052]
  - ve/fs/binfmt: move all internal data to structure (Stanislav Kinsbursky)
  - ve/devpts: Assign containers @devpts_sb on first mount (Cyrill Gorcunov) [PSBM-34931]
  - ve/fs/devpts: don't require newinstance (Konstantin Khlebnikov)
  - ve/fs: virtualize devtmpfs file system (Stanislav Kinsburskiy) [PSBM-35077 PSBM-35146 PSBM-39077]
  - nfsd: return file system superblock time granulaty on FSINFO request (Stanislav Kinsburskiy) [PSBM-66572]
  - ve/nfsd: do not print nfscld warning in a container (Stanislav Kinsburskiy) [PSBM-43468]
  - ve/nfsd: disable legacy recovery tracking for containers (Stanislav Kinsburskiy) [PSBM-43468]
  - ve/nfsd: enable UMH client tracker in a container (Stanislav Kinsbursky)
  - ve/sunrpc: containerize kthreads (Stanislav Kinsbursky)
  - ve/fs/nfsd: NFSd containerization (Stanislav Kinsburskiy)
  - ms/NFS/CIFS/SUNRPC: don't allow to freeze execution (Stanislav Kinsburskiy) [PSBM-50671 PSBM-54822]
  - ms/NFS: Don't call COMMIT in ->releasepage() (Trond Myklebust) [PSBM-77949]
  - nfs: abort delegation in dying VE (Stanislav Kinsburskiy) [PSBM-77061]
  - ve/fs/nfs: NFS containerization (Stanislav Kinsburskiy)
  - ve/fs: mark virtual filesystems as virtualized (Konstantin Khlebnikov)
  - VE/FS: containerize filesystems access (Konstantin Khorenko)
  - ms/autofs: show pipe inode in mount options (Stanislav Kinsburskiy) [PSBM-41217 PSBM-41961]
  - ve/fs/autofs: mark autofs as virtualized (Stanislav Kinsburskiy) [PSBM-26968 PSBM-86138]
  - ms/fs: Add a missing permission check to do_umount (Pavel Tikhomirov) [PSBM-43294]
  - ve/fs/locks: Make CAP_LEASE work in containers (Evgenii Shatokhin) [PSBM-46199]
  - ve/fanotify: Use ve-capable instead of plain capable test (Cyrill Gorcunov) [PSBM-41409]
  - ve/fs: allow to remount from ve user ns (Pavel Tikhomirov)
  - ve/fs/namei: fix capabilities check in sys_renameat2 () to support Containers (Stanislav Kinsburskiy)
  - ve/fs/namei: check containers capabilities in may_linkat() (Stanislav Kinsburskiy) [PSBM-40567]
  - ve/fs/cred: add ve_capable to check capabilities relative to the current VE (v2) (Andrew Vagin) [PSBM-39077]
  - VE/FS: allow to mknod inside ct (Vladimir Davydov)
  - ve/fs: Port diff-ve-fs-allow-to-remove-swapfile-hardlinks (Vladimir Davydov) [PSBM-25310 PSBM-33650]
  - fs: exec_mmap() arg corrected (Konstantin Khorenko)
  - fs: Mask appropriate filesystems FS_VIRTUALIZED (Kirill Tkhai)
  - fs: Restrict ve sync methods (Kirill Tkhai)
  - fs: Split statfs_by_dentry() (Kirill Tkhai)
  - fs: Show saved signal mask in /proc/[pid]/status (Kirill Tkhai)
  - fs: Lower ioprio in case of ioprio_set() called from CT (Kirill Tkhai)
  - ms/epoll: Make fdinfo to always success (Cyrill Gorcunov) [PSBM-41386]
  - ms/epoll: fix use-after-free in eventpoll_release_file (Konstantin Khlebnikov)
  - OpenVZ 7 config file (Stanislav Kinsburskiy)
  - sched: Count loadavg under rq::lock in calc_load_nohz_start() (Kirill Tkhai) [PSBM-68052]
  - ms/sched/numa: Fix use-after-free bug in the task_numa_compare (Gavin Guo) [PSBM-62208]
  - ve/sched: sched_show_task: call task_ve_name() under RCU lock (Andrey Ryabinin) [PSBM-60139]
  - ms/sched: Fix race on toggling cfs_bandwidth_used (Ben Segall) [PSBM-51056]
  - ve/sched: make load balancing more agressive (Vladimir Davydov)
  - sched: debug: show nr_failed_migrations_cpulimit (Vladimir Davydov)
  - sched: add WARN_ON's to debug task boosting (Vladimir Davydov) [PSBM-44475 PSBM-50077]
  - ms/sched/fair: Initialize throttle_count for new task-groups lazily (Konstantin Khlebnikov) [PSBM-50099]
  - sched: use topmost limited ancestor for cpulimit balancing (Vladimir Davydov) [PSBM-49203]
  - ve/fairsched: Resurrect proc fairsched files (Vladimir Davydov) [PSBM-48824]
  - ms/sched/core: Fix unserialized r-m-w scribbling stuff (Kirill Tkhai)
  - ve/sched: introduce cond_resched_may_throttle (Kirill Tkhai) [PSBM-18888 PSBM-42358]
  - sched: disable dumping cfs info on sysrq trigger (Vladimir Davydov) [PSBM-41140]
  - ve/sched: Hide steal time from inside CT (Kirill Tkhai) [PSBM-26588 PSBM-23431]
  - ms/sched/fair: Track cgroup depth (Kirill Tkhai)
  - sched/fair: only update current task boost (Vladimir Davydov)
  - ms/sched: Fix schedule_tail() to disable preemption (Kirill Tkhai)
  - sched: Port diff-sched-make-nr_cpus-limit-support-hierarchies (Stanislav Kinsburskiy) [PSBM-33642 PSBM-35082 PSBM-35251]
  - sched: Port cpustat related patches (Vladimir Davydov) [PSBM-26714 PSBM-28403 PSBM-28500 PSBM-26587 PSBM-23431 PSBM-28277 PSBM-33642 PSBM-48721 PSBM-69678 PSBM-69678 PSBM-69678 PSBM-69678 PSBM-79891]
  - sched: Port diff-sched-return-only-virtual-cpus-in-sched_getaffinity (Vladimir Davydov) [PSBM-25367 PSBM-27200 PSBM-33642]
  - sched: Port diff-sched-clear-prev-entity-if-curr-is-dequeued (Vladimir Davydov) [PSBM-33642]
  - ms/sched: Port diff-sched-increase-SCHED_LOAD_SCALE-resolution (Vladimir Davydov) [PSBM-33642]
  - sched: Port diff-sched-initialize-runtime-to-non-zero-on-cfs-bw-set (Vladimir Davydov) [PSBM-17658 PSBM-17658 PSBM-33642]
  - ve/sched: port boosting hacks against prio inversion (Stanislav Kinsburskiy) [PSBM-15441 PSBM-56984 PSBM-62208]
  - ve/sched: port vcpu hotslice (Stanislav Kinsburskiy) [PSBM-16913 PSBM-16913 PSBM-17399]
  - ve/sched: port nr cpus limit (Stanislav Kinsburskiy) [PSBM-16856 PSBM-69678 PSBM-69678]
  - sched/stat: account forks per task group (Vladimir Davydov) [PSBM-18113 PSBM-18113]
  - sched/stat: account ctxsw per task group (Vladimir Davydov) [PSBM-18113 PSBM-18113]
  - sched/stat: initial patch (Konstantin Khorenko) [PSBM-18113 PSBM-54928]
  - sched: other changes (Konstantin Khorenko)
  - sched: prohibit setting affinity from inside a CT (Konstantin Khorenko)
  - sched: put setting scheduller under CAP_SYS_ADMIN (instead of SYS_NICE) (Konstantin Khorenko)
  - sched: Add cpulimit base interfaces (Kirill Tkhai) [PSBM-69678 PSBM-69678]
  - sched: Export per task_group statistics_work (Kirill Tkhai) [PSBM-74490 PSBM-33642]
  - sched: Account ve_task_info::sleep_time (Kirill Tkhai)
  - sched: Change show_state() view (Kirill Tkhai)
  - sched: Account task_group::start_time (Kirill Tkhai)
  - sched: Add primitives to calculate nr running, sleeping, stopped and uninterruptible tasks (Kirill Tkhai)
  - sched: Account cfs_rq::nr_iowait (Kirill Tkhai)
  - sched: Count rq::nr_sleeping and cfs_rq::nr_unint (Kirill Tkhai)
  - kernel: Account nr_zombie and nr_dead (Kirill Tkhai)
  - delayacct: Add stats primitives (Kirill Tkhai)
  - ms/sched/numa: fix unsafe get_task_struct() in task_numa_assign() (Kirill Tkhai)
  - ms/sched: Fix race between task_group and sched_task_group (Kirill Tkhai)
  - ms/coredump: fix unfreezable coredumping task (Andrey Ryabinin) [PSBM-52793]
  - ve/coredump: virtualize kernel.core_pattern sysctl (Pavel Tikhomirov) [PSBM-43596]
  - ve/sysctl/net: allow net.ipv4.vs.* in CT init userns (Pavel Tikhomirov) [PSBM-63883 PSBM-63883]
  - ve/sysctl/net: allow "net.unix.max_dgram_qlen" sysctl in CT init userns (Pavel Tikhomirov) [PSBM-54530]
  - ve/sysctl: allow to write kernel/hostname and kernel/domainname entries in container (Stanislav Kinsburskiy) [PSBM-20102 PSBM-20102]
  - ve/sysctl/pidns: allow to change sysctl "ns_last_pid" from containers (Andrew Vagin)
  - sysctl: make may_detach_mounts immutable in CT (Pavel Tikhomirov) [PSBM-74521]
  - ve/sysctl/ipc: mark as virtualized (Konstantin Khorenko)
  - ve/sysctl: implement virtualized methods (Stanislav Kinsburskiy) [PSBM-18032 PSBM-18030 PSBM-29017 PSBM-43596]
  - ve/sysctl: write permission restriction (Konstantin Khlebnikov) [PSBM-18022 PSBM-56704 PSBM-18032 PSBM-18030]
  - sysctl: make "tcp_syncookies" sysctl available inside a CT (Konstantin Khorenko)
  - sysctl: make hotplug, printk and mmap_min_addr accessible inside a CT (Konstantin Khorenko)
  - sysctl: Change sysctl::show_unhandled_signals default (Kirill Tkhai)
  - ve/module: hide module refcounts from container (Andrey Ryabinin) [PSBM-57497]
  - ve/proc/net/nr_cpus: cut lines in /proc/net/softnet_stat to number of vcpus in CT (Pavel Tikhomirov) [PSBM-73238]
  - ve/proc/net: virtualize all the network proc entries (Stanislav Kinsburskiy) [PSBM-58574]
  - ve/proc/net: proc_net_create() helper introduced (Stanislav Kinsburskiy) [PSBM-58574]
  - ve/proc: fix mangling cgroup mount source path in container (Stanislav Kinsburskiy) [PSBM-34295 PSBM-52369]
  - ve/proc/time: Port diff-ve-proc-report-real_start_time-in-_proc_PID_stat-if-CONFIG_VE (Vladimir Davydov) [PSBM-22925 PSBM-22925 PSBM-33650]
  - ve/fs: drop useless d_root_check() (Konstantin Khorenko) [PSBM-41919]
  - ve/proc: use memcg limits for showing oom_score inside CT (Vladimir Davydov) [PSBM-33849]
  - ve/proc/block: Show CT allowed partitions in /proc/partitions (Stanislav Kinsburskiy) [PSBM-18889 PSBM-34805]
  - blkcg: Hide not allowed device from /proc/devices (Kirill Tkhai)
  - ve/proc: restricted proc-entries scope (Stanislav Kinsburskiy) [PSBM-18019 PSBM-18021 PSBM-40359 PSBM-58574 PSBM-55920 OVZ-6834]
  - fs/proc: print fairshed stat (Konstantin Khorenko)
  - fs/proc: enhance proc_fd_access_allowed() and provide appropriate error code to callers (Konstantin Khorenko)
  - proc: Show vcpu in do_task_stat() (Kirill Tkhai)
  - quota: missing lock in dqcache_shrink_scan() (Niu Yawei)
  - ve/quota: allow to manage quota in top CT user ns (Konstantin Khorenko) [PSBM-40281]
  - fs/quota: Compatibility with older quotactl interface (Stanislav Kinsburskiy) [PSBM-51366]
  - printk: Add touch_all_softlockup_watchdogs() to console_unlock() (Kirill Tkhai) [PSBM-49893]
  - ve/printk: per-CT printk helpers introduced (Stanislav Kinsburskiy) [PSBM-39077 PSBM-54183 PSBM-42313]
  - ve/printk: printk virtualization (Konstantin Khorenko) [PSBM-17899 PSBM-17980 PSBM-20669 PSBM-17899 PSBM-54820]
  - net/sched: restore "mpu xxx" handling (Kirill Tkhai) [PSBM-34874]
  - cpuset/cpus: don't propagate changes to empty descendant cgroups (Konstantin Khorenko) [PSBM-85052]
  - cpuset: initial patch (Konstantin Khorenko)
  - ve/net: introduce vz_security_*_check checks (Stanislav Kinsburskiy)
  - ve/kobj: Send events per VE instead of all net-namespaces broadcasting (Stanislav Kinsburskiy)
  - ve/uevent: Use own uevent_seqnum for every VE (Konstantin Khorenko) [PSBM-17903]
  - vzevent: initial patch (Konstantin Khorenko)
  - ve/veth: don't drop skb->mark if NETIF_F_VENET is set (Andrew Vagin) [PSBM-32277]
  - vzeth: initial patch (Stanislav Kinsburskiy) [PSBM-20668 PSBM-18176]
  - ve/net: introduce TAP accounting (Stanislav Kinsburskiy) [PSBM-27713 PSBM-40629]
  - ve/net/vxlan: enable support in a container (Pavel Tikhomirov) [PSBM-53629]
  - ve/net: ipip: enable in container (Stanislav Kinsburskiy) [PSBM-48608]
  - ve/net: ip_vti: skip per net init in ve (Vladimir Davydov) [PSBM-48698]
  - ve/net/ip_gre: containerize per-net devices (Kirill Tkhai) [PSBM-24331]
  - ve/net/dummy: enable support in a container (Vasily Averin) [PSBM-43329]
  - ve/net/ppp: introduce VE_FEATURE_PPP feature (Stanislav Kinsburskiy) [PSBM-29975]
  - ve/net: Fix vlan NETIF_F_VIRTUAL feature initialization (Kirill Tkhai) [PSBM-35266]
  - ve/tun: expose "owner", "group" and "tun_flags" attributes in container (Stanislav Kinsburskiy) [PSBM-39726]
  - ve/bridge: br_dev_init: check if "bridge" feature is enabled (Evgenii Shatokhin) [PSBM-50009]
  - ve/net: restrict ethtool to CT root userns and prohibit EEPROM change (Konstantin Khorenko) [PSBM-36290 PSBM-52504]
  - ve/net/cred: add ve_capable to check capabilities relative to the current VE (v2) (Konstantin Khorenko) [PSBM-39077]
  - ve/net: restrict number of net devices for CT (Pavel Tikhomirov) [PSBM-51354]
  - ve/net/packet: show tx-ring warning only for host (Pavel Tikhomirov) [PSBM-56711]
  - VE/NET: don't oops in net_generic() on disabled features (Konstantin Khlebnikov)
  - ve/net: sit: fix crash on newlink if VE_FEATURE_SIT is disabled (Vladimir Davydov)
  - ve/net: Exclude foreign CT sockets from /proc/net/tcp{,6} (Kirill Tkhai) [PSBM-34875]
  - ve/net: Add VE_NF_CONNTRACK check in resolve_normal_ct() (Kirill Tkhai) [PSBM-35154]
  - ve/net: Add ipt_mask checks into ip6table_nat (Kirill Tkhai) [PSBM-34748]
  - ve/net: allow to rename devices in non-ve namespaces (Kirill Tkhai) [PSBM-29810 PSBM-33645]
  - ve/net/sysfs: Porting diff-ve-net-sysfs-drop-redundant-net_ipv4_route_path and diff-ve-net-route-bring-back-route_src_check (Kirill Tkhai) [PSBM-31818]
  - fs/nfs: don't use delayed unmount for nfs. (Andrey Ryabinin) [PSBM-76086]
  - ve/net,netfilter: Adjust REDIRECT target on venet device (Cyrill Gorcunov) [PSBM-59983]
  - venet: ipX_forward headroom check (Vasily Averin) [PSBM-68362 PSBM-68362]
  - veip: Add commentary about veip_shutdown_hook (Kirill Tkhai) [PSBM-77750]
  - venet: delay skb_orphan() for venet CT->host path optimization (Konstantin Khorenko) [PSBM-79456]
  - drivers/net/ve: venet network device introduced (Konstantin Khorenko) [PSBM-69078]
  - ve: export ve_subsys symbol (Stanislav Kinsburskiy)
  - veip: initial patch (Konstantin Khorenko)
  - net/teql: disable "True" (or "trivial") link equalizer inside a CT (Konstantin Khorenko)
  - net: fix cbq quantum calculation (Konstantin Khorenko)
  - net/ipv6: fix MIP6 compilation (Konstantin Khorenko)
  - net/udp: honor SK_FORCE_REUSE (Konstantin Khorenko)
  - net: shift rcv_nxt appropriately in case we received only part of data (Konstantin Khorenko) [PSBM-87699]
  - net: force tcp maximum segment size (MSS) to 64K (Konstantin Khorenko)
  - net: don't push data in a socket in repair state (Konstantin Khorenko)
  - net/compilation: sysctl_tcp_adv_win_scale (Konstantin Khorenko)
  - net: honor TW_WSCALE_MASK/TW_WSCALE_SPEC (Konstantin Khorenko)
  - net: introduce ip_rt_src_check (Konstantin Khorenko)
  - net: move dev_name_hash/dev_index_hash to netdevice.h (Konstantin Khorenko)
  - tun: Create tun_flags file on for init_net only (Kirill Tkhai)
  - net: Track leaked netdev (Kirill Tkhai)
  - net: Make neigh_alloc() return ENOMEM in kmalloc() failed (Kirill Tkhai)
  - net: Add NETIF_F_VIRTUAL feature to mask devices allowed in CT (Kirill Tkhai)
  - net: Add NETIF_F_VENET netdev feature and optimized skb forwarding (Kirill Tkhai)
  - net: Add sysctl_tcp_use_sg to disable NETIF_F_SG sk route capability (Kirill Tkhai)
  - net: Make ipip feature optional (Kirill Tkhai)
  - net: Make sit feature optional (Kirill Tkhai)
  - netns: export net_assign_generic() (Konstantin Khorenko)
  - net: Show all connections in init namespace (Tony Zelenoff)
  - ms/netlabel: fix the netlbl_catmap_setlong() dummy function (Paul Moore)
  - ms/net/RDS: verify the underlying transport exists before creating a connection (Vasily Averin)
  - ve/cgroups: Introduce subgroups_limit control (Andrey Ryabinin) [PSBM-33401 PSBM-69678]
  - ve/cgroup: Allow to write to several safe cgroup files from CT (Pavel Tikhomirov) [PSBM-44981]
  - ve/cgroup: do not virtualize output of cgroup_path (Vladimir Davydov) [PSBM-34852]
  - ve/cgroup: Mangle cgroups root from inside of VE view (Cyrill Gorcunov) [PSBM-33757 PSBM-38634]
  - cgroup: Mark cgroup CGRP_VE_ROOT (Kirill Tkhai)
  - ve/cgroups: fake num_cgroups in /proc/cgroups output (Vasily Averin) [PSBM-33400]
  - VE: convert khelper_wq to kthread_worker (Konstantin Khlebnikov) [PSBM-28910]
  - ve/security: device_cgroup -- Allow manage devices in @pseudosuper state (Cyrill Gorcunov) [PSBM-48421]
  - ve/cgroup: Add pseudosuper state for restore sake (Cyrill Gorcunov) [PSBM-33664 PSBM-34291 PSBM-34299 PSBM-43169 PSBM-42573 PSBM-44981]
  - ve/kernel: allow to increase rlimit from inside container (Vladimir Davydov) [PSBM-43410]
  - ve/acct: Allow process accounting in containers (Evgenii Shatokhin) [PSBM-40587]
  - ve: introduce ve_init_user_ns() helper (Andrey Ryabinin) [PSBM-41075]
  - vecalls: fix VZCTL_GET_CPU_STAT uptime_jif scale (Vladimir Davydov) [PSBM-28811]
  - ve: Implement current_user_ns_initial() helper (Konstantin Khorenko) [PSBM-58574]
  - ve/itimer: add ve_name to warning for a NULL new_value (Dmitry Safonov) [PSBM-49818]
  - ve/cred: add ve_capable to check capabilities relative to the current VE (v2) (Konstantin Khorenko) [PSBM-39077]
  - ve: Add support of iptables mask (Konstantin Khorenko) [PSBM-32737 PSBM-34286 PSBM-34285]
  - ve: Add support of features mask (Cyrill Gorcunov) [PSBM-32737]
  - ve/lockdep: Port diff-lockdep-taint-kernel-on-circular-locking-complains (Vladimir Davydov) [PSBM-22010 PSBM-33650]
  - ve/taskstats: allow delivery of task attributes in CT context (Stanislav Kinsburskiy) [PSBM-56171]
  - ve: Port diff-ve-allow-taskstats-netlink-in-netns (Vladimir Davydov) [PSBM-33650]
  - ve/uts_ns: Implement cgroup interface to configure ve's os_release (Kirill Tkhai) [PSBM-32273]
  - uts: Add virt_utsname and /proc/sys/kernel/virt_osrelease entry (Kirill Tkhai)
  - ve/devmnt: Add a ability to show ve.mount_opts (Kirill Tkhai) [PSBM-34291 PSBM-34291]
  - ve/fs/devmnt: process mount options (Kirill Tkhai) [PSBM-32273 PSBM-40075]
  - ve/devmnt: Introduce ve::devmnt list (Kirill Tkhai) [PSBM-32273]
  - ptrace: prevent tracing "init" from inside a CT (Konstantin Khorenko)
  - ve/mm/trace: introduce vps_dumpable flag (Konstantin Khorenko) [PSBM-20666]
  - ve/mm: print OOM info to VE log (Vladimir Davydov)
  - ve: initial patch (Konstantin Khorenko) [PSBM-21953 PSBM-22882 PSBM-24622 PSBM-24622 PSBM-28031 PSBM-33480 PSBM-33555 PSBM-33561 PSBM-33833 PSBM-34030 PSBM-32284 PSBM-34450 PSBM-34497 PSBM-34286 PSBM-34285 PSBM-34422 PSBM-34286 PSBM-34285 PSBM-40280 PSBM-71414 PSBM-78078]
  - ve/userns: associate user_struct with the user_namespace (Andrey Ryabinin) [PSBM-60181]
  - ve: allow user ns in chroot (Konstantin Khlebnikov)
  - ve: Virtualize sysinfo (Kirill Tkhai)
  - ve: Replace 0 ppid with 1 (workaround for bad utils) (Kirill Tkhai)
  - ve: Customize VE uptime (Kirill Tkhai)
  - ve: Use ve_relative_clock in times() syscall and /proc/[pid]/stat (Kirill Tkhai)
  - ve: Prohibit module load and usermode_helper from inside CT (Kirill Tkhai)
  - ve: Add virtinfo subsys (Kirill Tkhai) [PSBM-20104]
  - ve: Virtualize devpts superblock (Kirill Tkhai)
  - ve: Virtualize /proc/cmdline (Kirill Tkhai)
  - ve: Virtualize /proc/swaps to watch from inside CT (Kirill Tkhai)
  - ve: Implement per ve randomize_va_space (Kirill Tkhai)
  - ve: Use ve_printk() for often kernel messages about user actions (Kirill Tkhai)
  - ve/ppc: wire OpenVZ-specific syscalls (Kir Kolyshkin)
  - ve: Add ve syscalls numbers (Kirill Tkhai)
  - ve: Prohibit containers add random entropy (Kirill Tkhai)
  - ve/sysinfo: don't clean uptime, procs and loads in containers (Pavel Tikhomirov) [PSBM-62094]
  - ve: Add VZVERSION suffix to kernel release (Kirill Tkhai)
  - ms/cgroup: switch to new percpu_ref API (Vladimir Davydov)
  - ms/cgroup: use percpu refcnt for cgroup_subsys_states (Vladimir Davydov) [PSBM-34174]
  - ms/cgroup: split cgroup destruction into two steps (Vladimir Davydov) [PSBM-34174]
  - ms/cgroup: reorder the operations in cgroup_destroy_locked() (Vladimir Davydov) [PSBM-34174]
  - cgroup: initial patch (Konstantin Khorenko) [PSBM-17927 PSBM-17927 PSBM-16529 PSBM-34035 PSBM-34035]
  - Revert: rh/kmod: use system_unbound_wq instead of khelper (Konstantin Khorenko) [PSBM-61660]
  - vzdev: initial patch (Konstantin Khorenko)
  - vzwdog: initial patch (Konstantin Khorenko) [PSBM-89580]
  - ve/device_cgroup: kill ACC_QUOTA permission (Konstantin Khorenko) [PSBM-48482]
  - ve/device_cgroup: allow to change device mount permission via cgroup (Andrey Ryabinin) [PSBM-48431]
  - ve/device_cgroup: fake allowing all devices for docker inside VZCT (Pavel Tikhomirov) [PSBM-34529 PSBM-38691]
  - capabilities: correct descriptions (Konstantin Khorenko)
  - ve/devcgroup/cred: add ve_capable to check capabilities relative to the current VE (v2) (Konstantin Khorenko) [PSBM-39077]
  - devcgroup: initial patch (Konstantin Khorenko) [PSBM-21979 PSBM-33555]
  - headers: inclusion (Konstantin Khorenko)
  - Initial patch commit + compilation fixes: commit messages history (Konstantin Khorenko) [PSBM-33584 PSBM-17651 PSBM-17886 PSBM-17909 PSBM-17918 PSBM-17915 PSBM-17917 PSBM-17914 PSBM-17902 PSBM-17924 PSBM-17926 PSBM-17924 PSBM-17918 PSBM-17930 PSBM-17931 PSBM-17945 PSBM-17960 PSBM-17971 PSBM-18875 PSBM-18876 PSBM-18877 PSBM-17908 PSBM-18878 PSBM-18879 PSBM-18056 PSBM-18882 PSBM-18884 PSBM-18899 PSBM-31125 PSBM-12955 PSBM-20089 PSBM-20089 PSBM-12523 PSBM-41530 OVZ-6600 OVZ-5192 PSBM-32912 PSBM-54816 PSBM-54819 PSBM-54928 PSBM-54928 PSBM-18113 PSBM-33760 PSBM-33755 PSBM-33926 PSBM-39077 PSBM-18531 PSBM-34089 PSBM-42087 PSBM-18113 PSBM-20541 PSBM-33642 PSBM-33841 PSBM-47061 PSBM-17904 PSBM-33650 PSBM-39077 PSBM-18885 PSBM-18885 PSBM-34494 PSBM-20810 PSBM-51255 OVZ-6409 PSBM-39167 PSBM-20100 PSBM-20100 PSBM-33239 PSBM-34777 PSBM-41804 PSBM-52390 PSBM-54408 PSBM-20663 PSBM-22149 PSBM-27695 PSBM-33849 PSBM-33849 PSBM-33849 PSBM-34066 PSBM-34007 PSBM-32284 PSBM-42313 PSBM-55365 PSBM-71414]
  - Kconfig: Kconfig.openvz includes in arch (Konstantin Khorenko)
  - Kconfig: introduce kernel/Kconfig.openvz (Konstantin Khorenko)
  - x86/SYSCALL: remove sys32 vm86 warning (Dmitry Guryanov)
  - ms/kcmp: fix standard comparison bug (Rasmus Villemoes)
  - ms/module: remove rmmod --wait option. (Rusty Russell) [PSBM-27580 PSBM-27580]
  - ms/idr: print a stack dump after ida_remove warning (Vasily Averin)
  - MS/KBD: add file kbd_bind in sysfs, which allow unbind keyboard from tty (v2) (Andrey Vagin)
  - MS/DEVICE: input_mutex isn't static now (Andrey Vagin)
  - MS/NET/IPV6: remove duplicate neigh_ifdown (Vladimir Davydov) [PSBM-13449]
  - MS/MM/SLAB: show slab_info core (Dmitry Guryanov)
  - MS/IDLE: add boot param to forcibly enable intel auto demotion (Vladimir Davydov) [PSBM-11477]
  - ms/tty: Fix potential use after free in release_one_tty (Cyrill Gorcunov)
  - ms/tty/ppc: define TIOSAK (fix tty_ioctl() compilation) (Kir Kolyshkin)
  - MS/TTY: TIOSAK Secure Attention Key ioctl (Konstantin Khlebnikov) [PSBM-11881]
  - KBUILD: build should fail on modpost errors for external modules (Konstantin Khlebnikov)


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-1062.4.2.vz7.116.2]
changelog:
  - kernel/module.c: wakeup processes in module_wq on module unload (Konstantin Khorenko) [PSBM-99356]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-1062.4.2.vz7.116.3]
changelog:
  - Revert "ploop/nfs: introduce "verf" ploop_request field" (Konstantin Khorenko) [PSBM-99436 PSBM-96333]
  - Revert "ploop/nfs: add NFS backend support" (Konstantin Khorenko) [PSBM-99436 PSBM-96333]
  - Revert "ploop/nfs: ploop: Make submit_alloc() return int value" (Konstantin Khorenko) [PSBM-99436 PSBM-96333]
  - Revert "ploop/nfs: use ploop_submit_alloc() helper" (Konstantin Khorenko) [PSBM-99436 PSBM-96333]
  - Revert "ploop/nfs: kill unused sync vec functions" (Konstantin Khorenko) [PSBM-99436 PSBM-96333]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-1062.4.2.vz7.116.4]
changelog:
  - fs/splice: fix NULL-ptr deref in __generic_splice_read() (Andrey Ryabinin) [PSBM-99561]
  - ms/epoll: fix race between ep_poll_callback(POLLFREE) and ep_free()/ep_remove() (Oleg Nesterov) [PSBM-99557]
  - mm/ksm: Don't WARN if page is still mapped in remove_stable_node() (Andrey Ryabinin) [PSBM-99301]
  - ve/kmod: make all nf_* and nft_* autoloadable upon request from a CT (Konstantin Khorenko) [PSBM-99536]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-1062.4.2.vz7.116.5]
changelog:
  - ms/netfilter: nft_compat: use-after-free when deleting targets (Pablo Neira Ayuso) [PSBM-99656]
  - ms/netfilter: nf_tables: fix use-after-free when deleting compat expressions (Florian Westphal) [PSBM-99656]
  - ms/netfilter: nft_compat: fix crash when related match/target module is removed (Liping Zhang) [PSBM-99656]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-1062.4.2.vz7.116.6]
changelog:
  - ms/netfilter: x_tables: set module owner for icmp(6) matches (Florian Westphal) [PSBM-99593]
  - net: export "net.netfilter.nf_conntrack_helper" sysctl for Container (Konstantin Khorenko) [PSBM-99791]


author: Petr Sabata <contyk@redhat.com> - 1.5-1
changelog:
  - 1.5 bump
  - BuildRoot and defattr cleanup
  - Use macros in Sources
  - Drop show-ports and foreach patches -- those have been included upstream


author: Petr Sabata <contyk@redhat.com> - 1.5-2
changelog:
  - Add three latest bugfixes from upstream git on top of 1.5
  - Dropping params patch (included upstream variant)


author: Konstantin Volkov <wolf@virtuozzo.com> 7.0.12
changelog:
  - Use special umount.fuse.bused script to kill instances if bused dead, see
  \#PSBM-49956
   - Add umount.fuse.bused to the package, see #PSBM-49956


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5
changelog:
  - Apply a patch by Stephen Gallagher to patch autoconf, not configure to
    allow optflags to be passed in by build environment
  - Run autoreconf before configure
  - git rm obsolete patches
  - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1
changelog:
  - New upstream release 1.10
  - Obsolete upstreamed patches
  - Amend the multilib patch, there's no need to patch configure since we
    are running autoreconf anyways
  - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES


author: Peter Jones <pjones@redhat.com> - 10.2-8
changelog:
  - Incorporate changes from Matthias Saou:
  - Include install patch, to avoid all of the ugly manual installation.
  - Cosmetic fixes (libs group, scriplets, don't mix %name with hardcode...).


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 10.2-15
changelog:
  - Patched configure to use config.{guess,sub} files so 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-virtuozzo-linux-gnu --host=x86_64-virtuozzo-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info macro can
    replace them with proper version. With this change it builds fine for AArch64
    architecture.
    Resolves: rhbz#1023783


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-18
changelog:
  - ported from cdda-paranoia to libcdio-paranoia, modified paranoia-cdda.patch
  - fixed bogus date in changelog


author: Jakub Martisko <jamartis@redhat.com> - 1.1.11-25
changelog:
  - add support for device names of the form /dev/srN
  - fix provided by Frantisek Kluknavsky
  - resolves:rhbz#1058446


author: Boris Ranto <branto@redhat.com> - 1:10.2.5-1
changelog:
  - New version (1:10.2.5-1)
  - Makefile: Fix dencoder build
  - Add fake fcgiapp.h for rgw
  - common: Build more files of libcommon in client
  - libradosstripper: Build libradostripper for rados as noinst


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-2
changelog:
  - Resolves: #1345755 Support for specifying IPA lightweight CA
    - Add 'issuer' request option for specifying issuer
    - Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
    - Comment/whitespace fixup
    - ipa-submit: Retry without "ca" on OptionError
    - getcert: fix a potential out-of-bounds
    - Document the -X option in the ipa-submit man page
  - Resolves: #1351052 certmonger build for RHEL 7.3 failure
    - Stop assuming RSA 512 works
    - Stop assuming RSA 512 works, part two
    - Fix a flakiness in the 028-dbus test


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-3
changelog:
  - Resolves: #1367683 getcert request command fails to use Sub CA using -X
    argument
    - Fix CA option name for ipa cert-request


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-4
changelog:
  - Use required DER encoding when setting CA basic constraint (#1551635)
  - NSS 3.34 more strictly enforces length checking when verifying signatures
    (#1551702)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-5
changelog:
  - Add Requires on psmsic for killall in post script (#1458890)
  - upstream project migrated from fedorahosted.org to pagure.io (#1501723)
  - Strip CR/LF from passwords read from a file (#1545935)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-8
changelog:
  - Disable iterate-10 test which fails intermitently (#1596161)
  - Add BuildRequires for running autoreconf


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-9
changelog:
  - Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
    variables to helpers. The root cause was a bug in IPA (#1596161)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix typos in test/dispol
  - Set flex as default lexer
  - Fix checkmodule output message
  - Build policy on systems not supporting DCCP protocol
  - Fail if module name different than output base filename


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-6
changelog:
  - Add ibendport ocontext handling
  - Add support for ibendportcon labels
  - Add ibpkey ocontext handling
  - Add support for ibpkeycon labels
  - Add binary module support for xperms


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.4-1
changelog:
  - ntsysv: show systemd services and sockets
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files
  - alternatives: remove unused variable
  - alternatives: warn if the target is not a symlink
  - spec: add link to git
  - lets simplify version


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.5-1
changelog:
  - add systemd-sysv-install alias
  - don't create symlinks if they already exist
  - fix wrongly behaving LDFLAGS


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.6-1
changelog:
  - systemd-sysv-install: don't play ping-pong with systemctl
  - ntsysv: add description to systemd services
  - ntsysv: skip templates
  - Makefile: fix typo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.7.2-1
changelog:
  - alternatives: introduce --keep-missing
  - alternatives: allow family in --set and display it in --config


author: Miroslav Lichvar <mlichvar@redhat.com> 2.1-1
changelog:
  - update to 2.1 (#1117882 #1169353 #1206504 #1209568 CVE-2015-1821
    CVE-2015-1822 CVE-2015-1853)
  - extend chrony-helper to allow using servers from DNS SRV records (#1211600)
  - add servers from DHCP with iburst option by default (#1219492)
  - execute test suite


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-1
changelog:
  - update to 3.1 (#1387223 #1274250 #1350669 #1406445)
  - don't start chronyd without capability to set system clock (#1306046)
  - fix chrony-helper to escape names of systemd units (#1418968)
  - package chronyd sysconfig file (#1396840)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.2-1
changelog:
  - update to 3.2 (#1482565 #1462081 #1454765)
  - use ID from /etc/os-release to set pool.ntp.org vendor zone


author: Miroslav Lichvar <mlichvar@redhat.com> 3.4-1
changelog:
  - update to 3.4 (#1636117, #1565544, #1565548, #1596239, #1600882)
  - drop support for HW timestamping on kernels < 3.10.0-613


author: Jeff Layton <jlayton@redhat.com> 6.2-3
changelog:
  - fixes for bugs reported by coverity:
  - update bad bit shift patch with one that patches getcifsacl.c too
  - remove some dead code from getcifsacl.c, asn1.c, and data_blob.c
  - fix bad handling of allocated memory in del_mtab in mount.cifs.c


author: Sachin Prabhu <sprabhu@redhat.com> - 6.2-8
changelog:
  - Prevent unnecessary linking of libwbclient
  - Uppercase orig_dev on 2nd try at mounting
  - Include paths.h in mtab.c
  - Clarify use of backupuid/backupgid in manpage
  - Ignore x-* mount options


author: Sachin Prabhu <sprabhu@redhat.com> - 6.2-10
changelog:
  - aclocal: fix typo in idmap.m4
  - mount.cifs: Removed extra comma in front of domain
  - mount.cifs: Accept empty domains on the command line
  - mount.cifs: Fixed command line parsing and aligned with kernel
  - mount.cifs: Remove unneeded stdbool header include
  - manpage: document mfsymlinks in the mount.cifs man page


author: Honza Horak <hhorak@redhat.com> - 0.5.2-2
changelog:
  - Fix issues found during Package Review
    Summary provides better idea what this library is for
    Using macros for make build and install
    Fix permissions of the shared library


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 1.16.8-1
changelog:
  - Update to latest upstream release (#1257923)
  - Remove no longer needed patch to prevent coin-or-OS crash in %check


author: Richard Hughes <richard@hughsie.com> 1.0.0-1
changelog:
  - New upstream version
  - Add a config option for monitors with identical EDID values
  - Allow a different input and output format in CdTransform
  - Build all installed binaries with PIE
  - Build the colord binary with full RELRO
  - Do not show a warning when using 'colormgr device-get-profile-for-qualifier'
  - Fix crash in cd-iccdump by working around an lcms2 bug
  - Fix using the color sensors on ARM hardware
  - Set the STANDARD_space metadata for the print profiles
  - Show all the translations when dumping an ICC profile


author: Richard Hughes <richard@hughsie.com> 1.0.1-1
changelog:
  - New upstream version
  - Do not unconditionally enable BPC on the color transform
  - Fix profile created time for non-UTC timezones
  - Record the gamma table in the session helper error message


author: Richard Hughes <richard@hughsie.com> 1.0.2-1
changelog:
  - New upstream version
  - Add cd_icc_save_data() so that we can easily set _ICC_PROFILE
  - Add CdIccStore to monitor directories of ICC profiles
  - Add SystemVendor and SystemModel properties to the main interface
  - Allow to specify a non-qualified path when using FindProfileByFilename
  - Allow using the key 'Filename' when using FindProfileByProperty
  - Always return the error if any sync method failed
  - Fix GObject introspection when getting lists
  - Fix GObject introspection when getting metadata


author: Richard Hughes <richard@hughsie.com> 1.0.4-1
changelog:
  - Rebase to a new upstream version to fix small security bug
  - Use %ghost in the to avoid removing databases on upgrades
  - Resolves: #1012832


author: Paul Wouters <pwouters@redhat.com> - 1.0.1-1
changelog:
  - Updated to 1.0.1
  - Added daemon using systemd and configuration file
  - Removed legacy spec requirements
  - Patch for: parse.c:240:34: error: 'NULL' undeclared


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-6
changelog:
  + control-center-3.26.2-6
  - Fix Clone MAC not being saved in Ethernet device properties
  - Resolves: #1467295


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-8
changelog:
  + control-center-3.26.2-8
  - Fix Wi-Fi networks not getting updated
  - Show "Wi-Fi disabled" page when Wi-Fi is disabled
  - Resolves: #1545713


author: Robert Relyea <rrelyea@redhat.com> - 1.1.0-34
changelog:
  - recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
  - own our cache file.
  - verify we are using the correct mechanisms


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-18
changelog:
  - fix xfs build failure in chrooted environment (#1263341)
  - update filesystem lists for stat and tail from latest upstream
    (#1327881, #1280357) 
  - disable id/setgid.sh test(missing chroot feature), fix 
    cp-a-selinux test (#1266500,#1266501)
  - colorls.sh - change detection of interactive shell for ksh
    compatibility (#1321648)
  - fix date --date crash with empty or invalid TZ envvar (#1325786)
  - df -l: do not hang on a dead autofs mount point (#1309247)
  - sort -h: fix functionality of human readable numeric sort for other
    than first field (#1328360)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-19
changelog:
  - timeout: fix race possibly terminating wrong process (#1439465)
  - ls: allow interruption when reading slow directories (#1421802)
  - fold: preserve new-lines in mutlibyte text (#1418505)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-23
changelog:
  - update description of the -a/--all option in df.1 man page (#1553212)
  - sort -M: fix memory leak when using multibyte locale (#1540059)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-24
changelog:
  - doc: improve description of the --kibibytes option of ls (#1527391)
  - doc: fix typo in date example (#1620624)
  - stat,tail: sync the list of file systems with coreutils-8.31 (#1659530)
  - df: avoid stat() for dummy file systems with -l (#1668137)
  - df: prioritize mounts nearer the device root (#1042840)


author: Konstantin Volkov <wolf@virtuozzo.com> 1.0.4
changelog:
  - Move branding to separate file, see #PSBM-58317
   - Create BINDIR during 'make install' if necessary (Denis Silakov
  <dsilakov@gmail.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 1.0.5
changelog:
  - Fix style (place the destructor above members) (Andrey Bondrov
  <abondrov@virtuozzo.com>)
   - Declare destructors explicitly to allow building with -O2 (Andrey Bondrov
  <abondrov@virtuozzo.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 1.0.6
changelog:
  - Make it possible to use exported CPPFLAGS and LDFLAGS when building the
  package (Andrey Bondrov <abondrov@virtuozzo.com>)
   - Enable hardened build, see #PSBM-58107 (Andrey Bondrov
  <abondrov@virtuozzo.com>)


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-20
changelog:
  - fix another bogus date in changelog
  - update config.guess/config.sub for aarm64 build (#925189)
  - run autoreconf instead of autoheader


author: Konstantin Volkov <wolf@virtuozzo.com> 7.0.13
changelog:
  - Add copyrights ( #PSBM-58317 ) (Andrey Bondrov <abondrov@virtuozzo.com>)
   - Drop GPL files (Andrey Bondrov <abondrov@virtuozzo.com>)


author: Igor Sukhih <igor@virtuozzo.com> 7.0.16
changelog:
  - PSBM-86015: Unknown features: set([u'RESERVED']) Add AMD EPYC specific CPU
  flags (Konstantin B. Bukharov <bkb@virtuozzo.com>)


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-3
changelog:
  - fix the python module to work with compressed dictionaries (#972542)
  - fix various dictionary lookup errors (#986400, #986401)
  - make the library reentrant and fix compilation warnings


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-5
changelog:
  - make the simplistic check and the purging of special characters much
    less aggressive (#1003624, #985378)


author: John W. Linville <linville@redhat.com> - 1.1.3_2014.06.13-1
changelog:
  - Update wireless-regdb to version 2014.06.13
  - Add logger commands to setregdomain to make it more communicative


author: John W. Linville <linville@redhat.com> - 1.1.3_2015.04.06-2
changelog:
  - Update wireless-regdb to version 2015.04.06
  - Add patch for regdbdump to display DFS region
  - Make some improvements to setregdomain and its man page


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-14
changelog:
  - mark the 0hourly and dailyjobs crontabs as config
  - properly handle users for whose getpwnam() returns NULL temporarily
  - log when crond is shutting down


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16
changelog:
  - disable mail from anacron with empty MAILTO
  - crontab: do not block access with PAM when running as root
  - improve the crontab man page
  - do not hardcode system_u selinux user but use the user from
    the current context


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-17
changelog:
  - make anacron not to contradict itself in syslog
    (job output does not have to be necessarily mailed)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18
changelog:
  - fix regression - spurious PAM log message from crontab (#1479064)
  - allow empty variables in crontabs (#1439217)


author: Marcel Plch <mplch@redhat.com> - 1.4.11-20
changelog:
  - Fix race condition when crontab is modified the same second
    before and after reading the crontab
  - Resolves: rhbz#1638691


author: Marcel Plch <mplch@redhat.com> - 1.4.11-22
changelog:
  - Backport upstream patch to fix cron failing on
    smart card authentication
  - Resolves: rhbz#1650314


author: Ondrej Kozina <okozina@redhat.com> - 1.7.4-4
changelog:
  - patch: fix regression in blockwise functions
  - patch: avoid repeating error messages when device holders
    detected.
  - patch: add option to cryptsetup-reencrypt to print progress
    log sequentaly
  - patch: use --progress-frequency in reencryption dracut module
  - Resolves: #1480006 #1447632 #1479857


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-2
changelog:
  - patch: stop LUKS2 auto-recovery if device is no longer LUKS
    type
  - patch: update cryptsetup man page for --type option
  - patch: rephrase error message for invalid --type option in
    convert action
  - Resolves: #1599281 #1601477 #1601481


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-3
changelog:
  - Add expected permissions explicitly for locking directory.
  - Reinstate sed script removing library rpath from libtool
    script due to bug in upstream sources distribution.
  - Resolves: #1609847 #1610379


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-4
changelog:
  - patch: Fix broken LUKS2 api test.
  - patch: Allow cryptsetup to process all LUKS2 metadata variants
    according to LUKS2 specifiation.
  - Resolves: #1653388


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-5
changelog:
  - patch: calculate alignment offset correctly for LUKS2 devices.
  - patch: fix memory leak in LUKS2 validation.
  - Resolves: #1613953 #1693592


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-32
changelog:
  - 1468747 - CUPS failover backend allows multiple jobs to get stuck in failed queue
  - 1469816 - Failover backend won't fail-over if the printer is disconnected


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-33
changelog:
  - 1466497 - Remove weak SSL/TLS ciphers from CUPS
  - 1434153 - CUPS print jobs show incorrect number under the "pages" column


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-39
changelog:
  - resolve covscan issue found in fix for 1570480
  - automake sometimes fails to generate correct macros - so force autoconf


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-48
changelog:
  - fix RTSP bad headers buffer over-read (CVE-2018-1000301)
  - fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
  - fix LDAP NULL pointer dereference (CVE-2018-1000121)
  - fix RTSP RTP buffer over-read (CVE-2018-1000122)
  - http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
  - doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
  - update certificates in the test-suite because they expire soon (#1572723)


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-50
changelog:
  - remove dead code, detected by Coverity Analysis
  - remove unused variable, detected by GCC and Clang


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-52
changelog:
  - prevent curl --rate-limit from hanging on file URLs (#1281969)
  - fix NTLM password overflow via integer overflow (CVE-2018-14618)
  - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
  - backport options to force TLS 1.3 in curl and libcurl (#1672639)
  - prevent curl --rate-limit from crashing on https URLs (#1683292)


author: Jakub Jelen <jjelen@redhat.com> 2.1.26-18
changelog:
  - Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
  - Add and document ability to run saslauth as non-root user (#1188065)
  - Support AIX SASL GSSAPI (#1174322)
  - Update client library to be thread safe (#1147659)
  - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
  - Don't use unnecessary quotes around user description (#1082564)
  - Fix confusing message when config file has typo (#1022479)


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-5.2.el6
changelog:
  - Actually install the signal-handler patch
    Resolves: bz667742	Error mapping bug in dapls_wait_comp_channel


author: Doug Ledford <dledford@redhat.com> - 2.0.32-1
changelog:
  - Update to latest upstream version (2.0.25 -> 2.0.32)
  - Remove 4 patches folded into upstream release
  - Rebuild against new libibverbs and librdmacm
  - Update exclusive arch to accommodate i686 arch
  - Related: bz724896, bz725016


author: Doug Ledford <dledford@redhat.com> - 2.0.34-1
changelog:
  - Update to latest upstream version
  - Rebuild against new libibverbs (FDR link speed capable and IBoE enabled)
  - Related: bz750609


author: Jay Fenlason <fenlason@redhat.com> - 2.0.39-1
changelog:
  - Upgrade to latest version
    Resolves: rhbz#985117
  - Fix a compile problem with NULL not being defined
    Resolves: rhbz#1029509


author: Doug Ledford <dledford@redhat.com> - 2.0.39-5
changelog:
  - Bump and rebuild after retagging the latest libibverbs and librdmacm
    into the build root
  - Related: bz1123996


author: Doug Ledford <dledford@redhat.com> - 2.1.5-1
changelog:
  - Update to latest upstream release
  - Include support for s390x
  - Include support for aarch64
  - Drop old fix for NULL not defined, upstream has it resolved
  - Resolves: bz1182180, bz1197216, bz1172462, bz1044727, bz1056487


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.1-3
changelog:
  - python3-dbus subpkg (#892474)
  - (main) Provides: python-dbus
  - BR: python-docutils
  - .spec cosmetics
  - skip failed tests on rawhide (#913936)


author: Colin Walters <walters@redhat.com> - 1.1.1-9
changelog:
  - Move modules to libdir to avoid multilib conflicts
  - And comment out test suite, since we were not actually
    failing if it failed, but it trips up an rpmdiff check
    on the output of the suite.
  - Resolves: #1076411


author: Marek Kasik <mkasik@redhat.com> - 0.26.0-1
changelog:
  - Update to 0.26.0
  - Remove editor subpackage
  - Return libdbus-1 library (not header or pkgconfig files)
  - Resolves: #1386841


author: Marek Kasik <mkasik@redhat.com> - 0.28.0-3
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Resolves: #1570569


author: Jonathan Dieter <jdieter@lesbg.com> - 3.6-0.13.20130520git
changelog:
  - Clearer error message when applydeltaiso fails (#825428) (Thanks, John!)
  - Add details to applydeltaiso and makedeltaiso man pages (#569499)
  - Add fragiso man page to deltaiso package (#569776)
  - Fix section for applydeltaiso (#548970)
  - Add arch-specific requires (#677060)


author: Jonathan Dieter <jdieter@lesbg.com> - 3.6-1
changelog:
  - Update to 3.6 which, among other things, fixes a bug when applying a deltarpm
    to create a gzip-compressed rpm using full compression


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-118
changelog:
  - Modify 0224-RHBZ-1452210-prkey.patch
    * Improve error checking for mpathpersist
  - Resolves: bz #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-120
changelog:
  - Add 0237-RHBZ-1526876-show-sysfs-state.patch
    * Correctly get sysfs state for multipath -l output
  - Add 0238-RHBZ-1508483-mpathconf-info.patch
  - Add 0239-RHBZ-1544958-client-timeout.patch
    * increase maximum multipathd client reply timeout to 60 seconds
  - Add 0240-UPBZ-1568902-id_size.patch
    * increase maximum size of product and revision strings to deal with nvme
  - Add 0241-RHBZ-1554516-show-path-failures.patch
    * add a path failures multipathd path format wildcard
  - Add 0242-RHBZ-1541116-all-tg-pt.patch
    * add all_tg_pt configuration option to make mpathpersist send only
      one registration per host
  - Add 0243-RHBZ-1498724-save-persist-options.patch
    * allow ":aptpl" to be added to the reservation_key to fix multipathd
      aptpl persistent reservation handling
  - Add 0244-RHBZ-1562247-remove-rbd.patch
    * remove multipath support for rbd
  - Resolves: bz #1498724, #1508483, #1526876, #1541116, #1544958, #1554516
  - Resolves: bz #1562247, #1568902


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-121
changelog:
  - Add 0245-RHBZ-1584228-fix-readsector0_size.patch
    * correctly figure IO size
  - Add 0246-RHBZ-1593459-add-transport-blacklist.patch
    * and new blacklist option, "protocol"
  - Add 0247-RHBZ-1585824-mpathconf-allow-doc.patch
  - Resolves: bz #1584228, #1585824, #1593459


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-123
changelog:
  - Add 0249-RHBZ-1610263-mpathpersist-max-fds.patch
    * make mpathpersist honor max_fds multipath.conf parameter
  - Resolves: bz #1610263


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-124
changelog:
  - Add 0250-RHBZ-1610867-rescan-change.patch
    * Update multipath devices on change events.
  - Add 0251-RHBZ-1614011-discovery-timeout.patch
  - Add 0252-RHBZ-1623595-cmd-error-status.patch
  - Add 0253-RHBZ-1618549-mix-hw-handler.patch
    * Don't retain attached hw handler when different hw handlers are
      attached to different paths
  - Add 0254-RHBZ-1635819-fix-mpathpersist-crash.patch
  - Add 0255-RHBZ-1638651-marginal-path.patch
    * backport marginal_path options from upstream
  - Resolves: bz #1610867, #1614011, #1618549, #1623595, #1635819, #1638651


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125
changelog:
  - Modify 0250-RHBZ-1610867-rescan-change.patch
    * Fix memory Leak
  - Modify 0255-RHBZ-1638651-marginal-path.patch
    * Fix NULL dereference
  - Refresh 0252-RHBZ-1623595-cmd-error-status.patch
  - Resolves: bz #1610867, #1638651


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127
changelog:
  - Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
    * retry adding paths if they couldn't be opened initially
  - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
    * don't check if dm devices are multipath paths
  - Add 0258-RHBZ-1634183-ANA-prioritizer.patch
    * Add NVMe ANA path prioritizer
  - Resolves: bz #1634183, #1672175, #1679556


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc6
changelog:
  - Don't open devices as writeable if --clear-needs-check-flag is not set.
  - Fix cache metadata format version 2 superblock packing.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.2-1
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - Fix segfault when dump tools are given a tiny metadata file.
  - Fix -V exiting with 1.
  - Fix thin_check when running on XML dump instead of binary data.
  - Speed up free block searches.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.3-1
changelog:
  - Update to latest bugfix and documentation update release.
  - *_restore tools wipe superblock as a last resort.
  - Add thin_check --override-mapping-root.


author: Petr Menšík <pemensik@redhat.com> - 12:4.2.5-74
changelog:
  - Use bind-export-libs package instead of bind99
  - Use isc-config.sh to configure bind libs
  - Change requirement to bind-export-devel
  - Compile with recent bind includes, that does not include isc/util.h


author: Ihar Hrachyshka <ihrachys@redhat.com> - 1.0.1-0.RC1.1
changelog:
  - removed dibbler-common package, instead put _sharedstatedir in each package
    that needs it.
  - added check section (disabled for now due to upstream bug).
  - cleaned up scripts and examples for non-Linux platforms.
  - removed Group tags.
  - build -docs package as noarch.
  - preserve timestamps for files installed with `install` and `cp`.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-25
changelog:
  - Resolves: rhbz#1205557 - Include the latest upstream ding-libs release in 7.2
  - Port the SONAME hack


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-27
changelog:
  - Re-add the soname hack
  - Resolves: rhbz#1290382 - Rebase ding-libs to the latest available upstream


author: Michal Židek <mzidek@redhat.com> - 0.6.1-29
changelog:
  - Fix rpmdiff failure for 'Binary stripping'
  - Resolves: rhbz#1480270 - Rebase ding-libs to the latest upstream release


author: Michal Židek <mzidek@redhat.com> - 0.6.1-30
changelog:
  - Adopting to use Downstream Helper for bellow BZ backport
  - Related: rhbz#1507607 - ding-libs: libini_config: `ini_config_augment` reports errors on match failure


author: Michal Židek <mzidek@redhat.com> - 0.6.1-31
changelog:
  - Resolves: rhbz#1507607 - ding-libs: libini_config: `ini_config_augment` reports errors on match failure


author: Michal Židek <mzidek@redhat.com> - 0.6.1-32
changelog:
  - Previous change in spec file broke the application of downstream only patch
  - Related: rhbz#1507607 - ding-libs: libini_config: `ini_config_augment` reports errors on match failure


author: Denis Silakov <dsilakov@virtuozzo.com> 0.0.4
changelog:
  - Free report_data to avoid memleak, see #PSBM-65414
   - Make sure to close fd to avoid memleak, see #PSBM-65414


author: Petr Oros <poros@redhat.com> - 1:2.12-9
changelog:
  - dmioem: Decode Acer-specific DMI type 170
  - dmioem: Decode HP-specific DMI types 212 and 219
  - dmioem: Decode HP-specific DMI type 233, and refactored 209 and 221 to use a common function
  - Resolves: #1232501


author: Petr Menšík <pemensik@redhat.com> - 2.76-2
changelog:
  - Fix a few coverity warnings
  - package is dual-licensed GPL v2 or v3
  - don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead


author: Petr Menšík <pemensik@redhat.com> - 2.76-5
changelog:
  - Fix CVE-2017-14491
  - Fix CVE-2017-14492
  - Fix CVE-2017-14493
  - Fix CVE-2017-14494
  - Fix CVE-2017-14496
  - Fix CVE-2017-14495
  - extra fixes


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.18.24-8
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot


author: Sérgio Basto <sergio@serjux.com> - 1.18.25-5
changelog:
  - Revert "Bundle a version of tar to make it compatible in EL7"
  - Keep BR: perl(Digest)
  - Remove --clamp-mtime option on tar of el7.
  - Add Requires perl(Digest::MD5) and perl(Digest::SHA*) on dpkg-perl (#1628409)


author: Sérgio Basto <sergio@serjux.com> - 1.18.25-8
changelog:
  - Requires perl(MIME::Lite) on dpkg-dev (rhbz #1678637)
  - Adds check section and performs unit tests but ignores failures


author: Lukas Nykryn <lnykryn@redhat.com> - 033-551
changelog:
  - Revert "add 90multipath-hostonly module"
  - Introduce tri-state hostonly mode
  Resolves: #1599592
  - Correct paths for firmware
  Resolves: #1608491
  - Record loaded kernel modules when hostonly mode is enabled
  Resolves: #1607744


author: Lukas Nykryn <lnykryn@redhat.com> - 033-560
changelog:
  - fips: removed false-positive 'FATAL: Module xxx not found' error message when 
  kernel provides a generic algo for module
  - fips: ensure fs module for /boot is installed
  - iscsi: always popd, even if there is no iscsi device
  - Harden dracut against BASH_ENV environment variable
  - fips: check fips integrity just before mounting local filesystems in /sysroot


author: Jakub Jelinek <jakub@redhat.com> 0.9-1
changelog:
  - fix up handling of DIE equality if more than one DIE in the same
    CU compare equal (#889283)
  - check DW_FORM_ref_addr properly during fi_multifile phase


author: Jakub Jelinek <jakub@redhat.com> 0.10-1
changelog:
  - when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
    and DW_FORM_data4 for dwarf[23] rather than vice versa (#919755)


author: Josh Stone <jistone@redhat.com> 8.1.2-6
changelog:
  - rhbz1063447: squash testsuite g++ optimization
  - rhbz1030969: backported additional patch to silence new warnings


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-10
changelog:
  - libext2fs: don't ignore fsync errors (#1405049)
  - Fix nroff macro issue in chattr man page (#1429213)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-11
changelog:
  - libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
  - tune2fs: edit dire warning about check intervals (#1433233)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-13
changelog:
  - e2fsck: warn if checkinterval and broken_system_clock both set (#1365594)
  - e2fsprogs: fail to open 1k block size ext4 with bigalloc,meta_bg,^resize_inode
   (#1448019)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-14
changelog:
  - Various fixes and improvements (#1682935)
  - Automatically enable meta_bg to avoid failure when creating huge fs with small bs (#1608635)
  - don't ignore fsync errors in filefrag (#1451185)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-9
changelog:
  - fixed missing systemd unit file (RHBZ#818953)
    merged fedora patches from Tom Callaway
  - fixed NETWORK test in the init script (RHBZ#1026784)
  - fixed needed rpmdiff failures (RHBZ#883988)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-14
changelog:
  - Fixed persmissions of ebtables.service (RHBZ#1288586)
  - Added upstream patch to add noflush option to ebtables-restore (RHBZ#1334271)


author: Peter Jones <pjones@redhat.com> - 0.8.0-6
changelog:
  - Handle -b and -o parsing in a way that matches the documentation.
    Resolves: rhbz#1174964
  - Use the right GUID when setting boot entries active/inactive
    Resolves: rhbz#1221771


author: Peter Jones <pjones@redhat.com> - 17-2
changelog:
  - Try to make covscan actually complete the scan...
    Related: rhbz#1570032
    Related: rhbz#1558937
    Related: rhbz#1520533


author: Peter Jones <pjones@redhat.com> - 36-6
changelog:
  - Fix device path generation for block devices on nonstandard device path
    roots.
    Related: rhbz#1558937
    Resolves: rhbz#1591853


author: Peter Jones <pjones@redhat.com> - 36-10
changelog:
  - Work around platform ACPI PCI(e) root drivers that don't fill in the
    "driver" symlink in sysfs.
    Resolves: rhbz#1614944


author: Peter Jones <pjones@redhat.com> - 36-11
changelog:
  - Fix device probing with no matching probes where HD() will work
    Resolves: rhbz#1613698
  - Detect partitiond md devices correctly
    Resolves: rhbz#1602414
    Resolves: rhbz#1613370


author: Mark Wielaard <mjw@redhat.com> - 0.170-1
changelog:
  - New upstream release. Remove upstreamed patches.
  - Sync provide_yama_scope with fedora.
  - Add elfutils-0.170-x86_64-backtrace-test-override.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@redhat.com> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Mark Wielaard <mjw@redhat.com> - 0.176-1
changelog:
  - New upstream release (#1676504)
    CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
    CVE-2019-7664, CVE-2019-7665, CVE-2018-16062, CVE-2018-16402,
    CVE-2018-16403, CVE-2018-18310, CVE-2018-18521, CVE-2018-18520.


author: Jan Synáček <jsynacek@redhat.com> - 1:24.3-21
changelog:
  - fix libjpeg detection fails with gcc7 (#1487557)
  - fix Emacs GUI Toolbar icons missing (#1477745)
  - fix hardening: TLS certificate warnings should be hard errors (#1403643)


author: Orion Poplawski <orion@cora.nwra.com> - 3.2.10-2
changelog:
  - Add patch to comment out stray module use in modules file when not using
    versioning (bug #895555)
  - Add patch to fix module clear command (bug #895551)
  - Add patch from modules list to add completion to avail command


author: Jan Synáček <jsynacek@redhat.com> - 3.2.10-9
changelog:
  - fix: SourceVers wrongly sets version in nested directory (#1180652)
  - fix: unload from loaded modulefile broken (#1117327)


author: Ivan Vecera <ivecera@redhat.com> - 2:4.8-2
changelog:
  - Added support for configurable RSS hash function
  - Fixed SFF 8079 cable technology bit parsing
  - Added support for HWTSTAMP_FILTER_NTP_ALL


author: Konstantin Volkov <wolf@virtuozzo.com> 0.5
changelog:
  - Fix l10n typo (Denis Silakov <dsilakov@virtuozzo.com>)
   - Added Russian l10n (Denis Silakov <dsilakov@virtuozzo.com>)
   - Rebrand spec, see #PSBM-63145


author: Konstantin Volkov <wolf@virtuozzo.com> 0.12
changelog:
  - Redesign EULA addon, VSTOR-22481 (Andrey Ponomarenko
  <aponomarenko@virtuozzo.com>)
   - Require open-sans-fonts, VSTOR-22481 (Andrey Ponomarenko
  <aponomarenko@virtuozzo.com>)


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.4-1
changelog:
  - Upstream removed the tarball for 1.12.2, which made Source0 invalid.
  - There is a new version (1.12.4), so update to the new version.


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.4-2
changelog:
  - Strip libfakeroot-*.so (RHBZ#596735).
  - Verified that libguestfs still builds and runs with this change (this
    represents a fairly aggressive test of fakeroot).


author: Dominik Mierzejewski <rpm@greysector.net> - 1.24-1
changelog:
  - update to 1.24 (#1750054)
  - update source URL
  - drop obsolete patches
  - point to working URLs
  - make testsuite more verbose for the future
  - Apply all patches from Debian package (should fix libuser build)
  - fix root privilege faking for copied files/dirs (bug 887001)
  - fix LD_LIBRARY_PATH for multilib environment (bug 1241527)
  - update License: tag
  - don't strip the libraries in install, just keep the executable bit
  - when converting from latin1 to utf8, don't use the converted file
    if the conversion failed: the pt manpage is already utf8
  - alternativize libfakeroot and faked as well (bug 817088)
  - include Portugese manpages
  - add missing BR: libcap-devel
  - autogenerate most of the file list


author: Chris Leech <cleech@redhat.com> - 1.0.30-4.git91c0c8c
changelog:
  - 1039779 replace README that contained mostly build instructions with
    README.redhat containing better distro-specific information


author: Chris Leech <cleech@redhat.com> - 1.0.31-1.git5dfd3e4
changelog:
  - 1274530 rebase to upstream 1.0.31+
  - no longer requires libhbaapi/libhbalinux
  - no longer attempts to connect to lldpad if DC_REQUIRED is configured off
    for all interfaces


author: Chris Leech <cleech@redhat.com> - 1.0.32-1
changelog:
  - 1384707 fcoeadm --target segfaults if non-FCoE FC targets are present
  - 1321611 fcoemon should only try to connect to lldpad when required


author: Björn Esser <bjoern.esser@gmail.com> - 1.51-4
changelog:
  - Place rpm-macros into proper location using %global macrosdir
  - Apply proper LDFLAGS
  - Fix offset in Patch1 and renamed it to match current version


author: Björn Esser <bjoern.esser@gmail.com> - 1.51-5
changelog:
  - Add needed bits for el5
  - Fix `mixed use of spaces-and tabs`
  - Minor cleanup and improved readability


author: Jon Schlueter <jschluet@redhat> - 1.51-10
changelog:
  - Rebaseline using github which is new home of fdupes
  - source tarball has unusual folder naming of fdupes-fdupes-1.51 instead of normal fdupes-1.51


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-27
changelog:
  - fix CVE-2014-0207 - cdf_read_short_sector insufficient boundary check
  - fix CVE-2014-0237 - cdf_unpack_summary_info() excessive looping DoS
  - fix CVE-2014-0238 - CDF property info parsing nelements infinite loop
  - fix CVE-2014-3478 - mconvert incorrect handling of truncated pascal string
  - fix CVE-2014-3479 - fix extensive backtracking in regular expression
  - fix CVE-2014-3480 - cdf_count_chain insufficient boundary check
  - fix CVE-2014-3487 - cdf_read_property_info insufficient boundary check
  - fix CVE-2014-3538 - unrestricted regular expression matching
  - fix CVE-2014-3587 - fix cdf_read_property_info
  - fix CVE-2014-3710 - out-of-bounds read in elf note headers
  - fix CVE-2014-8116 - multiple denial of service issues (resource consumption)
  - fix CVE-2014-8117 - denial of service issue (resource consumption)
  - fix CVE-2014-9652 - out of bounds read in mconvert()
  - fix CVE-2014-9653 - malformed elf file causes access to uninitialized memory


author: Jan Kaluza <jkaluza@redhat.com> 5.11-32
changelog:
  - fix #1278737 - add support for Java 1.7 and 1.8
  - fix #1281723 - show full executable name for core
  - fix #1271636 - add support for detection of Python 2.7 byte-compiled files
  - fix #1278768 - comment out too-sensitive Pascal magic


author: Kamil Dudka <kdudka@redhat.com> - 1:4.5.10-7
changelog:
  - fix specfile issues reported by the fedora-review script
  - do not use the AM_C_PROTOTYPES macro (removed in Automake 1.12)
  - do not require gets() to be declared


author: Tomas Hozza <thozza@redhat.com> - 0.17-49
changelog:
  - Compile finger with Full RELRO
  - Explicitly use gcc
  - Use only RPM_OPT_FLAGS and RPM_LD_FLAGS
  - Add systemd as BuildRequires because of unitdir macro


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2.1-11.20121204gita43f56
changelog:
  - update to 20121204gita43f56
  - create libs subpackage
  - split documentation to base and devel subpackages
  - drop defattr macros
  - add GFDL to License tag


author: Miroslav Lichvar <mlichvar@redhat.com> 1.3.0-5
changelog:
  - fix buffer overflow when processing ID3v2 metadata (CVE-2014-8962)
  - fix buffer overflow with invalid blocksize (CVE-2014-9028)


author: Akira TAGOH <tagoh@redhat.com> - 2.10.95-5
changelog:
  - Fix the race condition issue on updating cache (#1011510)
  - Fix crash issue in FcFontSort()
  - Fix an issue not copying all values from the font.


author: Akira TAGOH <tagoh@redhat.com> - 2.13.0-4.1
changelog:
  - Rebase to 2.13.0 (#1576501)
  - Rename fc-cache binary to fc-cache-{32,64} for multilib. (#1568968)
  - backport some fixes related to Flatpak.
  - Drop new syntax in config for compatibility.
  - Requires dejavu-sans-fonts instead of font(:lang=en) (#1484094)


author: Marek Kasik <mkasik@redhat.com> - 2.4.11-11
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197740


author: Jan Synáček <jsynacek@redhat.com> - 0.17-58
changelog:
  - Extend the input line buffer and the argument storage buffer
  - Prettify spec some more and remove trailing space


author: Martin Bříza <mbriza@redhat.com> - 4.0.1-1
changelog:
  - Update to upstream 4.0.1 (#808005)
  - Corrected Source0 link to .tar.gz extension as not all releases are available as .tar.bz2
  - Resolves #724817 - gawk-4.0.0 regression in '\' escape handling in gsub()
  - Resolves #820550 - gawk: getline in BEGIN skips 2 lines


author: Marek Polacek <polacek@redhat.com> 4.8.5-31
changelog:
  - backport s390 -mpic-data-is-text-relative feature (#1555397)
  - fix crash when write follows large read (#1463706)
  - fix emit_move_insn ICE (#1565536)
  - add missing rs6000-cpus.def (#1512202)


author: Marek Polacek <polacek@redhat.com> 4.8.5-34
changelog:
  - fix infinite looping in -fipa-cp-clone (#1546372)
  - don't look for vsld gcc.target/powerpc/pr72717.c


author: Marek Polacek <polacek@redhat.com> 4.8.5-38
changelog:
  - fix mode mismatch in prepare_cmp_insn (#1641329, PR target/63442)
  - allow libitm to use HTM (#1659698)
  - fix up memset handling in DSE (#1640805, PR rtl-optimization/69891)
  - fix bits/bytes confusion in set_noop_p (#1594975, PR rtl-optimization/68814)
  - enable initializing statics with COMPOUND_LITERAL_EXPR in C99
    (#1672652, PR c/63567)
  - fix PIC_OFFSET_TABLE_REGNUM (#1614326)
  - quash spurious -Wmissing-field-initializers warnings (#1633716, PR c/60784)
  - fix ICE with alias template (#1648161, PR c++/53658)


author: Honza Horak <hhorak@redhat.com> - 2.0.35-19
changelog:
  - Spec file cleanup
  - Compile and run test suite during build
  - Using chrpath to get rid of --rpath in gd-progs


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.6.1-107.el7
changelog:
  - Fix backport of default signal handlers for spawned processes
    (RH BZ 1473411, found by Michal Kolar).


author: Honza Horak <hhorak@redhat.com> - 1.9.1-1
changelog:
  - Updated to new upstream release 1.9.1
  - Dropped -filestruct, -ndbmlock and -fhs patches, they are not 
    needed anymore and GDBM_NOLOCK is used always
  - Run testsuite


author: Honza Horak <hhorak@redhat.com> - 1.10-1
changelog:
  - Updated to new upstream release 1.10
  - Dropped -shortread patch, which has been already applied by upstream
  - Disable large file support, that is enabled by default since 1.9, 
    but not compatible with db files created using gdbm-1.8.3 and lower
  - License change to GPLv3+
  - Add doc files THANKS AUTHORS NOTE-WARNING
  - Changed text in NOTE-WARNING to correspond with build settings


author: Paul Howarth <paul@city-fan.org> - 2.2.2-1
changelog:
  - Update to 2.2.2
    - geoipupdate now calls fsync on the database directory after a rename to
      make it durable in the event of a crash
  - Update autotools patch


author: Paul Howarth <paul@city-fan.org> - 2.3.1-1
changelog:
  - Update to 2.3.1
    - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
      greater
    - Previously, on an invalid gzip file, geoipupdate would output binary data
      to stderr; it now displays an appropriate error message
    - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
    - $(sysconfdir) is now created if it doesn't exist (GH#33)
    - The sample config file is now usable (GH#33)


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0
    - geoipupdate now checks that the database directory is writable: if it is
      not, it reports the problem and aborts
    - geoipupdate now acquires a lock when starting up to ensure only one
      instance may run at a time: a new option, 'LockFile', exists to set the
      file to use as a lock ('.geoipupdate.lock' in the database directory by
      default)
    - geoipupdate now prints out additional information from the server when a
      download request results in something other than HTTP status 2xx; this
      provides more information when the API does not respond with a database
      file
    - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
    - Previously, a variable named 'ERROR' was used, which caused issues building
      on Windows (GH#36)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - noarch subpackages always available now
    - libcurl-devel always available now


author: Paul Howarth <paul@city-fan.org> - 2.5.0-1
changelog:
  - Update to 2.5.0
    - Replace use of strnlen() due to lack of universal availability (GH#71)
    - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
    - Remove unused base64 library (GH#68)
    - Add the new configuration option 'PreserveFileTimes'; if set, the
      downloaded files will get the same modification times as their original on
      the server (default is '0') (GH#63)
    - Use the correct types when calling 'curl_easy_setopt()'; this fixes
      warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
    - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
      'ProductIds' option was renamed to 'EditionIDs'; the old options will
      continue to work, but upgrading to the new names is recommended for
      forward compatibility


author: Andrew Price <anprice@redhat.com> - 3.1.10-1
changelog:
  - Rebase to new upstream version 3.1.10
    Resolves: rhbz#1348601
    Resolves: rhbz#1356685
    Resolves: rhbz#1382087
    Resolves: rhbz#1405163
    Resolves: rhbz#1430399
  - Make dependency on libuuid explicit


author: Andrew Price <anprice@redhat.com> - 3.1.10-3
changelog:
  - libgfs2: Issue one write per rgrp when creating them
  - mkfs.gfs2: Fix resource group alignment issue
  - mkfs.gfs2: Free unnecessary cached pages, disable readahead
    Resolves: rhbz#1440269


author: Andrew Price <anprice@redhat.com> - 3.1.10-5
changelog:
  - Update URL in spec file
    Resolves: rhbz#1501738
  - fsck.gfs2: Make -p, -n and -y conflicting options
    Resolves: rhbz#1507091


author: Andrew Price <anprice@redhat.com> - 3.1.10-9
changelog:
  - fsck.gfs2: Don't check fs formats we don't recognise
  - libgfs2: Fix pointer cast byte order issue
    Resolves: rhbz#1616389


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-29
changelog:
  - Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
  - Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-31
changelog:
  - Added security fixes for:
    - CVE-2018-16509 (bug #1621158)
    - CVE-2018-15910 (bug #1621160)
    - CVE-2018-16542 (bug #1621382)


author: Martin Osvald <mosvald@redhat.com> - 9.07-32
changelog:
  - Remove as many non-standard operators as possible to make the codebase
    closer to upstream for later CVEs
  - Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
    checker (699659)
  - Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
    in temp file handling to disclose contents of files (699658) 
  - Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
    issues (699657)
  - Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
    type checking (699660)
  - Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
    CVE-2018-16509
  - Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
  - Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
    access in the aesdecode operator (699665)
  - Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
    privilege" checking when running out of stack during exception handling
  - Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
    security check in zsetdevice function in psi/zdevice.c
  - Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
    pagedevice replacement (699664)
  - Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
    exception table
  - Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
    can leak operator arrays
  - Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
    can leak operator arrays (incomplete fix for CVE-2018-17183)
  - Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
    allows a sandbox protection bypass
  - Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
    setpattern (700141)
  - Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
    smooth shading object (Error: /rangecheck in --run--)
  - Resolves: #1661210 pdf2ps reports an error when reading from stdin
  - Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
    copydevice handling (699661)
  - Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
    psi/zdevice2.c (700153)
  - Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
    psi/zicc.c
  - Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
    psi/zfjbig2.c (700168)
  - Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
    pseudo-operators must themselves be pseudo-operators
  - Resolves: #1670443 - ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata


author: Martin Osvald <mosvald@redhat.com> - 9.25-1
changelog:
  - Rebase to latest upstream version (bug #1636115)
  - Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
    protections for CVE-2019-6116
  - Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
    is available (700585)
  - Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
    is still accessible (700576)
  - Resolves: #1670443 - ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata
  - fix for pdf2dsc regression added to allow fix for CVE-2019-3839


author: Martin Osvald <mosvald@redhat.com> - 9.25-2.2
changelog:
  - Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
  - Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
  - Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
  - Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)


author: Robert Scheck <robert@fedoraproject.org> 4.1.6-2
changelog:
  - Solved multilib problems with documentation (#465208, #474538)
  - Removed static library from giflib-devel package (#225796 #c1)


author: Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-13
changelog:
  - fall back to Basic auth if Negotiate fails
    Resolves: #1490998
  - handle request-pull when multiple tags point to the same commit
    Resolves: #1192146


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14
changelog:
  - Backport fix for CVE-2018-11235
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15
changelog:
  - move instaweb to separate git-instaweb subpackage.
  	Resolves: #1213059
  - move gnome-keyring to a separate git-gnome-keyring subpackage.
  	Resolves: #1284081


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16
changelog:
  - Remove EL-5 settings and old Fedora conditionals.
    Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
    2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
  - Fix builds using '--without docs'
  - Change git-instaweb default from lighttpd(not available in rhel7) to
    apache2.
  - Add requires for git-{instaweb,gnome-keyring} to pull them, when
    installing git-all.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17
changelog:
  - Correctly return an error from fsck on encountering a .gitmodules symlink.
    This was broken in the debian 2.1.x backport and found by covscan.
    Fix the test to catch this.
  - Correct a typo in changelog.


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19
changelog:
  - Fix httpd modules path to be independent from system architecture.
  Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
  Resolves: #1213059


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20
changelog:
  - Fix CVE-2018-17456: arbitrary code execution via .gitmodules
    Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Kalev Lember <kalevlember@gmail.com> - 3.14.2-2
changelog:
  - Revise the summary for consistency with the parallel installable
    glade2/glade3 packages (#882557)


author: Milind Changire <mchangir@redhat.com> - 3.12.2-41
changelog:
  - fixes bugs bz#1390151 bz#1410145 bz#1429190 bz#1510752 bz#1511779 
    bz#1570958 bz#1574490 bz#1595246 bz#1618669 bz#1661393 bz#1668989 bz#1669020


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-13
changelog:
  - Explicitly added '-g' option into CFLAGS & CXXFLAGS to correctly build .debug_info for i386 (bug #1413034)
  - Added a workaround to correctly add hardening flags during build process (bug #1406689)


author: Zeeshan Ali <zeenix@redhat.com> - 3.8.2-8
changelog:
  - Remove patch 'daemon: Exit gnome-keyring-daemon when the DBus connection
    closes' (related: rhbz#1030671).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.28.1-6
changelog:
  - Fix missing deps in -gnome and -bonobo subpkg (#689836).
    gnome-python2-gnome should "Requires: gnome-python2-bonobo"
    gnome-python2-bonobo should "Requires: gnome-python2-canvas"


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.28.1-7
changelog:
  - Drop unused/ancient -capplet subpackage definition remains.
  - Add %?_isa to all explicit dependencies on package names.
  - Make pygtk2 dependency arch-specific (#749835).


author: Colin Walters <walters@verbum.org> - 2.28.1-12
changelog:
  - Drop requires on bonobo-activation, since it is the same as libbonobo,
    but that package dropped the provides.


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.22-4
changelog:
  - allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
  - do not abort when missing hash algorithm in FIPS mode (#1078962)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9
changelog:
  - Amended fix for FIPS enforcement issue (#1163848)
  - Fixed issue with applications that close all file descriptors (#1165047)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11
changelog:
  - Applied fix for urandom FD in FIPS140 mode (#1165047)
  - Applied fix for FIPS140-2 related regression (#1110696)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13
changelog:
  - Corrected reseed and respect of max_number_of_bits_per_request in 
    FIPS140-2 mode. Also enhanced the initial tests. (#1228199)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1
changelog:
  - Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
  - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
  - When writing certificates to smart cards write the CKA_ISSUER and
    CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
  - Use the shared system certificate store (#1110750)
  - Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
    CVE-2015-7575)
  - Allow hashing data over 2^32 bytes (#1306953)
  - Ensure written PKCS#11 public keys are not marked as private (#1339453)
  - Ensure secure_getenv() is called on all uses of environment variables
    (#1344591).
  - Fix issues related to PKCS #11 private key listing on certain HSMs
    (#1351389)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7
changelog:
  - Address interoperability issue with 3.5.x (#1388932)
  - Reject CAs which are both trusted and blacklisted in trust module (#1375303)
  - Added new functions to set issuer and subject ID in certificates (#1378373)
  - Reject connections with less than 1024-bit DH parameters (#1335931)
  - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
  - Mention limitations of certtool in manpage (#1375463)
  - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
  - Do not link directly to trousers but instead use dlopen (#1379739)
  - Fix incorrect OCSP validation (#1377569)
  - Added support for pin-value in PKCS#11 URIs (#1379283)
  - Added the --id option to p11tool (#1399232)
  - Improved sanity checks in RSA key generation (#1444780)
  - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
    CVE-2017-7869


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9
changelog:
  - Address crash in OCSP status request extension, by eliminating the
    unneeded parsing (CVE-2017-7507, #1455828)


author: Anderson Sasaki <ansasaki@redhat.com> 3.3.29-8
changelog:
  - Backported --sni-hostname option which allows overriding the hostname
    advertised to the peer (#1444792)
  - Improved counter-measures in TLS CBC record padding for lucky13 attack
    (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707)
  - Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack
    (CVE-2018-10846, #1589708)
  - Address p11tool issue in object deletion in batch mode (#1375307)
  - Backport PKCS#11 tests from master branch. Some tests were disabled due to
    unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key
    generation without login, and certificates do not inherit ID from the private
    key)
  - p11tool explicitly marks certificates and public keys as NOT private objects
    and private keys as private objects
  - Enlarge buffer size to support resumption with large keys (#1542461)
  - Legacy HMAC-SHA384 cipher suites were disabled by default
  - Added DSA key generation to p11tool (#1464896)
  - Address session renegotiation issue using client certificate (#1434091)
  - Address issue when importing private keys into Atos HSM (#1460125)


author: VZ Auto Builder <dsilakov@virtuozzo.com> 1.8.1
changelog:
  - Dummy changelog (Denis Silakov <dsilakov@virtuozzo.com>)
   - Build from Acronis git (Denis Silakov <dsilakov@virtuozzo.com>)
   - use autosources (Alexander Stefanov <astefanov@virtuozzo.com>)


author: Tom Callaway <spot@fedoraproject.org> - 2.6.1-4
changelog:
  - add configure option to disable generic dynamic tls model
  - disable generic dynamic tls model on s390x and aarch64


author: Simon Lukasik <slukasik@redhat.com> - 1.3.0-6
changelog:
  - Resolve multilib conflict of gpgme-config (#341351)
  - Resolve multilib conflict of gpgme.h (#341351)


author: Tomas Mraz <tmraz@redhat.com> - 1.3.2-1
changelog:
  - new upstream version
  - re-enable gpg tests (original patch by John Morris <john@zultron.com>)
  - quiet configure warning 'could not find g13'
  - there is no libgpgme-pth anymore


author: Jiri Kucera <jkucera@redhat.com> - 1.20.7-6
changelog:
  - Remove old scriptlets
    Enable PIE and RELRO
    ./autogen.sh runs too early
    Resolves: #1092527, #1095444


author: Till Maas <opensource@till.name> - 1.2.4-4
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Caolán McNamara <caolanm@redhat.com> - 1.3.10-1
changelog:
  - Resolves: rhbz#1472290
    CVE-2017-7771 CVE-2017-7772 CVE-2017-7773 CVE-2017-7774
    CVE-2017-7775 CVE-2017-7776 CVE-2017-7777 CVE-2017-7778


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.1-13
changelog:
  - Fixed multilib conflicts
    Rewrote lefty IO lib to use getaddrinfo instead of gethostbyname
    (by lefty-getaddrinfo patch)
    Resolves: rhbz#881173


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.1-17
changelog:
  - Prevent possible buffer overflow in yyerror()
    Resolves: CVE-2014-1235
  - Fix possible buffer overflow problem in chkNum of scanner
    Resolves: CVE-2014-1236


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.14-4
changelog:
  - Added group-separator, no-group-separator options decription
  - Aligned output of built-in help
  - Defuzzified gnulib-tests-rm-f patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-2
changelog:
  - Fixed invalid UTF-8 byte sequence error in PCRE mode
    (by pcre-backported-fixes patch)
    Resolves: rhbz#1217080
  - Fixed buffer overrun for grep -F
    Resolves: CVE-2015-1345
  - Fixed \w and \W behaviour in multibyte locales
    Resolves: rhbz#1159012
  - Documented --fixed-regexp option
    Resolves: rhbz#1103259
  - Updated pcre buildrequires to require pcre-devel >= 7.8-7
    Related: rhbz#1217080


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-3
changelog:
  - Speedup DFA for long patterns and fixed begline/endline matching
    Resolves: rhbz#1413029
  - Added support for GREP_LEGACY_EGREP_FGREP_PS environmental variable which
    controls how egrep, fgrep show in ps output
    Resolves: rhbz#1297441


author: Jan Vcelak <jvcelak@redhat.com> 1.22.1-1
changelog:
  - new upstream release (#890973)
    + various fixes in manual pages
    + various fixes and improvements in macros
    + new gropdf driver for generating PDF files
  - fix: backslash-period escape does not work (#682857)
  - fix: groff ftbfs - patch does not apply (#885225)


author: Peter Jones <pjones@redhat.com> - 2.02-0.60
changelog:
  - Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
    exists.  This is also why the bug we fixed in 0.59 showed up at all.
    Resolves: rhbz#1443809
    Resolves: rhbz#1442970
  - Fix a regexp problem where rpm spec parser un-escapes things that
    don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
    to fail.
    Related: rhbz#1443809


author: Peter Jones <pjones@redhat.com> - 2.02-0.61
changelog:
  - Fix some minor ia32 booting bugs
    Related: rhbz#1310763
    Related: rhbz#1411748
    Related: rhbz#1300009
  - Add support for non-Ethernet network cards
    Related: rhbz#1232432
  - Add support for http booting
    Resolves: rhbz#1232432
  - Fix efi module subpackage obsoletes/provides
    Resolves: rhbz#1447723
  - Make ppc modules subpackages use different directories on the filesystem.
    Resolves: rhbz#1455243


author: Peter Jones <pjones@redhat.com> - 8.28-17
changelog:
  - Fix the ordering of creating the debug entries, so they don't get picked
    when we're choosing kernel command line defaults on upgrades.
    Related: rhbz#1212128


author: rmarshall@redhat.com - 8.28-18
changelog:
  - Patched new-kernel-pkg so that kernel installations when MAKEDEBUG is
    set would put the debugging entries after the non-debugging entries.
    Resolves: #1285601
  - Re-numbered the last set of patches to go with the flow. No actual
    changes to the patches; just a git mv to rename.
  - Re-organized and updated the grubby man page contents to include some
    features that were not documented as well as correct typos and
    re-write some entries for better clarity.
    Resolves: #1232168


author: rmarshall@redhat.com - 8.28-21
changelog:
  - Resolve issues with the recent grubby logic patches that
    appeared on the ppc platform. Fix a problem that occurred
    on systems where no kernel update had ever been installed.
    Resolves: rhbz#1285601
  - Specify the actual prune_debug file in sources.
    Resolves: rhbz#1285601


author: rmarshall@redhat.com - 8.28-23
changelog:
  - Fixes --info flag on s390/s390x.
    Related: rhbz#1285601
  - Fixes --set-default-index on s390/s390x.
    Related: rhbz#1285601
  - Allows prune_debug to run on s390/s390x.
    Resolves: rhbz#1285601


author: Wim Taymans <wtaymans@redhat.com> - 1.4.5-6
changelog:
  - Fix h264 and h265 buffer size checks
  - Fix mpegts pat parsing and add more size checks
  Resolves: rhbz#1400898


author: Akira TAGOH <tagoh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release.
  - Using autotools isn't supported in upstream anymore. switching to cmake.
  - undefined reference issues seems gone now. (#813825)


author: Daniel P. Berrange <berrange@redhat.com> - 0.7.0-1
changelog:
  - Update to 0.7.0 release (rhbz #1416783)
  - Release held keys when loosing focus (rhbz #921008)
  - Avoid warnings when disconnecting (rhbz #1126825)
  - Workaround to avoid hang connecting to SPICE guest (rhbz #921330)
  - CVE-2017-5884 - fix bounds checking for RRE, hextile and
    copyrect encodings (rhbz #1425367)
  - CVE-2017-5885 - fix color map index bounds checking (rhbz #1425367)


author: Daniel P. Berrange <berrange@redhat.com> - 0.7.0-2
changelog:
  - Fix reserved data size (rhbz #1416783)
  - Fix inverted args in tests (rhbz #1416783)	  
  - Avoid sign extension problems (rhbz #1416783)
  - Fix crash with opening via GSocketAddress (rhbz #1416783)
  - Fix crash & error reporting during connection timeout (rhbz #1441120)
  - Fix incompatibility with libvncserver websockets (rhbz #921330)


author: Petr Stodulka <pstodulk@redhat.com> - 1.5-8
changelog:
  - Gzip overwrite existing files when user choose "no" on yes/no question.
    It's due to wrong dupicit declaration of yesno() function in gzip.h
    which is compiled wrong with -O2 option.
    Resolves: rhbz#1201689


author: Jakub Martisko <jamartis@redhat.com> - 1.5-10
changelog:
  - doc change: missing grep options are now mentioned in the zgrep 
    man pages/help message
    Resolves: #1437002


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-11
changelog:
  - don't use mmap(2) to avoid failures on i386 with 1GB files and larger (#672917)
  - fix package URL (#676962)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-12
changelog:
  - fix possible buffer overflows, integer overflows (CVE-2011-3630 CVE-2011-3631 CVE-2011-3632)
  - update man page


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-14
changelog:
  - do not allow to hardlink files across filesystems by default (#786719)
    (use -f option to override)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.4-3
changelog:
  - PIDFile should be stored at /run instead of the default location /var/run 
  - There is  long term plan that directory /var/run will not further exist in the future Fedora versions
  - Asked upstream to add -p <PID_FILE_location> switch to influence the location of the PID File
  - Set PIDFile=/var/run/haveged.pid This is needed as long -p option is not implemented
  - https://bugzilla.redhat.com/show_bug.cgi?id=770306#c10


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.5-1
changelog:
  - Update to the version 1.5
  - Main new feature is a run time verification of the produced random numbers
  - PIDFILE set to /run/haveged.pid
  - converted README and man page to UTF-8. Informed the upstream to fix it.


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.5-2
changelog:
  - BZ 850144
  - Introduce new systemd-rpm macros in haveged spec file
  - Fedora 19 changes the way how to work with services in spec files. 
  - It introduces new macros - systemd_post, systemd_preun and systemd_postun; 
  - which replace scriptlets from Fedora 18 and older
  - see https://fedoraproject.org/wiki/Packaging:ScriptletSnippets#Systemd


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.8-1
changelog:
  - Unversioned docdir change, more info on 
    https://fedoraproject.org/wiki/Changes/UnversionedDocdirs


author: Orion Poplawski <orion@cora.nwra.com> - 1.8.12-5
changelog:
  - Add patch to fix long double conversions on ppc64le (bug #1078173)
  - Run autoreconf for patches and to remove rpaths


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-18
changelog:
  - adjust buildroot location (guidelines)
  - disable static libraries (guidelines)
  - tweak default payload attributes (guidelines)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-19
changelog:
  - fix the release number noted for the previous changelog entry (#225884)
  - remove unapplied "classes" patch (#225884)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.2.1-1
changelog:
  - update to 3.2.1
    - merged all patches or equivalents
    - re-merged hesinfo, so we obsolete it now
    - adds a pkgconfig configuration file for libhesiod
  - correct inconsistent changelog dates, assuming day-of-week is correct
  - add build requirement on libidn-devel
  - package the license


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.13-2
changelog:
  - Bring back config patch to fix -debuginfo, it hasn't been upstreamed yet.
  - Drop empty TODO from docs.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7
changelog:
  - Fix: "Argument list too long" when using virt-v2v on Windows guest
    with French copy of Citrix installed
    related: rhbz#1145056


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8
changelog:
  - Tolerate corruption in some hives
    resolves: rhbz#1423436
  - Switch to using git to manage patches.


author: Jiri Popelka <jpopelka@redhat.com> - 3.11-3
changelog:
  - remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
  - remove outdated de & pt man pages
  - /usr move: use _bindir macro


author: Mukundan Ragavan <nonamedotc@fedoraproject.org> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Spec cleanup
  - drop unused configure options
  - Install desktop file (fixes bz#1541785)


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.7.1-5
changelog:
  - Bump http-parser release number to avoid people pulling EPEL package instead
    of RHEL package
    Resolves: rhbz#1479471


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.1-6
changelog:
  - Resolves: rhbz#1666381 - CVE-2018-12121 http-parser: nodejs: Denial of
                             Service with large HTTP headers [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.1-7
changelog:
  - Resolves: rhbz#1666024 - CVE-2018-7159 http-parser: nodejs: HTTP parser
                             allowed for spaces inside Content-Length header
                             values [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.1-8
changelog:
  - Backport needed test fixes
  - Related: rhbz#1666024 - CVE-2018-7159 http-parser: nodejs: HTTP parser
                            allowed for spaces inside Content-Length header
                            values [rhel-7]


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88.1
changelog:
  - Resolves: #1560609 - httpd: active connections being terminated when httpd
    gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
    honored
  - Remove index.html, add centos-noindex.tar.gz
  - change vstring
  - change symlink for poweredby.png
  - update welcome.conf with proper aliases


author: Lubos Uhliarik <luhliari@redhat.com>
changelog:
  - Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
    in mod_auth_digest
  - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
    bypass due to race condition
  - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency


author: Caolán McNamara <caolanm@redhat.com> - 1.3.2-6
changelog:
  - Resolves: rhbz#573516 have hunspell require hunspell-en to ensure
    at least one dictionary exists


author: Jay Fenlason <fenlason@redhat.com> - 1.7-1.2
changelog:
  - Split out lstopo into a -gui subpackage, so the hwloc base package
    does not pull in all of X.
    Resolves: rhbz910165


author: Don Zickus <dzickus@redhat.com> - 1.7-4
changelog:
  - Fix dangling symlink for hwloc-ls manpage
    Resolves: rhbz1081236
    Add desktop entry for lstopo
    Resolves: rhbz1229313


author: Michal Schmidt <mschmidt@redhat.com> - 1.11.8-4
changelog:
  - Rebase to 1.11.8.
  - Deal with rpaths using the method from Packaging Guidelines.
  - BuildRequire rdma-core-devel on s390(x).
  - Fix scriptlets related to hwloc-dump-hwdata.service.
  - Configure with /run as runstatedir.
  - Spec file cleanup.
  - Related: rhbz1482585


author: Caolán McNamara <caolanm@redhat.com> - 2.8.3-4
changelog:
  - Resolves: rhbz#813481 x86_64 valgrind spews, see rhbz#813780
  - Related: rhbz#813481 dump valgrind failure log


author: Jay Fenlason <fenlason@redhat.com> 1.5.7-8
changelog:
  - Add the -output patch to have programs use /var/cache/ibutils
    instead of /tmp
    Resolves: bz958569


author: Doug Ledford <dledford@redhat.com> - 1.5.7-12
changelog:
  - Change ExclusiveArch to ExcludeArch instead so we don't have
    the same problem again in the future
  - Update to the git repo tarball that we shipped in rhel6.6
  - Related: bz1123998


author: Martin Gieseking <martin.gieseking@uos.de> 0.30.0-1
changelog:
  - updated to release 0.30.0
  - dropped patch as it has been applied upstream
  - removed old buildroot stuff


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.3-1
changelog:
  - Rebase to upstream version 0.31.3.
  - This version includes multiple security fixes
    CVE-2017-5208, CVE-2017-5333, CVE-2017-5332, CVE-2017-6009,
    CVE-2017-6010, CVE-2017-6011
    resolves: rhbz#1430610


author: Mike FABIAN <mfabian@redhat.com> - 50.2-1
changelog:
  - Update to 50.2 maintenance release including support for new Japanese era Reiwa (令和).
  - Resolves: rhbz#1677092


author: Mike FABIAN <mfabian@redhat.com> - 50.2-2
changelog:
  - Fix rpmdiff failure: File /usr/src/debug/icu/source/i18n/unicode/selfmt.h
    relaxed permissions from 0644 to 0755 on all architectures
  - Related: rhbz#1677092


author: Robert Scheck <robert@fedoraproject.org> 1.0-0.21.pre4
changelog:
  - Added patch from upstream to choose first "running" interface,
    rather than first "up" interface (#1403025)
  - Added patch from upstream to support scales beyond 1 Gbps


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0.3-3
changelog:
  - IlmBase.pc: +Requires.private: gl glu
  - -devel: drop hard-coded libGL/pkgconfig deps, let rpm autodetect now


author: Doug Ledford <dledford@redhat.com> - 1.6.2-1
changelog:
  - Update to latest upstream release (resolves bz998816)
  - Revive all_hcas patch (otherwise would be a regression)
  - Fix ibnodes -h output (another regression, bz1054545)
  - Resolves: bz998816, bz1054545


author: Michal Schmidt <mschmidt@redhat.com> - 1.6.5-1
changelog:
  - Update to latest upstream release. Adds rdma-ndd daemon.
  - Rebase patches, cherry-pick fixes from upstream git.
  - Enable build on s390(x).
  - Fixed bogus changelog dates.
  - Add Conflicts with old rdma. It needs to be aware of rdma-ndd.
  - Resolves: bz1169968


author: Honggang Li <honli@redhat.com> - 1.6.7-1
changelog:
  - Rebase to latest upstream release 1.6.7.
  - Remove patches merged into upstream release.
  - Remove sub-package rdma-ndd as it merged into rdma-core.
  - Resolves: bz1382809


author: Jay Fenlason <fenlason@redhat.com> -3.2-2_ga8c3e3e_open.2
changelog:
  - Update the -build patch and this spec file so the library is built
    with the standard optimization and security flags.
    Resolves: rhbz1070814


author: Honggang Li <honli@redhat.com> - 3.3-22_g4abbc60_open.1
changelog:
  - Rebase to latest upstream release.
  - Link against system libuuid library.
  - Spec file cleanup.
  - Related: bz1272022


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.38-1
changelog:
  - ifdown-eth: we need to flush global scope as well
  - killproc/status: add missing '-b <binary>' option
  - specfile: mark 'rwtab' and 'statetab' as config files
  - spec: we need newer lvm
  - rwtab: add /var/lib/systemd/timers
  - ifup-eth: remove quote marks
  - 9.70-sync: Move everything to github
  - 9.70-sync: rwtab updated
  - 9.70-sync: service file updated
  - 9.70-sync: syconfig.txt updated
  - 9.70-sync: systemd/rhel-import-state updated
  - 9.70-sync: sysconfig/network-scripts/* updated - part 2
  - 9.70-sync: sysconfig/network-scripts/* updated - part 1
  - 9.70-sync: rc.d/init.d/network updated
  - 9.70-sync: rc.d/init.d/netconsole updated
  - 9.70-sync: rc.d/init.d/functions updated
  - 9.70-sync: ipv6-6to4.howto example updated
  - 9.70-sync: examples/networking/ifcfg-bridge updated
  - network: load NetworkManager connection via dbus
  - network: check for running NetworkManager via dbus


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.39-1
changelog:
  - sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
  - DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
  - re-add missing $HOSTNAME initialization
  - ifup: add support for VLAN_EGRESS_PRIORITY_MAP
  - rhel-autorelabel: synchronize cached writes before reboot


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.40-1
changelog:
  - require 'redhat-release' instead of /etc/system-release & conflict with older versions
  - ifup-post: always update 'nameserver' & 'search' entries in /etc/resolv.conf
  - systemd/system: symlinks for initscripts' services removed
  - *.old extension added to list of ignored files
  - ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
  - init.d/functions: convert2sec() function added
  - init.d/functions: is_true() & is_false() extended by ON/OFF support
  - usleep(1) calls replaced with sleep(1) calls
  - network-scripts: DBus calls forwarded to /dev/null
  - network-scripts: firewall-cmd replaced with DBus calls
  - ARPUDATE option introduced


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.41-1
changelog:
  - ifdown-post: fix logical error in commit 5d61564
  - network-functions: use POSIX forwarding instead of bash-ism


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.42-1
changelog:
  - rhel-autorelabel: set UEFI boot order (BootNext) same as BootCurrent
  - network-functions: use tr to upper case strings rather than awk
  - sysconfig/readonly-root: Clarify the usage of readonly-root
  - network-functions: add error messages for bonding installation
  - sysctl.conf.s390: drop SHMALL and SHMMAX
  - network.service: 'reload' removed
  - rhel-readonly.service: target name for random seed fixed
  - init.d/functions: fix sourcing for ksh


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.45-1
changelog:
  - network: parsing of /proc/mounts returned (bug #1572659)
  - netconsole: LSB header added (bug #1508489)
  - ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-4.el7
changelog:
  - Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
    - ipa client uninstall: clean the state store when restoring hostname
  - Resolves: #1598117 client uninstall fails when installed using non-existing hostname
    - ipa client uninstall: clean the state store when restoring hostname
  - Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
    - Fix regression: Handle unicode where str is expected
  - Resolves: #1591824 Installation of replica against a specific master
    - Query for server role IPA master
    - Only create DNS SRV records for ready server
    - Delay enabling services until end of installer
    - replicainstall: DS SSL replica install pick right certmonger host
    - Fix CA topology warning
    - Fix race condition in get_locations_records()
    - Fix DNSSEC install regression
    - Handle races in replica config
  - Resolves: #1591647 Increase WSGI worker process count
    - Use 4 WSGI workers on 64bit systems
  - Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
    - Tune DS replication settings
  - Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in <module>#012
    - Removing filesystem encoding check
  - Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
    - Removing filesystem encoding check


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-5.el7
changelog:
  - Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in <module>#012
    - Removing filesystem encoding check
  - Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
    - Removing filesystem encoding check


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-6.el7
changelog:
  - Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
    - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
  - Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
    - Re-open the ldif file to prevent error message
  - Resolves: #1608783 ipa trust-add fails in FIPS mode.
    - Move fips_enabled to a common library to share across different plugins
    - ipasam: do not use RC4 in FIPS mode


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-7.el7
changelog:
  - Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
    - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
  - Resolves: #1598662 Replica installation fails with connection refused error 
    - Do not set ca_host when --setup-ca is used
  - Resolves: #1577108 Improve Custodia client and key distribution handling
    - Fix KRA replica installation from CA master
  - Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
    - Fix ipa-replica-install when key not protected by PIN
  - Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
    - uninstall -v: remove Tracebacks
  - Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
    - ipa commands: print 'IPA is not configured' when ipa is not setup
    - Disable message about log in ipa-backup if IPA is not configured
  - Resolves: #1591824 Installation of replica against a specific master
    - Do not set ca_host when --setup-ca is used
  - Resolves: #1594141 Replication races in DogtagInstance.setup_admin
    - Catch ACIError instead of invalid credentials
  - Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
    - DS replication settings: fix regression with <3.3 master
  - Resolves: #1623113 Replica install: certmonger sometimes fails
    - Wait for client certificates
    - Auto-retry failed certmonger requests


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-8.el7
changelog:
  - Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
    - Clear next field when returnining list elements in queue.c
    - Add cmocka unit tests for ipa otpd queue code
  - Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
    - Clear next field when returnining list elements in queue.c
    - Add cmocka unit tests for ipa otpd queue code
  - Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
    - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-9.el7
changelog:
  - Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
    - ipa-replica-install: properly use the file store
  - Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
    - ipa-replica-install: fix pkinit setup
  - Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
    - Update minimum selinux-policy to 3.13.1-224


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-10.el7
changelog:
  - Resolves: 1630361 PKINIT fails in FIPS mode
    - Ensure that public cert and CA bundle are readable
    - Always make ipa.p11-kit world-readable
    - Make /etc/httpd/alias world readable & executable
    - Fix permission of public files in upgrader


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-10.el7_6.2
changelog:
  - Resolves: 1659492 searching for ipa users by certificate fails
    - ipaldap.py: fix method creating a ldap filter for IPACertificate
    - ipatests: add xmlrpc test for user|host-find --certificate
  - Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
    - ipa upgrade: handle double-encoded certificates
    - ipatests: add upgrade test for double-encoded cacert
    - ipatests: fix TestUpgrade::test_double_encoded_cacert
  - Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
    - Add a shared-vault-retrieve test
    - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
  - Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
    - ipatest: add test for ipa-pkinit-manage enable|disable
    - PKINIT: fix ipa-pkinit-manage enable|disable
  - Resolves: 1659499 automember-rebuild crashes
    - Find orphan automember rules
  - Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
    - replication: check remote ds version before editing attributes


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-10.el7_6.3
changelog:
  - Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
    - Update mod_nss cipher list so there is overlap with a 4.x master
  - Resolves: 1672342 Fix compile issue with new 389-ds	
    - ipa-sidgen: make internal fetch_attr helper really internal	
  - Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
    - Add workaround for slow host/service del
    - Optimize cert remove case
  - Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
    - replica installation: add master record only if in managed zone
    - ipatests: add test for replica in forward zone


author: Michal Ruprich <mruprich@redhat.com> - 3.1.7-1
changelog:
  - Related: #913329 - [RFE] include iperf3 in RHEL 7
                     - adding latest version before including iperf3 in RHEL-7


author: Michal Ruprich - 3.1.7-2
changelog:
  - Related: #913329 - [RFE] include iperf3 in RHEL 7
                     - adding requires to spec file for devel package


author: Boris Ranto <branto@redhat.com> - 0:1.8.15-7
changelog:
  - New release (0:1.8.15-7)
  - ID:437 - sel: Fix "sel time set <time>"
  - ID 408 - fix sel list last X listing


author: Josef Ridky <jridky@redhat.com> - 0:1.8.18-3
changelog:
  - Fix issues with warning: dereferencing type-punned pointer 
    will break strict-aliasing rules from RPMDiff


author: Phil Sutter <psutter@redhat.com> [4.11.0-5.el7]
changelog:
  - ip neigh: allow flush FAILED neighbour entry (Matteo Croce) [1469945]
  - tc: fix typo in manpage (Phil Sutter) [1417162]
  - link_gre6: really support encaplimit option (Phil Sutter) [1459600]
  - tc: m_xt: Prevent a segfault in libipt (Phil Sutter) [1465599]


author: Phil Sutter <psutter@redhat.com> [4.11.0-6.el7]
changelog:
  - link_gre6: Fix for changing tclass/flowlabel (Phil Sutter) [1487486]
  - utils: return default family when rtm_family is not RTNL_FAMILY_IPMR/IP6MR (Stefano Brivio) [1475762]
  - netns: avoid directory traversal (Phil Sutter) [1468529]
  - Disable -fexceptions CFLAG passed by build system (Phil Sutter) [1418715]


author: Phil Sutter <psutter@redhat.com> [4.11.0-9.el7]
changelog:
  - lib/libnetlink: update rtnl_talk to support malloc buff at run time (Hangbin Liu) [1380803]
  - lib/libnetlink: re malloc buff if size is not enough (Hangbin Liu) [1380803]
  - iplink: double the buffer size also in iplink_get() (Hangbin Liu) [1380803]
  - iplink: check for message truncation in iplink_get() (Hangbin Liu) [1380803]
  - iproute: Add support for extended ack to rtnl_talk (Hangbin Liu) [1380803]
  - libnetlink: drop unused parameter to rtnl_dump_done (Hangbin Liu) [1380803]
  - netlink: Change rtnl_dump_done to always show error (Hangbin Liu) [1380803]


author: Phil Sutter <psutter@redhat.com> [4.11.0-10.el7]
changelog:
  - tc: flower: add support for matching on ip tos and ttl (Kamal Heib) [1456539]
  - iplink: Update usage in help message (Kamal Heib) [1456539]
  - tc: flower: add support for tcp flags (Kamal Heib) [1456539]
  - devlink: Add option to set and show eswitch encapsulation support (Kamal Heib) [1456539]
  - pedit: Introduce ipv6 support (Kamal Heib) [1456539]
  - pedit: Check for extended capability in protocol parser (Kamal Heib) [1456539]
  - pedit: Do not allow using retain for too big fields (Kamal Heib) [1456539]
  - pedit: Fix a typo in warning (Kamal Heib) [1456539]
  - tc: Reflect HW offload status (Kamal Heib) [1456539]
  - devlink: Add support for pipeline debug (dpipe) (Kamal Heib) [1456539]
  - devlink: Change netlink attribute validation (Kamal Heib) [1456539]
  - Update linux headers (Phil Sutter) [1456539]


author: Phil Sutter <psutter@redhat.com> [4.11.0-11.el7]
changelog:
  - ss: add AF_VSOCK support (Stefano Brivio) [1472759]
  - ss: allow AF_FAMILY constants >32 (Stefano Brivio) [1472759]
  - uapi: add include linux/vm_sockets_diag.h (Stefano Brivio) [1472759]
  - iproute: build more easily on Android (Phil Sutter) [1472759]


author: Phil Sutter <psutter@redhat.com> [4.11.0-12.el7]
changelog:
  - man: tc-csum.8: Fix inconsistency in example description (Phil Sutter) [1417162]
  - link_gre6: Detect invalid encaplimit values (Phil Sutter) [1459600]


author: Jakub Čajka <jcajka@redhat.com> - 2.4.8-1
changelog:
  - Resolves: #1182038 - [7.2 FEAT] iprutils package update - ppc64/ppc64le
  - Resolves: #1183460 - RHEL7.1 BE: iprutils: Set known zeroed after format


author: Sinny Kumari <skumari@redhat.com> - 2.4.11.1-1
changelog:
  - Resolves: #1274367 - [7.3 FEAT] iprutils package update
  - Resolves: #1297921 - IPR: Raid migration fails to kick while executing through command line


author: Sinny Kumari <skumari@redhat.com> - 2.4.12.1-1
changelog:
  - Resolves: #1364131 - Integrate various important bug fixes for iprutils in
    RHEL7.3 by updating iprutils to 2.4.12


author: Sinny Kumari <skumari@redhat.com> - 2.4.16.1-1
changelog:
  - Resolves: #1587834 - vpdupdate takes over an hour on system with 104 drive
  - Resolves: #1521052 - iprutils package update for POWER
  - Resolves: #1547891 - iprconfig unable to Download microcode on all applicable devices
  - Resolves: #1576013 - iprconfig tools shows wrong error message, while creating raid using RI SSDs and normal SSDs


author: Thomas Woerner <twoerner@redhat.com> - 6.19-5
changelog:
  - New service sub package to provide the ipset service (RHBZ#1136257)
    Service and start-stop script from F-24
  - Fixed ipset package summary (RHBZ#1195171)
    Spec file derived from F-24


author: Thomas Woerner <twoerner@redhat.com> - 6.19-6
changelog:
  - Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
  - Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
  - No save on reload, but legacy save action (RHBZ#1136257)


author: Thomas Woerner <twoerner@redhat.com> - 6.29-1
changelog:
  - Rebase to 6.29 (RHBZ#1351299)
  - Fixes:
    - Backport ipset capability to run in namespaces (RHBZ#1226051)
    - Fix service save with empty ipset list and existing ipset save file
      (RHBZ#1377621)
    - Fix internal error at printing to output buffer (RHBZ#1395865)


author: Stefano Brivio <sbrivio@redhat.com> - 6.38-1
changelog:
  - Rebase to 6.38 (RHBZ#1557600):
    - hash:ipmac type support added to ipset, userspace part (Tomasz Chilinski)
  - Refactor /etc/sysconfig/ipset.start-stop
  - Fixes:
    - IPSet Service Monolithic Operation (RHBZ#1440741)
    - "systemctl start ipset" doesn't handle existing ipset's having counters
      (RHBZ#1502212)


author: Stefano Brivio <sbrivio@redhat.com> - 7.1-1
changelog:
  - Rebase to 7.1 (RHBZ#1649080):
    - Add compatibility support for strscpy()
    - Correct the manpage about the sort option
    - Add missing functions to libipset.map
    - configure.ac: Fix build regression on RHEL/CentOS/SL (Serhey Popovych)
    - Implement sorting for hash types in the ipset tool
    - Fix to list/save into file specified by option (reported by Isaac Good)
    - Introduction of new commands and protocol version 7, updated kernel include files
    - Add compatibility support for async in pernet_operations
    - Use more robust awk patterns to check for backward compatibility
    - Prepare the ipset tool to handle multiple protocol version
    - Fix warning message handlin
    - Correct to test null valued entry in hash:net6,port,net6 test
    - Library reworked to support embedding ipset completely
    - Add compatibility to support kvcalloc()
    - Validate string type attributes in attr2data() (Stefano Brivio)
    - manpage: Add comment about matching on destination MAC address (Stefano Brivio)
      (RHBZ#1649079)
    - Add compatibility to support is_zero_ether_addr()
    - Fix use-after-free in ipset_parse_name_compat() (Stefano Brivio) (RHBZ#1649073)
    - Fix leak in build_argv() on line parsing error (Stefano Brivio) (RHBZ#1649073)
    - Simplify return statement in ipset_mnl_query() (Stefano Brivio) (RHBZ#1649073)
    - tests/check_klog.sh: Try dmesg too, don't let shell terminate script (Stefano Brivio) 
  - Fixes:
    - Fix all shellcheck warnings in init script (RHBZ#1649073)
    - Make error reporting consistent, introduce different severities (RHBZ#1649877)
    - While restoring, on invalid entries, remove them and retry (RHBZ#1650297)
    - Fix covscan SC2166 warning in init script (RHBZ#1649073)
    - Hardcode triggerin, triggerun versions for ipset-service (RHBZ#1646666)


author: Phil Sutter - 1.4.21-20
changelog:
  - Prevent iptables.service and ip6tables.service from running in parallel
    (RHBZ#1486803)
  - Don't restart services upon upgrade (RHBZ#1380141)


author: Phil Sutter - 1.4.21-25
changelog:
  - Fix for stopping iptables and ip6tables at the same time (RHBZ#1560012)
  - Propagate errors on service stop (RHBZ#1560012)


author: Phil Sutter - 1.4.21-27
changelog:
  - libxt_tcpmss: Detect invalid ranges (RHBZ#1128510)
  - ip(6)tables-save/restore: Exit if invalid option was given (RHBZ#1465078)
  - ip(6)tables-save/restore: Require value to -W option (RHBZ#1465078)
  - ip(6)tables-save/restore: Don't accept -W without -w (RHBZ#1465078)
  - Ignore security table when setting policies (RHBZ#1494012)
  - Fix spec file changing SRPM content (RHBZ#1531290)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-7
changelog:
  - ping hung when it cannot receive echo reply (#1362463)
  - arping documentation inconsistency (#1351704)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-9
changelog:
  - IPv4 vs IPv6 inconsistency on return value of ping (#1362388)
  - ping6 does not use device specified with -I parameter (#1371824, #1424965)
  - double cap_free call in ping_common.c (#1410114)
  - ping assumes EACCESS errors are due to broadcast addresses (#1387315)
  - ping -t with multicast address without effect on ppc64 (#1373333)
  - arping -c <n> does not exit when the device is deleted (#1387542)


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-6
changelog:
  - 1507945 force start iscsiuio for boot session recovery with qedi
  - 1457359 start systemd socket listeners, otherwise if iscsid is started
    directly iscsiuio doesn't activate as expected


author: Brian C. Lane <bcl@redhat.com> 1.0.9-1
changelog:
  - Add python-isomd5sum package with python bindings
  - Add callback and interrupt support to the python library
  - Add RPM_OPT_FLAGS to CFLAGS and update makefile to use CFLAGS from environment


author: Brian C. Lane <bcl@redhat.com> 1.0.10-1
changelog:
  - Fix for gcc type-punned and sizeof pointer warnings. (bcl)
  - Add exit code 2 for user abort (#907600) (bcl)
  - Cleanup TABs and update Copyrights (bcl)
  - Standardize *FLAGS in Makefile (ryan)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171211)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)


author: Josef Ridky <jridky@redhat.com> - 1.900.1-30
changelog:
  - Multiple security fixes (fixed by thoger):
    CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
    CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
    CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
    CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
    CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
    CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
  - Fix implicit declaration warning caused by security fixes above


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b09.
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1
changelog:
  - Remove CVE-2018-3639 mitigation due to performance regression and
      OpenJDK position on speculative execution vulnerabilities.
      https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea
changelog:
  - Revert SSBD removal for now, until appropriate messaging has been decided.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b05.
  - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
  - Revise b05 snapshot to include JDK-8236178.
  - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b07.
  - Switch to GA mode for final release.
  - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Resolves: rhbz#1785753


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-5
changelog:
  - Moving from rpmfusion-free to Fedora because it will be free of known patents
    in all countries from 2012-04-04 onwards
  - Changed license from GPL to GPLv2+ and included up-to-date license file


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.5.1-1
changelog:
  - New upstream release
  - Updated nopprof patch to match new release
  - Fixed a few bogus changelog entries


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8
changelog:
  - Fix vlock doesn't perform PAM account management or credential reinitialization
    Resolves: #1032140


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14
changelog:
  - Replace CtrlL_Lock with Caps_Lock in generated us.map
    Resolves: #1441411
  - Improve man pages and usage messages quality and consistency
    Resolves: #949015


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.4.1.el7]
changelog:
  - [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
  - [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
  - [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
  - [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
  - [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
  - [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
  - [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
  - [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
  - [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
  - [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
  - [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
  - [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
  - [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
  - [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
  - [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
  - [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
  - [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
  - [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
  - [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
  - [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
  - [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
  - [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
  - [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
  - [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
  - [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
  - [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.5.1.el7]
changelog:
  - [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.7.1.el7]
changelog:
  - [scsi] lpfc: do not set queue->page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
  - [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.8.1.el7]
changelog:
  - [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.9.1.el7]
changelog:
  - [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
  - [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.10.1.el7]
changelog:
  - [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
  - [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
  - [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
  - [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
  - [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
  - [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
  - [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
  - [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
  - [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
  - [powerpc] rtas: Fix a potential race between CPU-Offline & Migration (Steve Best) [1669044 1650249]
  - [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
  - [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
  - [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
  - [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
  - [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
  - [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
  - [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
  - [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
  - [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
  - [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
  - [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
  - [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
  - [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
  - [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
  - [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
  - [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
  - [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
  - [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
  - [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
  - [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
  - [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
  - [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
  - [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.11.1.el7]
changelog:
  - [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
  - [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
  - [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
  - [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
  - [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
  - [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
  - [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.12.1.el7]
changelog:
  - [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
  - [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
  - [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
  - [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
  - [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
  - [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
  - [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
  - [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
  - [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
  - [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
  - [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
  - [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
  - [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
  - [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
  - [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
  - [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
  - [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
  - [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
  - [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
  - [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
  - [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
  - [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
  - [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
  - [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
  - [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
  - [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
  - [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
  - [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
  - [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
  - [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
  - [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
  - [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
  - [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
  - [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
  - [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]


author: Pingfan Liu <piliu@redhat.com> 2.0.15-18
changelog:
  kdumpctl: Rebuild initramfs if loaded kernel modules changed
  dracut-module-setup.sh: don't include multipath-hostonly
  Add document to declare FCoE support (V2)
  Revert "Add document to declare FCoE support"
  Add document to declare FCoE support
  makedumpfile: fix makedumpfile Not tainted in 2nd kernel


author: Pingfan Liu <piliu@redhat.com> 2.0.15-20
changelog:
  - makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
  - dracut-module-setup: Fix DRM module inclusion test for hyper-v
  - kdumpctl: remove some cmdline inheritage from 1st kernel
  - kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
  - kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
  - Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
  - dracut-module-setup: Fix test for inclusion of DRM modules


author: Pingfan Liu <piliu@redhat.com> 2.0.15-22
changelog:
  - doc/kdump.conf: Local dump path should be <mnt>/<path>/%HOST_IP-%DATE
  - Update help text to indicate --mem-usage is supported on archs other than x86_64
  - Add missing usage info
  - Rewrite kdump's udev rules, use reload instead of restart
  - kdumpctl: Add reload support


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-23
changelog:
  - kdump: fix an error that can not parse the e820 reserved region
  - Doc: add document to declare atlantic support


author: David Howells <dhowells@redhat.com>
changelog:
  - Adjust the manual page for 'keyctl unlink' to show keyring is optional.
  - Add --version support for the keyutils version and build date.


author: David Howells <dhowells@redhat.com> - 1.5.4-1
changelog:
  - Fix the keyctl padd command and similar to handle binary input.
  - Make keyctl show able to take a keyring to dump.
  - Make keyctl show able to take a flag to request hex key IDs.
  - Make keyctl show print the real ID of the root keyring.


author: David Howells <dhowells@redhat.com> - 1.5.6-1
changelog:
  - Fix the request-key.conf.5 manpage.
  - Fix the max depth of key tree dump (keyctl show) [BZ 1002761].
  - The input buffer size for keyctl padd and pinstantiate should be larger [BZ 1002761].
  - Add keyctl_invalidate.3 manpage [BZ 1002761].


author: David Howells <dhowells@redhat.com> - 1.5.7-1
changelog:
  - Provide a utility function to find a key by type and name.
  - Allow keyctl commands to take a type+name arg instead of a key-id arg.
  - Add per-UID get_persistent keyring function [BZ 1014739].


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-17
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1468305
  - weak-modules: implement dry run by symlink restoration.
    Resolves: rhbz#1477073


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-18
changelog:
  - depmod: external directories support.
    Resolves: rhbz#1361857
  - BuildRequires automake autoconf libtool.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-20
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1510058


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-23
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1619889.


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-32
changelog:
  - Include preauth name in trace output if possible
  - Update cert generation scripts to work on modern openssl
  - Fix per-request preauth scoping
  - Add test case for PKINIT DH renegotiation
  - Echo KDC cookies in preauth tryagain
  - Fall back to other preauth mechanisms after failures
  - Resolves: #1540130


author: Jakub Martisko <jamartis@redhat.com> - 3.4.2-7
changelog:
  - fix issue with creation of srpm where __isa_bits on noarch leads to an error
  - Related: rhbz#1176026


author: Richard Hughes <richard@hughsie.com> 2.5-1
changelog:
  - Update to new upstream version.
  - Added a reference for Mac MLU tag
  - Added a way to read the profile creator from header
  - Added error descriptions on cmsSmoothToneCurve
  - Added identity curves support for write V2 LUT
  - Added new cmsPlugInTHR() and fixed some race conditions
  - Added TIFF Lab16 handling on tifficc
  - Fixed a bug on big endian platforms not supporting uint64 or long long.
  - Fixed a multithead bug on optimization
  - Fixed devicelink generation for 8 bits
  - Fixed some 64 bit warnings on size_t to uint32 conversions
  - Rendering intent used when creating the transform is now propagated to profile
  - RGB profiles store only one copy of the curve to save space
  - Transform2Devicelink now keeps white point when guessing deviceclass is enabled
  - Update black point detection algorithm to reflect ICC changes
  - User defined parametric curves can now be saved in ICC profiles


author: Andrew Hughes <gnu.andrew@redhat.com> - 2.6-3
changelog:
  - Run tests as part of %check, fixing Makefile to set LD_LIBRARY_PATH
  - Use upstream endianness fix to avoid ppc64le being built big-endian
  - Resolves: #1250914


author: Fridolin Pokorny <fpokorny@redhat.com> - 458-3
changelog:
  - Expanded lessecho usage (#948597)
  - Added lessfilter info to man (#948597)
  - Expanded lesskey usage (#948597)
  - Added --old-bot to help (#948597)


author: Jozef Mlich <jmlich@redhat.com> - 458-5
changelog:
  - fixing regression in 72dfd3f63594e1d4c9416180a95c47ae583934c6
    incorrect parsing of commandline arguments
  - Resolves #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-8
changelog:
  - changes introduced in less-458-old-bot-in-help.patch
    wasn't compiled in. It is necessary to use mkhelp tool.
    Resolves: #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-9
changelog:
  - The --use-backslash option documented in the man page
    was missing from online help for less.
    Resolves: #1109090


author: Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6
changelog:
  - Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
  - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
  - Added RFE - lftp configurations for restricting each SSL/TLS 
    version (#1182987)
  - Fixed bogus dates of this SPEC


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp


author: Michal Ruprich - 4.4.8-10
changelog:
  - Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                      - Patch edited so that it corresponds to upstream


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11
changelog:
  - Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
  - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.1.5-3
changelog:
  - libXt 1.1.5
  - Merge F25:
  - Fix duplicate documentation (#1001246) by not using %doc
  - Turn on verbose build output via V=1 make
  - Remove %defattr
  - Use %?_isa in explicit package deps
  - Exclude docs from main package


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-8
changelog:
  - Change the source location to the new upstream on fedorahosted
  - import a new tarball from the new source


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-10
changelog:
  - Un-revert the RHEL-specific changes. (Jeff Moyer)
  - Make devel sub-package depend on specific ver-rel (Jeff Moyer)
  - Resolves: bz#905462


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-12.2
changelog:
  - Get rid of sparc support (we don't build it) (Jeff Moyer)
  - Implement proper support for aarch64 (Jeff Moyer)
  - Resolves: bz#1026429


author: Pavel Raiskup <praiskup@redhat.com> - 3.1.2-11
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.9-1
changelog:
  - Fix hardcoded reference to gcc (timo.gurr)
  - Catch and ignore partial failures in LVM tests' cleanups (vpodzime)
  - Fix hardcoded reference to pkg-config (timo.gurr)
  - Make GObject introspection optional (vpodzime)
  - Do not link libraries required by plugins to the GI files (vpodzime)
  - Make sure the whole build status image is shown (vpodzime)
  - Show CI status in README (at the GH repo's front page) (vpodzime)
  - Always require the libudev pkg (tgurr)
  - Make sure we give kernel time to fully setup zram device(s) (vpodzime)
  - fs_test.py: Close FDs when calling utilities (tasleson)
  - crypto.c: Correct segmentation fault (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.10-1
changelog:
  - Only enable partition size tolerance with alignment (vpodzime)
  - Limit the requested partition size to maximum possible (vpodzime)
  - Do not verify vfat FS' size after generic resize (vpodzime)
  - Specify tolerance for partition size (kailueke)
  - Only use the exact constraint if not using any other (vpodzime)
  - Check resulting FS size in tests for generic FS resize (vpodzime)
  - Query setting FS label support and generic relabeling (kailueke)
  - Do not strictly require all FS utilities (vpodzime)
  - Compile everything with the C99 standard (vpodzime)
  - Add partition resize function (kailueke)
  - Generic Check and Repair Functions (kailueke)
  - Query functions for FS resize and repair support (kailueke)
  - Update the project/source URL in the spec file (vpodzime)
  - Add functions for opening/closing TrueCrypt/VeraCrypt volumes (vpodzime)
  - Adapt to a change in behaviour in new libmount (vpodzime)
  - Try RO mount also if we get EACCES (vpodzime)
  - Size in bytes for xfs_resize_device (kailueke)
  - src/plugins/Makefile.am: Remove hard coded include path in /usr prefix (tristan.vanberkom)
  - Fixed include for libvolume_key.h (tristan.vanberkom)
  - Ignore parted warnings if possible (squimrel)
  - bcache tests: Remove FEELINGLUCKY checks (tasleson)
  - kbd.c: Code review corrections (tasleson)
  - kbd.c: Make bd_kbd_bcache_create work without abort (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.11-1
changelog:
  - Make the KbdZRAMDevicesTestCase inherit from KbdZRAMTestCase (vpodzime)
  - Allow non-source directory builds (kailueke)
  - Add a way to disable runtime dependency checks (vpodzime)
  - Link to GObject even if no plugin is activated (kailueke)
  - Skip zram tests on Rawhide (vpodzime)
  - Keep most utilities available for tests (vpodzime)
  - Use new libmount function to get (un)mount error message (vtrefny)
  - Update the documentation URL (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.12-1
changelog:
  - Own directories /etc/libblockdev and /etc/libblockdev/conf.d (vtrefny)
  - Wait for resized partition (kailueke)
  - Make sure the device is opened for libparted (vpodzime)
  - Fix label check in swap_test (vtrefny)
  - Use "run_tests" script for running tests from Makefile (vtrefny)
  - Add a script for running tests (vtrefny)
  - Tests: Move library initialization to setUpClass method (vtrefny)
  - Stop skipping FAT resize tests on rawhide (vtrefny)
  - Close filesystem before closing the partition during FAT resize (vtrefny)
  - Use mountpoint for "xfs_info" calls (vtrefny)
  - Use libmount cache when parsing /proc/mounts (vtrefny)
  - Add some space for the CI status (vpodzime)
  - Confirm the force when creating PVs in FS tests (vpodzime)
  - Skip vgremove tests on 32bit Debian (vtrefny)
  - Fix names of backing files in tests (vtrefny)
  -  Fix checking for available locales (vtrefny)
  - Skip dependency checking in mpath tests on Debian (vtrefny)
  - Skip zRAM tests on Debian (vtrefny)
  - Skip the test for device escrow on Debian too (vtrefny)
  - Skip free region tests on Debian too (vtrefny)
  - Fix redirecting command output to /dev/null in tests (vtrefny)
  - Try harder to unmount devices in test cleanup (vtrefny)
  - Require only plugins that are needed for given test (vtrefny)
  - Try to get distribution info from "PrettyName" if "CPEName" isn't available (vtrefny)
  - Use -ff when creating PVs in FS tests (vpodzime)
  - Sync spec with downstream (vpodzime)


author: Steve Grubb <sgrubb@redhat.com> 0.7.5-2
changelog:
  - resolves: #1185610 - libcap-ng: update caps table for newer kernels
  - Fix a leaked FD in upstream code


author: Nikola Forró <nforro@redhat.com> - 0.41-12
changelog:
  - resolves: #1406927
    start cgred service after nss-user-lookup target
    show warnings about unsuccessful user/group lookups


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - show warning when "tasks" file can not be opened
  - extend description of "controllers" section in cgrules.conf man page
    resolves: #1561736


author: Matej Mužila <mmuzila@redhat.com> - 5.3.21-23
changelog:
  - Mention in man page that care should be taken when running db_hotbackup
    with -c option. Resolves: rhbz#1460077


author: Tom Lane <tgl@redhat.com> 0.8.3-4
changelog:
  - Do not use -ffast-math; it breaks things and seems quite unlikely to offer
    any useful performance benefit for this type of package, anyway
  Resolves: #629964


author: Tom Lane <tgl@redhat.com> 0.8.4-1
changelog:
  - Update to version 0.8.4 (seems to contain only configure-support updates,
    but might as well adopt it)
  - Fix memory leak due to incorrect test in _is_row_fetched()
  Related: #733413


author: Richard W.M. Jones <rjones@redhat.com> - 1.12-13.1.el7
changelog:
  - Add patch to fix multilib conflicts in dnet-config
    resolves: rhbz#1059593
  - Remove RPM cruft from the spec file.


author: Tom Hughes <tom@compton.nu> - 20120410-1
changelog:
  - Update to 20120410 release
  - Drop the 0. from the version - the dates are the upstream versions
  - Remove explicit dependencies on elfutils-libelf


author: Kamil Dudka <kdudka@redhat.com> 3.0-7.20120601cvs
changelog:
  - Update to 3.0 (20120601 snap)
  - fix crash of el_insertstr() on incomplete multi-byte sequence (#840598)


author: Pawel Salek <pawsa@theochem.kth.se> - 1.0.4-14
changelog:
  - fix bug 599428: use 'version' macro instead of '_version'.
  - Use SSL patch by Ludwig Nussel of SUSE (bugzilla att id 399130).


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.11-2
changelog:
  - Make a patch out of Michal's pkgconfig support.
  - Modernize the configure.ac file for Automake >= 1.13.
  - Respect the Fedora CFLAGS
    https://bugzilla.redhat.com/show_bug.cgi?id=908096


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.15-3
changelog:
  - Get the package closer to what upstream intended:
    - Do not move the headers into a subfolder of /usr/include
    - Make a libev-libevent-devel subpackage to contain the libevent
      compatibility header, so that only this subpackage conflicts with
      libevent-devel, not all of libev-devel
    - Drop the pkgconfig file, as upstream rejected it several times already.


author: Steve Dickson <steved@redhat.com> 2.0.14-1
changelog:
  - Updated to latest stable upstream version: 2.0.14-stable (bz 727129)
  - Removed the installion of the outdate man pages and the latex raw docs.
  - Corrected where the other doc are installed.


author: Steve Dickson <steved@redhat.com> 2.0.18-1
changelog:
  - Updated to latest stable upstream version: 2.0.18-stable
  - Moved documentation into its own rpm (bz 810138)


author: Dan Horák <dhorak@redhat.com> - 3.0.13-16
changelog:
  - Drop ppc64le from the multilib list
  - Use additional BR: only in ppc64le build
  - Resolves: RHBZ1116945


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-5
changelog:
  - add FIPS DRBG implementation
  - run the FIPS POST tests in shared library constructor
  - make it possible to run the test suite in the FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-13
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-14
changelog:
  - add DRBG CAVS driver and other necessary CAVS driver updates (#1172568)
  - allow ath reinitialization in FIPS mode
  - allow for auto-initialization of DRBG


author: Iryna Shcherbina <ishcherb@redhat.com> - 1:1.0.1-0.2.20180226gitb029c24
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Adam Jackson <ajax@redhat.com> - 1.0.1-0.6.git5baa1e5
changelog:
  - Enable %check for all but ppc64 and s390x, which has known but low-impact
    failures
  - Simplify %release


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12.el7_6.1
changelog:
  - v2v: update documentation regarding SHA-2 certificates in Windows 7 and
    Windows Server 2008 R2
    resolves: rhbz#1632788
  - v2v: fix rhev-apt firstboot command for Windows
    resolves: rhbz#1625216


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-5
changelog:
  - Rebase to libguestfs 1.40.2 in RHEL 7.7.
    resolves: rhbz#1621895
  - v2v: uninstall the VMware Tools correctly
    resolves: rhbz#1465849
    resolves: rhbz#1481930
  - v2v: fix VMware vCenter roles needed for conversion
    resolves: rhbz#1530967
  - v2v: preserve the VM Generation ID
    resolves: rhbz#1598350
  - Query QEMU to known whether KVM is supported
    resolves: rhbz#1605071
  - v2v: add --mac option
    resolves: rhbz#1607274
  - v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
    resolves: rhbz#1619665
    resolves: rhbz#1691659
  - v2v: provide a way to query for the estimated size of the disks
    resolves: rhbz#1622785
  - Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
    resolves: rhbz#1634248
  - p2v: add an option to Shutdown the machine after the conversion
    resolves: rhbz#1642044
  - v2v: fix epoch when querying installed RPM packages
    resolves: rhbz#1669395
  - Use a better icon for RHEL >= 7 guests
    resolves: rhbz#1679482
  - v2v: improve the architecture detection of Linux kernel modules
    resolves: rhbz#1690574
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1688155
  - v2v: update nbdkit information in documentation
    resolves: rhbz#1605242
  - v2v: warn when a guest has 'direct' network interfaces
    resolves: rhbz#1151902
  - v2v: use proper SELinux label for nbdkit sockets
    resolves: rhbz#1698437


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-5.el7_7.1
changelog:
  - v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
    for 'rhv-upload'
    resolves: rhbz#1726168


author: Roman Kagan <rkagan@virtuozzo.com> - vz-1.40.2-5.1.vz7.1
changelog:
  - import of rhel-1.40.2-5.el7_7.1
  - drop binaries we can't ship
  - drop vendor suffices from package requirements
  - add gtk-doc 2 buildreqs
  - added perl-Pod-Usage buildreq
  - add pnp_wait.exe virt-tool to resolve conflicts with PnP on firstboot
  - change appliance directory #PSBM-65355
  - allow libguestfs appliance in qcow2 format
  - set direct backend for the post-build tests
  - add jenkins_helper
  - use prebuilt externally built appliance
  - build: add Virtuozzo to the distro check as RedHat-based distribution
  - Revert "RHEL 7: v2v: Disable the virt-v2v --in-place option."
  - Revert "RHEL 7: Reject use of libguestfs-winsupport features except for virt-* tools (RHBZ#1240276)."
  - v2v: set up firstboot script to install vztools-win
  - v2v: set up firstboot script to install vztools-lin
  - v2v: shut down windows VM to finish guest setup
  - v2v: shut down linux VM to finish guest setup
  - firstboot: add DelayedAutoStart value in the registry
  - v2v: call ntfsfix if NTFS partition is unclean #kludge #PSBM-65973
  - python: ensure GIL throughout event callback wrapper
  - v2v: windows_virtio: match only vendor/device
  - v2v: install Virtuozzo tools in offline mode
  - v2v:linux: provide '-h' option to shutdown command
  - v2v:linux: recognize VZ kernels too
  - customize: skip SELinux relabeling if it's disabled


author: Roman Kagan <rkagan@virtuozzo.com> - vz-1.40.2-5.1.vz7.2
changelog:
  - daemon: drop error message check in do_part_expand_gpt (#PSBM-96630)
  - v2v: make openstack output driver support UEFI
  - v2v:linux: detect support for virtio-scsi (#VSTOR-25449)
  - v2v: make virtio-scsi the default block driver (#VSTOR-25449)


author: Roman Kagan <rkagan@virtuozzo.com> - vz-1.40.2-5.1.vz7.4
changelog:
  - DROP: v2v: call ntfsfix if NTFS partition is unclean #kludge #PSBM-65973
  - v2v: call ntfsfix if NTFS root partition is unclean (#PSBM-65973, #PSBM-98042)


author: Denis Plotnikov <dplotnikov@virtuozzo.com> - vz-1.40.2-5.1.vz7.6
changelog:
  * Fri Dec 06 2019 Roman Kagan <rkagan@virtuozzo.com> - vz-1.40.2-5.1.vz7.5
  - v2v: only install VZ tools when they are present on the host


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream version
  - Do not use deprecated GLib functionality
  - Unref the GMainloop after it has been run, not when just quit


author: Jarod Wilson <jarod@redhat.com> 1.2.0-1
changelog:
  - Update to libiec61883 v1.2.0 release
  - Rework installtests patch to not require autoreconf
  - Make iso channel allocation work w/o local fw node r/w


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-3
changelog:
  - Fixed issues reported by coverity (bz #1026820)
  - Do not mark /etc/ld.so.conf.d/ as config (bz #1011126)
  - Resolves: #1026820 
  - Resolves: #1011126


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-7.el7
changelog:
  - libiscsi-Discovery-return-multiple-portals-for-the-same-disco.patch [bz#1266523]
  - libiscsi-iscsi-ls-skip-link-local-IPv6-addresses.patch [bz#1266523]
  - Resolves: bz#1266523
    (iscsi-ls doesn't work if target has more than one portal)


author: Nikola Forró <nforro@redhat.com> - 1.2.90-7
changelog:
  - Fix CVE-2018-11212 (#1586062)
  - Fix CVE-2016-3616 (#1318509), CVE-2018-11213 (#1589091)
    and CVE-2018-11214 (#1589110)
  - Fix CVE-2018-11813 (#1591203)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-2
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-3
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1
changelog:
  - Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1
changelog:
  - Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                             version 4.7.x


author: Václav Pavlín <vpavlin@redhat.com> - 0.9.33
changelog:
  - Update to latest uptsream release 0.9.33 due to
    security issues.
    Resolves: rhbz#1039393, rhbz#1039387


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-5
changelog:
  - Remove conflict with libproxy, its not really necessary since
    we already have the latest libproxy in rawhide.


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0-2
changelog:
  - %files: track lib soname (so bumps aren't a surprise)
  - tighten subpkg deps (%_isa)
  - %build: --disable-static


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.4.alpha
changelog:
  - Avoid 'test/md5.c:126:3: warning: dereferencing type-punned pointer
    will break strict-aliasing rules' by adding -fno-strict-aliasing flag.


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.6.alpha
changelog:
  - Fixes for CVE-2018-14679 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682
  - resolves: rhbz#1611550 rhbz#1611551 rhbz#1611552 rhbz#1611553


author: Jiri Pirko <jpirko@redhat.com> - 1.2-1
changelog:
  - Update to 1.2
  - libndp: silently ignore packets with optlen 0 [1016064]
  - libndp: fix processing for larger options [1016064]
  - libndp: do not fail on receiving non-ndp packets [1016078]


author: Jiri Pirko <jpirko@redhat.com> - 1.2-3
changelog:
  - libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf() [1044084]


author: Lubomir Rintel <lrintel@redhat.com> - 1.2-5
changelog:
  - libndp: validate the IPv6 hop limit [CVE-2016-3698]
  - libndb: reject redirect and router advertisements from non-link-local [CVE-2016-3698]


author: Eric Garver <egarver@redhat.com> - 1.2-7
changelog:
  - libndp: add option flags to send messages
  - ndptool: add option to send messages types
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - libndp: revert API change for ndp_msg_send() and add


author: Steve Dickson <steved@redhat.com> 0.25-13
changelog:
  - Strip newlines out of IDMAP_LOG messages (bz 1261124)
  - Fixed some NEGATIVE_RETURNS that a Covscan scan found (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-15
changelog:
  - nss_getpwnam: correctly check for negative values (bz 1271449)
  - Fixed a memory leak in nss_name_to_gid() (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-16
changelog:
  - Add options to aid id mapping in multi domain environments (bz 1378557)
  - Query DNS for the the NFSv4 domain (bz 980925)


author: Steve Dickson <steved@redhat.com> 0.25-18
changelog:
  - Enlarge the TXT record to lager than 127 characters (bz 1498210)
  - Allow white spaces in static IP mapping (bz 1455923)


author: Dan Williams <dcbw@redhat.com> - 1.1-14
changelog:
  - Fix portmap position calculation (rh #677526) (rh #677725)
  - Make port allocation threadsafe (rh #677527) (rh #677724)


author: Thomas Haller <thaller@redhat.com> - 3.2.21-9
changelog:
  - improve local port handling for netlink socket with EADDRINUSE (rh #1249158)
  - rtnl: backport support for link-netnsid attribute (rh #1255050)


author: Dan Mashal <dan.mashal@fedoraproject.org> - 0.7.5-5
changelog:
  - Fix RHBZ #925824
  - Update source URL
  - Fix mix of spaces and tabs in spec file
  - Fix bogus changelog date


author: Ray Strode <rstrode@redhat.com> 0.7.5-8
changelog:
  - Don't require desktop notification daemon (breaks a build loop with mutter/gnome-shell)
    Related: #1174722


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-3
changelog:
  - Resolves: rhbz#1712458 - [machines] The function of 'Auto-detect guest
                             operating system' is not available on rhel 7.7


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Yuriy Pudgorodskiy <yur@virtuozzo.com> 1.0.3
changelog:
  - License agreement text
   - Correct library links (Konstantin Volkov <wolf@virtuozzo.com>)
   - Correct spec for debuginfo (Konstantin Volkov <wolf@virtuozzo.com>)


author: Yuriy Pudgorodskiy <yur@virtuozzo.com> 1.0.5
changelog:
  - Revert "Updated for vstorage 7.8"
   - Merge 'upstream/master' 8ede934 6072c47
   - Allow blk status reply to exceed u32 range #PSBM-85708
   - Removed vstorage version req from spec


author: Yuriy Pudgorodskiy <yur@virtuozzo.com> 1.0.7
changelog:
  - Merge from upstream ee9f76ff48b1c3f4c0cf98ad3049cf8ddc81fc10
   - 0b4c Implemented nbd client request of type NBD_CMD_CACHE
   - 49b2 Relax check of size field in block status reply #ABR-185824
   - 3b16 Fix waiting for nbd reply #ABR-181926


author: Tom Lane <tgl@redhat.com> 2:1.5.10-3
changelog:
  - Remove compat subpackage (it's now a separate package "libpng12")
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 2:1.5.12-1
changelog:
  - Update to libpng 1.5.12 for minor bug fixes
  - Activate chunk size limits by default, with a very generous default limit


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptf based on upstream
  - Related: #1283576


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.72
changelog:
  - merge from VZ6: MAJOR expose SPEC_CTRL to guests if supported @nowidth
  (Konstantin B. Bukharov <bkb@virtuozzo.com>)
   - Technical release bump for Rosplatforma build (Denis Silakov
  <dsilakov@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.74
changelog:
  - VmConfiguration::setRelativePath(): use custom path #PSBM-89711 (Igor Sukhih
  <igor@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.75
changelog:
  - bug #PSBM-89791 aka Failed to read /vz/private/39b40805-7df1-4cae-adae-
  e318635f66fb/root. Exit code: 162 (Sergey Galas <shrike@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.76
changelog:
  - bug #PSBM-89788 aka VEBackupSuite.BackupSuite.backup_restore_pcs6 FAIL:
  prlctl restore returned 255 (Sergey Galas <shrike@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.79
changelog:
  - PSBM-90858 Add missed copy of 0000007_EDX in XmlModel Zero value was observed
  in result (Konstantin B. Bukharov <bkb@virtuozzo.com>)


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-1
changelog:
  - fix leak when throwing PWQError exception
  - added pkgconfig file
  - call the simplicity checks before the cracklib check
  - add enforce_for_root option to the PAM module
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-1
changelog:
  - use rpm built-in filtering of provides (rhbz#830153)
  - remove strain debug fprintf() (rhbz#831567)


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-5
changelog:
  - fix brittle configuration settings (#1259633)
  - fix abort when generating large passwords on some architectures


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-36
changelog:
  - introduce 'stop_on_not_reportable' option
  - fix a double free of config at exit in reporter-rhtsupport
  - Related: #1373094, #1257159


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-39
changelog:
  - Introduce workflow for adding data to existing case
  - Change default URL to the FAF server
  - wizard: fix 'Show log' window not displaying correctly
  - augeas: fix parsing spaces in configuration files
  - Related: #1303326, #1435256, #1463313


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-43
changelog:
  - dd: extend the scope of DD_DONT_WAIT_FOR_LOCK
  - dd: log lock warning only once not x times per sec
  - dd: add functions for opening dd item
  - testsuite: Add macros for value comparison
  - testsuite: assert for common function results
  - testsuite: expose the last check result
  - testsuite: fix dd_open_item_file test
  - tests: include testsuite.h in the dist archive
  - spec: include testsuite headers in the devel package
  - Related: #1588272, #1613236


author: Paul Moore <pmoore@redhat.com> - 2.2.1-1
changelog:
  - Removed '--disable-static' from the build to ensure that scmp_sys_resolver
    is self contained and resolve RPATH issues


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Add missing av_permission values (#1025931)
  - Set an appropriate errno in booleans.c (#1402140)
  - Change matchpathcon usage to match with matchpathcon manpage (#1412797)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-8
changelog:
  - Save linked policy, skip re-link when possible
  - Replace access(,F_OK) checks to make setuid programs work (#1186431)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-9
changelog:
  - Update semanage to allow runtime labeling of Infiniband Pkeys (#1466274)
  - Update semanage to allow runtime labeling of ibendports (#1466274)
  - Keep copy of file_contexts.homedirs in policy store (#1409813)
  - Add support for listing fcontext.homedirs file (#1409813)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-12
changelog:
  - Do not change file mode of seusers and users_extra (#1512639)
  - Improve warning for installing disabled module (#1337199)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-14
changelog:
  - Include user name in ROLE_REMOVE audit events (#1622045)
  - Improve "reset umask before creating directories"


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Correctly detect unknown classes in sepol_string_to_security_class
  - Sort object files for deterministic linking order
  - Fix neverallowxperm checking on attributes
  - Remove libsepol.map when cleaning
  - Add high-level language line marking support to CIL
  - Change logic of bounds checking to match change in kernel
  - Fix multiple spelling errors
  - Only apply bounds checking to source types in rules
  - Fix CIL and not add an attribute as a type in the attr_type_map
  - Build policy on systems not supporting DCCP protocol
  - Fix extended permissions neverallow checking
  - Fix CIL neverallow and bounds checking
  - Android.mk: Add -D_GNU_SOURCE to common_cflags


author: Petr Lautrbach <plautrba@redhat.com> 2.5-5
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6
changelog:
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-7
changelog:
  - Define cgroup_seclabel policy capability (rhbz#1493517)
  - Fix unitialized jmp and invalid dereference


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-8.1
changelog:
  - Define nnp_nosuid_transition policy capability (rhbz#1480519)
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - Allow runtime labeling of ibendports (rhbz#1464489)
  - Allow runtime labeling of Infiniband Pkeys (rhbz#1464489)
  - Add IB end port handling to CIL (rhbz#1464489)
  - Add ibendport ocontext handling (rhbz#1464489)
  - Add support for ibendportcon labels (rhbz#1464489)
  - Add Infiniband Pkey handling to CIL (rhbz#1464489)
  - Add ibpkey ocontext handling (rhbz#1464489)
  - Add support for ibpkeycon labels (rhbz#1464489)
  - Remove unused attribute on a used argument from avrule_read() (rhbz#1464489)
  - Add binary module support for xperms
  - Add support for converting extended permissions to CIL


