# changelog

author: Paul Howarth <paul@city-fan.org> - 1.5.0-5
changelog:
  - Make GeoIP.dat -> GeoIP-initial.dat symlink in %install, not %post,
    and don't %ghost it
  - Run geoipupdate silently in %post and cron job
  - Create empty database files for %ghost to work with old rpm versions
  - Don't try to use noarch subpackages on old rpm versions
  - Update %description to mention database updates
  - Drop outdated README.Fedora


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-7
changelog:
  - Don't download the database in %post (#1029807)
  - Don't download GeoLiteASNum as it's no longer provided.


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-10
changelog:
  - Added base IPv6 database to GeoIP package
  - Added GeoIP-data subpackage with all other databases (#1201857)


author: Michal Ruprich <mruprich@redhat.com> - 1.5.0-12
changelog:
  - Removed clean section
  - Resolves: #1589860 - Update GeoIP legacy databases
  - Resolves: #1409060 -  Missing symlink at the GeoIP-update package


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 6.7.8.9-7
changelog:
  - add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)


author: Jan Horak <jhorak@redhat.com> - 6.7.8.9-15
changelog:
  - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
    rhbz#1326834, rhbz#1334188, rhbz#1269553


author: Konstantin Volkov <wolf@virtuozzo.com> - 1:1.10.2-14.1
changelog:
  - Merged device: start IP configuration when master carrier goes up patch
    from upstream, see #PSBM-85977
  - Drop vl-NetworkManager-1.8.0-bridge_set_preserve_mac.patch - fixed in upstream


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-2
changelog:
  - device: disable rp_filter handling (rh #1593194)
  - ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.12.0-3
changelog:
  - cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
  - po: import Japanese translation (rh #1569438)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-6
changelog:
  - dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
  - initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
  - cli: fix parsing vpn secrets from password file (rh #1628946)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-7
changelog:
  - manager: accept non-null device for VPN activations (rh #1641174)
  - drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-10
changelog:
  - manager: ignore ovs-system master when assuming connections (rh #1676551)
  - device: do ARP announcements only after masters have a slave (rh #1678796)


author: Lubomir Rintel <lrintel@redhat.com> - 1.2.0-0.1.beta3
changelog:
  - Update to 1.2-beta3:
  - Added support for main exchange type (rh #1292912)
  - A device libreswan is unable listen on no longer aborts connection (rh #1285367)
  - Added import/export support (rh #1129878)
  - Replace NetworkManager-openswan (rh #1264552)


author: Thomas Haller <thaller@redhat.com> - 1.2.4-1
changelog:
  - Update to 1.2.4 release
  - Move base VPN plugin library to base libreswan package
  - Don't require nm-connection-editor anymore


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-3.git92d07e48907f.el7
changelog:
  - ovmf-UefiCpuPkg-CpuDxe-Fix-multiple-entries-of-RT_CODE-in.patch [bz#1518308]
  - ovmf-MdeModulePkg-DxeCore-Filter-out-all-paging-capabilit.patch [bz#1518308]
  - ovmf-MdeModulePkg-Core-Merge-memory-map-after-filtering-p.patch [bz#1518308]
  - Resolves: bz#1518308
    (UEFI memory map regression (runtime code entry splitting) introduced by c1cab54ce57c)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-4.git92d07e48907f.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-log-informative-memprotect-msg.patch [bz#1520485]
  - ovmf-MdeModulePkg-BdsDxe-fall-back-to-a-Boot-Manager-Menu.patch [bz#1515418]
  - Resolves: bz#1515418
    (RFE: Provide diagnostics for failed boot)
  - Resolves: bz#1520485
    (AAVMF: two new messages with silent build)


author: Roman Kagan <rkagan@virtuozzo.com> - vz-20171011-4.git92d07e48907f.vz7.1
changelog:
  - re-enable non-secboot OVMF (PSBM-67172)
  - install secboot OVMF with original name
  - disable SMM as it requires q35 machine
  - don't force large image size


author: Roman Kagan <rkagan@virtuozzo.com> - vz-20171011-4.git92d07e48907f.vz7.2
changelog:
  - OvmfPkg: Hyperv: Standard hyperv definitions
  - OvmfPkg: Hyperv: VMBus standard definitions
  - OvmfPkg: Hyperv: PEI phase hyperv detection
  - OvmfPkg: Hyperv: Hypercall driver library
  - OvmfPkg: Hyperv: VMBus DXE bus driver
  - OvmfPkg: Hyperv: PV SCSI DXE driver
  - OvmfPkg: Hyperv: Parse QEMU FwCfg Hyperv SCSI device path
  - OvmgPkg: Hyperv: Build Hyperv DXE drivers for OvmfPkgIa32X64
  - hyperv: request completion on outbound packets
  - vmbus: only discover devices on primary channels
  - OvmfPkg: update copyright notes for Virtuozzo
  - EfiRom: don't require filename pattern on --dump
  - EfiRom: support legacy (non-PCI) option roms too
  - Ovmf: add LoadFile2 protocol over QEMU fw_cfg
  - OvmfPkg: add definition for Hyper-V SCSI device type GUID
  - OvmfPkg: add definition for Hyper-V net device type GUID
  - OvmfPkg: QemuBootOrderLib: format VMBus paths directly
  - OvmfPkg: use more natural VMBus device paths
  - OvmfPkg: QemuBootOrderLib: adjust for VMBus path change
  - OvmfPkg: QemuBootOrderLib: support VMBus net devices
  - OvmfPkg: HypervVmbusDxe: move device descriptor definition to a header
  - OvmfPkg: VMBus: rework for cleaner API
  - OvmfPkg: HypervVmbusDxe: add OpROM loading via fw_cfg


author: Nicolas Chauvet <kwizart@gmail.com> - 1.7.1-1
changelog:
  - Update to 1.7.1

  -* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.0-5
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild


author: Boris Ranto <branto@redhat.com> - 2.0.19-12
changelog:
  - New release
  - Move OpenIPMI modprobe conf to /usr/lib/modprobe.d/ (#1195289)
  - Avoid warning on update/removal (#1256798)
  - Stop manually creating and shipping /var/run/OpenIPMI (#1296560)


author: Igor Yozhikov <iyozhikov@mirantis.com> - 3.11-9~mos1
changelog:
  - bd4b877 Suffix update for PyYAML  * Modification made according to https://github.com/openstack/fuel-specs/blob/master/specs/8.0/separate-mos-from-centos.rst#rpm-packages-versioning
  - ebb64fa Version 3.11
  - 24cd351 Added .gitreview


author: Petr Pisar <ppisar@redhat.com> - 1.2.15-14
changelog:
  - Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
    environment variable to enable it.
  - Resolves: rhbz#1245417


author: Jindrich Novy <novyjindrich@gmail.com> - 1.99.1-1
changelog:
  - update to 1.99.1 (#928733)
  - fix configure script to detect/compile against Guile-1.8
  - compiling against Guile-1.8 fixes crashes on startup (#957417, #1028754)
  - add HAS_GS_EXE option (#1105932) - thanks to Yaakov Selkowitz


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-46
changelog:
  - remove not implemented option AttemptHardlink in vmcore.conf
  - introduce unsafe reporting for not-reporable problems
  - rewrite skip_pfx() function to work with journal msgs
  - don't expect kernel's version '2.6.*' or '3.*.*'
  - Related: #1416586, #1257159, #1328264, #1378469


author: CentOS Sources <bugs@centos.org> - 2.1.11-48.el7.centos
changelog:
  - Drop RHTS hint
  -  Change by David Mansfield <david@orthanc.cobite.com>
  -  Per http://bugs.centos.org/view.php?id=7192
  - Remove cli suggestion text patch
  - set URL to retrace server
  - update to not run sosreport
  -  Per http://bugs.centos.org/view.php?id=7913


author: Ray Strode <rstrode@redhat.com> - 0.6.45-1
changelog:
  - Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
    Related: #1424623 #1334464


author: Ray Strode <rstrode@redhat.com> - 0.6.45-2
changelog:
  - Don't tread explicitly requested users as cached
    Fixes UncacheUser operation.
    Resolves: 1446620
    Related: #1432602


author: Ray Strode <rstrode@redhat.com> - 0.6.45-6
changelog:
  - Don't return bogus password expiration policy when
    shadow file is unavailable
    Resolves: #1530659


author: Kamil Dudka <dkdudka@redhat.com> - 2.2.51-13
changelog:
  - avoid failure of %check when building as root (#1085389)
  - setfacl.1: document the meaning of '-' in perms (#1337039)


author: Java SIG <java-devel@lists.fedoraproject.org> - 1.13.1-6
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.13.1-8
changelog:
  - Complete spec file rewrite
  - Build with xmvn
  - Split into multiple subpackages, resolves: rhbz#916142
  - Update to current packaging guidelines


author: Igor Yozhikov <iyozhikov@mirantis.com> - 0.3-1~mos1
changelog:
  - daa52e9 Suffix update for ami-creator  * Modification made according to https://github.com/openstack/fuel-specs/blob/master/specs/8.0/separate-mos-from-centos.rst#rpm-packages-versioning
  - 53df796 ami-creator package for centos7 (MOS 8.0)
  - 2dfea5f Added .gitreview


author: Konstantin Volkov <wolf@virtuozzo.com> - 21.48.22.147-1.vz7.3
changelog:
  - Implemented step-by-step spokes, see #VSTOR-21271
  - Drop password spoke first warning, prohibit empty passwords, see #VSTOR-21271
  - Some GUI corrections, see #VSTOR-21271


author: Konstantin Volkov <wolf@virtuozzo.com> - 21.48.22.147-1.vz7.8
changelog:
  - Implemented SpokeBar design, see #VSTOR-22480
  - Align password and storage spokes, see #VSTOR-22480


author: Konstantin Volkov <wolf@virtuozzo.com> - 21.48.22.147-1.vz7.12
changelog:
  - Correct network spoke, see #VSTOR-21267
  - Change minimal CS size to 100GB according to documentation
  - Reserve 1MiB for CS partition, see #PSBM-94701


author: Martin Kolman <mkolman@redhat.com> - 7.3.1-1
changelog:
  - Bump epoch to fix upgrades from the Anaconda help content subpackage (mkolman)
    Resolves: rhbz#1275285
  - Add help content for the Subscription Manager addon spoke (cspicer)
    Resolves: rhbz#1260071


author: Miloš Jakubíček <xjakub@fi.muni.cz> - 0:2.7.7-23
changelog:
  - Add patch updating license on ShowString.java and StreamConverter.java
    examples (thanks to Tom Callaway, see BZ#848662)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.0-6
changelog:
  - Drop BR on zip, use jar instead
  - Add more verbose description
  - Update to current packaging guidelines


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.8.3-5
changelog:
  - Packaging fixes
  - Remove unneeded depmap
  - Remove versioned jars and javadocs
  - Use maven 3 to build


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.8.3-10
changelog:
  - Build with xmvn
  - Don't generate extra JARs
  - Simplify build dependencies
  - Update to current packaging guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.8.3-13
changelog:
  - Add BuildRequires on apache-commons-parent >= 26-7
  - Remove BuildRequires on commons-collections-testframework


author: Jaromir Capik <jcapik@redhat.com> 3.2.1-13
changelog:
  - saxon dependency removed - not needed
  - minor spec file changes according to the latest guidelines


author: Orion Poplawski <orion@cora.nwra.com> - 2.1.1-6
changelog:
  - Update to current maven spec guidelines to fix build (bug 979497)
  - Add patch to fix test with junit 4.11


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.1.2-1
changelog:
  - Update to upstream version 1.1.2
  - Convert POM to POM macros
  - Remove OSGi manifest patch; fixed upstream


author: Johnny Hughes <johnny@centos.org> - 3.2-8
changelog:
  - removed 3 tests that time out:  DefaultFTPFileEntryParserFactoryTest.java, 
    FTPTimestampParserImplTest.java, TestConnectTimeout.java


author: Chris Spike <spike@fedoraproject.org> 1.4.0-1
changelog:
  - Updated to 1.4.0
  - Switched build tool from ant to maven
  - Updated to latest java packaging guidelines
  - Dropped oro BR/R


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 10-6
changelog:
  - Add missing R: maven-remote-resources-plugin, apache-resource-bundles
  - Add %check to verify dependencies during build


author: Mary Ellen Foster <mefoster at gmail.com> 2-2
changelog:
  - Add plugin dependencies from POMs
  - Fix description
  - Remove maven-release plugin (not on Fedora yet)


author: VZ Auto Builder <dsilakov@virtuozzo.com> 1.7.41
changelog:
  - Add libpcs_otracing to LD_LIBRARY_PATH (Yuri Per <yuri@acronis.com>)
   - [GO] Update archive3 go bindings (Kirill Akimov <Kirill.Akimov@acronis.com>)
   - [GO] Update astorclient go bindings (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-5
changelog:
  - fix issues reported by static analysis tools
    Resolves: rhbz#1027762
  - add man-pages for arptables-{save,restore}
    Resolves: rhbz#1025726


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-8
changelog:
  - Add missing long option --set-counters and update documentation
    Corrosponding short option -c was implemented, but undocumented.
    Resolves: rhbz#1050854


author: Andrey Bondrov <abondrov@virtuozzo.com> - 0.0.4-8.2
changelog:
  - Restore and re-diff Virtuozzo patch from arptables_jf package
  - Restore Provides arptables-wdog_tmo


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16
changelog:
  - the correct solution is remove smp_flags, they don't work properly on ppc with
    the option mpower7
  - Related: rhbz#1048745


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-21
changelog:
  - correct the DST correction when using UTC time specification (#1328832)
  - clear non-job files from at dir and test for write error on fclose
    to fix bogus syslog messages


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-23
changelog:
  - fix the ownership of the spool directory (#1414228)
  - document the -n option of atd (#739870)
  - fix handling of the aborted jobs (due to possibly
    temporary conditions) and avoid flooding the syslog


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-7
changelog:
  - change x86_64 archdef to P4, prefetch instruction from hammer is illegal on some pentium 4
  - add -fstack-protector-strong to flags
  - Resolves: rhbz#1070783


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-9
changelog:
  - ppcle patches (conflicting patches modified)
  - tests on ppcle disabled to shorten build time and fit into 24 hour limit
  - resolves bug 1125475
  - aarch64 patches
  - Resolves: rhbz#1061956


author: Jaromir Capik <jcapik@redhat.com> - 3.10.1-10
changelog:
  - patching for Power8 to pass performance tunings and tests on P8 builders
  - re-enabling tests on ppc64le
  - Resolves: rhbz#1125475


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-11
changelog:
  - apply patches 99 and 110 to all ppc variants
  - build lapack with -frecursive flag (#1176026)
  - fix possible memory leak (#1350536)
  - fix wrong sed substitutions (#1402627)
  - Resolves: rhbz#1350536
  - Related: rhbz#1176026


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-12
changelog:
  - cleanup: merge the application of ppc patches from previous commit
    into single block
  - Related: rhbz#1350536


author: Steve Grubb <sgrubb@redhat.com> 2.7.8-1
changelog:
  resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
  resolves: #1448526 - aureport shows the wrong auid "-1"
  resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
  resolves: #1482121 - python audit crash dereferencing auparse_state_t le field


author: Steve Grubb <sgrubb@redhat.com> 2.8.1-1
changelog:
  resolves: #982154 - Can't find the "avc" event with the auvirt command
  resolves: #1101605 - Ipv6 seems no working
  resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
  resolves: #1455598 - Default port is wrong in audisp-remote.conf
  resolves: #1476406 - Audit package rebase


author: Steve Grubb <sgrubb@redhat.com> 2.8.4-1
changelog:
  resolves: #1559032 - Rebase audit package to 2.8.4 to pick up bug fixes
  resolves: #1573889 - auditd busy loop in rotate_logs() with num_logs < 2
  resolves: #1534748 - incorrect addr field when using IPv6 for remote logging
  resolves: #1515903 - ausearch-expression man page missing \timestamp_ex
  resolves: #1511606 - aureport AVC report header is incomplete
  resolves: #1504251 - make auditd dump internal state for log writing status


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-16
changelog:
  - Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
  - Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
  - Shadow: add lens (RHBZ#1145249)


author: Dominic Cleal <dcleal@redhat.com> - 1.4.0-1
changelog:
  - Rebase to Augeas 1.4.0
  - Revert some changes for better compatibility with 1.1.0-17:
    * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
    * Dnsmasq: revert splitting of address/server options
    * Dovecot: restore quotes within values
    * Jaas: revert semicolon and line break changes
    * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
    * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
    * Syslog: restore tree without protocol for UDP hosts
    * UpdateDB: keep Simplevars to load config by default


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-4
changelog:
  - Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
  - Skip testSaveNoPermission when running as root (RHBZ#1269817)
  - Chrony: allow signed numbers (RHBZ#1302017)
  - Krb5: support includedir (RHBZ#1406111)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-5
changelog:
  - Cgconfig: allow fperm & dperm in admin & task (RHBZ#1325741)
  - Grub: handle top-level "boot" directive (RHBZ#1484261)


author: Pavel Březina <pbrezina@redhat.com> - 6.2.8-26
changelog:
  - CVE-2017-7488 authconfig: Information leak when SSSD is used for authentication against remote server (#1441604)


author: Pavel Raiskup <praiskup@redhat.com> - 2.69-6
changelog:
  - fedora-review (minor) fixes and typos: trim lines, remove defattr(,,), do not
    run `rm -rf %{buildroot} at the beginning of install section, use curly
    brackets only around rpm macros/variables and not around shell variables,
    remove clean section


author: Pavel Raiskup <praiskup@redhat.com> - 2.69-8
changelog:
  - the 'INSTALL' file can be used as template file for packages which are using
    autoconf - mark it for installation again (#661623)


author: Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17
changelog:
  - Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
  - Resolves: rhbz#1610692 silence console warnings from print dialog


author: Ian Kent <ikent@redhat.com> - 5.0.7-89
changelog:
  - bz1548922 - automount crashes due to segfault
    - and fix incorrect month in changelog entries.
  -Related: rhbz#1548922


author: Ian Kent <ikent@redhat.com> - 5.0.7-90
changelog:
  - bz1536526 - Ignore trailing slashes at the end of executable maps
    in auto.master config file
    - add man page note about extra slashes in paths.
  -Related: rhbz#1536526


author: Ian Kent <ikent@redhat.com> - 5.0.7-92
changelog:
  - bz1581502 - PID file never created or disappears
    - add units After line to include statd service.
    - use systemd sd_notify() at startup.
  -Resolves: rhbz#1581502


author: Ian Kent <ikent@redhat.com> - 5.0.7-93
changelog:
  - bz1581502 - PID file never created or disappears
    - add missing BuildRequires: systemd-devel.
    - fix changelog entry revision.
  -Related: rhbz#1581502


author: Ian Kent <ikent@redhat.com> - 5.0.7-94
changelog:
  - bz1609128 - autofs reload is unable to activate new map entries,
    it is autofs restart which shows new map entries.
    - fix update_negative_cache() map source usage.
  - Resolves: rhbz#1609128


author: Ian Kent <ikent@redhat.com> - 5.0.7-95
changelog:
  - bz1612914 - [autofs]Removed entries still can be accessed
    - mark removed cache entry negative.
  - Resolves: rhbz#1612914


author: Ian Kent <ikent@redhat.com> - 5.0.7-96
changelog:
  - bz1598640 - Server availability probe broke tunneling nfs via localhost
    - remove some redundant rpc library code.
    - add port parameter to rpc_ping().
    - dont probe NFSv2 by default.
    - add version parameter to rpc_ping().
  - Resolves: rhbz#1598640


author: Ian Kent <ikent@redhat.com> - 5.0.7-97
changelog:
  - bz1358887 - On Red Hat 7.x systems if you try to access local
    filesystems using the automounter through /net then the shell
    and mount could lock up *if* the filesystem your accessing is
    double exported.
    - set bind mount as propagation slave.
    - add master map pseudo options for mount propagation.
  - Resolves: rhbz#1358887


author: Ian Kent <ikent@redhat.com> - 5.0.7-98
changelog:
  - bz1627502 - after upgrading to autofs-5.0.7-83.el7.x86_64 on RHEL 7 clients,
    amd maps /defaults key mount options are no longer working
    - fix amd parser opts option handling.
  - Resolves: rrhbz#1627502


author: Ian Kent <ikent@redhat.com> - 5.0.7-98
changelog:
  - bz1630189 - yum update hanging while restarting autofs
    - fix incorrect locking in sss lookup.
  -Resolves: rhbz#1630189


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18-1
changelog:
  - Update to 5.18
  - Fix multilib conflicts (#831379)
  - Make some dependencies arch-specific
  - Remove obsolete macros


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-13
changelog:
  - remove old build dependency comment
  - fix bogus dates in changelog
  - use the %{_smp_mflags} also by `make check`


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-14
changelog:
  - fix another requirement on perl package which may cause problems in future,
    thanks to Paul Howarth (#924938)
  - f-r: remove Buildroot tag, fix license tag


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-15
changelog:
  - enable hardened build (#1092506)
  - fix short option for --version, document -t option of avahi-autoipd (#948583)
  - fix crashes in D-Bus methods GetAlternativeHostName and GetAlternativeServiceName (#1003688)
  - fix bug when avahi-daemon ended up in a tight loop (#1081801)
  - remove prefix /home/lennart/tmp/avahi from references in man pages (#1120233)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-17
changelog:
  - fix crash due to use of deprecated Gtk3 API (#1263720)
  - don't add 0pointer.de and zeroconf.org to default browse list (#1340837)
  - fix not publishing entries if a probing interface is removed (#1222646)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-18
changelog:
  - create home directory for avahi-autoipd user (#1416287)
  - get rid of the dangling symlink to avahi-discover in debuginfo package (#1421229)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.1-6
changelog:
  - aqute-bndlib renamed to aqute-bnd (#745166)
  - Fix compilation with openjdk 1.7.0
  - Use new maven macros
  - Packaging tweaks


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.3-9
changelog:
  - Install the python3 version of pybabel on Fedora 24+ to match with Fedora's
    default python version


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.3-10
changelog:
  - Also make sure that the babel package that has pybabel depends on the correct
    packages (python2 packages on F23 or less and python3 packages on F24 and
    greater.)


author: Nils Philippsen <nils@redhat.com> - 2.3.4-1
changelog:
  - version 2.3.4
  - always build Python3 subpackages
  - remove obsolete packaging constructs
  - update to current Python packaging guidelines
  - build docs non-destructively
  - tag license file as %license
  - use %python_provide macro only if present
  - update remove-pytz-version patch
  - fix build dependencies
  - set TZ in %check


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.2.8-2
changelog:
  - Replaced summary information
  - Updated BuildRequires and Requires information
  - Replaced "{_mandir}/man1/bakefil*.gz" to "{_mandir}/man1/bakefil*"
  - Correct URL and source URL
  - Replaced "%{_libdir}/*" to "%{_libdir}/bakefile*"
  - Removed useless line: "%doc"


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.2.8-3
changelog:
  - Fixed Source url
  - Updated BuildRequires and Requires info
  - Empy python module packaged independently
  - Removed files of uuid and subprocess python modules
  - Removed .la files


author: Jaromir Capik <jcapik@redhat.com> - 20101219-2
changelog:
  - Java suffix removed from the package name and put in the summary instead
  - Version string added in the source URL (no need for manual renaming)
  - POM file added in the source package -> Source1 removed (no need for copying)
  - Removal of the target directory removed (not present anymore)


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.0-1
changelog:
  - Update to 2.0 (fixes #817902, #831835).
  - Don't try to python-bytecompile our non-python *.py (#813651).


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.1-1
changelog:
  - Update to 2.1 (fixes #860510, #906469, #912113, #919246, #928253).
  - Don't ship completions included in util-linux 2.23-rc2 for F-19+.


author: Roman Rakus <rrakus@redhat.com> - 2.1-4
changelog:
  - Added conditionals to not add completions for some commands; the packages
    has their own completions
    Resolves: #1007839


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.8-0.4.svn1230816
changelog:
  - Fix license tag
  - Install LICENSE and NOTICE with javadoc package
  - Remove RPM bug workaround
  - Update to current packaging guidelines


author: Ville Skyttä <ville.skytta@iki.fi> - 0:5.2-10
changelog:
  - Specify explicit source encoding to fix build with Java 7.
  - Install jar and javadocs unversioned.
  - Crosslink with JDK javadocs.


author: Andy Grimm <agrimm@gmail.com> - 0:5.2-13
changelog:
  - This package should not own _mavendepmapfragdir (RHBZ#850005)
  - Build with maven, and clean up deprecated spec constructs
  - Fix pom file (See http://jira.codehaus.org/browse/MEV-592)


author: Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72
changelog:
  - Fix automatic selinux boolean named_write_master_zones (#1569466)
  - Allow starting named with readonly home again


author: Nick Clifton <nickc@redhat.com> 2.27-28.base
changelog:
  - Stop the x86_64 linker from crashing when asked to convert a reloc against the ABS section.
    (#1557346)
  - Stop strip from replacing unknown relocs with null relocs.
    (#1545386)


author: Nick Clifton <nickc@redhat.com> 2.27-30.base
changelog:
  - Version bump in order to allow a rebuild, in order to work around a transient problem with the compose database.


author: Nick Clifton <nickc@redhat.com> 2.27-32.base
changelog:
  - Fix seg-fault parsing DWARF-1 information.  (#1569580)
  - Fix seg-fault parsing DWARF-2 information.  (#1569891)
  - Fix seg-fault parsing COFF files.  (#1571917)


author: Nick Clifton <nickc@redhat.com> 2.27-33.base
changelog:
  - Fix seg-fault parsing ELF files.  (#1578979)
  - Fix seg-fault parsing DWARF-2 information.  (#1579065)
  - Fix seg-fault parsing DWARF-2 information.  (#1579051)
  - Fix seg-fault parsing a PE format file.  (#1579019)


author: Nick Clifton <nickc@redhat.com> 2.27-34.base
changelog:
  - Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
  - Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
  - Fix seg-fault parsing corrupt ELF format files.  (#1579801)


author: Pravin Satpute <psatpute@redhat.com> - 0.3-13
changelog:
  - added lucida-typewriter and fixed subpackage
  - removed common subpackage
  - added conf file for each subpackage


author: Jakub Martisko <jamartis@redhat.com> - 3.4.2-7
changelog:
  - fix issue with creation of srpm where __isa_bits on noarch leads to an error
  - Related: rhbz#1176026


author: Eric Sandeen <sandeen@redhat.com> - 1.0.5-7
changelog:
  - Add upstream cpu scalability patches (#1032368)
  - Remove "-k" option from manpage (#1300354)
  - Fix potential deadlock when calling stop_tracers (#1263189)


author: Orion Poplawski <orion@cora.nwra.com> - 1.9.0-1
changelog:
  - Update to 1.9.0 (#1211599)
  - Update URL
  - Disable parallel build
  - Run all tests
  - Ship license files


author: Don Zickus <dzickus@redhat.com> 5.41-1
changelog:
  - Update to 5.41
  - obexd fixes to prevent crashes
  - add /etc/bluetooth/main.conf config file
  Resolves: #1313363, #1336476, #1338895


author: David Arcari <darcari@redhat.com> 5.44-1
changelog:
  - Update to 5.44
  - Ship btattach tool
  - Configure systemctl settings for bluez-obex correctly
  - Add Provides: bluez-obexd
  Resolves: #1434581, #1401501


author: Petr Machata <pmachata@redhat.com> - 1.53.0-18
changelog:
  - Turn off build flags pre-set by Boost distribution.
    (boost-1.53.0-buildflags.patch)
  - Pass RPM_OPT_FLAGS through user-config.jam.


author: Petr Machata <pmachata@redhat.com> - 1.53.0-21
changelog:
  - Fix atomic_cas32 (thanks Jaroslav Škarvada for figuring out where
    the problem is) (boost-1.54.0-interprocess-atomic_cas32-ppc.patch)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - do not use arch-specific BuildRequires (#1268268)
  - support TLS libraries without SSLv3 (#1298227)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - Install unpatched gcc.jam (#1305019).
  - Build libboost_python and libboost_python3 such that they depend on
    their respective libpython (#1302120).
    (boost-1.53.0-python-libpython_dep.patch,
    boost-1.53.0-python-abi_letters.patch)
  - Fix Boost.Python test suite so that PyImport_AppendInittab is called
    before PyInitialize, which broke the test suite with Python 3.
    (boost-1.53.0-python-test-PyImport_AppendInittab.patch)
  - Patch gcc.jam to not add bogus rpaths.


author: Haïkel Guémar <hguemar@fedoraproject.org> - 1.59.0-2
changelog:
  - Backport rpath patch from Fedora Rawhide
  - Remove obsoletes
  - Fix python-devel BR to python2-devel


author: jpena <jpena@redhat.com> - 3.3.6.0-1
changelog:
  - Updated to upstream version 3.3.6.0
  - Added external license file, it is no longer bundled in source
  - Fixed source URL


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.8.1.el7]
changelog:
  - [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.9.1.el7]
changelog:
  - [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
  - [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.10.1.el7]
changelog:
  - [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
  - [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
  - [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
  - [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
  - [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
  - [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
  - [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
  - [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
  - [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
  - [powerpc] rtas: Fix a potential race between CPU-Offline & Migration (Steve Best) [1669044 1650249]
  - [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
  - [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
  - [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
  - [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
  - [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
  - [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
  - [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
  - [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
  - [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
  - [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
  - [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
  - [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
  - [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
  - [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
  - [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
  - [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
  - [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
  - [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
  - [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
  - [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
  - [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
  - [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
  - [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.11.1.el7]
changelog:
  - [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
  - [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
  - [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
  - [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
  - [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
  - [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
  - [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.12.1.el7]
changelog:
  - [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
  - [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
  - [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
  - [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
  - [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
  - [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
  - [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
  - [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
  - [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
  - [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
  - [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
  - [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
  - [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
  - [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
  - [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
  - [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
  - [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
  - [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
  - [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
  - [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
  - [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
  - [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
  - [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
  - [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
  - [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
  - [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
  - [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
  - [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
  - [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
  - [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
  - [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
  - [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
  - [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
  - [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
  - [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.12.2.el7]
changelog:
  - [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-957.12.2.vz7.96.1]
changelog:
  - perf/x86/intel: fix Intel processors define's naming (Konstantin Khorenko) [PSBM-94406 PSBM-94451]
  - mm/memcg: Don't sleep on reparenting of every page. (Andrey Ryabinin)
  - ploop: Check for top_delta in ploop_congested() (Kirill Tkhai) [PSBM-94270]
  - fuse: Check for req->ff in fuse_request_queue_background() (Kirill Tkhai)
  - fuse: do not take fc->lock in fuse_request_send_background() - fixup (Kirill Tkhai)
  - ms/fuse: Protect ff->reserved_req via corresponding fi->lock (Kirill Tkhai)
  - ms/fuse: Protect fi->nlookup with fi->lock (Kirill Tkhai)
  - ms/fuse: Introduce fi->lock to protect write related fields (Kirill Tkhai)
  - ms/fuse: Convert fc->attr_version into atomic64_t (Kirill Tkhai)
  - ms/fuse: Add fuse_inode argument to fuse_prepare_release() (Kirill Tkhai)
  - ms/fuse: do not take fc->lock in fuse_request_send_background() (Kirill Tkhai)
  - fuse: Remove bogus list_del_init() from-fuse_request_send_background (Kirill Tkhai)
  - ms/fuse: introduce fc->bg_lock (Kirill Tkhai)
  - ploop: Remove unused leftover (Kirill Tkhai)
  - ploop: Remove now unused PLOOP_E_ZERO_INDEX and PLOOP_E_DELTA_ZERO_INDEX branches (Kirill Tkhai)
  - ploop: Remove now unused PLOOP_REQ_RELOC_S branches (Kirill Tkhai)
  - ploop: Remove now unused PLOOP_REQ_DISCARD branches (Kirill Tkhai)
  - ploop: Remove now unused PLOOP_REQ_ZERO branches (Kirill Tkhai)
  - ploop: Remove obsolete ioctls (Kirill Tkhai)
  - mm, memcg, oom_gurantee: change memcg oom overdraft formula (Andrey Ryabinin) [VSTOR-22575]
  - ms/KVM: nVMX: Do not load EOI-exitmap while running L2 (Liran Alon) [PSBM-93945]
  - ploop: Enable native discard support for kaio engine (Kirill Tkhai)
  - ext4: Module parameter to disable discard mount param on ploop (Kirill Tkhai) [PSBM-94181]
  - ms/ext4: Actually request zeroing of inode table after grow (Kirill Tkhai)
  - DMA-API: exceeded 7 overlapping mappings of cacheline share (Michael S. Tsirkin) [PSBM-93919]
  - config.OpenVZ.debug: disable CONFIG_AMD_MEM_ENCRYPT (Konstantin Khorenko) [PSBM-93777]
  - ms/vmpressure: make sure there are no events queued after memcg is offlined (Michal Hocko) [PSBM-93884]
  - ms/mm/slub.c: run free_partial() outside of the kmem_cache_node->list_lock (Chris Wilson) [PSBM-93885]
  - kernfs: keep kernfs node alive for __kernfs_remove() (Konstantin Khorenko) [PSBM-93611]
  - net: Allow autoloading conntrack nft-helper-* modules (Kirill Tkhai) [PSBM-90319]
  - config.OpenVZ.minimal: enable R8169, PATA_ATIIXP, X86_AMD_PLATFORM_DEVICE, NET_DEVLINK (Konstantin Khorenko) [PSBM-93812]
  - tty/vt: avoid high order pages allocation on GIO_UNIMAP ioctl (Konstantin Khorenko) [PSBM-93812]
  - prctl: Fix false positive in validate_prctl_map (Kirill Gorkunov) [PSBM-93526]
  - ms/net: use skb_clone to avoid alloc_pages failure. (Martin Zhang) [PSBM-93713]
  - ms/tcp: fix potential huge kmalloc() calls in TCP_REPAIR (Eric Dumazet) [PSBM-93672]
  - net/skuff: WARN if kmalloc_reserve() fails to allocate memory. (Andrey Ryabinin) [VSTOR-21390]
  - net/skbuff: Don't waste memory reserves (Andrey Ryabinin) [VSTOR-21390]
  - ms/KVM: x86: Do not clear RFLAGS.TF when a singlestep trap occurs. (Kyle Huey) [PSBM-92865]
  - ms/KVM: x86: Add kvm_skip_emulated_instruction and use it. (Kyle Huey) [PSBM-92865]
  - ms/KVM: VMX: Reorder some skip_emulated_instruction calls (Kyle Huey) [PSBM-92865]
  - ms/KVM: x86: Add a return value to kvm_emulate_cpuid (Kyle Huey) [PSBM-92865]
  - ms/KVM: nVMX: Disallow VM-entry in MOV-SS shadow (Jim Mattson) [PSBM-92865]
  - RDMA/ocrdma: Remove unused STAG array. (Andrey Ryabinin) [VSTOR-21732]
  - mm/vmscan: don't shrink active list once more in case we reached nr_to_reclaim (Andrey Ryabinin) [PSBM-92480]
  - mm/vmscan: scan active file and anon lists if inactive file list is too short (Andrey Ryabinin) [PSBM-92480]
  - mm/page_alloc: fix allocation failure of zone-restricted allocation (Andrey Ryabinin) [PSBM-92274]
  - scsi: rollback to reset request in a request timer handler (Denis Plotnikov) [PSBM-92312]
  - ve: don't hide cgroup mount root from pseudosuper (Pavel Tikhomirov) [PSBM-86686]
  - bonding: show full hw address in sysfs for slave entries (Konstantin Khorenko) [PSBM-93117]
  - mm: Change formula of calculation of default min_free_kbytes (Kirill Tkhai) [PSBM-69296 VSTOR-21390]
  - ms/net: add LINUX_MIB_PFMEMALLOCDROP counter (Eric Dumazet) [VSTOR-21390]
  - ve/netfilter/ipset: allow nfnetlink_queue module autoload (Konstantin Khorenko) [PSBM-92694]
  - mm: page_counter: add a guard for page_counter_try_charge() function change (Konstantin Khorenko) [PSBM-92720]
  - fs/fuse kio: add warning about jumbo chunks (Pavel Butsykin)
  - fs/fuse kio: sync pcs_mds_sys_info struct (Pavel Butsykin)
  - fs/fuse kio: export io_locality (Pavel Butsykin) [VSTOR-11050]
  - fs/fuse kio: add missed sock write in pcs_sock_sendmsg() (Pavel Butsykin) [VSTOR-11050]
  - fs/fuse kio: relax congestion avoidance limits (backport from usermode) (Pavel Butsykin) [VSTOR-11050]
  - fs/fuse kio: fix a typo in worth_to_grow() (Pavel Butsykin) [VSTOR-11050]
  - fs/fuse kio: export fastpath protocol version (Pavel Butsykin) [PSBM-93637]
  - ms/fuse: Wake up req->waitq of only if not background (Kirill Tkhai)
  - ms/fuse: Optimize request_end() by not taking fiq->waitq.lock (Kirill Tkhai)
  - ms/fuse: Kill fasync only if interrupt is queued in queue_interrupt() (Kirill Tkhai)
  - fs/fuse kio: fix getting a non-existent pcs inode in kpcs_kill_requests() (Pavel Butsykin)
  - fs/fuse kio: fix double free of pfc in process_pcs_init_reply() (Pavel Butsykin) [VSTOR-20922]
  - ploop: kaio: Enter standby mode on EIO as well (Kirill Tkhai)
  - ploop: Clear abort bit on replace delta (Kirill Tkhai) [VSTOR-22414]
  - ploop: Repopulate holes_bitmap on changing delta (Kirill Tkhai)
  - ploop: Add check that ploop don't grow endlessly (Kirill Tkhai)
  - ploop: Make PLOOP_IOC_FREEBLKS always return 0 (Kirill Tkhai)
  - ploop: Disable ioctl(PLOOP_IOC_BALLOON) (Kirill Tkhai)
  - ploop: Add native discard support parameter (Kirill Tkhai) [PSBM-93731]
  - ploop: Fix huge grow with head clusters relocation (Kirill Tkhai) [PSBM-93243]
  - ploop: Populate and maintain holes bitmap (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Fallocate cluster in cached_submit() during hole reuse (Kirill Tkhai) [PSBM-92367 VSTOR-19972 PSBM-93873]
  - ploop: Zero indexes on discard (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Add .complete_merge method (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Introduce data_off_in_clusters() helper (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Prohibit PLOOP_IOC_UPDATE_INDEX on singular list (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Prohibit discard ioctls (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Introduce ploop_submit_alloc() helper (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Make submit_alloc() return int value (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Export map defines to separate header file (Kirill Tkhai) [PSBM-92367 VSTOR-19972]
  - ploop: Fix race between .prepare_merge and .submit_alloc (Kirill Tkhai)
  - ploop: Merge repeating prepare_merge patterns in single function (Kirill Tkhai)
  - ploop: Do not forget to put io context (Kirill Tkhai)
  - ploop: Prohibit discard in case of multi-delta case (Kirill Tkhai) [PSBM-92785]
  - ploop: Prohibit custom discard alignment and granuality (Kirill Tkhai)
  - ploop: Skip repeated discard (Kirill Tkhai) [PSBM-92656]
  - ext4: always imply discard mount option if undelying ploop is detected (Konstantin Khorenko) [VSTOR-19972]
  - ploop: Enable discard support for ploop1 format backed by io_direct (Kirill Tkhai)
  - ploop: Online discard support for dio engine (Kirill Tkhai) [VSTOR-19972]
  - ploop: Introduce ploop_can_issue_discard() helper (Kirill Tkhai) [VSTOR-19972]
  - ploop: Set up discard limits (Kirill Tkhai) [VSTOR-19972]
  - ploop: Never merge discard requests (Kirill Tkhai) [VSTOR-19972]
  - ploop: Introduce local variable in ploop_start() (Kirill Tkhai) [VSTOR-19972]
  - ploop: Add trim_extent_mappings_tail() helper (Kirill Tkhai) [VSTOR-19972]
  - ploop: Add cluster_log local variable (Kirill Tkhai) [VSTOR-19972]
  - ploop: Add local variable into dio_submit() (Kirill Tkhai) [VSTOR-19972]
  - ploop: Add cluster_size_in_sec() helper (Kirill Tkhai) [VSTOR-19972]
  - ploop: Add cluster_size_in_bytes() helper (Kirill Tkhai) [VSTOR-19972]
  - ploop: Export whole_block() (Kirill Tkhai) [VSTOR-19972]
  - ploop: introduce dio_may_fallocate() helper (Kirill Tkhai) [VSTOR-19972]
  - mm/slub: Don't compact memory for high-order optimistic allocation. (Andrey Ryabinin) [VSTOR-20830]
  - mm/swap: activate swapped in pages on fault (Andrey Ryabinin) [VSTOR-20859]
  - mm/vmscan: active lru protection fixups. (Andrey Ryabinin) [VSTOR-20859]
  - ms/mm: workingset: make shadow node shrinker memcg aware (Vladimir Davydov) [VSTOR-19037]
  - ms/mm: workingset: per-cgroup cache thrash detection (Johannes Weiner) [VSTOR-19037 PSBM-92480]
  - mm/memcg: initialize mem_cgroup_per_zone_info earlier. (Andrey Ryabinin) [PSBM-91933 PSBM-91933]
  - ms/mm: workingset: eviction buckets for bigmem/lowbit machines (Johannes Weiner) [VSTOR-19037]
  - ms/mm: workingset: separate shadow unpacking and refault calculation (Johannes Weiner) [VSTOR-19037 PSBM-91933]
  - ms/mm: workingset: #define radix entry eviction mask (Johannes Weiner) [VSTOR-19037]
  - ms/mm: vmscan: pass memcg to get_scan_count() (Vladimir Davydov) [VSTOR-19037]
  - tcp: sendpage should not handle Slab objects (Vasily Averin) [PSBM-90529]
  - ve/net: allow to change max number of net devices for running CT (Konstantin Khorenko) [PSBM-92132]
  - ve/net: warn in case a Container hits ve::netif_max_nr (Konstantin Khorenko) [PSBM-92132]
  - i40iw: Use kvzalloc in i40iw_allocate_virt_mem() (Andrey Ryabinin) [VSTOR-20675]
  - i40iw: Use kvzalloc to allocate i40iw_handler (Andrey Ryabinin) [VSTOR-20675]
  - i40iw: use kvzalloc to allocate array of control qp requests (Andrey Ryabinin) [VSTOR-20675]
  - x86: Add __GFP_ORDER_NOWARN to dma allocations (Andrey Ryabinin) [VSTOR-20675]
  - ploop: Remove unused argument of __map_extent() (Kirill Tkhai)
  - mm/page_alloc: use sched_clock() instead of jiffies to measure latency (Andrey Ryabinin) [VSTOR-19040]
  - drivers/igb: increase link detection timeout up to 5 sec (Konstantin Khorenko) [VSTOR-14627]
  - mm/vmscan: Don't shrink active lrus on the first try. (Andrey Ryabinin) [VSTOR-19037]
  - pfcache: don't get inodes which are beeing freed (Konstantin Khorenko) [PSBM-91819]
  - ploop: Kill unneeded PLOOP_S_WAIT_PROCESS bit (Kirill Tkhai)
  - ploop: Remove dead "pcss"-related code (Kirill Tkhai)
  - ploop: Remove unused argument get_block (Kirill Tkhai)
  - overlayfs: fix ovl_posix_acl_create() to handle posix_acl_create() positive return value (Vasily Averin) [PSBM-91794]
  - fs/fuse kio: add warning about jumbo chunks (Pavel Butsykin) [VSTOR-20372]
  - x86/pci-dma: don't warn about high order in dma_alloc (Andrey Ryabinin) [VSTOR-20383 VSTOR-20349]
  - ve: prohibit opening proc/self/exe from VE for VD_VE_ENTER_TASK (Pavel Tikhomirov) [PSBM-91689 PSBM-91042]
  - iscsi: fall back to sendmsg for slab pages (Vasily Averin) [PSBM-90529]
  - ms/virtio_balloon: fix another race between migration and ballooning (Jiang Biao) [PSBM-91532]
  - mm: allow kmem limit bypassing if reclaimable slabs detected (Konstantin Khorenko) [PSBM-91566]
  - ploop compact: remove alloc_head BUG_ON before truncate call (Vasily Averin) [PSBM-90794 PSBM-90794]
  - net: export net/core/somaxconn sysctl for unprivileged users (Jan Dakinevich) [PSBM-91032]
  - fs/fuse: fix unsafe killing fiq->pending requests (Pavel Butsykin)
  - fs/fuse kio: add FUSE_S_FAIL_IMMEDIATELY check in pcs_fuse_submit() (Pavel Butsykin)
  - ve/meminfo: show "MemAvailable: ..." line in CT's meminfo (Jan Dakinevich) [PSBM-90190]
  - ploop: Fix discard BIOs mis accounting (Kirill Tkhai)
  - fs/fuse kio: invalidate files for kio (Pavel Butsykin) [VSTOR-19620]
  - ms/x86, mm, perf: Allow recursive faults from interrupts (Peter Zijlstra) [PSBM-91181]
  - fs: Export symbols replace_fd() and create_pipe_files() (Sergey Lysanov) [VSTOR-10187]
  - ms/ipvs: remove an annoying printk in netns init (Kirill Tkhai)
  - pfcache: silently drop "trusted.pfcache" xattr when set on inappropriate fs (Konstantin Khorenko) [PSBM-90740]
  - ms/sunrpc: use-after-free in svc_process_common() (Vasily Averin) [PSBM-89609]
  - ms/sunrpc: use SVC_NET() in svcauth_gss_* functions (Vasily Averin) [PSBM-89609]
  - seccomp: Add PT_SUSPEND_SECCOMP in __secure_computing (Kirill Gorkunov) [PSBM-90760 PSBM-90547]
  - configs: disable cpu partial slab support (Konstantin Khorenko) [PSBM-83199]
  - net/ip6ip: Consider VE_FEATURE_IPIP on new net creation (Kirill Gorkunov) [PSBM-84241]
  - net/gre: Consider VE_FEATURE_IPGRE on new net creation (Kirill Gorkunov) [PSBM-84241]
  - ms/mm/slub: set slub_max_order = 0 by default. (Andrey Ryabinin) [PSBM-83199]
  - ms/slub: Make cpu partial slab support configurable (Joonsoo Kim) [PSBM-83199]
  - ms/mm: workingset: update shadow limit to reflect bigger active list (Johannes Weiner)
  - ms/mm: workingset: size shadow nodes lru basing on file cache size (Vladimir Davydov) [PSBM-83199]
  - netfilter/vzprivnet: Fix memleaks of 'struct seq_operations' (Andrey Ryabinin)
  - ms/mm: select HAVE_MOVE_PMD on x86 for faster mremap (Joel Fernandes (Google))
  - ms/mm: speed up mremap by 20x on large regions (Joel Fernandes (Google))
  - ms/huge pagecache: extend mremap pmd rmap lockout to files (Hugh Dickins)
  - fs/fuse kio: make it possible to enable TRACE/DTRACE in the release kernel (Pavel Butsykin) [VSTOR-18383]
  - fs/fuse kio: disable duplication FUSE_K* messages to debugfs by default (Pavel Butsykin) [VSTOR-18383]
  - fs/fuse kio: bring fuse ktraces to a common view (Pavel Butsykin) [VSTOR-18383]
  - fs/fuse kio: deny unavailable ioctl's in kio (Pavel Butsykin)
  - fs/fuse kio: add support PCS_CS_IO_SYNC flag (Pavel Butsykin) [VSTOR-19396]
  - fs/fuse kio: backport immediate-write attribute handle (Pavel Butsykin) [VSTOR-19396]
  - fs/fuse kio: satisfy pure FALLOC_FL_KEEP_SIZE immediately (Pavel Butsykin) [VSTOR-19317]
  - fs/fuse kio: fix mapping dereference in a dead map (Pavel Butsykin) [VSTOR-19267]
  - ms/netfilter: account ebt_table_info to kmemcg (Kirill Tkhai)
  - venetdev: fix race between veip shutdown and add veip entry (Konstantin Khorenko) [PSBM-90395]
  - venetdev: drop src_lh/dst_lh lists from veip_struct (Konstantin Khorenko) [PSBM-90395]
  - ms/mm: mincore: add hwpoison page handle (Weijie Yang) [PSBM-90329]
  - ms/drivers/gpu/vga: allocate vga_arb_write() buffer on stack (Dmitry Vyukov) [PSBM-90315]
  - net/drivers/i40e: suppress high order allocation warning (Konstantin Khorenko) [VSTOR-18622]
  - fuse: do not wait for completion of inessential writes in fuse fsync (Alexey Kuznetsov) [VSTOR-17311 VSTOR-17311]
  - fs/fuse kio: missed cleanup for interrupted shrink request (Pavel Butsykin) [VSTOR-19074]
  - mm/page_alloc: add latency to the page_alloc tracepoint (Andrey Ryabinin)
  - fs/fuse kio: missed clean di->size.op in failed shrink request (Pavel Butsykin) [VSTOR-18947]
  - tcache/tswap: don't shrink tcache/tswap until they are initialized (Konstantin Khorenko) [VSTOR-18694]
  - mm/memcg: Fix NULL-ptr dereference when memcg diabled at boot. (Andrey Ryabinin) [VSTOR-18694]
  - fs/fuse kio: retry allocation PCS_IREQ_FLUSH request (Pavel Butsykin) [VSTOR-18475]
  - fs/fuse kio: fix sreq and msg leak in prepare_map_flush_ireq() (Pavel Butsykin) [VSTOR-18475]
  - fs/fuse kio: fix loss of FUSE_FSYNC/FUSE_FLUSH reqs (Pavel Butsykin) [VSTOR-18475]
  - ms/ovl: fix recursive oi->lock in ovl_link() (Amir Goldstein) [VSTOR-18481]
  - ms/sock_diag: fix autoloading of the raw_diag module (Andrei Vagin)
  - sunrpc: cache_head leak due queued request (Vasily Averin) [PSBM-80869]
  - nfsd: disable UMH client tracking in nested net namespaces (Vasily Averin) [PSBM-90024]
  - ms/ksm: replace jhash2 with xxhash (Timofey Titovets) [PSBM-90044]
  - ms/xxHash: create arch dependent 32/64-bit xxhash() (Timofey Titovets) [PSBM-90044]
  - ms/lib: Add xxhash module (Nick Terrell) [PSBM-90044]
  - fuse kio: never ignore fuse_req error during PCS_IOC_GETMAP (Anton Nefedov)
  - fuse kio: fix timer setup so it actually delays ireq (Anton Nefedov)
  - fuse kio: Round down extent start in fiemap_process_one() (Alexey Kuznetsov) [VSTOR-15535]
  - drivers/net/i40e: define proper net_device::neigh_priv_len (Konstantin Khorenko) [VSTOR-17918]
  - ploop: move to standby after -ENOTCONN too (Anton Nefedov) [VSTOR-17613]
  - ploop: move to standby mode after fsync() error too (Anton Nefedov) [VSTOR-17613]
  - ploop: move standby mode setting to separate function (Anton Nefedov) [VSTOR-17613]
  - fs/fuse kio_pcs: replenish netaddr_cmp() with rdma type (Pavel Butsykin) [VSTOR-17784]
  - fbcon: use kvmalloc() for scrollback buffer (Konstantin Khorenko) [VSTOR-17781]
  - ms/dlm: fix possible call to kfree() for non-initialized pointer (Denis V. Lunev) [VSTOR-17522]
  - vzstat: account "page_in" and "swap_in" in nanoseconds (Konstantin Khorenko) [VSTOR-16659]
  - fs/fuse kio_pcs: fix update cs state after receiving new map (Pavel Butsykin) [VSTOR-17413]
  - ploop: convert prealloced_size to absolute offset (Pavel Tikhomirov) [PSBM-89565]
  - KVM: x86: Don't re-execute instruction when not passing CR2 value (Liran Alon) [PSBM-89859]
  - fs/fuse kio_pcs: invalidation maps in setattr kio (Pavel Butsykin) [VSTOR-16863]
  - fs/fuse kio_pcs: cleanup kpcs_setattr_end() (Pavel Butsykin) [VSTOR-16863]
  - fs/fuse kio_pcs: make pcs_map_truncate() easier (Pavel Butsykin) [VSTOR-16863]
  - mm: cleancache: fix corruption on missed inode invalidation (Pavel Tikhomirov) [PSBM-89050]
  - fs/fuse: add assert on i_mutex in fuse_send_write() (Pavel Butsykin) [VSTOR-16876]
  - fs/fuse kio_pcs: add assert on i_mutex for PUNCH_HOLE and ZERO_RANGE (Pavel Butsykin) [VSTOR-16876]
  - fs/fuse: add assert on i_mutex in fuse_send_unmap() (Pavel Butsykin) [VSTOR-16876]
  - ploop kaio: successfull alloc should adjust alloc_head (Vasily Averin) [VSTOR-15471]
  - ploop: fix negative discard size in preprocess_discard_req() (Pavel Butsykin)
  - ploop: change default of discard granularity and alignment attrs to PAGE_SIZE (Pavel Butsykin)
  - ploop: add separate tree for existing discard requests (Denis V. Lunev) [VSTOR-16344]
  - ploop: create helper to access ploop_device->entry_tree (Denis V. Lunev) [VSTOR-16344]
  - ms/vmscan: memcg: always use swappiness of the reclaimed memcg (Michal Hocko) [PSBM-89726]
  - fs/fuse kio_pcs: cleanup in truncate (backport) (Alexey Kuznetsov)
  - fs/fuse kio_pcs: NULL pointer dereference in map_submit()->MAP_ARGS() (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: NULL pointer dereference on access m->mapping->chunk_size_bits (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: fix map leaks in process_ireq_truncate() (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: simplify pcs_mapping_truncate() (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: fix map leak in pcs_mapping_truncate() (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: protect valid_for_truncate() by m->lock's (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: fix condition for map resolving in pcs_mapping_truncate() (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: forgotten setting of the next phase (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: make map_truncate_tail() working as the original from libpcs_client (Pavel Butsykin) [PSBM-89539]
  - fuse: Switch unused engines off in Kconfig (Kirill Tkhai) [VSTOR-16325]
  - fuse: Prohibit kio engine from containers (Kirill Tkhai) [VSTOR-16325]
  - fuse: Fix parse_fuse_opt() return values wrong interpretation (Kirill Tkhai)
  - ext4 resise: extra brelse in setup_new_flex_group_blocks() (Vasily Averin) [PSBM-89583]
  - ms/ext4: fix online resize's handling of a too-small final block group (Theodore Ts'o) [PSBM-89583]
  - ms/x86/unwind: Disable KASAN checks for non-current tasks (Josh Poimboeuf)
  - ms/sched/x86: Add 'struct inactive_task_frame' to better document the sleeping task stack frame (Brian Gerst)
  - ms/kprobes: Unpoison stack in jprobe_return() for KASAN (Dmitry Vyukov) [VSTOR-16798]
  - ms/kasan: add functions to clear stack poison (Mark Rutland) [VSTOR-16798]
  - ms/kprobes: Avoid false KASAN reports during stack copy (Dmitry Vyukov) [VSTOR-16798]
  - vhost/net: don't read and process iotlb message with bad lenth (Pavel Tikhomirov) [PSBM-90291]
  - lib/kmapset: fix undefined behavior in kmapset_cmp() (Pavel Butsykin)
  - net/memcg: fix check for OVER_LIMIT in socket memory accounting (Konstantin Khorenko) [PSBM-90144]
  - ms/KVM: X86: Fix scan ioapic use-before-initialization (Wanpeng Li) [PSBM-90292]
  - ms/ksm: React on changing "sleep_millisecs" parameter faster (Kirill Tkhai)
  - kexec, kasan: increase KEXEC_AUTO_RESERVED_SIZE under CONFIG_KASAN=y up to 1G (Konstantin Khorenko)
  - memcg/debug: warn early when releasing memcg css with non-zero kmem (Konstantin Khorenko) [PSBM-89892]
  - ploop: fix int overflow when calculating used_pos (Pavel Tikhomirov) [PSBM-89565]
  - fuse kio: Unexport pcs_ioconn_close() and pcs_ioconn_unregister() (Kirill Tkhai)
  - fs/fuse kio_pcs: fix NULL pointer dereference in pcs_mapping_truncate() (Pavel Butsykin)
  - ms/ipc/shm: fix use-after-free of shm file via remap_file_pages() (Eric Biggers) [VSTOR-15440]
  - mm/vmscan: shrink tcache, tswap upfront everything else (Andrey Ryabinin) [PSBM-89403]
  - cbt: selfdeadlock in __blk_cbt_set() (Vasily Averin) [PSBM-89323]
  - cbt: bitmap corruption caused by ipi (Vasily Averin) [PSBM-89323]
  - mm/tcache: rebalance tree if isolation failed (Andrey Ryabinin) [PSBM-89403]
  - mm/tcache: don't insert empty reclaim node (Andrey Ryabinin) [PSBM-89403]
  - fuse kio: Fix deadlock at pcs_fuse_submit() error path (Kirill Tkhai) [VSTOR-16246]
  - fs/fuse kio_pcs: flush rpc work inside pcs_rpc_destroy() (Pavel Butsykin) [VSTOR-16236]
  - fuse kio: Move abort & destroy block up in pcs_rpc_send() (Kirill Tkhai) [VSTOR-16236]
  - fuse kio: Check for null ep in pcs_rpc_deaccount_msg() (Kirill Tkhai) [VSTOR-16236]
  - fuse kio: Stop self-abuse of rpc counter in rpc_queue_work() (Kirill Tkhai) [VSTOR-16236]
  - x86,ia32: Restore 32bit personality (Cyrill Gorcunov) [PSBM-76965]
  - fs/fuse kio_pcs: drop old mapping after size growth (Pavel Butsykin)
  - ms/mm, mempolicy: migrate_to_node should only migrate to node (David Rientjes) [PSBM-89512]
  - fuse kio: Hold pcs_rpc counter till sio may be freed (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Fix rpc socket leak on rpc_abort() (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Dereference sk_user_data under rcu (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Introduce pcs_sk_kick_queue() (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Destroy rpc in work func (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Add pcs_cleanup_wq (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Reorder callback assignment (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Use sio eof instead of parent to determ abort (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Use __maybe_unused (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Port "ignore uninitialized CS addresses" commit (Kirill Tkhai) [VSTOR-3415 VSTOR-3415 VSTOR-16083]
  - fuse kio: Refactoring in struct pcs_rpc (Kirill Tkhai)
  - fuse kio: Differ fuse_pcs_kdirect_claim_op() return values (Kirill Tkhai)
  - fuse kio: Do not try to populate fuse_inode::private on second open (Kirill Tkhai)
  - ms/x86/asm/64: Clear AC on NMI entries (Andy Lutomirski)
  - ms/x86/asm/traps: Disable tracing and kprobes in fixup_bad_iret and sync_regs (Andy Lutomirski)
  - ms/x86_64, traps: Rework bad_iret (Andy Lutomirski) [PSBM-89221]
  - fuse kio: Fix spelling in process_pcs_init_reply() (Kirill Tkhai)
  - fuse kio: Return possibility to handle files served in userspace (Kirill Tkhai) [VSTOR-15947]
  - bnx2: use kvzalloc() to allocate certain internal data (Jan Dakinevich)
  - bnx2x: suppress warnings on DMA memory allocation (Jan Dakinevich)
  - fuse kio: Fix deadlock in kpcs_req_send() (Kirill Tkhai) [VSTOR-15924]
  - fs/fuse kio_pcs: fix double free of synchronous requests (Pavel Butsykin)
  - fs/fuse kio_pcs: prevention of falling kio reqs to usermode (Pavel Butsykin) [VSTOR-15447]
  - fs/fuse kio_pcs: split kpcs_req_send() (Pavel Butsykin) [VSTOR-15447]
  - fs/fuse: initialize req->io_inode in fuse_send_unmap() (Pavel Butsykin) [VSTOR-15447]
  - fs/fuse: fix mutually exclusive flags in fuse_send_unmap() (Pavel Butsykin) [VSTOR-15447]
  - fuse kio: Add debug printk into process_pcs_init_reply() (Kirill Tkhai)
  - fuse kio: Protect struct pcs_rpc_engine::{unhashed, ht, nrpcs} (Kirill Tkhai) [VSTOR-15727]
  - fuse kio: Fallback to plain fuse in case of version mismatch (Kirill Tkhai)
  - fuse kio: Reorder process_pcs_init_reply() and free memory on failure (Kirill Tkhai)
  - fuse kio: Introduce cached_op (Kirill Tkhai)
  - fuse kio: Refactoring in fuse_show_options() (Kirill Tkhai)
  - fuse kio: Revert fuse_request_free() changes (Kirill Tkhai)
  - fuse kio: Do not get useless fuse.ko module reference (Kirill Tkhai)
  - fuse kio: Add schedule_timeout() into pcs_rpc_fini_verify() (Kirill Tkhai)
  - fuse kio: initialize batch in pcs_map shrinker (Konstantin Khorenko) [VSTOR-15801]
  - x86/mm/kaiser: Fix build with CONFIG_XEN=n (Andrey Ryabinin)
  - fs/fuse kio_pcs: drop rpc connection close in pcs_rpc_engine_fini() (Pavel Butsykin) [VSTOR-15378]
  - fs/fuse kio_pcs: remove fuse destroy request (Pavel Butsykin) [VSTOR-15378]
  - fs/fuse kio_pcs: fix race between req->end() and request_wait_answer() (Pavel Butsykin) [VSTOR-15378]
  - fs/fuse kio_pcs: rollback default rpc_affinity_mode to RPC_AFFINITY_RETENT (Pavel Butsykin)
  - ms/fuse: add locking to max_background and congestion_threshold changes (Kirill Tkhai) [VSTOR-9810]
  - ms/fuse: use READ_ONCE on congestion_threshold and max_background (Kirill Tkhai) [VSTOR-9810]
  - ms/fuse: use list_first_entry() in flush_bg_queue() (Kirill Tkhai) [VSTOR-9810]
  - ms/fuse: fix blocked_waitq wakeup (Miklos Szeredi) [VSTOR-9810]
  - ms/fuse: set FR_SENT while locked (Miklos Szeredi) [VSTOR-9810]
  - ms/fuse: Fix use-after-free in fuse_dev_do_write() (Kirill Tkhai) [VSTOR-9810]
  - ms/fuse: Fix use-after-free in fuse_dev_do_read() (Kirill Tkhai) [VSTOR-9810]
  - mm: Fix int overflow in callers of do_shrink_slab() (Kirill Tkhai)
  - fuse: Use hash table to link processing request (Kirill Tkhai) [VSTOR-14760]
  - fuse: Kill fuse_req::intr_unique (Kirill Tkhai) [VSTOR-14760]
  - fuse: Change interrupt requests allocation algorhythm (Kirill Tkhai) [VSTOR-14760]
  - mm/swap: use kvzalloc for swap_info_struct allocation (Vasily Averin) [PSBM-89600]
  - md/bcache: add queue parameter to part_round_stats() call (Konstantin Khorenko) [PSBM-89580]
  - config.OpenVZ.debug.minimal: update up to 3.10.0-957.el7 (Konstantin Khorenko) [PSBM-89580]
  - mm/init: hide most of start_kernel() from KAsan (Konstantin Khorenko) [PSBM-89047]
  - net: reorganize skb_gso_size_check() description to make htmldocs happy (Konstantin Khorenko)
  - ms/kasan: depend on CONFIG_SLUB_DEBUG (Jason A. Donenfeld)
  - ms/slab, slub: skip unnecessary kasan_cache_shutdown() (Shakeel Butt) [PSBM-89434]
  - mm/slab: use monotonic serial number for naming per memcg caches (Konstantin Khorenko) [PSBM-89047]
  - rh/md: add declaration of stripe_dax_memcpy_toiovecend() if DAX_DRIVER disabled (Konstantin Khorenko) [PSBM-89580]
  - ms: Add braces to avoid "ambiguous ‘else’" compiler warnings (Linus Torvalds)
  - ms/inode: don't softlockup when evicting inodes (Josef Bacik)
  - configs.OpenVZ: add minimal debug kernel config (Konstantin Khorenko)
  - ms/mm/slub: fix slab double-free in case of duplicate sysfs filename (Konstantin Khlebnikov) [PSBM-89047]
  - ms/slub: fix leak of 'name' in sysfs_slab_add (Dave Jones) [PSBM-89047]
  - ms/slub: Fix possible format string bug. (Tetsuo Handa) [PSBM-89047]
  - config.OpenVZ.minimal: update up to 3.10.0-957.el7 (Konstantin Khorenko) [PSBM-89580]
  - IB/core: use kvzalloc to allocate ib_device (Jan Dakinevich)
  - fs/fuse kio_pcs: time slice for rpc rebinding (Pavel Butsykin) [VSTOR-14031]
  - fs/fuse kio_pcs: improve rpc to cpu binding (Pavel Butsykin) [VSTOR-14031]
  - pfcache: don't inherit vm_private_data on split and copy (Pavel Tikhomirov) [PSBM-88809]
  - fuse kio: Do not zero already zeroed fields in pcs_sockio_init (Kirill Tkhai)
  - mm/vmstat: Add more vmstats in containers /proc/vmstat (Andrey Ryabinin) [PSBM-88323]
  - mm/vmstat, io_acct: fix PGPGIN/PGPGOUT in container's /proc/vmstat. (Andrey Ryabinin) [PSBM-88323]
  - ms/unix: add ioctl to open a unix socket file with O_PATH (Andrey Vagin) [PSBM-88786]
  - fuse kio: Do not zero already zeroed fields in pcs_find_get_map() (Kirill Tkhai)
  - ploop: kthread_create() errors processing (Vasily Averin) [PSBM-88561]
  - x86/kvm/vmx: suppress warning on high-order allocation (Jan Dakinevich)
  - mm/mempool: Use kvmalloc to allocate array of element pointers (Andrey Ryabinin) [VSTOR-14758]
  - ms/mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags (Michal Hocko) [VSTOR-14758]
  - ve/sunrpc: prohibit mounting rpc_pipefs in CT without nfsd feature (Pavel Tikhomirov) [PSBM-87836]
  - ve/cgroup: do not link a CT cpu cgroup twice into ve_root_list (Konstantin Khorenko) [PSBM-88251]
  - /proc/vz/latency: Show max latency in 2 min instead of 5sec. (Andrey Ryabinin)
  - fuse kio: Async queueing of fiemap from work (Kirill Tkhai)
  - fuse kio: Introduce fiemap_work (Kirill Tkhai)
  - fuse kio: Move fiter ireq iocount assignment (Kirill Tkhai)
  - fuse kio: Move position advance in fiemap_process_one() (Kirill Tkhai)
  - fuse kio: Kill fiemap_worker() thread (Kirill Tkhai)
  - fuse kio: Move it variable from stack to struct fiemap_iterator (Kirill Tkhai)
  - fuse kio: Extract fiemap iteration from fiemap_worker() to separate function (Kirill Tkhai)
  - fuse kio: Cleanup in pcs_fuse_submit() (Kirill Tkhai)
  - ms/mm/vmscan.c: clear shrinker bit if there are no objects related to memcg (Kirill Tkhai) [PSBM-88027 PSBM-88027]
  - ms/mm: add SHRINK_EMPTY shrinker methods return value (Kirill Tkhai) [PSBM-88027]
  - ms/mm/vmscan.c: generalize shrink_slab() calls in shrink_node() (Vladimir Davydov) [PSBM-88027]
  - ms/mm/vmscan.c: iterate only over charged shrinkers during memcg shrink_slab() (Kirill Tkhai) [PSBM-88027]
  - ms/mm/memcontrol.c: export mem_cgroup_is_root() (Kirill Tkhai) [PSBM-88027]
  - ms/mm/list_lru.c: set bit in memcg shrinker bitmap on first list_lru item appearance (Kirill Tkhai) [PSBM-88027]
  - ms/mm/list_lru.c: pass lru argument to memcg_drain_list_lru_node() (Kirill Tkhai) [PSBM-88027]
  - ms/mm/list_lru: pass dst_memcg argument to memcg_drain_list_lru_node() (Kirill Tkhai) [PSBM-88027]
  - ms/mm/list_lru.c: add memcg argument to list_lru_from_kmem() (Kirill Tkhai) [PSBM-88027]
  - ms/fs: propagate shrinker::id to list_lru (Kirill Tkhai) [PSBM-88027]
  - ms/mm, memcg: assign memcg-aware shrinkers bitmap to memcg (Kirill Tkhai) [PSBM-88027]
  - ms/mm/memcontrol.c: move up for_each_mem_cgroup{, _tree} defines (Kirill Tkhai) [PSBM-88027]
  - ms/mm: assign id to every memcg-aware shrinker (Kirill Tkhai) [PSBM-88027]
  - /proc/<pid>/vz_latency: Add scheduling stats (Andrey Ryabinin) [PSBM-87797]
  - /proc/<pid>/vz_latency: Show maximal allocation latency in the last second. (Andrey Ryabinin) [PSBM-87797 PSBM-93675]
  - /proc/vz/latency: distinguish atomic allocations in irq from in task atomics. (Andrey Ryabinin) [PSBM-87797]
  - vz_latency: don't account allocations in interrupts to random tasks (Andrey Ryabinin) [PSBM-87797]
  - linux/preempt_mask.h: Add in_task() macro. (Andrey Ryabinin) [PSBM-87797]
  - ploop: avoid crash if ploop request has uninitialized preq_ub (Pavel Tikhomirov) [PSBM-88112]
  - ploop: initialize preq_ub for zero ploop requests as well (Konstantin Khorenko) [PSBM-88112]
  - ms/sget(): handle failures of register_shrinker() (Al Viro)
  - fs/fuse kio_pcs: disable TRACE/DTRACE for release kernel (Pavel Butsykin)
  - block: store exec_ub on struct request and use it (Konstantin Khorenko) [PSBM-86910]
  - ploop: store exec_ub in ploop request and use it while processing requests (Konstantin Khorenko) [PSBM-86910]
  - config.OpenVZ.minimal: add some hardware drivers support (Konstantin Khorenko)
  - fs/fuse kio_pcs: missed *msg_size setting in rpc_get_hdr() (Pavel Butsykin) [VSTOR-13602]
  - vzprivnet: classify_write() cleanup (Vasily Averin)
  - rh/fs/dcache.c: Revert "fs/dcache.c: add cond_resched() in shrink_dentry_list()" (Konstantin Khorenko) [PSBM-87864]
  - ms/netfilter: drop outermost socket lock in getsockopt() (Paolo Abeni) [PSBM-87858]
  - scsi: don't allocate memory under spinlock in scsi_register_device_handler() (Konstantin Khorenko) [PSBM-87859]
  - net/sctp: Replace in/out stream arrays with flex_array (Oleg Babin) [PSBM-82552]
  - ve/net/neighbour: per-ct limit for neighbour entries (Vasily Averin) [PSBM-87155]
  - ms/rpc_pipefs: fix double-dput() (Al Viro) [PSBM-73001]
  - bc: implement ubc "numproc" limit based on pids cgroup (Konstantin Khorenko) [PSBM-86044 PSBM-86044 PSBM-87662]
  - kernel/sched: Use kvzalloc to allocate the array of ctl_tables (Andrey Ryabinin)
  - fuse/kio: Add socket io fault injection (Kirill Tkhai)
  - ms/fuse: reduce allocation size for splice_write (Andrey Ryabinin)
  - ms/fuse: Don't access pipe->buffers without pipe_lock() (Andrey Ryabinin)
  - fuse kio: Allocate pcs_map from kmem_cache with SLAB_RECLAIM_ACCOUNT flag (Kirill Tkhai) [PSBM-87665]
  - ext4: kill ext4_kv[mz]alloc() (Jan Dakinevich) [PSBM-83044]
  - ext4: replace ext4_kvmalloc() with kvmalloc() (Oleg Babin) [PSBM-83044 PSBM-87413]
  - ms/ext4: kill ext4_kvfree() (Al Viro) [PSBM-83044]
  - fuse kio: Move map_chunk_start() and map_chunk_end() checks (Kirill Tkhai) [PSBM-87665]
  - mm/memcg: don't swap cgroup's pages during offline (Andrey Ryabinin) [PSBM-87281]
  - target: use to_stat_tgt_port() to handle files in scsi_tgt_port/ (Andrei Vagin) [VSTOR-13021]
  - ms/netfilter: ipset: fix ip_set_list allocation failure (Andrey Ryabinin) [PSBM-87338]
  - ms/kvm: x86: vmx: fix vpid leak (Roman Kagan) [PSBM-86479]
  - ms/KVM: x86: thoroughly disarm LAPIC timer around TSC deadline switch (Radim Krčmář) [PSBM-86578 PSBM-86578]
  - ms/KVM: x86: really disarm lapic timer when clearing TMICT (Radim Krčmář) [PSBM-86578 PSBM-86578]
  - ms/KVM: x86: handle 0 write to TSC_DEADLINE MSR (Radim Krčmář) [PSBM-86578 PSBM-86578]
  - ms/KVM: LAPIC: Keep timer running when switching between one-shot and periodic mode (Wanpeng Li) [PSBM-86578 PSBM-86578]
  - ms/KVM: LAPIC: Introduce limit_periodic_timer_frequency (Wanpeng Li) [PSBM-86578 PSBM-86578]
  - ms/KVM: LAPIC: Fix lapic timer mode transition (Wanpeng Li) [PSBM-86578 PSBM-86578]
  - fs/fuse kio_pcs: fix NULL pointer dereference in pcs_flushreq_complete() (Pavel Butsykin) [VSTOR-12570]
  - fs/fuse kio_pcs: style fix in pcs_fuse_submit() (Pavel Butsykin)
  - fuse kio: kio must not fail when not being able to claim a file (Alexey Kuznetsov) [PSBM-86866]
  - fs/fuse kio_pcs: throttle async KIO requests (Pavel Butsykin) [VSTOR-12335]
  - fs/fuse: add non-blocking request flag (Pavel Butsykin) [VSTOR-12335]
  - ms/netfilter: on sockopt() acquire sock lock only in the required scope (Paolo Abeni) [PSBM-86738]
  - sctp: not allow transport timeout value less than HZ/5 for hb_timer (Xin Long) [PSBM-86804]
  - x86/microcode/intel: hide warning on high order allocation for microcode area (Konstantin Khorenko) [PSBM-86662]
  - sched: Call calc_load_ve() out of jiffies_lock (Kirill Tkhai) [PSBM-84967 PSBM-84967]
  - sched: Export calc_load_ve() (Kirill Tkhai) [PSBM-84967]
  - sched: Make calc_global_load() return true when it's need to update ve statistic (Kirill Tkhai) [PSBM-84967]
  - ve/devmnt: initialize s_mode before deactivate_locked_super to suppress warning (Pavel Tikhomirov) [PSBM-80743]
  - ms/fuse: Add forgotten unlock_page() into fuse_readpages_fill() (Kirill Tkhai)
  - cgroup: fix css_tryget() to not succeed on offlined css (Andrey Ryabinin) [PSBM-75892]
  - fuse kio: control internal tracing with module parameter pcs_loglevel (Alexey Kuznetsov)
  - fuse kio: avoid spurious uncork setsockopt on unix socket (Alexey Kuznetsov)
  - fuse kio: logging improvements (Alexey Kuznetsov)
  - target: rename user_helper back to alua_user_helper (Andrei Vagin) [VSTOR-12238]
  - mnt_ns: introduce global list of mount namespaces for debug (Konstantin Khorenko) [PSBM-80869]
  - ve/mount: allow pseudosuper to temporary exceed the container limit (Pavel Tikhomirov) [PSBM-86511]
  - mm/memcg: Bypass charges to offlined cgroup (Andrey Ryabinin) [PSBM-86092]
  - fuse kio: Make struct fuse_inode::num_openers int (Kirill Tkhai)
  - rcuupdate.h: Switch to READ_ONCE and fix NULL-deref in __task_pid_nr_ns() again (Andrey Ryabinin)
  - fs/fuse kio_pcs: fix NULL pointer dereference inside a dead map (Pavel Butsykin)
  - fuse kio: Fix NULL pointer dereference in pcs_map_get_locked() (Kirill Tkhai) [PSBM-86458]
  - fuse: Relax BUG_ON() in fuse_direct_IO_bvec() (Kirill Tkhai) [PSBM-86446]
  - fs/fuse kio_pcs: bugs in integrity protocol for fallocate (Pavel Butsykin) [PSBM-68465]
  - fuse kio: missing local client ID initialization (Alexey Kuznetsov) [VSTOR-11651]
  - IPoIB: use kvzalloc to allocate an array of bucket pointers (Jan Dakinevich)
  - fuse kio: Read file attributes every first open (Maxim Patlasov) [PSBM-86234]
  - fuse: Refactor fuse_open_common() (Kirill Tkhai)
  - fuse kio: Make KIO to require writeback_cache (Kirill Tkhai)
  - ve/sunrpc: enable rpc_pipefs mounts inside non-init user namespaces (Vasily Averin) [PSBM-86395]
  - ib/srpt: use vmalloc to allocate ring pointers (Jan Dakinevich)
  - ms/proc: do not access cmdline nor environ from file-backed areas (Willy Tarreau) [PSBM-86221]
  - ms/lockd: fix "list_add double add" caused by legacy signal interface (Vasily Averin) [PSBM-86390]
  - fs/fuse kio_pcs: fix grow work execution with zero (Pavel Butsykin) [PSBM-85945]
  - mm/tswap: fix lockup in tswap_evict_page() (Andrey Ryabinin) [PSBM-86344]
  - ve/fs/namespace: allow submounts in non-init userns (Konstantin Khorenko) [PSBM-86277]
  - ib/mlx4: adjust gfp flags for DMA allocations (Jan Dakinevich)
  - fuse kio: error PCS_ERR_CSD_LACKING is non-fatal (Alexey Kuznetsov) [VSTOR-11692]
  - ve/fs: allow mount fs in init userns if it's mounted in another userns (Konstantin Khorenko) [PSBM-68599]
  - ms/x86/efi-bgrt: Replace early_memremap() with memremap() (Matt Fleming) [PSBM-85888]
  - ms/mm, swap: fix race between swap count continuation operations (Huang Ying) [PSBM-86091]
  - fuse: Teach fuse_blocked_for_wb() handle no files case (Kirill Tkhai)
  - fs/fuse kio_pcs: replace pr_info() with ktrace for ireq fatal error (Pavel Butsykin) [VSTOR-11391]
  - fs/fuse kio_pcs: enable traces for cs sync (Pavel Butsykin) [VSTOR-11651]
  - fuse kio: Check returned FUSE_SETATTR size (Kirill Tkhai)
  - fs/fuse kio_pcs: increment PCS_FAST_PATH_VERSION to 1.1 (Pavel Butsykin)
  - fs/fuse kio_pcs: add handling FUSE_FLUSH in kio_pcs (Pavel Butsykin) [VSTOR-11064]
  - fs/fuse: set inode entry for FUSE_FLUSH request (Pavel Butsykin) [VSTOR-11064]
  - mm/memory: Don't charged cowed private pages as cache (Andrey Ryabinin)
  - uprobes: Fix the memcg accounting (Oleg Nesterov)
  - fs/fuse kio_pcs: fix missing hbuf.uid update for ireq split case (Pavel Butsykin) [VSTOR-11315]
  - fs/fuse kio_pcs: handle old map in pcs_cs_submit() (Pavel Butsykin) [VSTOR-11315]
  - target: move blkio_cgroup from attrib/ to param/ (Andrei Vagin) [VSTOR-10194]
  - fuse kio: support unix socket for local CSes (Alexey Kuznetsov) [VSTOR-9817]
  - fs/fuse kio_pcs: mapped requests have map version preinitialized (Pavel Butsykin)
  - fuse kio: Skip processing of messages above PAGE_SIZE size (Kirill Tkhai) [VSTOR-11208 VSTOR-11208]
  - fuse kio: Get msg size in second argument of pcs_sockio::get_msg() (Kirill Tkhai) [VSTOR-11208 VSTOR-11208]
  - fs/fuse kio_pcs: add more traces for cs requests (Pavel Butsykin)
  - fuse kio: Fix unbalanced queueing and dequeueing pcs_map_entry::sync_work (Kirill Tkhai)
  - fuse kio: Add missed spin_lock into sync_timer_work() (Kirill Tkhai)
  - fuse kio: Add comment to fuse_release() (Kirill Tkhai)
  - fuse kio: Place more pcs_cs_link::cs under rcu dereference (Kirill Tkhai)
  - fuse kio: Wait pending requests on final fput() (Kirill Tkhai)
  - ms/kvm: x86: use correct privilege level for sgdt/sidt/fxsave/fxrstor access (Vasily Averin) [PSBM-85796]
  - ms/KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and kvm_write_guest_virt_system (Vasily Averin) [PSBM-85796]
  - ms/KVM: x86: introduce linear_{read,write}_system (Vasily Averin) [PSBM-85796]
  - target: fix a locking scheme of persistent reservations (Andrei Vagin) [VSTOR-10675]
  - ms/netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user (Eric Dumazet)
  - ms/netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize (Liping Zhang)
  - ms/mm: have filemap_check_and_advance_wb_err clear AS_EIO/AS_ENOSPC (Vasily Averin) [VSTOR-10912]
  - ms/fs: use mapping_set_error instead of opencoded set_bit (Vasily Averin) [VSTOR-10912]
  - ms/errseq: Always report a writeback error once (Vasily Averin) [VSTOR-10912]
  - ms/mm: remove optimizations based on i_size in mapping writeback waits (Vasily Averin) [VSTOR-10912]
  - ms/fs: convert sync_file_range to use errseq_t based error-tracking (Vasily Averin) [VSTOR-10912]
  - ms/mm: add file_fdatawait_range and file_write_and_wait (Vasily Averin) [VSTOR-10912]
  - ms/fuse: convert to errseq_t based error tracking for fsync (Vasily Averin) [VSTOR-10912]
  - ms/fuse: clean up fsync (Vasily Averin) [VSTOR-10912]
  - ms/mm: consolidate dax / non-dax checks for writeback (Vasily Averin) [VSTOR-10912]
  - ms/Documentation: add some docs for errseq_t (Vasily Averin) [VSTOR-10912]
  - ms/errseq: rename __errseq_set to errseq_set (Vasily Averin) [VSTOR-10912]
  - ms/fuse: set mapping error in writepage_locked when it fails (Vasily Averin) [VSTOR-10912]
  - ms/fuse: use filemap_check_errors() (Miklos Szeredi) [VSTOR-10912]
  - fs/fuse: remove extra check for empty active_list (Pavel Butsykin)
  - fs/fuse kio_pcs: fix NULL pointer dereference in cs_keep_waiting() (Pavel Butsykin)
  - fuse kio: Do not NULL used pcs_cs_link::cs during connection destruction (Kirill Tkhai)
  - fuse kio: Delete excess unlist in pcs_csset_fini() (Kirill Tkhai)
  - fs/fuse kio_pcs: fix out of bounds roles_str[] array access (Pavel Butsykin)
  - fs/fuse kio_pcs: fix double unlock of m->lock in pcs_map_get_locked() (Pavel Butsykin)
  - ms/KVM: hyperv: idr_find needs RCU protection (Paolo Bonzini)
  - fs/fuse kio_pcs: pass the file handle for FUSE_SETATTR request (Pavel Butsykin) [VSTOR-10635]
  - fs/fuse: export fuse_release_ff() and fuse_write_file() (Pavel Butsykin) [VSTOR-10635]
  - fs/fuse kio_pcs: handle error of submit_size_grow() (Pavel Butsykin) [VSTOR-10635]
  - fs/fuse kio_pcs: move pcs_ireq_queue_fail() (Pavel Butsykin) [VSTOR-10635]
  - cnic: use kvzalloc to allocate memory for csk_tbl (Jan Dakinevich) [PSBM-85534]
  - fuse kio: infinite loop in processing congestion queue (Alexey Kuznetsov) [VSTOR-10928]
  - fuse kio: Use dereferenced cs in cslist_destroy() (Kirill Tkhai)
  - fs/fuse: disable optimization fuse and kio_pcs in debug kernel (Pavel Butsykin)
  - fuse kio: Arrange rcu modifiers around accesses to pcs_cs_link::cs (Kirill Tkhai)
  - fuse kio: Handle fuse_map_resolve() failure in pcs_map_queue_resolve() (Kirill Tkhai)
  - fs/fuse kio_pcs: some cleanup ireq_on_error_() (Pavel Butsykin)
  - fuse kio: Fix dereferencing of NULL cs in map_replicating() (Kirill Tkhai) [VSTOR-10820]
  - ms/scsi: libsas: fix error when getting phy events (Jason Yan) [PSBM-85057 PSBM-85057]
  - fs/fuse: set FATTR_FH flag on mtime file flush (Pavel Butsykin) [VSTOR-10676]
  - fuse kio: Fix fix deadlock during change CS address (Kirill Tkhai)
  - fuse kio: Change order around pcs_map_notify_addr_change() (Kirill Tkhai)
  - fuse kio: Wait till cs is unused in pcs_csset_fini() (Kirill Tkhai)
  - fuse kio: Introduce pcs_cs::use_count instead of ::is_probing (Kirill Tkhai)
  - fuse kio: Fix possible use after free in cslist_destroy() (Kirill Tkhai)
  - fuse kio: Fix potential use after free (Kirill Tkhai)
  - fuse kio: Introduce pcs_cs_list_of_cs_link() (Kirill Tkhai)
  - kernel/panic.c: don't dump_stack() in add_taint() (Andrey Ryabinin)
  - fuse kio: Remove useless code in pcs_cs_destroy() (Kirill Tkhai)
  - fuse kio: invalid assertion (Alexey Kuznetsov)
  - fuse kio: cleanup in token enqueue (Alexey Kuznetsov)
  - fuse kio: Introduce fast path protocol version, (Kirill Tkhai) [VSTOR-10131]
  - fs/locks: add more info for unexpected lock (Pavel Tikhomirov)
  - fs/fuse kio_pcs: remove s_subtype check (Pavel Butsykin)
  - fuse kio: Cleanup in struct pcs_rpc (Kirill Tkhai)
  - fuse kio: Declare pcs_sockio::parent type (Kirill Tkhai)
  - fuse kio: Do not requeue requests when connection is dead (Kirill Tkhai) [VSTOR-10354]
  - mm/tcache: fix rcu_read_lock()/rcu_read_unlock() imbalance (Andrey Ryabinin) [PSBM-81731]
  - fuse kio_pcs: ports from new user-space (Alexey Kuznetsov)
  - fs/fuse kio_pcs: check fuse_conn args (Pavel Butsykin)
  - fs/fuse: move FUSE_SUPER_MAGIC to magic.h (Pavel Butsykin)
  - kio: Stop always breaking connection in pcs_sockio_send() in case of EAGAIN. (Kirill Tkhai) [VSTOR-9848]
  - KVM: x86: Update the exit_qualification access bits while walking an address (KarimAllah Ahmed) [PSBM-84046]
  - kvm: Map PFN-type memory regions as writable (if possible) (KarimAllah Ahmed) [PSBM-84046]
  - target: allow to set a blkio cgroup for a backstore (Andrei Vagin)
  - fuse: Try automatically load kio module (Kirill Tkhai)
  - nfsd: use kvzalloc() to allocate memory for drc_hashtbl (Oleg Babin) [PSBM-84234 PSBM-84234]
  - ms/nfsd: more robust allocation failure handling in nfsd_reply_cache_init (Jeff Layton) [PSBM-84234 PSBM-84234]
  - fuse/kio_pcs: use kvmalloc for pcs_fuse_cluster allocation (Oleg Babin)
  - tty: use kvmalloc for screenbuffer allocation (Oleg Babin)
  - ms/tty: limit terminal size to 4M chars (Dmitry Vyukov)
  - ms/relay: Use per CPU constructs for the relay channel buffer pointers (Akash Goel)
  - ms/KVM: x86: Add support for VMware backdoor Pseudo-PMCs (Arbel Moshe)
  - ms/KVM: x86: SVM: Intercept #GP to support access to VMware backdoor ports (Liran Alon)
  - ms/KVM: x86: VMX: Intercept #GP to support access to VMware backdoor ports (Liran Alon)
  - ms/KVM: x86: Emulate only IN/OUT instructions when accessing VMware backdoor (Liran Alon)
  - ms/KVM: x86: Add emulation_type to not raise #UD on emulation failure (Liran Alon)
  - ms/KVM: x86: Always allow access to VMware backdoor I/O ports (Liran Alon)
  - ms/KVM: x86: Add module parameter for supporting VMware backdoor (Liran Alon) [PSBM-84046 PSBM-84046]
  - cpuid_fault: Log table updates (Cyrill Gorcunov) [PSBM-84029]
  - blkcg: implement bio_associate_blkcg() (Tejun Heo)
  - fuse: pcs_kio cancel requests after fused crash (Dmitry Monakhov)
  - fuse/kio_pcs: read is broken by FIEMAP patch (Alexey Kuznetsov) [VSTOR-9727]
  - ms/ext4: remove extent status procfs files if journal load fails (Darrick J. Wong) [PSBM-83691]
  - mm/memcontrol: try to free all memcg during offline (Andrey Ryabinin) [PSBM-83628]
  - mm/vmscan: shrink slabs from offlined cgroups (Andrey Ryabinin) [PSBM-83628]
  - sched/rt: Stop for_each_process_thread() iterations in tg_has_rt_tasks() (Kirill Tkhai) [PSBM-83624]
  - mm/memcg: use seqlock to protect reclaim_iter updates (Andrey Ryabinin) [PSBM-83369]
  - kvm: x86: hyperv: delete dead code in kvm_hv_hypercall() (Dan Carpenter)
  - kvm: x86: hyperv: guest->host event signaling via eventfd (Roman Kagan)
  - kvm: x86: factor out kvm.arch.hyperv (de)init (Roman Kagan)
  - ms/KEYS: add missing permission check for request_key() destination (Eric Biggers) [PSBM-83637]
  - ms/fs: Don't leak MNT_INTERNAL away from internal mounts (Al Viro)
  - ms/Revert "mm: page_alloc: skip over regions of invalid pfns where possible" (Daniel Vacek) [PSBM-83746]
  - ms/Revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Ard Biesheuvel) [PSBM-83746]
  - ms/dccp: purge write queue in dccp_destroy_sock() (Eric Dumazet) [PSBM-83692]
  - fuse/kio_pcs/pcs_map: fix process_flush_req lock leakage (Dmitry Monakhov) [VSTOR-8116]
  - fuse/kio_pcs: FIEMAP support (Alexey Kuznetsov)
  - fuse/kio_pcs: full fallocate() support (Alexey Kuznetsov)
  - fuse/kio_pcs: fallocate support at low pcs protocol level (Alexey Kuznetsov)
  - fuse/kio_pcs: adapt prometheus statistics to current vstorage state (Alexey Kuznetsov)
  - fuse: support FS_IOC_FIEMAP in i386 compat mode (Alexey Kuznetsov) [PSBM-83731]
  - fuse/kio_pcs: support FUSE_FSYNC (Alexey Kuznetsov)
  - kernel/lockdep: allow lockdep_set_no_validate_class() (Andrey Ryabinin)
  - net: Change number of netlink repair (Kirill Tkhai) [PSBM-83415]
  - config.OpenVZ.minimal: enable conntrack netlink interface module (Konstantin Khorenko) [PSBM-85052]
  - ms/btrfs: minimal conversion to errseq_t writeback error reporting on fsync (Vasily Averin)
  - ms/xfs: minimal conversion to errseq_t writeback error reporting (Vasily Averin)
  - ms/ext4: use errseq_t based error handling for reporting data writeback errors (Vasily Averin)
  - ms/block: convert to errseq_t based writeback error tracking (Vasily Averin)
  - ms/dax: set errors in mapping when writeback fails (Vasily Averin)
  - ms/Documentation: flesh out the section in vfs.txt on storing and reporting writeback errors (Vasily Averin)
  - ms/mm: set both AS_EIO/AS_ENOSPC and errseq_t in mapping_set_error (Vasily Averin)
  - ms/fs: new infrastructure for writeback error handling and reporting (Vasily Averin)
  - ms/lib: add errseq_t type and infrastructure for handling it (Vasily Averin)
  - ms/mm: don't TestClearPageError in __filemap_fdatawait_range (Vasily Averin)
  - ms/mm: clear AS_EIO/AS_ENOSPC when writeback initiation fails (Vasily Averin)
  - ms/jbd2: don't clear and reset errors after waiting on writeback (Vasily Averin)
  - ms/buffer: set errors in mapping at the time that the error occurs (Vasily Averin)
  - ms/fs: check for writeback errors after syncing out buffers in generic_file_fsync (Vasily Averin)
  - ms/buffer: use mapping_set_error instead of setting the flag (Vasily Averin)
  - ms/mm: fix mapping_set_error call in me_pagecache_dirty (Vasily Averin) [VSTOR-10912]
  - ms/x86/mm: Disable various instrumentations of mm/mem_encrypt.c and mm/tlb.c (Tom Lendacky)
  - ms/staging: rtl8712: fix some confusing indenting (Dan Carpenter)
  - ms/tty: nozomi: avoid a harmless gcc warning (Arnd Bergmann)
  - ms/mvsas: fix misleading indentation (Luis de Bethencourt)
  - ms/memstick: mspro_block: add missing curly braces (Dan Carpenter)
  - ms/net-sysfs: remove unused fmt_long_hex (Colin Ian King)
  - ms/net/rtnetlink: remove dead code (Eric Engestrom)
  - ms/rtnetlink: remove unused ifla_stats_policy (stephen hemminger)
  - ms/ACPI / dock: Drop dock_device_ids[] table (Rafael J. Wysocki)
  - cifs: drop unused mapping_table_ERRHRD (Konstantin Khorenko)
  - ve/module: export sysfs dentries in containers (Stanislav Kinsburskiy) [PSBM-63892]
  - ve/sysfs: generic sysfs_set_def_perms() helper introduced (Stanislav Kinsburskiy)
  - ve/sysfs: relax sanity check for ns equality in kernfs_find_ns() (Konstantin Khorenko) [PSBM-82259 PSBM-83607]
  - ve/kernfs: export kernfs_perms_set() helper (Stanislav Kinsburskiy) [PSBM-83607]
  - ve/sysfs: add dentries visibility filter (Stanislav Kinsburskiy) [PSBM-83607]
  - ve/kernfs: add new interface to control per-VE nodes visibility (Stanislav Kinsburskiy) [PSBM-83607]
  - ve/kernfs: hide forbidden entries in container (Stanislav Kinsburskiy) [PSBM-83607]
  - ve/kernfs: fix lookup for kernfs superblock (Konstantin Khorenko) [PSBM-85052]
  - ve/kernfs: implement ve-based permissions (Stanislav Kinsburskiy) [PSBM-20892 PSBM-34682 PSBM-83607]
  - ms/ACPI / video: remove unused device_decode array (Colin Ian King)
  - ms/Disable the __builtin_return_address() warning globally after all (Linus Torvalds)
  - ms/arch/x86/kernel/ptrace.c: Remove unused arg_offs_table (chengang@emindsoft.com.cn)
  - ms/x86/xen: fix upper bound of pmd loop in xen_cleanhighmap() (Juergen Gross)
  - retpoline/objtool: Disable some objtool warnings (Josh Poimboeuf)
  - ms/objtool: Fix memory leak in decode_instructions() (Kamalesh Babulal)
  - ext4: don't iterate over sbi->s_es_list more than the number of elements (Konstantin Khorenko) [PSBM-83335]
  - ext4: Make cache hits/misses per-cpu counts (Waiman Long) [PSBM-83335]
  - ms/ext4: move handling of list of shrinkable inodes into extent status code (Jan Kara) [PSBM-83335]
  - ms/KVM: nVMX: Don't halt vcpu when L1 is injecting events to L2 (Chao Gao) [PSBM-83005 PSBM-83005]
  - fasync: Fix deadlock between task-context and interrupt-context kill_fasync() (Kirill Tkhai) [PSBM-83102]
  - ms/ipv6: fix backtracking for throw routes (Steven Barth) [PSBM-81798]
  - ms/ipv6: fib6_rules should return exact return value (Hannes Frederic Sowa) [PSBM-81798]
  - ms/tun: Add ioctl() SIOCGSKNS cmd to allow obtaining net ns of tun device (Kirill Tkhai) [PSBM-79229]
  - ms/net: add an ioctl to get a socket network namespace (Andrey Vagin) [PSBM-79229]
  - fs: Fix race with old fdt parallel reuse (Kirill Tkhai) [PSBM-82984]
  - ve: fix reading container state from cgroup (Pavel Tikhomirov) [PSBM-82766]
  - x86/cpu: compilation fix for CONFIG_PAGE_TABLE_ISOLATION disabled case (Konstantin Khorenko)
  - ve/kthread: fix race when work can be added to stopped kthread worker (Pavel Tikhomirov) [PSBM-82490]
  - ve/kthread: pass ve to __call_usermodehelper_exec (Pavel Tikhomirov) [PSBM-82490]
  - net/sock: teach sock_kmalloc() to call kvmalloc() when possible (Konstantin Khorenko) [PSBM-82593]
  - mm: introduce kvmalloc_check() for safe calls to kvmalloc() (Konstantin Khorenko) [PSBM-82593]
  - net/setsockopt: switch high order allocations to kvmalloc() in do_ip_setsockopt() (Konstantin Khorenko) [PSBM-82646]
  - ms/x86/ACPI/PCI: Recognize that Interrupt Line 255 means "not connected" (Chen Fan) [PSBM-82172]
  - ms/mm: Allow to kill tasks doing pcpu_alloc() and waiting for pcpu_balance_workfn() (Kirill Tkhai)
  - config.OpenVZ.debug: disable kcov code coverage by default (Konstantin Khorenko) [PSBM-69083]
  - mm/tcache: initialize 'repeat' variable only once (Andrey Ryabinin)
  - mm/tcache: Reset index before repeating invalidation (Andrey Ryabinin) [PSBM-81760]
  - mm/memcg: fix margin computation for kmem limit. (Andrey Ryabinin) [PSBM-81818]
  - ploop: move discard_* attributes in the tune_attributes group (Andrei Vagin)
  - target: set ALUA_TG_PT_STANDBY if a backing store is in standby mode (Andrei Vagin) [VSTOR-7879]
  - ploop: add a standby mode (Andrei Vagin) [VSTOR-7879]
  - fuse pcs_kio: fix page zeroing beond EOF (Dmitry Monakhov)
  - fuse kio_pcs: ignore special inodes (Dmitry Monakhov) [VSTOR-8078]
  - ploop: Discard bios of size not aligned at 512 bytes (Kirill Tkhai) [PSBM-81576]
  - sched/ve: Use cfs_rq::h_nr_running to count loadavg (Kirill Tkhai) [PSBM-81572]
  - sched/ve: Iterate only VE root cpu cgroups to count loadavg (Kirill Tkhai) [PSBM-81572]
  - sched/ve: Do not show loadavg in child VE cpu cgroups (Kirill Tkhai) [PSBM-81572]
  - sched/ve: Link VE root cpu cgroups in separate list (Kirill Tkhai) [PSBM-81572]
  - ve/cgroup: Get correct VE init css when ve init_task is moved to child cgroup (Kirill Tkhai) [PSBM-81572 PSBM-81572]
  - config.OpenVZ.minimal: disable CONFIG_X86_DECODER_SELFTEST (Dmitry Monakhov)
  - fuse kio pcs: implement logging and prometheus statistics collection v2 (Dmitry Monakhov) [PSBM-81741]
  - net/vhost: Replace kmalloc with kvmalloc for order>=3 (Oleg Babin) [PSBM-81803]
  - ms/[media] drxk_hard: fix bad alignments (Mauro Carvalho Chehab)
  - mm/memcg: fix overcharging in cgroup try_charge() for !cache_charge (Andrey Ryabinin) [PSBM-81750]
  - mm/memcg: Don't charge anon pages as cache (Andrey Ryabinin) [PSBM-81750]
  - ve/fs/proc: Make per-thread and per-process allocation latencies. (Andrey Ryabinin) [PSBM-81395]
  - ve/kstat/alloc_lat: Initialize alloc_lat to zero at start (Andrey Ryabinin) [PSBM-81395]
  - ve/tty: Provide interface for current tty inheritance (Cyrill Gorcunov) [PSBM-76490 PSBM-81687]
  - config.OpenVZ: enable modules for in-kernel fast path for vStorage (Konstantin Khorenko) [PSBM-80680]
  - fuse_kio_pcs: implement truncate (Dmitry Monakhov) [PSBM-80680]
  - fio kio: PCS unblock writepath (Dmitry Monakhov) [PSBM-80680]
  - fuse kio: Add pcs engine combo v0.8 (Dmitry Monakhov) [PSBM-80680]
  - fuse kio: Add nullio engine (Dmitry Monakhov) [PSBM-80680]
  - fuse kio: minimal noop engine skeleton (Dmitry Monakhov) [PSBM-80680]
  - fuse: add kdirect io engine v0.1 (Dmitry Monakhov) [PSBM-80680]
  - fuse: fix ->end() vs ->waitq ordering (Dmitry Monakhov) [PSBM-80680]
  - mm: extend generic iov iterator API (Dmitry Monakhov) [PSBM-80680]
  - fuse: assert i_size boundaries for fuse_direct_IO_bvec (Dmitry Monakhov) [PSBM-80680]
  - fuse: remove direct_IO_page (Dmitry Monakhov) [PSBM-80680]
  - ploop: io_kaio remove direct_IO_page requirement (Dmitry Monakhov) [PSBM-80680]
  - ploop: kaio_io_page switch to bvec iter (Dmitry Monakhov) [PSBM-80680]
  - ploop: kaio_kreq_alloc specify nr_segs (Dmitry Monakhov) [PSBM-80680]
  - ve/page_alloc, kstat: account allocation latencies per-task (Andrey Ryabinin) [PSBM-81395]
  - ve/vzstat.h: move some kstat definitions into new header (Andrey Ryabinin) [PSBM-81395]
  - ve/kstat/alloc_lat: Don't separate GFP_HIGHMEM and !GFP_HIGHMEM allocation latencies (Andrey Ryabinin) [PSBM-81395]
  - ploop: give aligned regions into fuse fallocate() (Andrei Vagin)
  - ploop: allow to set discard granularity and alignment attributes (Andrei Vagin)
  - ploop: handle discard requests via fallocate (Andrei Vagin)
  - fuse: add a new async operation to unmap regions (Andrei Vagin)
  - ploop: don't forget to dec preq->io_count on a error path (Andrei Vagin)
  - configs.OpenVZ: more options to disable (Konstantin Khorenko)
  - ms/inotify: Extend ioctl to allow to request id of new watch descriptor (Kirill Tkhai) [PSBM-81411]
  - ms/x86/kvm/vmx: do not use vm-exit instruction length for fast MMIO when running nested (Vitaly Kuznetsov) [PSBM-81462]
  - fs/pipe: Use kvmalloc for pipe buffers (Cyrill Gorcunov) [PSBM-69201]
  - ms/net: don't wait for order-3 page allocation (Shaohua Li) [PSBM-81488]
  - mm/memcontrol: Fix memcg swpin/swpout stats accounting (Andrey Ryabinin)
  - configs.OpenVZ: add minimal kernel config for a KVM VM (Konstantin Khorenko) [PSBM-86445]
  - mm: fix memory cgroup leak in case mem cgroup gets offline before kmem counter is 0 (Konstantin Khorenko) [PSBM-81264]
  - rh/ext4: release leaked posix acl in ext4_xattr_set_acl (Stanislav Kinsburskiy) [PSBM-81384]
  - rh/ext4: release leaked posix acl in ext4_acl_chmod (Stanislav Kinsburskiy) [PSBM-81384]
  - ms/dm crypt: replace RCU read-side section with rwsem (Konstantin Khorenko)
  - target: call alua helper before reporting group states to initiator (Andrei Vagin)
  - target: move alua user helper from group to device (Andrei Vagin)
  - ms/mm/memcontrol.c: try harder to decrease [memory,memsw].limit_in_bytes (Andrey Ryabinin) [PSBM-80732]
  - mm: try harder to decrease cache.limit_in_bytes (Andrey Ryabinin) [PSBM-80732]
  - ms/memcg: refactor mem_cgroup_resize_limit() (Yu Zhao) [PSBM-80732]
  - ms/mm: memcontrol: fix transparent huge page allocations under pressure (Johannes Weiner) [PSBM-80732]
  - ms/mm: memcontrol: simplify detecting when the memory+swap limit is hit (Johannes Weiner) [PSBM-80732]
  - mm/vmscan: call wait_iff_congested() only if we have troubles in recaliming (Andrey Ryabinin) [PSBM-61409]
  - mm/vmscan: Use per-zone sum of reclaim_stat to change zone state. (Andrey Ryabinin) [PSBM-61409]
  - mm/vmscan: collect reclaim stats across zone (Andrey Ryabinin) [PSBM-61409]
  - ms/mm: throttle on IO only when there are too many dirty and writeback pages (Michal Hocko) [PSBM-61409]
  - ms/mm, vmscan: enhance mm_vmscan_lru_shrink_inactive tracepoint (Michal Hocko) [PSBM-61409]
  - ms/mm, vmscan: extract shrink_page_list reclaim counters into a struct (Michal Hocko) [PSBM-61409]
  - ms/mm, vmscan: add active list aging tracepoint (Michal Hocko) [PSBM-61409]
  - ms/mm: fix direct reclaim writeback regression (Hugh Dickins)
  - ms/mm/compaction: fix wrong order check in compact_finished() (Joonsoo Kim)
  - ms/mm/compaction: avoid rescanning pageblocks in isolate_freepages (Vlastimil Babka)
  - ms/mm/compaction: do not count migratepages when unnecessary (Vlastimil Babka)
  - ms/mm, compaction: embed migration mode in compact_control (David Rientjes)
  - ms/mm, compaction: add per-zone migration pfn cache for async compaction (David Rientjes)
  - ms/mm, compaction: return failed migration target pages back to freelist (David Rientjes)
  - ms/mm, migration: add destination page freeing callback (David Rientjes)
  - ms/mm/compaction: clean up unused code lines (Heesub Shin) [PSBM-87699]
  - ms/mm, compaction: ignore pageblock skip when manually invoking compaction (David Rientjes)
  - ms/mm, compaction: determine isolation mode only once (David Rientjes)
  - ms/mm/compaction: clean-up code on success of ballon isolation (Joonsoo Kim)
  - ms/mm/compaction: check pageblock suitability once per pageblock (Joonsoo Kim)
  - ms/mm/compaction: do not call suitable_migration_target() on every page (Joonsoo Kim)
  - ms/mm/compaction: disallow high-order page for migration target (Joonsoo Kim)
  - ms/mm, compaction: avoid isolating pinned pages (David Rientjes)
  - ms/mm: compaction: reset scanner positions immediately when they meet (Vlastimil Babka)
  - ms/mm: compaction: do not mark unmovable pageblocks as skipped in async compaction (Vlastimil Babka)
  - ms/mm: compaction: trace compaction begin and end (Mel Gorman)
  - ms/kbuild: add -fno-PIE (Sebastian Andrzej Siewior)
  - ms/scripts/has-stack-protector: add -fno-PIE (Sebastian Andrzej Siewior)
  - fence-watchdog: print alive messages (Pavel Tikhomirov)
  - net/dccp: fix use after free in tw_timer_handler() (Andrey Ryabinin) [PSBM-80708]
  - ms/dccp: Unlock sock before calling sk_free() (Arnaldo Carvalho de Melo) [PSBM-80708]
  - ms/dccp: defer ccid_hc_tx_delete() at dismantle time (Eric Dumazet) [PSBM-80708]
  - tcache: Fix race between tcache_invalidate_node() and tcache_attach_page() (Kirill Tkhai)
  - tcache: Refactor tcache_shrink_scan() (Kirill Tkhai)
  - mm/tcache: invalidate existing page during cleancache_put_page() (Andrey Ryabinin) [PSBM-80712]
  - target: pass a device name to an alua user helper (Andrei Vagin)
  - ms/fs, mm: account filp cache to kmemcg (Shakeel Butt) [PSBM-80839]
  - tty: Use RCU read lock to iterate tasks and threads in __do_SAK() (Kirill Tkhai) [PSBM-80340]
  - tty: Avoid threads files iterations in __do_SAK() (Kirill Tkhai) [PSBM-80340]
  - Revert "do_SAK: Don't recursively take the tasklist_lock" (Kirill Tkhai) [PSBM-80340]
  - ve/net: partially return ms permission check for ethtool commands (Pavel Tikhomirov)
  - ve/fs/files: Shrink big fdtable on close in is_pseudosuper mode (Kirill Tkhai) [PSBM-78827]
  - ve/fs/files: Add fdtable_align() helper (Kirill Tkhai) [PSBM-78827]
  - ve/fs/files: Add new argument to expand_files() (Kirill Tkhai) [PSBM-78827]
  - target: add an user-mode helper to handle changes of a group state (Andrei Vagin)
  - ve/cgroup: hide ve and ub cgroups in CT (Pavel Tikhomirov) [PSBM-80421]
  - mm: add __GFP_ flag to hide verified high order allocation warnings (Andrey Ryabinin) [VSTOR-20383 VSTOR-20349]
  - mm: add warning about high order allocations (Andrey Ryabinin) [PSBM-79892 PSBM-82202]
  - target: add read/write/sync latency counter (Andrey Grafin)
  - target: add histogram for LUN statistics (Andrey Grafin)
  - target: add extra counters for LUN statistics (Konstantin Khorenko)
  - target: don't call an unmap callback if a range length is zero (Andrei Vagin) [PSBM-79534]
  - ms/scsi: virtio: Reduce BUG if total_sg > virtqueue size to WARN. (Richard W.M. Jones) [PSBM-79523 PSBM-78839]
  - ms/KVM: x86/vPMU: ignore access to LBR-related MSRs (Jan Dakinevich) [PSBM-75679]
  - ms/perf/x86/intel: make reusable LBR initialization code (Jan Dakinevich) [PSBM-75679]
  - ms/KVM: nVMX: do not fill vm_exit_intr_error_code in prepare_vmcs12 (Paolo Bonzini) [PSBM-77171 PSBM-77171]
  - KVM: async_pf: Let guest support delivery of async_pf from guest mode (Wanpeng Li) [PSBM-56498]
  - KVM: async_pf: Force a nested vmexit if the injected #PF is async_pf (Wanpeng Li) [PSBM-56498]
  - KVM: async_pf: Add L1 guest async_pf #PF vmexit handler (Wanpeng Li) [PSBM-56498]
  - ms/kvm: x86: CPUID.01H:EDX.APIC[bit 9] should mirror IA32_APIC_BASE[11] (Jim Mattson) [PSBM-63209]
  - Revert "ms/KVM: x86: reset MMU on KVM_SET_VCPU_EVENTS" (Konstantin Khorenko) [PSBM-62341 PSBM-63993 PSBM-64259 PSBM-63253 PSBM-63962]
  - ms/KVM: i8254: use atomic_t instead of pit.inject_lock (Radim Krčmář) [PSBM-56972]
  - ms/KVM: i8254: add kvm_pit_reset_reinject (Radim Krčmář) [PSBM-56972]
  - ms/KVM: i8254: simplify atomics in kvm_pit_ack_irq (Radim Krčmář) [PSBM-56972]
  - vhost-net: enable zerocopy tx by default (Michael S. Tsirkin) [PSBM-52390]
  - ms/kvm:vmx: more complete state update on APICv on/off (Roman Kagan) [PSBM-46939]
  - ms/kvm/x86: Pass return code of kvm_emulate_hypercall (Andrey Smetanin) [PSBM-44419]
  - kvm: do not SetPageDirty for file mappings (Maxim Patlasov) [PSBM-43243]
  - ve/kvm: Allow scheduler throttling in __vcpu_run() (Kirill Tkhai) [PSBM-42358]
  - md: add support for dm-crypted ploops (Maxim Patlasov) [PSBM-53386]
  - ms/crypto: skcipher - Fix blkcipher walk OOM crash (Herbert Xu)
  - ms/crypto: cryptd - initialize child shash_desc on import (Ard Biesheuvel)
  - ms/crypto: scatterwalk - Fix test in scatterwalk_done (Herbert Xu)
  - ms/crypto: gcm - Filter out async ghash if necessary (Herbert Xu)
  - ms/crypto: hash - Fix page length clamping in hash walk (Herbert Xu)
  - ms/crypto: user - lock crypto_alg_list on alg dump (Mathias Krause)
  - ms/crypto: algif_skcipher - Fix race condition in skcipher_check_key (Herbert Xu) [PSBM-53860]
  - ms/crypto: algif_hash - Fix race condition in hash_check_key (Herbert Xu) [PSBM-53860]
  - ms/crypto: af_alg - Forbid bind(2) when nokey child sockets are present (Herbert Xu) [PSBM-53860]
  - ms/crypto: af_alg - Allow af_af_alg_release_parent to be called on nokey path (Herbert Xu) [PSBM-53860]
  - ms/crypto: skcipher - Add crypto_skcipher_has_setkey (Herbert Xu) [PSBM-53860]
  - ploop: fix trim_extent_mappings() locking (Vasily Averin) [PSBM-78538 PSBM-45999]
  - ploop: fix dio_invalidate_cache() (Maxim Patlasov) [PSBM-73999]
  - ploop: add dependency for CBT in Kconfig (Cyrill Gorcunov)
  - ploop/modules: set module author for Virtuozzo modules (Konstantin Khorenko) [PSBM-43847]
  - ploop/license: put correct copyrights into file headers (Konstantin Khorenko) [PSBM-43847]
  - ploop: make error messages about intersecting extents more verbose (v2) (Maxim Patlasov)
  - ploop: fix race on map->levels[] update (Maxim Patlasov)
  - ploop: push_backup: ploop_pb_get_pending should wait again instead of ENOENT (Maxim Patlasov) [PSBM-68608]
  - ploop: show ino and sdev for ploop images in sysfs (Andrei Vagin) [PSBM-68404]
  - ploop: fix typo in ploop_pb_get_first_req_from_tree (Maxim Patlasov) [PSBM-67513]
  - block/ploop: Add resched points in ploop thread. (Andrey Ryabinin) [PSBM-66617]
  - ploop: push_backup: BUG() on list corruption in ploop_pb_add_req_to_tree() (Maxim Patlasov) [PSBM-65786 PSBM-65786]
  - ploop: fix IS_PSTORAGE() macro: add check for "vstorage" (Maxim Patlasov)
  - ploop: pio_nfs does not require PLOOP_REQ_ISSUE_FLUSH (v2) (Maxim Patlasov)
  - ploop: add comments about possible leaks (Konstantin Khorenko) [PSBM-52219]
  - ploop: don't leak ploop_freeblks_ctl_extent (Dmitry Safonov) [PSBM-51362]
  - ploop: push_backup: ploop_pb_init must always spawn health_monitor (Maxim Patlasov)
  - ploop: push_backup: avoid deadlock on PLOOP_PEEK (Maxim Patlasov)
  - ploop: push_backup: avoid preq->state corruption (Maxim Patlasov)
  - ploop: ploop_grow must nullify holes (Maxim Patlasov) [PSBM-55685]
  - ploop: push_backup: fix pbd->ppb_lock deadlock (Maxim Patlasov)
  - ploop: add support for dm-crypted ploops (Andrey Ryabinin) [PSBM-50858]
  - ploop: keep frozen block device pointer instead of super_block pointer (Andrey Ryabinin) [PSBM-50858]
  - ploop: drop bdev refcounter on freeze_bdev() failure (Andrey Ryabinin)
  - ploop: io_direct: delay f_op->fsync() until index_update for reloc requests (v3) (Maxim Patlasov) [PSBM-47026 PSBM-47026]
  - ploop: factor out add preq to fsync_queue (Maxim Patlasov)
  - ploop: factor ->write_page() out (Maxim Patlasov)
  - ploop: fix freeze/thaw ioctls (Maxim Patlasov) [PSBM-49699]
  - ploop: fix free_list starvation (Maxim Patlasov) [PSBM-49454]
  - ploop: introduce plo->blockable_reqs counter (Maxim Patlasov) [PSBM-49454]
  - ploop: introduce plo->free_qlen counter (Maxim Patlasov) [PSBM-49454]
  - ploop: fix fsync_reqs accounting (Maxim Patlasov) [PSBM-49454]
  - ploop: release plo->ctl_mutex for thaw_bdev in PLOOP_IOC_THAW handler (Vladimir Davydov) [PSBM-49699]
  - ploop: add PLOOP_IOC_FREEZE and PLOOP_IOC_THAW ioctls (Maxim Patlasov) [PSBM-49091]
  - ploop: reloc vs extent_conversion race fix (Dmitry Monakhov) [PSBM-47107 PSBM-49143]
  - ploop: push_backup: implement timeout functions (Maxim Patlasov) [PSBM-48082]
  - ploop: push_backup: health monitor thread (Maxim Patlasov) [PSBM-48082]
  - ploop: push_backup: add timeout tunable (Maxim Patlasov)
  - ploop: push_backup: extend pb_set (Maxim Patlasov)
  - ploop: push_backup: factor rb_erase() out (Maxim Patlasov)
  - ploop: push_backup: introduce pb_set structure (Maxim Patlasov) [PSBM-48082 PSBM-48082]
  - ploop: fixup barrier handling during relocation (Maxim Patlasov)
  - ploop: fix barriers for PLOOP_E_RELOC_NULLIFY (Maxim Patlasov)
  - ploop: generalize issue_flush (Dmitry Monakhov)
  - ploop: remove preflush from dio_submit (Maxim Patlasov)
  - ploop: resurrect delay_fua for io_direct (Maxim Patlasov)
  - ploop: minor rework of ->write_page() io method (Dmitry Monakhov)
  - ploop: resurrect delayed_fua for io_kaio (Maxim Patlasov)
  - ploop: minor rework of ploop_req_delay_fua_possible (Maxim Patlasov) [PSBM-47107]
  - ploop: deadcode cleanup in dio_submit() (Dmitry Monakhov)
  - ploop: skip redundant fsync for REQ_FUA in post_submit (Dmitry Monakhov)
  - ploop: fix barriers for ordinary requests (Maxim Patlasov)
  - ploop: io_kaio: fix silly bug in kaio_complete_io_state() (Maxim Patlasov)
  - ploop: fix counting bio_qlen (Maxim Patlasov)
  - ploop: fix gendisk disk_stats to be seen on partition (Maxim Patlasov) [PSBM-48266]
  - ploop: "Parallels loopback device" -> "Virtuozzo loopback device" (Konstantin Khorenko) [PSBM-43847]
  - ploop: push_backup: PLOOP_PEEK mode of ioctl(PLOOP_IOC_PUSH_BACKUP_IO) (Maxim Patlasov) [PSBM-47764]
  - ploop: push_backup: rework lockout machinery (Maxim Patlasov) [PSBM-47680 PSBM-47680]
  - ploop: push_backup: copy stop status back to userspace (Maxim Patlasov) [PSBM-47429]
  - ploop: io_direct: delay f_op->fsync() until FLUSH|FUA (v2) (Maxim Patlasov) [PSBM-47026]
  - ploop: push_backup: merge pbd->cbt_map back to CBT (Maxim Patlasov) [PSBM-47429]
  - ploop: push_backup: improve ioctl(PLOOP_IOC_PUSH_BACKUP_IO) (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: introduce ppb->reported_map (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: implement auto destroy (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: factor out destroy (Maxim Patlasov) [PSBM-45000]
  - ploop: get rid of direct calls to file->f_op->fsync() (Maxim Patlasov)
  - ploop: get rid of dio_fsync() (Maxim Patlasov)
  - ploop: io_direct: check for fsync fop on startup (Maxim Patlasov)
  - ploop: get rid of FOP_FSYNC (Maxim Patlasov)
  - ploop: avoid costly user-controllable kmalloc() calls (Andrey Ryabinin) [PSBM-47303]
  - ploop: push_backup: optimize ploop_pb_put_reported() (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: optimize ploop_pb_get_pending() (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: show uuid (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: fix ploop_push_backup_io_read() (Maxim Patlasov) [PSBM-45000]
  - ploop: force journal commit after dio_post_submit() (Dmitry Monakhov) [PSBM-45730]
  - ploop: push_backup cleanup (Maxim Patlasov)
  - ploop: wire push_backup into state-machine (Maxim Patlasov)
  - ploop: implement PLOOP_IOC_PUSH_BACKUP_IO (Maxim Patlasov) [PSBM-45000]
  - ploop: introduce pbd (Maxim Patlasov) [PSBM-45000]
  - ploop: io_direct must fsync after fallocate (Maxim Patlasov) [PSBM-45326 PSBM-46146]
  - ploop: must acquire write access on space allocation (Maxim Patlasov) [PSBM-20150]
  - ploop: use FALLOC_FL_CONVERT_UNWRITTEN in io_direct (Maxim Patlasov) [PSBM-22381]
  - ploop: replace BLOCK_UNINIT (Maxim Patlasov) [PSBM-22381]
  - ploop: fix direct_io prealloc checks (Maxim Patlasov) [PSBM-22381]
  - ploop: update gendisk disk_stats (Maxim Patlasov) [PSBM-41247]
  - ploop: rename extent maps management funtions (Alexey V. Vissarionov)
  - ploop: disable WRITE SAME for io_kaio (Maxim Patlasov) [PSBM-41965]
  - ploop: release io_context on ploop_thread() exit (Maxim Patlasov) [PSBM-39956]
  - ploop: do not use fiemap beyond eof (Maxim Patlasov) [PSBM-26762 PSBM-39251]
  - ploop: use GFP_NOIO in ploop_make_request (Vladimir Davydov) [PSBM-38842]
  - ploop: fix race on prealloc request (Maxim Patlasov) [PSBM-35095]
  - ploop: dio_fastmap() must refresh bvec_merge_data (Maxim Patlasov)
  - ploop: fix processing sync bios (Maxim Patlasov) [PSBM-33630]
  - ploop: added into pvd header new close signatures (Andrey Smetanin) [PSBM-33882]
  - ploop: fix busyloop on secondary discard bio (Andrey Smetanin) [PSBM-30451]
  - ploop: add a separate queue for discard bio-s (v2) (Andrey Smetanin) [PSBM-27676]
  - ploop: added printk of function, line, backtrace before ploop_set_error (Andrey Smetanin)
  - ploop: force FUA of nullified blocks for BAT grow (Andrey Smetanin) [PSBM-31969]
  - ploop: mark reloc reqs to force FUA/fsync(kaio) for index update I/O (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: mark reloc reqs to force FUA before write of relocated data (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: make image fsync at I/O complete if it's required by FUA/fsync force flag or by req->req_rw (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: do preflush or postfua according force FUA/flush flags, and delay FUA if possible but add force FLUSH to req if so (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: direct: to support truly FLUSH/FUA of req we need mark first bio FLUSH, write all bios and mark last bio as FLUSH/FUA (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: define struct ploop_request->state flags to force pre FLUSH before write IO and FUA/fsync at I/O complete (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: added ploop_req_delay_fua_possible() func that detects possible delaying of upcoming FUA to index update stage (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: notify blktrace about bio completions (Andrey Smetanin)
  - ploop: warning on "disk full" condition (Andrey Smetanin)
  - ploop: make manual abort transition verbose (Andrey Smetanin)
  - ploop: zero blocks on reuse (Andrey Smetanin) [PSBM-25391]
  - ploop: roll back alloc_head on ENOSPC (Andrey Smetanin) [PSBM-24694]
  - ploop: put top-delta back if merge failed (Andrey Smetanin) [PSBM-25252]
  - ploop: fix spurious hole complains (Andrey Smetanin)
  - ploop: expose open_count to sysfs (Andrey Smetanin) [PSBM-24754]
  - ploop: ensure non-empty delta list on running ploop (Andrey Smetanin) [PSBM-25102]
  - ploop: bug on bad fiemap (v2) (Andrey Smetanin) [PSBM-26762]
  - ploop: add ioctl to limit size of top delta (v2) (Andrey Smetanin) [PSBM-22002]
  - ploop: prioritize BAT operations (Andrey Smetanin)
  - ploop: fix race in ploop_tracker_init() (Andrey Smetanin) [PSBM-22993]
  - ploop: fix check_zero optimization v2 (Andrey Smetanin) [PSBM-23452]
  - ploop: fix a race condition on relocation of blocks (Andrey Smetanin) [PSBM-23905]
  - ploop: support 4K block-size of host block-device (Andrey Smetanin) [PSBM-21989]
  - ploop: skip writes of zeroes to unallocated blocks by default (Andrey Smetanin) [PSBM-22506 PSBM-22381]
  - ploop: reverse order of fdatawait and fsync fop (Andrey Smetanin)
  - ploop: fix sync delay for sync requests (Andrey Smetanin) [PSBM-22381]
  - ploop: fix iblk-to-sector calculations (Andrey Smetanin) [PSBM-22961]
  - ploop: rework accounting images_size (Andrey Smetanin) [PSBM-20432]
  - ploop: report holes in pio_direct (v2) (Andrey Smetanin) [PSBM-20770]
  - ploop: prevent disclosure 4 bytes of the stack kernel (Andrey Smetanin)
  - ploop: prevent dangerous ploop-umount (Andrey Smetanin) [PSBM-21474]
  - ploop: check new size of block device on ioctl(GROW) (Andrey Smetanin) [PSBM-21027]
  - ploop: fix dio_fsync wait (Andrey Smetanin) [PSBM-18049]
  - ploop: fix accounting ploop_io_images_size (Andrey Smetanin) [PSBM-19906]
  - ploop: fixed deadlock by interrupts off inside lookup_extent_mapping (Andrey Smetanin) [PSBM-32614]
  - ploop: fix deadlock inside dio_alloc_sync - lock inside while() but unlock outside (Andrey Smetanin)
  - ploop: purge plo->map on merge (Maxim Patlasov) [PSBM-27891]
  - ploop: set PLOOP_MAP_IDENTICAL bit on merge (Maxim Patlasov) [PSBM-24408]
  - ploop: update i_size on preallocation (Maxim Patlasov)
  - ploop: support of explicit unplug: unplug callback (Maxim Patlasov) [PSBM-18168]
  - ploop: support of explicit unplug: start and stop plugging (Maxim Patlasov) [PSBM-18168]
  - ploop: check ENOSPC callback (Maxim Patlasov) [PSBM-18168]
  - ploop: port io_kaio module (Maxim Patlasov) [PSBM-18168]
  - ploop: congestion detection (Maxim Patlasov) [PSBM-18168 PSBM-11585]
  - ploop: generic support of writeback control (Maxim Patlasov) [PSBM-18168 PSBM-11585]
  - ploop: check error from freeze_bdev (Maxim Patlasov) [PSBM-28460]
  - ploop: fix file->f_count leak in raw_complete_snapshot() (Kirill Tkhai)
  - ploop: add ploop to the tree (Maxim V. Patlasov) [PSBM-51358 PSBM-51358]
  - block: cbt: fix potential deadlock (Maxim Patlasov)
  - cbt: license: put correct copyrights into file headers (Konstantin Khorenko) [PSBM-43847]
  - cbt: don't leak ce_reserved64 in cbt_ito userspace (Dmitry Safonov) [PSBM-51361]
  - cbt: blk_cbt_update_size() must return if cbt->block_max not changed (Maxim Patlasov)
  - cbt: blk_cbt_update_size() should not copy uninitialized data (Maxim Patlasov) [PSBM-48120]
  - cbt: fix possible race on alloc_page() (Maxim Patlasov)
  - cbt: new api: blk_cbt_map_merge() (Maxim Patlasov) [PSBM-47429 PSBM-47429]
  - cbt: fix panic in blk_cbt_map_copy_once() (Maxim Patlasov) [PSBM-47416]
  - cbt: fix cbt->block_max calculation (Maxim Patlasov)
  - cbt: add uuid arg to blk_cbt_map_copy_once() (Maxim Patlasov) [PSBM-45000]
  - cbt: add blk_cbt_map_copy_once() helper (Maxim Patlasov) [PSBM-45000]
  - cbt: fix page allocation (Maxim Patlasov)
  - cbt: make __blk_cbt_set() smarter (Maxim Patlasov)
  - cbt: introduce CBT_PAGE_MISSED (Maxim Patlasov)
  - cbt: factor out alloc_page (Maxim Patlasov) [PSBM-45000]
  - config.OpenVZ: enable cbt - changed block tracking (Konstantin Khorenko) [PSBM-34156]
  - cbt: introduce changed block tracking (Dmitry Monakhov) [PSBM-34156 PSBM-54928]
  - fs/fuse/dev: improve ->splice() with fragmented memory (Andrey Ryabinin) [PSBM-77949]
  - fuse: fuse_request_send_background() must clear FR_PENDING (Maxim Patlasov) [PSBM-78342 PSBM-74661 PSBM-74660 PSBM-74226]
  - ms/fs/fuse: fix ioctl type confusion (Jann Horn) [PSBM-75073]
  - fuse: skip invalidate_inode_pages2 on truncate (Maxim Patlasov) [PSBM-76437]
  - fuse: do not call end_page_writeback earlier than fuse_flush_writepages (Maxim Patlasov) [PSBM-68454]
  - fuse: ioctl(FIEMAP) support (Maxim Patlasov) [PSBM-68226]
  - fuse: fallocate must return error if mode is not supported (Maxim Patlasov)
  - fuse: add support for fallocate(FL_ZERO_RANGE) (Maxim Patlasov)
  - fuse: allow to mount if process is in init_user_ns (Stanislav Kinsburskiy) [PSBM-67185]
  - fuse: optimize writepages search (Maxim Patlasov) [PSBM-59254]
  - fuse: ioctl() to bind fuse device to input queue (Maxim Patlasov)
  - fuse: separate iqueue for clones (Maxim Patlasov)
  - ms/fuse: fix use after free issue in fuse_dev_do_read() (Maxim Patlasov)
  - ms/fuse: clear FR_PENDING flag when moving requests out of pending queue (Maxim Patlasov)
  - ms/fuse: separate pqueue for clones (Maxim Patlasov)
  - ms/fuse: introduce per-instance fuse_dev structure (Maxim Patlasov)
  - ms/fuse: device fd clone (Maxim Patlasov)
  - ms/fuse: abort: no fc->lock needed for request ending (Maxim Patlasov)
  - ms/fuse: no fc->lock for pqueue parts (Maxim Patlasov)
  - ms/fuse: no fc->lock in request_end() (Maxim Patlasov)
  - ms/fuse: cleanup request_end() (Maxim Patlasov)
  - ms/fuse: request_end(): do once (Maxim Patlasov)
  - ms/fuse: add req flag for private list (Maxim Patlasov)
  - ms/fuse: pqueue locking (Maxim Patlasov)
  - ms/fuse: abort: group pqueue accesses (Maxim Patlasov)
  - ms/fuse: cleanup fuse_dev_do_read() (Maxim Patlasov)
  - ms/fuse: move list_del_init() from request_end() into callers (Maxim Patlasov)
  - ms/fuse: duplicate ->connected in pqueue (Maxim Patlasov)
  - ms/fuse: separate out processing queue (Maxim Patlasov)
  - ms/fuse: use list_for_each_entry() for list traversing (Maxim Patlasov)
  - ms/fuse: simplify request_wait() (Maxim Patlasov)
  - ms/fuse: no fc->lock for iqueue parts (Maxim Patlasov)
  - ms/fuse: allow interrupt queuing without fc->lock (Maxim Patlasov)
  - ms/fuse: iqueue locking (Maxim Patlasov)
  - ms/fuse: dev read: split list_move (Maxim Patlasov)
  - ms/fuse: abort: group iqueue accesses (Maxim Patlasov)
  - ms/fuse: duplicate ->connected in iqueue (Maxim Patlasov)
  - ms/fuse: flush requests on umount (Maxim Patlasov)
  - ms/fuse: separate out input queue (Maxim Patlasov)
  - ms/fuse: req state use flags (Maxim Patlasov)
  - ms/fuse: simplify req states (Maxim Patlasov)
  - ms/fuse: don't hold lock over request_wait_answer() (Maxim Patlasov)
  - ms/fuse: simplify unique ctr (Maxim Patlasov)
  - ms/fuse: rework abort (Maxim Patlasov)
  - ms/fuse: fold helpers into abort (Maxim Patlasov)
  - ms/fuse: use per req lock for lock/unlock_request() (Maxim Patlasov)
  - ms/fuse: req use bitops (Maxim Patlasov)
  - ms/fuse: simplify request abort (Maxim Patlasov)
  - ms/fuse: call fuse_abort_conn() in dev release (Maxim Patlasov)
  - ms/fuse: add memory barrier to INIT (Maxim Patlasov)
  - ms/fuse: fold fuse_request_send_nowait() into single caller (Maxim Patlasov)
  - ms/fuse: check conn_error earlier (Maxim Patlasov)
  - ms/fuse: account as waiting before queuing for background (Maxim Patlasov)
  - ms/fuse: reset waiting (Maxim Patlasov)
  - ms/fuse: fix background request if not connected (Maxim Patlasov)
  - ms/fuse: initialize fc->release before calling it (Maxim Patlasov)
  - fuse: fuse_prepare_write() cannot handle page from killed request (Maxim Patlasov) [PSBM-54547]
  - fuse: fuse_writepage_locked must check for FUSE_INVALIDATE_FILES (v2) (Maxim Patlasov)
  - fuse: fuse_writepages_fill must check for FAIL_IMMEDIATELY (Maxim Patlasov)
  - fuse: cleanup struct fuse_fill_data (Maxim Patlasov)
  - fuse: cleanup fuse_wait_on_page_writeback (Maxim Patlasov)
  - fuse: fuse_blocked_for_wb must check rw_files (Maxim Patlasov) [PSBM-57460]
  - fuse: trust server file size unless opened (Maxim Patlasov) [PSBM-57047]
  - fuse: ratelimint dio complains (Maxim Patlasov) [PSBM-55782]
  - fuse: fuse_send_writepage() must check FUSE_S_FAIL_IMMEDIATELY (Maxim Patlasov)
  - fuse: no mtime flush on fdatasync (Maxim Patlasov) [PSBM-55919]
  - fuse: relax i_mutex coverage in fuse_fsync (Maxim Patlasov) [PSBM-55919]
  - fuse: queue work for aio_complete (v3) (Maxim Patlasov) [PSBM-54547]
  - fuse: process small sync direct reads synchronously (Maxim Patlasov)
  - ms/fuse: handle only fatal signals while waiting request answer (Stanislav Kinsburskiy) [PSBM-53581]
  - ms/fuse: fuse_flush must check mapping->flags for errors (Maxim Patlasov) [PSBM-49821]
  - ms/fuse: fsync() does not return IO errors (Alexey Kuznetsov) [PSBM-49821 VSTOR-670]
  - fuse: enable synchronous close for both "pstorage://" and "vstorage://" fs types (Andrey Zaitsev) [PSBM-47206]
  - fuse: increase min/max_dirty_pages up to 256/512 MB (Vladimir Davydov)
  - fuse: resend interrupted release (Maxim Patlasov) [PSBM-45428 VSTOR-11275]
  - ms/fuse: break infinite loop in fuse_fill_write_pages() (Maxim Patlasov)
  - fuse: allow to mount fuse filesystems inside CT (Andrey Ryabinin) [PSBM-41075]
  - fuse: virtualize file system (Stanislav Kinsburskiy) [OVZ-6498 PSBM-85886]
  - fuse: fix erroneous unlock_page() in fuse_send_writepages() (Maxim Patlasov)
  - fuse: release cleanup (Maxim Patlasov)
  - fuse: fix deadlock in fuse_flush() (Maxim Patlasov) [PSBM-29381]
  - fuse: invalidate_files backward compatibility mode (Maxim Patlasov)
  - fuse: fix writeback/release race (Maxim Patlasov) [PSBM-26148]
  - fuse: report details of aio failure (Maxim Patlasov) [PSBM-23696]
  - fuse: fail lost-lease notification if async_read (Maxim Patlasov)
  - fuse: skip waiting for fuse writeback (Maxim Patlasov)
  - fuse: prevent queueing new requests after (Maxim Patlasov)
  - fuse: kill requests on "lost-lease" event (Maxim Patlasov)
  - fuse: add "killed" bit to fuse request (Maxim Patlasov)
  - fuse: add page_cache bit to fuse request (Maxim Patlasov)
  - fuse: the list of all opened files (Maxim Patlasov)
  - fuse: do not flush files opened ro (Maxim Patlasov) [PSBM-20562]
  - fuse: add mount option to disable close_wait (Maxim Patlasov)
  - fuse: make umount synchronous (Maxim Patlasov) [PSBM-19305]
  - fuse: print initialized flag in conn info (Maxim Patlasov)
  - fuse: extend report on pstorage errors (Maxim Patlasov)
  - fuse: do not use RELEASE on directory (Maxim Patlasov) [PSBM-17195]
  - fuse: add missed fuse_file_put() (Maxim Patlasov)
  - fuse: cleanups in fuse writeback (Maxim Patlasov) [PSBM-16442 PSBM-16442]
  - fuse: pass "fc" to fuse_invalidate_files() (Maxim Patlasov)
  - fuse: implement invalidate_files notification (Maxim Patlasov) [PSBM-16105]
  - fuse: account read/write requests into iopslimit (Maxim Patlasov)
  - fuse: improve bdi dirty memory limits for fuse (Maxim Patlasov) [PSBM-13700 PSBM-45497]
  - fuse: enable async_dio for pcs (Maxim Patlasov)
  - fuse: optimize fuse_vma_close() (Maxim Patlasov)
  - fuse: do not oops in fuse writepage (Maxim Patlasov) [PSBM-10752]
  - fuse: account directio requests into ioacct (Maxim Patlasov)
  - fuse: wire iolimit sleep-hook into directio path. (Maxim Patlasov)
  - fuse: account read/write requests into iostat (Maxim Patlasov)
  - fuse: i_size to be updated on first open (Maxim Patlasov) [PSBM-13636]
  - fuse: reimplement synchronous close (Maxim Patlasov)
  - fuse: Wait for real writeback to finish on file (Maxim Patlasov)
  - fuse: some fairness in handling writeback (Maxim Patlasov)
  - fuse: Fuse ctl file with connection info (Maxim Patlasov)
  - fuse: Show open files in fusectl (Maxim Patlasov)
  - fuse: Show active requests in fusectl files (Maxim Patlasov)
  - fuse: fuse-ve-odirect sysctl (Maxim Patlasov) [PSBM-18167]
  - fuse: direct_enable mount option (Maxim Patlasov) [PSBM-18167]
  - fuse: set req->background flag for fuse_writepages (Maxim Patlasov) [PSBM-18167]
  - fuse: kaio support (Maxim Patlasov) [PSBM-18167]
  - fuse: Turn writeback cache on (Maxim V. Patlasov)
  - fuse: Fix O_DIRECT operations vs cached writeback misorder - v2 (Maxim V. Patlasov)
  - fuse: fuse_flush() should wait on writeback (Maxim V. Patlasov)
  - fuse: fuse_writepage_locked() should wait on writeback (Maxim V. Patlasov)
  - fuse: Implement writepages and write_begin/write_end callbacks (Maxim V. Patlasov)
  - fuse: Flush files on wb close (Maxim V. Patlasov)
  - fuse: Trust kernel i_mtime only (Maxim V. Patlasov)
  - ms/fuse: Trust kernel i_size only (Pavel Emelyanov)
  - ms/fuse: Connection bit for enabling writeback (Pavel Emelyanov)
  - ms/fuse: Prepare to handle multiple pages in writeback (Pavel Emelyanov)
  - ms/fuse: Prepare to handle short reads (Pavel Emelyanov)
  - ms/fuse: Getting file for writeback helper (Pavel Emelyanov)
  - ms/fuse: Linking file to inode helper (Pavel Emelyanov)
  - vzprivnet: Enable module in configs (Pavel Tikhomirov) [PSBM-43685]
  - ip6_vzprivnet: Add ip6_vzprivnet driver (Konstantin Khorenko)
  - ip_vzprivnet: Add ip_vzprivnet driver (Konstantin Khorenko)
  - fence-watchdog/arptables: add ability to filter by watchdog timeout (Pavel Tikhomirov)
  - fence-watchdog: Add xt_wdog_tmo netfilter match (Pavel Tikhomirov) [PSBM-23253]
  - fence-watchdog: Add fence-watchdog driver (Pavel Tikhomirov)
  - connector: add VE SS hook (Stanislav Kinsburskiy) [PSBM-60227]
  - connector: take VE from socket upon callback (Stanislav Kinsburskiy)
  - connector: containerize "connector" proc entry (Stanislav Kinsburskiy)
  - proc connector: send events to both VEs if not in VE#0 (Stanislav Kinsburskiy)
  - proc connector: use per-ve netlink sender helper (Stanislav Kinsburskiy)
  - proc connector: take namespaces from VE (Stanislav Kinsburskiy)
  - proc connector: pass VE to event fillers (Stanislav Kinsburskiy)
  - proc connector: take number of listeners and per-cpu conters from VE (Stanislav Kinsburskiy)
  - proc connector: call proc-related init and fini routines explicitly (Stanislav Kinsburskiy)
  - proc connector: add per-ve init and fini foutines (Stanislav Kinsburskiy)
  - proc connector: add pid namespace awareness (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for exit event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for coredump event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for comm event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for ptrace event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for sid event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for id event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for exec event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for fork event (Stanislav Kinsburskiy)
  - proc connector: generic proc_event_connector() helper introduced (Stanislav Kinsburskiy)
  - connector: take cn_already_initialized from VE (Stanislav Kinsburskiy)
  - connector: per-ve helpers intoruduced (Stanislav Kinsburskiy)
  - connector: use device stored in VE (Stanislav Kinsburskiy)
  - connector: per-ve init and fini helpers introduced (Stanislav Kinsburskiy)
  - connector: introduce VE-aware get_cdev() helper (Stanislav Kinsburskiy)
  - connector: store all private data on VE structure (Stanislav Kinsburskiy)
  - connector: remove redundant input callback from cn_dev (Stanislav Kinsburskiy) [PSBM-60227]
  - connector: bump skb->users before callback invocation (Florian Westphal) [PSBM-71904]
  - ms/kernel/ucount.c: mark user_header with kmemleak_ignore() (Luis R. Rodriguez) [PSBM-76924]
  - ms/module: Fix load_module() error path (Peter Zijlstra) [PSBM-69081]
  - ms/module: Optimize __module_address() using a latched RB-tree (Peter Zijlstra) [PSBM-69081]
  - ms/rbtree: Implement generic latch_tree (Peter Zijlstra) [PSBM-69081]
  - ms/seqlock: Introduce raw_read_seqcount_latch() (Peter Zijlstra) [PSBM-69081]
  - ms/rcu: Move lockless_dereference() out of rcupdate.h (Peter Zijlstra) [PSBM-69081]
  - ms/seqlock: Better document raw_write_seqcount_latch() (Peter Zijlstra) [PSBM-69081]
  - ms/new helper: wait_event_killable_exclusive() (Stanislav Kinsburskiy) [PSBM-53581]
  - ms/pidns: fix NULL dereference in __task_pid_nr_ns() (Eric Dumazet) [PSBM-75247]
  - ms/trylock_super(): replacement for grab_super_passive() (Konstantin Khlebnikov) [PSBM-73370]
  - ms/kernel/kcmp.c: drop branch leftover typo (Cyrill Gorcunov)
  - ms/x86: Fix norandmaps/ADDR_NO_RANDOMIZE (Oleg Nesterov)
  - ms/workqueue: fix ghost PENDING flag while doing MQ IO (Roman Pen) [PSBM-69788]
  - ms/devpts: fix null pointer dereference on failed memory allocation (Colin Ian King) [PSBM-67757]
  - ms/pty: Remove pty_unix98_shutdown() (Peter Hurley) [PSBM-67757]
  - ms/ipvs: fix memory leak in ip_vs_ctl.c (Tommi Rantala) [PSBM-65033]
  - ms/Don't trigger congestion wait on dirty-but-not-writeout pages (Linus Torvalds) [PSBM-68029]
  - ms/x86/spinlocks/paravirt: Fix memory corruption on unlock (Raghavendra K T) [PSBM-68212]
  - ms/x86/ticketlock: Fix spin_unlock_wait() livelock (Oleg Nesterov) [PSBM-68212]
  - ms/x86/spinlock: Replace ACCESS_ONCE with READ_ONCE (Christian Borntraeger) [PSBM-68212]
  - ms/ /proc/PID/status: show all sets of pid according to ns (Chen Hanxiao) [PSBM-62139]
  - ms/ipv6: fix a lockdep splat (Eric Dumazet) [PSBM-61714]
  - ms/kprobes/x86: Return correct length in __copy_instruction() (Eugene Shatokhin) [PSBM-66876]
  - ms/kcmp: fs/epoll: wrap kcmp code with CONFIG_CHECKPOINT_RESTORE (Cyrill Gorcunov) [PSBM-60161]
  - ms/procfs: fdinfo: extend information about epoll target files (Cyrill Gorcunov) [PSBM-60161]
  - ms/kcmp: add KCMP_EPOLL_TFD mode to compare epoll target files (Cyrill Gorcunov) [PSBM-60161]
  - ms/pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes (Eric W. Biederman)
  - ms/pid_ns: Fix race between setns'ed fork() and zap_pid_ns_processes() (Kirill Tkhai)
  - ms/prctl: Allow local CAP_SYS_ADMIN changing exe_file (Kirill Tkhai) [PSBM-66313]
  - nsfs: add ioctl to get a parent namespace (Pavel Tikhomirov) [PSBM-57362 PSBM-57362]
  - kernel: add a helper to get an owning user namespace for a namespace (Pavel Tikhomirov) [PSBM-57362 PSBM-57362]
  - nsfs: add ioctl to get an owning user namespace for ns file descriptor (Pavel Tikhomirov) [PSBM-57362 PSBM-57362]
  - ms/pidns: expose task pid_ns_for_children to userspace (Kirill Tkhai) [PSBM-58669]
  - ms/ns: allow ns_entries to have custom symlink content (Kirill Tkhai) [PSBM-58669]
  - ms/ipc/shm: Fix shmat mmap nil-page protection (Davidlohr Bueso) [PSBM-61275]
  - ms/pidns: fix free_pid() to handle the first fork failure (Kirill Tkhai) [PSBM-56705]
  - ms/tracing/filter: Do not allow infix to exceed end of string (Steven Rostedt (Red Hat)) [PSBM-60885]
  - ms/futex: Fix potential use-after-free in FUTEX_REQUEUE_PI (Peter Zijlstra) [PSBM-62103]
  - ms/ipsec: Fix aborted xfrm policy dump crash (Evgenii Shatokhin) [PSBM-78287]
  - ms/xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Andy Whitcroft) [PSBM-63199]
  - ms/xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Andy Whitcroft) [PSBM-63199]
  - ms/ipv4: fix buffer overflow in ip_options_compile() (Eric Dumazet) [PSBM-62999]
  - ms/neigh: disallow un-init_net to change thresh of neigh (Gao feng) [PSBM-59964 PSBM-63020]
  - ms/pvclock: introduce seqcount-like API (Paolo Bonzini) [PSBM-60589]
  - ms/iovec: make sure the caller actually wants anything in memcpy_fromiovecend (Sasha Levin) [PSBM-59577]
  - ms/kernel/groups: Account group_info allocations (Andrey Ryabinin) [PSBM-56703]
  - ms/udp: must lock the socket in udp_disconnect() (Eric Dumazet) [PSBM-57512]
  - ms/percpu: fix this_cpu_sub() subtrahend casting for unsigneds (Greg Thelen) [PSBM-63424]
  - ms/cgroup: fix rmdir EBUSY regression in 3.11 (Hugh Dickins) [PSBM-53314]
  - ms/kernel/groups: Use __GFP_NOWARN on user triggerable allocation (Andrey Ryabinin) [PSBM-56703]
  - ms/posix_acl: Clear SGID bit when setting file permissions (Jan Kara)
  - ms/block: fix use-after-free in sys_ioprio_get() (Omar Sandoval)
  - block/nbd: use REQ_TYPE_DRV_PRIV instead of REQ_TYPE_SPECIAL (Konstantin Khorenko) [PSBM-54928]
  - dm-crypt: add ability to use keys from the kernel key retention service (Andrey Ryabinin) [PSBM-44218]
  - ms/keys: fallback to user_match if type->match is not available. (Andrey Ryabinin) [PSBM-60876]
  - ms/KEYS: don't let add_key() update an uninstantiated key (Eric Biggers) [PSBM-73342]
  - sunrpc: take net from task client only is available (Stanislav Kinsburskiy) [PSBM-69434]
  - sunrpc: do not place task to sleep if has to be killed (Stanislav Kinsburskiy) [PSBM-68214]
  - sunrpc: use rpc_killall_tasks helper when "kill_tasks" toggle is raised (Stanislav Kinsburskiy)
  - sunrpc: fix race between "kill_tasks" set and actual task killing (Stanislav Kinsburskiy) [PSBM-68214]
  - sunrpc: pending tasks kill helper added (Stanislav Kinsburskiy) [PSBM-66510]
  - sunrpc: bring back SUNRPC task abort logic (Stanislav Kinsburskiy) [PSBM-66510]
  - sunrpc: add "kill-tasks" proc entry (Stanislav Kinsburskiy) [PSBM-66510]
  - lib/stackdepot.c: bump stackdepot capacity from 16MB to 128MB (Dmitry Vyukov) [PSBM-69081]
  - kcov: do not instrument lib/stackdepot.c (Alexander Potapenko) [PSBM-69081]
  - config.OpenVZ: add kcov code coverage (Konstantin Khorenko) [PSBM-56169]
  - ms/kcov: properly check if we are in an interrupt (Andrey Konovalov) [PSBM-56169]
  - ms/kcov: don't profile branches in kcov (Andrey Ryabinin) [PSBM-56169]
  - ms/kcov: don't trace the code coverage code (James Morse) [PSBM-56169]
  - ms/kernel: add kcov code coverage (Dmitry Vyukov) [PSBM-56169 PSBM-56169]
  - modules: set module author for Virtuozzo modules (Konstantin Khorenko) [PSBM-43847]
  - license: put correct copyrights into file headers (Konstantin Khorenko) [PSBM-43847 PSBM-40069]
  - kernel: call task_work_run() before exit_task_namespaces() (Andrei Vagin) [PSBM-68266]
  - wait: Teach do_wait() to know entered tasks (Kirill Tkhai)
  - irq: make definition of irq_set_vcpu_affinity() static (Alexey V. Vissarionov)
  - trace: add debug prints to nail down busyloop in tracing_read_pipe (Stanislav Kinsburskiy) [PSBM-53928 PSBM-53928]
  - scsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly (Xin Long)
  - scsi/eh: fix hang adding ehandler wakeups after decrementing host_busy (Pavel Tikhomirov) [PSBM-69788]
  - debug/scsi: debug Scsi_Host recovery (Maxim Patlasov) [PSBM-44228]
  - scsi/debug: make scsi error loud (Dmitry Monakhov) [PSBM-54665]
  - rh/drm: fix compilation (Konstantin Khorenko) [PSBM-69674]
  - Kconfig.openvz: force CGROUP_PERF if compiling VZ Containers code (Konstantin Khorenko) [PSBM-51360]
  - config: Enable CONFIG_TCM_QLA2XXX module (Konstantin Khorenko) [PSBM-73161]
  - config.OpenVZ: increase default value for vm.mmap_min_addr (Konstantin Khorenko) [PSBM-56697]
  - config-vz: add DISABLE_DEV_COREDUMP=n option (Konstantin Khorenko) [PSBM-54194]
  - config.OpenVZ: add more options (disabled) which depend on EXPERT (Konstantin Khorenko) [PSBM-69674]
  - config.OpenVZ: add mhvtl virtual tape module (Konstantin Khorenko) [PSBM-69293]
  - drivers/target/mhvtl: introduce a virtual tape module (Konstantin Khorenko) [PSBM-69293]
  - drivers/bnx2x: Limit setting of the max mtu (Andrey Ryabinin) [PSBM-77016]
  - config.OpenVZ.debug: enable panic-on-oops in debug kernel (Konstantin Khorenko)
  - config.OpenVZ: disable RH_KABI_SIZE_ALIGN_CHECKS (Andrey Ryabinin)
  - config.OpenVZ: enable TAP accounting (Konstantin Khorenko) [PSBM-27713]
  - config.OpenVZ.debug: Enable audit subsystem in config" (Konstantin Khorenko) [PSBM-38898]
  - config.OpenVZ: enable NBD module (Konstantin Khorenko) [PSBM-31858]
  - x86: "pages zeroing on free" option introduced (Stanislav Kinsburskiy) [PSBM-33071]
  - config.OpenVZ: enable fencing watchdog for HA cluster support (Konstantin Khorenko) [PSBM-40736]
  - config.OpenVZ: enable CONFIG_LOCALVERSION_AUTO (Konstantin Khorenko) [PSBM-34957]
  - ve/seccomp, ptrace: Save original BPF program when setting the filer (Cyrill Gorcunov) [PSBM-55593]
  - ms/seccomp, ptrace: add support for dumping seccomp filters (Tycho Andersen) [PSBM-55322 PSBM-55593]
  - ms/seccomp: add ptrace options for suspend/resume (Andrew Vagin) [PSBM-39517 PSBM-90547]
  - x86: Show vcpu cpuflags in cpuinfo (Kirill Tkhai)
  - x86: cpuinfo: Refactor c_start() (Kirill Tkhai)
  - arch/x86: disable cpuid faulting on reboot and cpu offline (Vladimir Davydov) [PSBM-30548 PSBM-33638]
  - arch/x86: only enable cpuid faulting for containers (Vladimir Davydov) [PSBM-30516 PSBM-33638]
  - arch/x86: introduce cpuid override (Vladimir Davydov) [PSBM-28682 PSBM-33638]
  - ms/x86: drop _PAGE_FILE and pte_file()-related helpers (Kirill A. Shutemov) [PSBM-52992 PSBM-54928]
  - ms/asm-generic: drop unused pte_file* helpers (Kirill A. Shutemov) [PSBM-52992]
  - ms/ipc/shm: handle removed segments gracefully in shm_mmap() (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d() (Kirill Tkhai) [PSBM-78359]
  - mm/memcg: limit page cache in memcg hack (Andrey Ryabinin) [PSBM-77547]
  - ms/mm: memcontrol: use vmalloc fallback for large kmem memcg arrays (Johannes Weiner) [PSBM-76752]
  - ms/mm: introduce kv[mz]alloc helpers (Andrey Ryabinin) [PSBM-76752]
  - ms/x86/mm: Make in_compat_syscall() work during exec (Dmitry Safonov)
  - ms/x86/hugetlb: Adjust to the new native/compat mmap bases (Dmitry Safonov)
  - ms/x86/mm: Make mmap(MAP_32BIT) work correctly (Dmitry Safonov)
  - ms/x86/mm: Introduce mmap_compat_base() for 32-bit mmap() (Dmitry Safonov)
  - ms/x86/mm: Add task_size parameter to mmap_base() (Dmitry Safonov)
  - ms/x86/mm: Introduce arch_rnd() to compute 32/64 mmap random base (Dmitry Safonov)
  - ms/x86: standardize mmap_rnd() usage (Kees Cook)
  - x86/mm: Support mremap()'ing vdso vma (Dmitry Safonov)
  - x86/vdso: Add 64-bit vdso map API (Dmitry Safonov) [PSBM-67017]
  - ve/vdso: virtualized monotonic gettime through vdso (Andrey Ryabinin) [PSBM-66451 PSBM-66888 PSBM-68050]
  - x86/vdso/prctl: Return size of vdso blob for ARCH_MAP_VDSO_32 (Dmitry Safonov)
  - x86/vdso/prctl: fail if vdso present in ARCH_MAP_VDSO_32 (Dmitry Safonov) [PSBM-66485]
  - x86/arch_prctl/vdso: add ARCH_MAP_VDSO_* (Dmitry Safonov) [PSBM-28517]
  - x86/vdso: Fix build failure with GCC5 (Andrey Ryabinin)
  - ve/vdso: x86 -- Disable virtualization in native x86-32 mode (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86 -- Eliminate race in vdso allocation, v2 (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86-32 -- Implement kernel version virtualization (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86-64 -- Implement kernel version virtualization (Cyrill Gorcunov) [PSBM-30093]
  - arch: x86: perf_event_intel: do not taint kernel when irq loop is stuck (Vladimir Davydov) [PSBM-49258]
  - mm/memcg: get precise stat2 counters for statistics. (Andrey Ryabinin) [PSBM-69332]
  - mm/memcg: improve mem_cgroup_dcache_is_low() performance. (Andrey Ryabinin) [PSBM-68644 PSBM-69145]
  - mm: memcontrol: add stats for reclaimable and unreclaimable stats (Vladimir Davydov) [PSBM-54816 PSBM-54816 PSBM-54816 PSBM-54816]
  - memcg/bc: account dcache size (Vladimir Davydov) [PSBM-20089]
  - vziolimit/fs/ext4: allow to throttle due to iolimit while reading directory blocks (Vladimir Davydov)
  - config.OpenVZ: add "vziolimit" module (Konstantin Khorenko) [PSBM-20104]
  - cfq/vziolimits: add virtinfo hook for vziolimits (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-iostat-wire-vziolimit-into-deadline-io_scheduler (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: add bc cgroup control (Dmitry Monakhov) [PSBM-32281]
  - vziolimit: Add vziolimit driver (Dmitry Monakhov) [PSBM-20104]
  - sched/vziolimit: Port diff-fairsched-do-not-account-iothrottled-tasks-in-loadavg-core (Vladimir Davydov) [PSBM-33642]
  - mm/iolimits: fix double I/O accounting for iolimits (Andrew Perepechko)
  - pfcache/fork: don't inherit vm_private_data on fork (Pavel Tikhomirov) [PSBM-44587]
  - pfcache/ub: account pfcache peer files in ub0 (Andrey Ryabinin) [PSBM-56167]
  - pfcache: hide trusted.pfcache from listxattr (Pavel Tikhomirov) [PSBM-52180]
  - ve/xattr: allow to set trusted.xxx for container admin (Pavel Tikhomirov) [PSBM-51102 OVZ-6791 PSBM-51009]
  - ve/xattr: prohibit getxattr/setxattr trusted.pfcache (Pavel Tikhomirov) [PSBM-51102 OVZ-6791]
  - pfcache: do not account peer files to memcg (Vladimir Davydov)
  - pfcache/ext4: drop pfcache csum on fallocate (Dmitry Monakhov) [PSBM-33644]
  - ms/ext4: fix lazytime optimization (Dmitry Monakhov)
  - ms/ext4: add optimization for the lazytime mount option (Dmitry Monakhov)
  - ext4: Add ioctl EXT4_IOC_SET_RSV_BLOCKS V2 (Dmitry Monakhov) [PSBM-25929]
  - ext4: add mfsync support (Dmitry Monakhov) [PSBM-18567 PSBM-34909 PSBM-34910]
  - pfcache: iterate peer list only for shared pages (Maxim Patlasov)
  - pfcache: add hashed peers for ext4 (Konstantin Khorenko) [PSBM-20098]
  - pfcache: add generic mapping peers (Konstantin Khlebnikov) [PSBM-20098 PSBM-52992 PSBM-52992 PSBM-89047]
  - ms/vfs: Remove second variable named error in __dentry_path (Pavel Tikhomirov) [PSBM-34245]
  - ms/vfs: reinitialize error for resetart in prepend_path as in ms (Pavel Tikhomirov) [PSBM-34245]
  - xfs: allow to mount xfs fs inside a Container (Konstantin Khorenko) [PSBM-72401 PSBM-72401 PSBM-86369]
  - ms/xfs: rework buffer dispose list tracking (Dmitry Monakhov) [PSBM-55577]
  - ms/xfs-convert-buftarg-lru-to-generic-code-fix (Andrew Morton) [PSBM-55577]
  - ms/xfs: convert buftarg LRU to generic code (Dmitry Monakhov) [PSBM-55577]
  - Revert: [fs] xfs: rework buffer dispose list tracking (Dmitry Monakhov) [PSBM-55577]
  - ms/xfs_qm: lost hunk from "ms/list_lru: add helpers to isolate items" (Vladimir Davydov) [PSBM-42319]
  - ms/xfs_qm: lost hunk from "ms/list_lru: introduce list_lru_shrink_{count,walk}" (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: fix dquot isolation hang (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: convert dquot cache lru to list_lru (Vladimir Davydov) [PSBM-42319 PSBM-42319]
  - ve/xfs: add missing ub_io_account_dirty in set_page_dirty (Vladimir Davydov)
  - ms/ext4: limit number of scanned extents in status tree shrinker (Jan Kara) [PSBM-78944]
  - ms/ext4: change LRU to round-robin in extent status tree shrinker (Zheng Liu) [PSBM-70858]
  - ms/ext4: track extent status tree shrinker delay statictics (Zheng Liu) [PSBM-70858]
  - ms/ext4: improve extents status tree trace point (Zheng Liu) [PSBM-70858]
  - ms/fs/ext4: __ext4_es_shrink() rename 'ret' to 'shrunk' (Andrey Ryabinin)
  - ext4: send abort uevent on ext4 journal abort (Dmitry Monakhov) [PSBM-68848]
  - ve/fs/ext4: allow container's root to change immutable attribute. (Andrey Ryabinin) [PSBM-60148]
  - ext4: add generic uevent infrastructure (Dmitry Monakhov) [PSBM-66618]
  - ext4: Discard preallocated block before swap_extents (Dmitry Monakhov)
  - ms/ext4: improve ext4lazyinit scalability (Dmitry Monakhov) [PSBM-49658]
  - ve/ext4: treat panic_on_errors as remount-ro_on_errors in CTs (Dmitry Monakhov)
  - ext4: fix race aio-dio vs freeze_fs (Dmitry Monakhov) [PSBM-39352]
  - ms/fs: add dirtytime_expire_seconds sysctl (Dmitry Monakhov)
  - ms/fs: make sure the timestamps for lazytime inodes eventually get written (Dmitry Monakhov)
  - ms/vfs: add find_inode_nowait() function (Dmitry Monakhov)
  - ms/vfs: add support for a lazytime mount option (Dmitry Monakhov) [PSBM-20411]
  - jbd2: raid amnesia protection for the journal (Dmitry Monakhov) [PSBM-15484]
  - ext4: fallocate mode - convert and extend (Dmitry Monakhov) [PSBM-22381]
  - ms/ext4: use ext4_ext_next_allocated_block instead of mext_next_extent (Dmitry Monakhov)
  - ext4: update defragmentation codebase (Konstantin Khorenko)
  - ext4: Fix error handling after filesystem abort (Dmitry Monakhov)
  - jbd2: make shure that we do not miss aborted state (Dmitry Monakhov)
  - ext4: pfcache_csum mount option (Konstantin Khlebnikov)
  - ext4: make data=writeback mode safe (Kirill Tkhai)
  - ext4: quarantee rename atomic behavior (Kirill Tkhai)
  - ext4: Provide a balloon nipple for management (Konstantin Khorenko) [PSBM-41222]
  - ext4: Don't show the active balloon to user (Maxim V. Patlasov)
  - ext4: Teach statfs to report reduced disk usage (Maxim V. Patlasov)
  - ext4: Teach the fs where the balloon inode is (Maxim V. Patlasov)
  - fs/ext4: ext4_ioctl should check for CAP_SYS_ADMIN, not for CAP_SYS_RESOURCE (Konstantin Khorenko)
  - fs/ext3: add_dirent_to_buf() should return an error, not always 0 (Konstantin Khorenko)
  - fs/ext3: check for CAP_SYS_ADMIN, not CAP_SYS_RESOURCE in ext3_ioctl() (Konstantin Khorenko)
  - blk/ploop: Add BLKPG_GET_PARTITION operation (Kirill Tkhai)
  - ext4/ploop: ask ploop about ENOSPC condition (Kirill Tkhai)
  - block/ploop: export put_io_context_active() (Maxim V. Patlasov)
  - vzstat: initial patch (Konstantin Khorenko) [PSBM-54928 PSBM-89684 VSTOR-16659]
  - ve/mm/kstat: Port diff-ve-kstat-disable-interrupts-around-seqcount-write-lock (Vladimir Davydov) [PSBM-33650]
  - sched: Account task_group::cpustat,taskstats,avenrun (Konstantin Khorenko) [PSBM-33642]
  - # This is a combination of 2 commits. # This is the 1st commit message: (Kirill Tkhai)
  - ipv6/sit: account and don't WARN on ip_tunnel_prl structs allocation (Andrey Ryabinin) [PSBM-58330]
  - net: cleanup headers inclusion (Stanislav Kinsburskiy)
  - ms/net: fix creation adjacent device symlinks (Alexander Y. Fomichev) [PSBM-58300]
  - ms/net: prevent of emerging cross-namespace symlinks (Alexander Y. Fomichev) [PSBM-58300 PSBM-58300]
  - config.OpenVZ: add and enable INET_RAW_DIAG - RAW: socket monitoring interface (Konstantin Khorenko) [PSBM-51614]
  - ms/net: sysctl: fix a kmemleak warning (Li RongQing) [PSBM-76924]
  - ms/net: raw sockets diag interface compilation fix (Konstantin Khorenko)
  - ms/ipv6: add IPV6_HDRINCL option for raw sockets (Hannes Frederic Sowa) [PSBM-51614]
  - ms/net: ip, raw_diag -- Use jump for exiting from nested loop (Cyrill Gorcunov) [PSBM-51614]
  - ms/net: ip, diag: include net/inet_sock.h (Arnd Bergmann) [PSBM-51614]
  - ms/net: ip, diag -- Add diag interface for raw sockets (Cyrill Gorcunov) [PSBM-51614]
  - rh/net: add recursion limit to GRO (sd@queasysnail) [PSBM-53507]
  - net: Iterate only online cpus in __snmp6_fill_stats64() (Kirill Tkhai) [PSBM-50993]
  - net: Allow pass cpu mask into snmp_fold_field{, 64}() (Kirill Tkhai)
  - net: Add ipv6 statistics cpu notifier (Kirill Tkhai)
  - net: limit a number of namespaces which can be cleaned up concurrently (Andrei Vagin)
  - ve/pid: Export kernel.pid_max via ve cgroup (Pavel Tikhomirov) [PSBM-48397]
  - ve/netns: limit number of network namespaces per container (Andrei Vagin) [PSBM-49690]
  - net: packet: rework rx/tx ring pages accounting (Vladimir Davydov) [PSBM-47873 PSBM-63654]
  - ms/af_packet: remove a stray tab in packet_set_ring() (Dan Carpenter)
  - ms/af_unix: move unix_mknod() out of bindlock (WANG Cong) [PSBM-56179]
  - ms/af_unix: split 'u->readlock' into two: 'iolock' and 'bindlock' (Linus Torvalds) [PSBM-56179]
  - net/af_unix: charge buffers to kmemcg (Vladimir Davydov) [PSBM-34562]
  - ms/net: sock: move ->sk_shutdown out of bitfields (Andrey Ryabinin) [PSBM-47023]
  - ve/modules: allow NFS modules autoload in Containers (Stanislav Kinsburskiy) [PSBM-58178]
  - ve/net/ip6tables: fix autoloading of the ip6table_raw module from CT (Andrey Ryabinin) [PSBM-50548 PSBM-54244]
  - ve/netfilter/ipset: allow modules autoload (Pavel Tikhomirov) [PSBM-46102]
  - ve/netlink: allow IPVS netlink messages to CT init userns (Pavel Tikhomirov) [PSBM-63883]
  - ve/net/ipvs: allow IPVS modules autoload in CT (Pavel Tikhomirov) [PSBM-63883]
  - ve/net/vxlan: enable support and autoload in a container (Pavel Tikhomirov) [PSBM-53629]
  - ve/kmod/ebtable: allow to autoload ebtable_* modules from inside a CT (Konstantin Khorenko) [PSBM-66435]
  - ve/kmod/whitelist: allow dummy module autoloading (Pavel Tikhomirov) [PSBM-43329 PSBM-52061]
  - ve/kmod/whitelist: allow overlay fs module autoloading (Dmitry Safonov) [PSBM-51043]
  - ms/kmod: remove false positive warning "waiting module removal not supported: please upgrade" (Rusty Russell) [PSBM-27580 OVZ-6748 PSBM-47877]
  - FIXME: to drop: ve/kernel/taint: Port diff-taint-message-enhanced-with-dump (Vladimir Davydov) [PSBM-25867 PSBM-33650 PSBM-52719]
  - ve/kmod: Allow netfilter conntrack inside VE (Cyrill Gorcunov) [PSBM-47359]
  - ve/kmod: Add modules to whitelist for c/r sake (Cyrill Gorcunov) [PSBM-46789 PSBM-46789]
  - ve/kmod: list of allowed to autoload in CT modules (Dmitry Safonov) [PSBM-41216 PSBM-41216]
  - ve/kmod: allow to autoload nf_log_ipv[46] (Vladimir Davydov) [PSBM-38573]
  - ve/kmod: Add rules for new {ip, ip6, x}table modules (Kirill Tkhai) [PSBM-33631]
  - ve/kmod: Add rules for autoloading (new) nf_tables (Kirill Tkhai) [PSBM-33631]
  - ve/kmod: Port autoloading from CT (Konstantin Khorenko) [PSBM-28910 PSBM-38666]
  - ms/tty: n_hdlc: get rid of racy n_hdlc.tbuf (Alexander Popov) [PSBM-61962]
  - ms/TTY: n_hdlc, fix lockdep false positive (Jiri Slaby) [PSBM-61963]
  - ms/tty: Fix unsafe ldisc reference via ioctl(TIOCGETD) (Peter Hurley) [PSBM-53939]
  - ve/vtty: Don't free console mapping until no clients left (Cyrill Gorcunov) [PSBM-39463]
  - ve/tty: vtty -- Drop TTY_PINNED_BY_OTHER bit (Cyrill Gorcunov)
  - ve/vtty: Don't close unread master peer if slave is nonzero (Cyrill Gorcunov) [PSBM-41985 PSBM-41672]
  - ve/vtty: n_tty -- Allow write on sole slave vtty peer (Cyrill Gorcunov) [PSBM-40740]
  - ve/vtty: Don't zap termios fields on slave peer (Cyrill Gorcunov) [PSBM-41057]
  - ve/vtty: Make indices to match pcs6 scheme (Cyrill Gorcunov) [PSBM-40088]
  - ve/tty: Use ve_capable in vhangup syscall (Cyrill Gorcunov) [PSBM-40053]
  - ve/tty: vt -- Implement per VE support for console and terminals (Cyrill Gorcunov) [PSBM-34533 PSBM-34532 PSBM-34107 PSBM-32686 PSBM-32685 PSBM-80049]
  - ve/tty: vt -- Fix nil dereference due to race (Cyrill Gorcunov) [PSBM-37929]
  - ve/vt: Drop debug vars from console code (Cyrill Gorcunov)
  - ve/tty: vt -- Add dummy stubs (Cyrill Gorcunov) [PSBM-34324]
  - ve/tty: console -- Enhance container console to support per VE ops (Cyrill Gorcunov) [PSBM-34357]
  - ve/tty: vzcon -- Add container dummy console support (Cyrill Gorcunov) [PSBM-32686]
  - ve/tty: Disable /dev/console in VE environment (Cyrill Gorcunov) [PSBM-32686 PSBM-32728]
  - ms/audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore)
  - ve/audit: allow changing loginuid for VE root (Pavel Tikhomirov) [PSBM-64487]
  - ms/x86/coredump: Always use user_regs_struct for compat_elf_gregset_t (Dmitry Safonov)
  - ms/x86/signal: Remove bogus user_64bit_mode() check from sigaction_compat_abi() (Dmitry Safonov)
  - ms/x86/signal: add SA_{X32,IA32}_ABI sa_flags (Dmitry Safonov) [PSBM-28517]
  - ms/x86/ptrace: down with test_thread_flag(TIF_IA32) (Dmitry Safonov) [PSBM-28517]
  - ms/x86/coredump: use pr_reg size, rather that TIF_IA32 flag (Dmitry Safonov) [PSBM-28517]
  - memcg: charge kmem allocations accounted to UBC in PCS6 to memcg (Konstantin Khorenko) [PSBM-54928 PSBM-54928]
  - mm/memcg: Don't enable interrupts too soon. (Andrey Ryabinin) [PSBM-76011]
  - mm: issue panic() on bad page/pte bugs if panic_on_warn is set (Andrey Ryabinin) [PSBM-70168]
  - ms/kasan: support panic_on_warn (Dmitry Vyukov) [PSBM-75786]
  - ms/mm: mempool: kasan: don't poot mempool objects in quarantine (Andrey Ryabinin) [PSBM-73165]
  - kasan: fix races in quarantine_remove_cache() (Dmitry Vyukov) [PSBM-69081]
  - kasan: drain quarantine of memcg slab objects (Greg Thelen) [PSBM-69081]
  - kasan: eliminate long stalls during quarantine reduction (Dmitry Vyukov) [PSBM-69081]
  - kasan: update kasan_global for gcc 7 (Dmitry Vyukov) [PSBM-69081]
  - ms/mm/mempolicy: Add cond_resched() in queue_pages_pte_range() (Andrey Ryabinin) [PSBM-79273]
  - mm, mempolicy: task->mempolicy must be NULL before dropping final reference (David Rientjes) [PSBM-69081]
  - kasan: remove the unnecessary WARN_ONCE from quarantine.c (Alexander Potapenko) [PSBM-69081]
  - x86, kasan, ftrace: Put APIC interrupt handlers into .irqentry.text (Alexander Potapenko) [PSBM-69081]
  - kasan: avoid overflowing quarantine size on low memory systems (Alexander Potapenko) [PSBM-69081]
  - kasan: improve double-free reports (Andrey Ryabinin) [PSBM-69081]
  - mm/kasan: get rid of ->state in struct kasan_alloc_meta (Andrey Ryabinin) [PSBM-69081]
  - mm/kasan: get rid of ->alloc_size in struct kasan_alloc_meta (Andrey Ryabinin) [PSBM-69081]
  - mm/kasan, slub: don't disable interrupts when object leaves quarantine (Andrey Ryabinin) [PSBM-69081]
  - mm/kasan: fix corruptions and false positive reports (Andrey Ryabinin) [PSBM-69081]
  - lib/stackdepot.c: use __GFP_NOWARN for stack allocations (Kirill A. Shutemov) [PSBM-69081]
  - mm, kasan: switch SLUB to stackdepot, enable memory quarantine for SLUB (Alexander Potapenko) [PSBM-69081]
  - kasan/quarantine: fix bugs on qlist_move_cache() (Joonsoo Kim) [PSBM-69081]
  - kasan: add newline to messages (Dmitry Vyukov) [PSBM-69081]
  - mm, kasan: don't call kasan_krealloc() from ksize(). (Alexander Potapenko) [PSBM-69081]
  - lib/stackdepot: avoid to return 0 handle (Joonsoo Kim) [PSBM-69081]
  - lib/stackdepot.c: allow the stack trace hash to be zero (Alexander Potapenko) [PSBM-69081]
  - mm: kasan: initial memory quarantine implementation (Alexander Potapenko) [PSBM-69081]
  - mm, kasan: fix compilation for CONFIG_SLAB (Alexander Potapenko) [PSBM-69081]
  - mm, kasan: stackdepot implementation. Enable stackdepot for SLAB (Alexander Potapenko) [PSBM-69081]
  - arch, ftrace: for KASAN put hard/soft IRQ entries into separate sections (Alexander Potapenko) [PSBM-69081]
  - mm, kasan: add GFP flags to KASAN API (Alexander Potapenko) [PSBM-69081]
  - mm/mempool: avoid KASAN marking mempool poison checks as use-after-free (Matthew Dawson) [PSBM-69081]
  - mm, kasan: SLAB support (Alexander Potapenko) [PSBM-69081]
  - kasan: various fixes in documentation (Andrey Konovalov) [PSBM-69081]
  - Documentation: kasan: fix a typo (Wang Long) [PSBM-69081]
  - kasan: show gcc version requirements in Kconfig and Documentation (Joe Perches) [PSBM-69081]
  - mm/memcg: sleep if mem_cgroup_force_empty_list() stumped on busy page (Andrey Ryabinin) [PSBM-70021 PSBM-76011]
  - mm: Count list_lru_one::nr_items lockless (Kirill Tkhai) [PSBM-69296]
  - mm: Make list_lru_node::memcg_lrus RCU protected (Kirill Tkhai)
  - mm: Add rcu field to struct list_lru_memcg (Kirill Tkhai) [PSBM-69296]
  - ms/mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp (Keno Fischer) [PSBM-70151]
  - mm/memcg: reclaim only kmem if kmem limit reached (Andrey Ryabinin) [PSBM-69226]
  - ms/mm: use sc->priority for slab shrink targets (Josef Bacik) [PSBM-69226]
  - ms/x86, efi, kasan: #undef memset/memcpy/memmove per arch (Andrey Ryabinin)
  - mm/memcg: reclaim memory on reaching kmem limit. (Andrey Ryabinin) [PSBM-68242 PSBM-70556]
  - ms/mm: fix sleeping function warning from __put_anon_vma (Hugh Dickins) [PSBM-65033]
  - ms/mm: vmscan: fix IO/refault regression in cache workingset transition (Andrey Ryabinin) [PSBM-68029]
  - ms/mm: vmscan: reduce size of inactive file list (Rik van Riel) [PSBM-68029]
  - ms/vmscan: fix increasing nr_isolated incurred by putback unevictable pages (Jaewon Kim) [PSBM-68029]
  - ms/mm: Follow-up for "larger stack guard gap, between vmas" (Hugh Dickins) [PSBM-67431]
  - ms/mm: larger stack guard gap, between vmas (Hugh Dickins) [PSBM-67431]
  - ms/memcg: make mem_cgroup_read_stat() unsigned (Greg Thelen) [PSBM-56256]
  - ms/mm/list_lru.c: avoid error-path NULL pointer deref (Alexander Polakov) [PSBM-67300]
  - ms/mm/memcontrol.c: fix the margin computation in mem_cgroup_margin() (Li RongQing) [PSBM-67076]
  - mm/memcg, ub: fix overflow in mem_cgroup_apply_beancounter() (Andrey Ryabinin)
  - ms/mm: prevent KASAN false positives in kmemleak (Dmitry Vyukov) [PSBM-66617]
  - mm: fix false positive WARN on fs reenterence (Andrey Ryabinin) [PSBM-58279]
  - ms/mm/memcontrol.c: fix order calculation in try_charge() (Andrey Ryabinin) [PSBM-62827]
  - mm/memcg: don't release memcg->css too early (Andrey Ryabinin) [PSBM-62827]
  - ve/memcg: enable kmem accounting for all cgroups (Vladimir Davydov) [PSBM-62827]
  - mm/memcg: make __memcg_activate_kmem() to actually activate kmem (Andrey Ryabinin) [PSBM-62827]
  - mm/memcg: fix kmem pages uncharging uncharge_batch() (Andrey Ryabinin) [PSBM-62827]
  - ms/mm: memcg: fix race condition between memcg teardown and swapin (Johannes Weiner) [PSBM-62080]
  - ms/mm, oom: remove task_lock protecting comm printing (David Rientjes) [PSBM-56178]
  - mm/memcontrol: fix shmem accounting (Andrey Ryabinin) [PSBM-58984]
  - ms/mm: memcontrol: only mark charged pages with PageKmemcg (Vladimir Davydov) [PSBM-51558]
  - ms/mm: memcontrol: teach uncharge_list to deal with kmem pages (Vladimir Davydov) [PSBM-51558]
  - ms/mm: memcontrol: revert use of root_mem_cgroup res_counter (Johannes Weiner) [PSBM-51558 PSBM-58993]
  - ms/userns, pidns: Force thread group sharing, not signal handler sharing. (Eric W. Biederman) [PSBM-44152]
  - ms/mm: memcontrol: use page lists for uncharge batching (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: rewrite uncharge API (Johannes Weiner) [PSBM-51558 PSBM-70742]
  - ms/mm: memcontrol: rewrite charge API (Johannes Weiner) [PSBM-51558 PSBM-70741]
  - ms/mm: memcontrol: remove ordering between pc->mem_cgroup and PageCgroupUsed (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: catch root bypass in move precharge (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: simplify move precharge function (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: remove explicit OOM parameter in charge path (Michal Hocko) [PSBM-51558]
  - ms/mm: memcontrol: retry reclaim for oom-disabled and __GFP_NOFAIL charges (Johannes Weiner) [PSBM-51558]
  - ms/mm: huge_memory: use GFP_TRANSHUGE when charging huge pages (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: reclaim at least once for __GFP_NORETRY (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: rearrange charging fast path (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: fold mem_cgroup_do_charge() (Johannes Weiner) [PSBM-51558]
  - ms/memcg: sanitize __mem_cgroup_try_charge() call protocol (Johannes Weiner) [PSBM-51558]
  - ms/memcg: do not replicate get_mem_cgroup_from_mm in __mem_cgroup_try_charge (Michal Hocko) [PSBM-51558]
  - ms/memcg: get_mem_cgroup_from_mm() (Johannes Weiner) [PSBM-51558]
  - ms/memcg: remove unnecessary !mm check from try_get_mem_cgroup_from_mm() (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcg: push !mm handling out to page cache charge function (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcg: inline mem_cgroup_charge_common() (Johannes Weiner) [PSBM-51558]
  - mm/memcontrol: res_counter -> page_counter transition (Andrey Ryabinin) [PSBM-54816 PSBM-54816 PSBM-54816 PSBM-54816 PSBM-91915]
  - mm: memcontrol: fix meminfo:SUnreclaim output in containers (Vladimir Davydov)
  - memcg: add mem_cgroup_get/put helpers (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - net/mm/packet: Pre-account maximum socket buffer into cg memory (v3) (Pavel Emelyanov) [PSBM-33584]
  - mm/netlink: Make all in-cg memory be kmem accounted (Pavel Emelyanov) [PSBM-33584 PSBM-93761]
  - net/mm/udp: Charge ingress buffers into cg memory (Pavel Emelyanov) [PSBM-33584 PSBM-39084]
  - net/mm/tcp: Limit orphan sockets per-cg (Pavel Emelyanov) [PSBM-33584 PSBM-34215]
  - net: resurrect parent_cg_proto() (Konstantin Khorenko) [PSBM-89047]
  - net/mm/tcp: Charge socket buffers into cg memory (v3) (Pavel Emelyanov) [PSBM-33584]
  - kernel/freezer: don't freeze stopped & about to be ptraced task (Andrey Ryabinin) [PSBM-40683]
  - ms/freezer: Do not freeze tasks killed by OOM killer (Cong Wang) [PSBM-38758]
  - oom: fix NULL ptr deref on oom if memory cgroup is disabled (Vladimir Davydov) [PSBM-43328]
  - oom: make berserker more aggressive (Vladimir Davydov)
  - oom: zap unused oom_scan_process_thread arguments (Vladimir Davydov)
  - oom: do not ignore score of exiting tasks (Vladimir Davydov)
  - mm: memcontrol: check more carefully if current is oom killed (Vladimir Davydov)
  - oom: do not select child that has already been killed (Vladimir Davydov) [PSBM-40842]
  - ve/memcg: do not ignore oom_guarantee for unlimited cgroups (Vladimir Davydov) [PSBM-44683]
  - oom: resurrect berserker mode (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-17930]
  - oom: pass points and overdraft to oom_kill_process (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: rework logic behind memory.oom_guarantee (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-37915]
  - oom: drop OOM_SCAN_ABORT (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: introduce oom timeout (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-38581]
  - oom: rework locking design (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - memcg: add lock for protecting memcg->oom_notify list (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - exit: clear TIF_MEMDIE after exit_task_work (Vladimir Davydov) [PSBM-44683]
  - ms/mm: oom_kill: clean up victim marking and exiting interfaces (Vladimir Davydov) [PSBM-26973]
  - ms/oom: thaw the OOM victim if it is frozen (Vladimir Davydov) [PSBM-26973]
  - ms/oom: add helpers for setting and clearing TIF_MEMDIE (Vladimir Davydov) [PSBM-26973]
  - ms/oom: make sure that TIF_MEMDIE is set under task_lock (Vladimir Davydov) [PSBM-26973]
  - ms/oom: don't count on mm-less current process (Vladimir Davydov) [PSBM-26973]
  - ms/mm, oom: remove unnecessary exit_state check (Vladimir Davydov) [PSBM-26973]
  - oom: do not dump all tasks info on each oom kill (Vladimir Davydov)
  - ms/vhost/net: extend device allocation to vmalloc (Michael S. Tsirkin) [PSBM-42199]
  - ms/mm: replace vma->sharead.linear with vma->shared (Kirill A. Shutemov) [PSBM-52992]
  - ms/rmap: drop support of non-linear mappings (Kirill A. Shutemov) [PSBM-52992]
  - ms/selftests: add memfd/sealing page-pinning tests (Andrew Vagin) [PSBM-39834]
  - ms/selftests: add memfd_create() + sealing tests (Andrew Vagin) [PSBM-39834]
  - ms/shm: add memfd_create() syscall (Andrew Vagin) [PSBM-39834]
  - prctl: remove one-shot limitation for changing exe link (Stanislav Kinsburskiy) [PSBM-26967 PSBM-47315]
  - prctl: reduce requirements to exe link change (Stanislav Kinsburskiy) [PSBM-50867]
  - ve/prctl_set_mm: allow to change mm content in ve (Stanislav Kinsburskiy) [PSBM-26967]
  - ms/mm/slub.c: list_lock may not be held in some circumstances (David Rientjes)
  - ms/memcg: rework memcg_update_kmem_limit synchronization (Vladimir Davydov) [PSBM-54816]
  - mm: memcontrol: fix race between kmem uncharge and charge reparenting (Vladimir Davydov) [OVZ-6756 PSBM-54816 PSBM-62827 PSBM-62827]
  - ms/mm: fix regression in remap_file_pages() emulation (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: remove rest usage of VM_NONLINEAR and pte_file() (Kirill A. Shutemov) [PSBM-52992 PSBM-70740]
  - ms/proc: drop handling non-linear mappings (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: drop vm_ops->remap_pages and generic_file_remap_pages() stub (Kirill A. Shutemov) [PSBM-52992 PSBM-54928]
  - ms/mm: drop support of non-linear mapping from fault codepath (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: drop support of non-linear mapping from unmap/zap codepath (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: replace remap_file_pages() syscall with emulation (Kirill A. Shutemov) [PSBM-52992]
  - mm: memcontrol: add memory.numa_migrate file (Vladimir Davydov) [PSBM-50875 PSBM-76970]
  - mm/page_alloc: don't return freed pages from alloc_pages() (Andrey Ryabinin) [PSBM-49918]
  - mm: default collapse huge pages if there's at least 1/4th ptes mapped (Vladimir Davydov) [PSBM-48885]
  - mm: memcontrol: fix race between user memory reparent and charge (Vladimir Davydov) [PSBM-49117]
  - config: disable numa balancing by default (Vladimir Davydov) [PSBM-49131]
  - mm: vmscan: never wait on writeback pages (Vladimir Davydov) [PSBM-48115]
  - ms/mm: memcontrol: reclaim when shrinking memory.high below usage (Johannes Weiner) [PSBM-48546]
  - mm: charge/uncharge kmemcg from generic page allocator paths (Vladimir Davydov)
  - mm: Move PageBalloon and PageBuddy helpers to page-flags.h (Vladimir Davydov)
  - mm: memcontrol: drop memcg_kmem_commit_charge (Vladimir Davydov)
  - arch: x86: don't charge kernel page tables to kmemcg (Vladimir Davydov)
  - ms/x86/kasan: instrument user memory access API (Andrey Ryabinin)
  - ms/mm/kasan: add API to check memory regions (Andrey Ryabinin)
  - ms/mm/kasan: print name of mem[set,cpy,move]() caller in report (Andrey Ryabinin)
  - ms/kernel/sysrq: restore touch_nmi_watchdog() in show_state_filter() (Andrey Ryabinin) [PSBM-47486]
  - kernel/sysrq: reset watchdog on all cpus while during sysrq-w (Andrey Ryabinin) [PSBM-47486]
  - ms/dcache: lift the "already marked killed" case into shrink_dentry_list() (Al Viro)
  - ms/dcache: don't need rcu in shrink_dentry_list() (Miklos Szeredi) [PSBM-87815]
  - ve/mm: introduce min threshold for dcache (Vladimir Davydov) [PSBM-34161]
  - dcache: zap dentry_lru_del() (Vladimir Davydov)
  - ms/dcache: don't remove from shrink list in select_collect() (Al Viro) [PSBM-44210]
  - ms/dcache: dentry_kill(): don't try to remove from shrink list (Vladimir Davydov) [PSBM-44210]
  - ms/memcg: make mem_cgroup_read_{stat|event}() iterate possible cpus instead of online (Tejun Heo)
  - mm: memcontrol: account shmem pages (Vladimir Davydov)
  - arch: x86: fix accounting page tables to kmemcg (Vladimir Davydov)
  - mm/vmalloc: add v[mz]alloc_account helpers (Vladimir Davydov)
  - ms/slab: add SLAB_ACCOUNT flag (Vladimir Davydov)
  - ms/memcg: only account kmem allocations marked as __GFP_ACCOUNT (Vladimir Davydov)
  - Revert "ms/gfp: add __GFP_NOACCOUNT" (Vladimir Davydov)
  - mm: memcontrol: add swapin/out stats (Vladimir Davydov) [PSBM-46104]
  - ms/mm: slab: free kmem_cache_node after destroy sysfs file (Dmitry Safonov) [PSBM-43010]
  - ms/slub: do not assert not having lock in removing freed partial (Steven Rostedt) [PSBM-43010]
  - ms/slub: use lockdep_assert_held (Peter Zijlstra) [PSBM-43010]
  - memcg: ignore memory.low for cgroups w/o tasks (Vladimir Davydov) [PSBM-44192]
  - ms/vmscan: do not force-scan file lru if its absolute size is small (Vladimir Davydov)
  - memcg: never fail kmem allocations (Vladimir Davydov)
  - ub/mm/writeback: do not check dirty limits for ub0 (Vladimir Davydov)
  - ve/mm/page-writeback: Introduce per-CT dirty memory limit (Andrey Ryabinin) [PSBM-33841]
  - mm: page_idle: look up page anon_vma carefully when checking references (Vladimir Davydov) [PSBM-42015 PSBM-42015]
  - ve/mm: allow container's root to ignore mlock limit (Andrey Ryabinin) [PSBM-41405]
  - ms/kasan: fix kmemleak false-positive in kasan_module_alloc() (Andrey Ryabinin) [PSBM-41328]
  - ms/include/linux/kmemleak.h: needs slab.h (Andrew Morton)
  - ve/mm,oom: print information about ve of killed task (Andrey Ryabinin) [PSBM-40610]
  - ms/mm: introduce idle page tracking (Vladimir Davydov) [PSBM-32460]
  - ms/mm/mm_init.c: make creation of the mm_kobj happen earlier than device_initcall (Vladimir Davydov) [PSBM-32460]
  - ms/mmu-notifier: add clear_young callback (Vladimir Davydov) [PSBM-32460]
  - ms/proc: add kpagecgroup file (Vladimir Davydov) [PSBM-32460]
  - ms/memcg: add page_cgroup_ino helper (Vladimir Davydov) [PSBM-32460]
  - ms/x86/mm, kasan: Silence KASAN warnings in get_wchan() (Andrey Ryabinin)
  - ms/x86/process: Unify 32bit and 64bit implementations of get_wchan() (Thomas Gleixner)
  - ms/x86/process: Add proper bound checks in 64bit get_wchan() (Thomas Gleixner)
  - ms/x86/asm/entry: Create and use a 'TOP_OF_KERNEL_STACK_PADDING' macro (Andrey Ryabinin)
  - memcg: do not allow to disable oom from inside a container (Vladimir Davydov)
  - ms/memcg: change oom_info_lock to mutex (Michal Hocko)
  - ms/memcg, oom: lock mem_cgroup_print_oom_info (Michal Hocko)
  - memcg: do not loop in mem_cgroup_reclaim if killed (Vladimir Davydov)
  - kexec, kasan: increase KEXEC_AUTO_RESERVED_SIZE under CONFIG_KASAN=y (Andrey Ryabinin) [PSBM-39339 PSBM-56847]
  - kasan: introduce single-shot mode and enable it by default (Andrey Ryabinin) [PSBM-39339]
  - kasan: always taint kernel on report. (Andrey Ryabinin) [PSBM-39339]
  - kasan: update reported bug types for not user nor kernel memory accesses (Andrey Konovalov) [PSBM-39339]
  - mm, slub, kasan: enable user tracking by default. (Andrey Ryabinin) [PSBM-39339]
  - arch: x86: charge page tables to memcg/kmem (Vladimir Davydov) [PSBM-33840 PSBM-34562]
  - gfp: add __get_free_kmem_pages helper (Vladimir Davydov)
  - gfp: inc __GFP_BITS_SHIFT (Konstantin Khorenko)
  - pipe: uncharge page on ->steal (Vladimir Davydov)
  - fs: account anon pipe buffers to memcg/kmem (Vladimir Davydov) [PSBM-39052]
  - vmalloc: account to memcg/kmem (Vladimir Davydov) [PSBM-33839]
  - mm: vmscan: fix do_try_to_free_pages() livelock (Lisa Du) [PSBM-35155]
  - mm: vmscan: fix the page state calculation in too_many_isolated (Vinayak Menon) [PSBM-35155]
  - config.OpenVZ: add KASan support for debug kernels (Konstantin Khorenko) [PSBM-39339]
  - ms/x86/kasan: Add message about KASAN being initialized (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Fix boot crash on AMD processors (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Flush TLBs after switching CR3 (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Fix KASAN shadow region page tables (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: Makefile: shut up warnings if CONFIG_COMPILE_TEST=y (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/mempool.c: kasan: poison mempool elements (Andrey Ryabinin) [PSBM-26429]
  - ms/mm, mempool: poison elements backed by slab allocator (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan, module: move MODULE_ALIGN macro into <linux/moduleloader.h> (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan, module, vmalloc: rework shadow allocation for modules (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: enable instrumentation of global variables (Andrey Ryabinin) [PSBM-26429]
  - ms/kernel: add support for .init_array.* constructors (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: vmalloc: pass additional vm_flags to __vmalloc_node_range() (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: vmalloc: add flag preventing guard hole allocation (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: enable stack instrumentation (Andrey Ryabinin) [PSBM-26429]
  - ms/x86_64: kasan: add interceptors for memset/memmove/memcpy functions (Andrey Ryabinin) [PSBM-26429]
  - ms/lib: add kasan test module (Andrey Ryabinin) [PSBM-26429]
  - ms/kmemleak: disable kasan instrumentation for kmemleak (Andrey Ryabinin) [PSBM-26429]
  - ms/fs: dcache: manually unpoison dname after allocation to shut up kasan's reports (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: add kernel address sanitizer support for slub allocator (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: introduce metadata_access_enable()/metadata_access_disable() (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: share object_err function (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: introduce virt_to_obj function (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: page_alloc: add kasan hooks on alloc and free paths (Andrey Ryabinin) [PSBM-26429]
  - ms/x86_64: add KASan support (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: disable memory hotplug (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: add kernel address sanitizer infrastructure (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: SLUB_DEBUG=n: use the same alloc/free hooks as for SLUB_DEBUG=y (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: move slab related stuff from util.c to slab_common.c (Andrey Ryabinin) [PSBM-26429]
  - ms/MIPS: Use NUMA_NO_NODE instead of -1 for node ID. (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/vmalloc: use wrapper function get_vm_area_size to caculate size of vm area (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: memcontrol: reclaim at least once for __GFP_NORETRY (Johannes Weiner)
  - ms/mm/vmscan: never isolate more pages than necessary (Vladimir Davydov) [PSBM-35275]
  - mm/compaction: fix too_many_isolated() (Konstantin Khorenko)
  - mm: Port diff-mm-add-sysctl-vm.force_scan_thresh (Vladimir Davydov) [PSBM-29968 PSBM-33640 PSBM-77547]
  - mm: Port diff-mm-vmscan-disable-fs-related-activity-for-direct-direct-reclaim (Vladimir Davydov) [PSBM-20210 PSBM-33640]
  - ms/pagemap: Port diff-ms-pagemap-do-not-leak-physical-addresses-to-non-privileged-userspace (Vladimir Davydov) [PSBM-32308 PSBM-33640]
  - ms/headers: Support GCC 5 (Cyrill Gorcunov)
  - ms/memcg: issue memory.high reclaim after refilling percpu stock (Vladimir Davydov)
  - ms/memcg: do not call high reclaim if !__GFP_WAIT (Konstantin Khorenko)
  - ms/memcg: port memory.high (Vladimir Davydov)
  - memcg: count oom kills (Vladimir Davydov) [PSBM-20089]
  - memcg: add oom_guarantee (Vladimir Davydov) [PSBM-20089]
  - ms/mm/gfp: add __GFP_NOACCOUNT (Vladimir Davydov)
  - ms/mm/memcg: do not use vmalloc for mem_cgroup allocations (Vladimir Davydov)
  - mm/memcg: remove memcg from kmemcg_sharers list on css free (Vladimir Davydov)
  - ms/mm/vmscan.c: don't forget to free shrinker->nr_deferred (Vladimir Davydov)
  - tswap: Add optimization for zero-filled pages (Kirill Tkhai) [PSBM-66499]
  - ve/mm/cleancache: count only successful put in the cleancache_puts counter (Andrey Ryabinin) [PSBM-63964]
  - fs/block_dev: always invalidate cleancache in invalidate_bdev() (Andrey Ryabinin) [PSBM-63908]
  - cleancache: avoid pointless cleancache_invalidate_inode() calls. (Andrey Ryabinin) [PSBM-63908]
  - fs/cleancache: fix data invalidation in the cleancache during direct_io (Andrey Ryabinin) [PSBM-63908]
  - meminfo: show size of tswap (Andrey Ryabinin)
  - meminfo: show size of tcache (Vladimir Davydov)
  - mm: transcendent swap cache (Vladimir Davydov) [PSBM-32063 PSBM-72584 PSBM-77015]
  - mm/frontswap: invalidate expired data on a dup-store failure (Vladimir Davydov) [PSBM-34269 PSBM-34269]
  - memcg: allow to disable cleancache per memcg (Vladimir Davydov) [PSBM-34163]
  - mm: introduce transcendent file cache (Vladimir Davydov) [PSBM-31757 PSBM-72584 PSBM-77015 PSBM-77154 PSBM-78354]
  - mm/vmscan: Introduce PF_MEMCG_RECLAIM task flag to identify memcg reclaim. (Andrey Ryabinin)
  - ms/cleancache: remove limit on the number of cleancache enabled filesystems (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: forbid overriding cleancache_ops (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: zap uuid arg of cleancache_init_shared_fs (Vladimir Davydov) [PSBM-31915]
  - ms/fs/ocfs2: copy fs uuid to superblock (Vladimir Davydov) [PSBM-31915]
  - ms/memcg: port low limit (Vladimir Davydov) [PSBM-31752]
  - ms/slub: make dead caches discard free slabs immediately (Vladimir Davydov) [PSBM-25018]
  - ms/slub: never fail to shrink cache (Vladimir Davydov) [PSBM-25018]
  - ms/slub: fix off by one in number of slab tests (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: reparent list_lrus and free kmemcg_id on css offline (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: add helpers to isolate items (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: free memcg_caches slot on css offline (Vladimir Davydov) [PSBM-25018]
  - ms/slab: link memcg caches of the same kind into a list (Vladimir Davydov) [PSBM-25018]
  - ms/slab: embed memcg_cache_params to kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab_common: move kmem_cache definition to internal header (Vladimir Davydov) [PSBM-25018]
  - ms/fs: make shrinker memcg aware (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: introduce per-memcg lists (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: organize all list_lrus to list (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: get rid of ->active_nodes (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: add rwsem to synchronize against memcg_caches arrays relocation (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: rename some cache id related variables (Vladimir Davydov) [PSBM-25018]
  - ms/vmscan: per memory cgroup slab shrinkers (Vladimir Davydov) [PSBM-25018]
  - ms/fs: consolidate {nr,free}_cached_objects args in shrink_control (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: introduce list_lru_shrink_{count,walk} (Vladimir Davydov) [PSBM-25018]
  - ms/mm: vmscan: invoke slab shrinkers from shrink_zone() (Konstantin Khorenko) [PSBM-25018]
  - ms/memcg: zap memcg_slab_caches and memcg_slab_mutex (Vladimir Davydov) [PSBM-25018]
  - ms/slub: use sysfs'es release mechanism for kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/slub: fix memcg_propagate_slab_attrs (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_name argument of memcg_create_kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap __memcg_{charge,uncharge}_slab (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: fix possible use-after-free in memcg_kmem_get_cache() (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: use generic slab iterators for showing slabinfo (Vladimir Davydov) [PSBM-25018]
  - ms/slab: print slabinfo header in seq show (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab: Give s_next and s_stop slab-specific names (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab: Sharing s_next and s_stop between slab and slub (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_can_account_kmem (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: move memcg_update_cache_size to slab_common.c (Vladimir Davydov)
  - ms/memcg: don't call memcg_update_all_caches if new cache id fits (Vladimir Davydov)
  - ms/memcg: move memcg_{alloc,free}_cache_params to slab_common.c (Vladimir Davydov)
  - ms/mm: vmscan: remove shrink_control arg from do_try_to_free_pages() (Vladimir Davydov)
  - ms/mm: vmscan: move call to shrink_slab() to shrink_zones() (Vladimir Davydov)
  - ms/mm: vmscan: respect NUMA policy mask when shrinking slab on direct reclaim (Vladimir Davydov)
  - ms/mm: vmscan: call NUMA-unaware shrinkers irrespective of nodemask (Vladimir Davydov)
  - ms/slab: delete cache from list after __kmem_cache_shutdown succeeds (Vladimir Davydov)
  - ms/memcg: cleanup kmem cache creation/destruction functions naming (Vladimir Davydov)
  - ms/memcg: memcg_kmem_create_cache: make memcg_name_buf statically allocated (Vladimir Davydov)
  - ms/memcg: get rid of memcg_create_cache_name (Vladimir Davydov)
  - ms/memcg, slab: simplify synchronization scheme (Vladimir Davydov)
  - ms/memcg, slab: merge memcg_{bind,release}_pages to memcg_{un}charge_slab (Vladimir Davydov)
  - ms/memcg, slab: do not schedule cache destruction when last page goes away (Vladimir Davydov)
  - ms/mm: get rid of __GFP_KMEMCG (Vladimir Davydov)
  - ms/mm/sl[aou]b: Move kmallocXXX functions to common code (Christoph Lameter)
  - ms/slob: Rework #ifdeffery in slab.h (Christoph Lameter)
  - ms/sl[au]b: charge slabs to kmemcg explicitly (Vladimir Davydov)
  - ms/slub: rework sysfs layout for memcg caches (Vladimir Davydov)
  - ms/slub: adjust memcg caches when creating cache alias (Vladimir Davydov)
  - ms/memcg, slab: unregister cache from memcg before starting to destroy it (Vladimir Davydov)
  - ms/memcg, slab: separate memcg vs root cache creation paths (Vladimir Davydov)
  - ms/memcg, slab: cleanup memcg cache creation (Vladimir Davydov)
  - ms/memcg: fix mutex not unlocked on memcg_create_kmem_cache fail path (Vladimir Davydov)
  - ms/memcg: remove unused code from kmem_cache_destroy_work_func (Vladimir Davydov)
  - ms/memcg: do not account memory used for cache creation (Glauber Costa)
  - ms/memcg: also test for skip accounting at the page allocation level (Glauber Costa)
  - ms/memcg: remove KMEM_ACCOUNTED_ACTIVATED flag (Vladimir Davydov)
  - ms/memcg, slab: RCU protect memcg_params for root caches (Vladimir Davydov)
  - ms/memcg: get rid of kmem_cache_dup() (Vladimir Davydov)
  - ms/memcg: fix possible NULL deref while traversing memcg_slab_caches list (Vladimir Davydov)
  - ms/memcg, slab: fix barrier usage when accessing memcg_caches (Vladimir Davydov)
  - ms/memcg, kmem: use cache_from_memcg_idx instead of hard code (Qiang Huang)
  - ms/memcg, kmem: rename cache_from_memcg to cache_from_memcg_idx (Qiang Huang)
  - ms/memcg, kmem: use is_root_cache instead of hard code (Qiang Huang)
  - ms/slab: clean up kmem_cache_create_memcg() error handling (Vladimir Davydov)
  - ms/memcg: don't need to free memcg via RCU or workqueue (Li Zefan)
  - ms/memcg: kill memcg refcnt (Li Zefan)
  - ms/memcg: don't need to get a reference to the parent (Li Zefan)
  - ms/memcg: use css_get/put for swap memcg (Li Zefan)
  - ms/memcg: use css_get/put when charging/uncharging kmem (Li Zefan)
  - ms/memcg: don't use mem_cgroup_get() when creating a kmemcg cache (Li Zefan)
  - ms/memcg: use css_get() in sock_update_memcg() (Li Zefan)
  - ms/vfs: fix dentry LRU list handling and nr_dentry_unused accounting (Linus Torvalds) [PSBM-83551]
  - ms/fs/super.c: fix lru_list leak for real (Al Viro)
  - ms/super: fix for destroy lrus (Glauber Costa)
  - ms/list_lru: dynamically adjust node arrays (Glauber Costa) [PSBM-42319]
  - mm: workingset: convert shrinker to count/scan API (Vladimir Davydov)
  - ms/fs: convert inode and dentry shrinking to be node aware (Dave Chinner)
  - ms/list_lru: remove special case function list_lru_dispose_all. (Glauber Costa)
  - ms/dcache: convert to use new lru list infrastructure (Dave Chinner)
  - ms/shrinker: Kill old ->shrink API. (Dave Chinner)
  - md/raid5: use new shrinker API (Dmitry Safonov)
  - ms/shrinker: convert remaining shrinkers to count/scan API (Dave Chinner)
  - ms/hugepage: convert huge zero page shrinker to new shrinker API (Glauber Costa)
  - ms/drivers: convert shrinkers to new count/scan API (Vladimir Davydov) [PSBM-34838 PSBM-42317]
  - ms/fs: convert fs shrinkers to new scan/count API (Vladimir Davydov) [PSBM-34838]
  - ms/vmscan: per-node deferred work (Glauber Costa)
  - ms/shrinker: add node awareness (Dave Chinner)
  - ms/inode: move inode to a different list inside lock (Glauber Costa)
  - ms/inode: convert inode lru list to generic lru list code. (Dave Chinner)
  - ms/shrinker: convert superblock shrinkers to new API (Dave Chinner) [OVZ-6646 PSBM-42760]
  - ms/mm: new shrinker API (Dave Chinner)
  - ms/dcache: remove dentries from LRU before putting on dispose list (Dave Chinner) [PSBM-83551]
  - ms/dentry: move to per-sb LRU locks (Dave Chinner)
  - ms/dcache: convert dentry_stat.nr_unused to per-cpu counters (Dave Chinner)
  - ms/super: fix calculation of shrinkable objects for small numbers (Glauber Costa)
  - ms/fs: bump inode and dentry counters to long (Glauber Costa)
  - mm: make task with TIF_MEMDIE die faster (Kirill Tkhai)
  - mm: add independed bio pool for swapout (Kirill Tkhai) [PSBM-14619]
  - mm/fuse/oom: Show writeback_temp stats in oom message (Maxim Patlasov)
  - mm/swap: do not uncharge on reuse_swap_page (Vladimir Davydov)
  - mm/swap: comment about managing swap inside a CT (Konstantin Khorenko)
  - mm: Do not leak node data to CT's /proc/vmstat (Kirill Tkhai)
  - mm: Add oom_group to set custom oom_score_adj (Kirill Tkhai)
  - rh/mm: Drop off Live Kernel Self Migration (TRACK_DIRTY_PAGES) (Cyrill Gorcunov)
  - ms/mm: softdirty: keep bit when zapping file pte (Peter Feiner)
  - ms/mm: softdirty: clear VM_SOFTDIRTY flag inside clear_refs_write() instead of clear_soft_dirty() (Cyrill Gorcunov)
  - ms/kmemcg: don't allocate extra memory for root memcg_cache_params (Andrey Vagin)
  - ms/mm: save soft-dirty bits on swapped pages (Cyrill Gorcunov)
  - Makefile: make VZVERSION evaluated dynamically (Konstantin Khorenko) [PSBM-34957]
  - dummy: add dummy modules for service vz init script (Konstantin Khorenko) [PSBM-31333 PSBM-20104 PSBM-31333]
  - vzlist: add vzlist from 2.6.32-x as is (Dmitry Guryanov) [PSBM-20095 PSBM-20095 PSBM-20095 PSBM-19217]
  - vznetstat: Port diff-vznetstat-support-of-resetting-of-traffic-statistics-on-running-CTs (Vladimir Davydov) [PSBM-21243 PSBM-21243 PSBM-33650]
  - vznetstat: apply vznetstat patches from 2.6.32 as is (Stanislav Kinsburskiy) [PSBM-20094 PSBM-20094 PSBM-32912 PSBM-20094 PSBM-32072 PSBM-19217 PSBM-33650 PSBM-34837 PSBM-35011 PSBM-35178 PSBM-35178 PSBM-52219 PSBM-79502]
  - ub: add heuristic check for memory overcommit (Stanislav Kinsburskiy) [PSBM-45695 PSBM-48891]
  - ub: show swapin/out in /proc/bc/<bc>/vmaux (Vladimir Davydov) [PSBM-46104]
  - ve/fs/sync: per containter sync and syncfs (Stanislav Kinsburskiy) [PSBM-39583 PSBM-39583 PSBM-44125 PSBM-44125 PSBM-44684]
  - ub/fs/writeback: per-CT fs writeback (Andrey Ryabinin) [PSBM-33841 PSBM-43375]
  - ubc: proc show stats in ve user ns (Pavel Tikhomirov) [PSBM-40433]
  - ub: sync exec_ub on fork (Vladimir Davydov) [PSBM-54928]
  - ub/fs: resurrect sync accounting (Vladimir Davydov) [PSBM-34007]
  - ub/fs: account writeback io (Stanislav Kinsburskiy) [PSBM-34007 PSBM-34007]
  - ub: ressurrect iostat and ioprio reporting (Stanislav Kinsburskiy) [PSBM-34007]
  - ub: ressurrect ioprio_set IOPRIO_WHO_UBC (Vladimir Davydov) [PSBM-34007]
  - ub/memcg: introduce ub_total_pages (Stanislav Kinsburskiy) [PSBM-33849 PSBM-34035 PSBM-47147]
  - mm/bc: Port diff-bc-shmem-fix-accounting-on-error-path (Vladimir Davydov) [PSBM-22198 PSBM-33637]
  - ub/netfilter: account x_tables to ub (Vladimir Davydov) [PSBM-20089]
  - ubc: initial patch (Konstantin Khorenko) [PSBM-20665 PSBM-20540 PSBM-24622 PSBM-28377 PSBM-26039 PSBM-15568 PSBM-20089 PSBM-39435 PSBM-20089 PSBM-20089 PSBM-29895 PSBM-31973 PSBM-33729 PSBM-33732 PSBM-20089 PSBM-20089 PSBM-20089 PSBM-33487 PSBM-20089 PSBM-20089 PSBM-20089 PSBM-20089 PSBM-28682 PSBM-31006 PSBM-33637 PSBM-34035 PSBM-34035 PSBM-34035 PSBM-34007 PSBM-34007 PSBM-34007 PSBM-39327 PSBM-52219 PSBM-86044 PSBM-86044]
  - ub: Track task mm ub (Kirill Tkhai)
  - ub: Execute posix timers in ub0 (Kirill Tkhai)
  - ub: Add dirty page accounting (Kirill Tkhai)
  - ub: Set ub0 to do softirq (Kirill Tkhai)
  - ub: Account siginfo (Kirill Tkhai)
  - ub: Show task ub info in /proc/[pid]/status etc (Kirill Tkhai)
  - ve/proc: Port diff-ve-proc-add-buffers-field-to-meminfo (Vladimir Davydov) [PSBM-19448 PSBM-34444 PSBM-33650]
  - ub: Split meminfo_proc_show() (Kirill Tkhai)
  - ub: Add address_space::dirtied_ub (Kirill Tkhai)
  - ub: Account file struct (Kirill Tkhai)
  - ub: Show ub memory on sysrq mem show (Kirill Tkhai)
  - ub: Add flock accounting (Kirill Tkhai)
  - ub: Add pty accounting (Kirill Tkhai)
  - ms/netlink: fix an use-after-free issue for nlk groups (Vasily Averin) [PSBM-71747]
  - ve/netlink: allow messages with family PF_BRIDGE type RTM_xxxNEIGH in CT (Pavel Tikhomirov) [PSBM-53629]
  - netlink/diag: report flags for netlink sockets (Andrey Vagin) [PSBM-28386]
  - netlink: add an ability to restore messages in a receive queue (Andrey Vagin) [PSBM-28386]
  - netlink: allow to set peeking offset for sockets (Stanislav Kinsburskiy) [PSBM-28386 PSBM-48484 PSBM-28386 PSBM-57921]
  - ve/net/ip6tables: fix autoloading of the ip6table_raw module from CT (Andrey Ryabinin) [PSBM-50548 PSBM-54244]
  - net: Add dependence xt_socket match on nf_conntrack_ipv4 (Kirill Tkhai) [PSBM-69269]
  - net: Mark conntrack users in nftables (Kirill Tkhai) [PSBM-51050]
  - net: Mark conntrack users in xtables (Kirill Tkhai) [PSBM-51050 PSBM-54823 PSBM-54823]
  - net: Primitives to enable conntrack allocation (Stanislav Kinsburskiy) [PSBM-51050 PSBM-54823 PSBM-56500]
  - ve/nf_conntrack: expose "nf_conntrack_events*" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_acct" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_max" in containers (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: allow expose of priviledged sysctl inside containers (Stanislav Kinsburskiy) [PSBM-40044 PSBM-40044 PSBM-54530]
  - ms/netfilter: Restore xt_connlimit version 0 (Kirill Tkhai) [PSBM-40186]
  - config.OpenVZ: enable netfilter module xt_match_wdog_tmo (Konstantin Khorenko) [PSBM-40736]
  - ms/netfilter: Allow xt_owner in any user namespace (Eric W. Biederman) [PSBM-69409]
  - netfilter: always create netfilter per-net objects for ipv4/ipv6 (Stanislav Kinsburskiy) [PSBM-68767]
  - netfilter: always create per-net "filter" tables objects (Stanislav Kinsburskiy) [PSBM-58574]
  - netfilter: check per-ve netfilter status on actual operation (Stanislav Kinsburskiy) [PSBM-58574]
  - netfilter: ve_ipt_permitted() helper introduced (Stanislav Kinsburskiy) [PSBM-58574]
  - ms/bridge: drop netfilter fake rtable unconditionally (Florian Westphal) [PSBM-64412]
  - ms/netfilter: x_tables: avoid warn and OOM killer on vmalloc call (Marcelo Ricardo Leitner) [PSBM-62203]
  - ms/netfilter: nfnetlink: correctly validate length of batch messages (Phil Turnbull) [PSBM-57511]
  - netfilter/x_tables: account entry offsets allocations (Andrey Ryabinin) [PSBM-54407]
  - ve/netfilter: rectify ebtlog inside CT (Dmitry Safonov) [PSBM-54183]
  - ve/netfilter: rectify nflog inside CT (Dmitry Safonov) [PSBM-54183 PSBM-83551]
  - ve/netfilter: use ve_printk for BUGPRINT in ebtables (Dmitry Safonov) [PSBM-56707]
  - ms/netfilter: nfnetlink: fix insufficient validation in nfnetlink_bind (Pablo Neira Ayuso) [PSBM-54189]
  - ms/netfilter: x_tables: check for bogus target offset (Cyrill Gorcunov) [PSBM-49001]
  - ve/netfilter: get UID and GID from container user ns on rule match (Stanislav Kinsburskiy) [PSBM-43609]
  - ve/netfilter: allow adding matches from the container initial user namespace (Stanislav Kinsburskiy) [PSBM-43609]
  - ve/netfilter: ve_printk for "nf_conntrack: table full" (Vasily Averin)
  - ve/netfilter: Check for permittions while looking for target and match (Kirill Tkhai) [PSBM-28910]
  - ve/netfilter/cred: add ve_capable to check capabilities relative to the current VE (v2) (Konstantin Khorenko) [PSBM-39077]
  - ve/netfilter: Add autoloading of sockopt modules (Kirill Tkhai) [PSBM-28910]
  - ve/netfilter: Implement pernet net->ct.max / virtualize "nf_conntrack_max" sysctl (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Implement pernet expect_max / virtualize "net.netfilter.nf_conntrack_expect_max" sysctl (Konstantin Khorenko) [PSBM-18322]
  - ve/netfilter: Add pernet permission checks in ip_tables (Kirill Tkhai) [PSBM-18322 PSBM-27181 PSBM-34192 PSBM-34657]
  - ve/netfilter: Implement net_ipt_permitted() etc (Kirill Tkhai) [PSBM-18322 PSBM-31451]
  - ve/netfilter: Implement ip_conntrack_disable_ve0 module option (Stanislav Kinsburskiy) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "conntrack" match support (Kirill Tkhai) [PSBM-18322 PSBM-51365]
  - ve/netfilter: Restore revision 0 "owner" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: MARK -- drop off @table entity to support rhel5 containers, v2 (Kirill Tkhai) [PSBM-30390]
  - ve/netfilter: Restore revision 0 "connmark" match / "CONNMARK" target support (Kirill Tkhai) [PSBM-18322 PSBM-51365]
  - ve/netfilter: Restore revision 0 "TOS" target support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "tos" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "mark" match and "MARK" target support (Stanislav Kinsburskiy) [PSBM-18322 PSBM-51365]
  - ve/netfilter: Restore revision 0 "iprange" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Basic ve transformations (Stanislav Kinsburskiy) [PSBM-18322 PSBM-39077]
  - ms/netfilter: Add {ipt,ip6t}_osf aliases for xt_osf (Kirill Tkhai) [PSBM-33929]
  - ve/futex/timeout: adjust futex timeout to absolule (Kirill Tkhai) [PSBM-14471]
  - ve: Use @real_start_timespec in uptime_proc_show (Cyrill Gorcunov) [PSBM-41406]
  - ve: Add interface for @start_timespec and @real_start_timespec adjustmen (Cyrill Gorcunov) [PSBM-41311 PSBM-41406]
  - timers should not get negative argument (Vasily Averin) [PSBM-48475]
  - ve/posix-timers: reference ve monotonic clock from ve start (v2) (Kirill Tkhai) [PSBM-13860 PSBM-34017 PSBM-18284 PSBM-18284]
  - radix-tree: save previous gfp_t tags in radix tree for dirty memory accounting (Konstantin Khorenko) [PSBM-18056 PSBM-27696 PSBM-83551 PSBM-83551]
  - VE/sysrq-trigger: make it VE-namespace aware (Stanislav Kinsbursky) [PSBM-20664]
  - config: enable BCACHE as a module" (Konstantin Khorenko) [PSBM-55594 PSBM-79461]
  - bcache: check correctly for bcache cgroup subsystem presence (Konstantin Khorenko)
  - config.OpenVZ: OpenVZ related config options are added (Stanislav Kinsburskiy) [PSBM-32460 PSBM-34741]
  - mpi: export arithmetic functions required for in-kernel DSA implementation (Konstantin Khorenko)
  - ms/mpi: revert "Revert "crypto: GnuPG based MPI lib - (Stanislav Kinsburskiy)
  - ms/mpi: revert "Remove unused code from MPI library" (Dmitry Kasatkin)
  - ve/kthread: khelper kthread in a container introduced (Stanislav Kinsbursky)
  - ve/kthread: introduce kthread_run_ve() helper (Stanislav Kinsbursky)
  - ve/kthread: kthreads creation facility introduced (Stanislav Kinsbursky)
  - kthread: make of a new kthread's queuing code to a callback (Stanislav Kinsbursky)
  - block: suppress hard lockup warning in elv_drain_elevator (Vladimir Davydov) [PSBM-44480]
  - block: Export disk_type,block_class and disk_name (Kirill Tkhai)
  - ms/cfq-iosched: fix oom cfq_queue ref leak in cfq_set_request() (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: fix async oom queue handling (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: simplify control flow in cfq_get_queue() (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: remove @gfp_mask from cfq_find_alloc_queue() (Maxim Patlasov) [PSBM-39956]
  - drivers/core/sysfs: respect ns when removing sys dev link (Vladimir Davydov) [PSBM-25801]
  - KMAPSET: set of key-value mappings with build-in (Stanislav Kinsburskiy) [PSBM-34437]
  - ve: add one more SHUTDOWN hook chain (Stanislav Kinsburskiy)
  - Use ve init task's css instead of opening cgroup via vfs (Vladimir Davydov) [PSBM-48629 PSBM-74490 PSBM-48721]
  - signal: don't rearm a posix-timer if siginfo was queued from user-space (Author: Thomas Gleixner) [PSBM-67221]
  - ve/signal: Ignore signals from wrong ve (Stanislav Kinsburskiy) [PSBM-17903 PSBM-40896 PSBM-17903]
  - signal: make SIGKILL top priority signal (Konstantin Khorenko)
  - pidns: add proc mount option 'hidepidns=0|1' (Konstantin Khlebnikov)
  - pidns: Disable pid allocation if pid_ns_prepare_proc() is failed in alloc_pid() (Kirill Tkhai) [PSBM-56705]
  - pid: export symbol nex_pidmap (Dmitry Guryanov) [PSBM-20095]
  - ms/pidns: Make the pidns proc mount/umount logic (Konstantin Khlebnikov)
  - PIDNS: implement change_pid_ns() (Konstantin Khlebnikov)
  - pid_ns: Virtualize pid_max (Kirill Tkhai)
  - fs/ceph: honor kernel direct aio changes v2 (Dmitry Monakhov) [PSBM-54817]
  - ve/aio: Add a handle to checkpoint/restore AIO context (Stanislav Kinsburskiy) [PSBM-42488 PSBM-41425 PSBM-42488 PSBM-42488 PSBM-42488]
  - ms/aio: Multiply passed nr_events in io_setup() (Kirill Tkhai) [PSBM-47075 PSBM-47209]
  - ve/fs: Export fs.aio-max-nr via ve cgroup (Cyrill Gorcunov) [PSBM-45646]
  - ve/fs/aio: aio_nr & aio_max_nr variables virtualization (Stanislav Kinsburskiy) [PSBM-29017 PSBM-47209 PSBM-47209]
  - fs/aio: kernel direct aio (Stanislav Kinsburskiy) [PSBM-18169 PSBM-42312 PSBM-54817]
  - overlayfs: unmark overlayfs as tech preview (Konstantin Khorenko) [PSBM-52379]
  - ve/fs/overlay: allow overlayfs to be used inside a Container (Pavel Tikhomirov) [PSBM-47280 PSBM-86153]
  - ve/fs/writeback: filter per-container inodes earlier (Andrey Ryabinin) [PSBM-39583]
  - fs: ioctl_fiemap must check what filemap_write_and_wait_range returns (Maxim Patlasov) [PSBM-68454]
  - fs: FIEMAP should sync only required range with FIEMAP_FLAG_SYNC (Maxim Patlasov) [PSBM-68226]
  - ms/fs: Fix race when checking i_size on direct i/o read (Steven Whitehouse)
  - ms/fs/file.c:fdtable: avoid triggering OOMs from alloc_fdmem (Eric W. Biederman)
  - vfs: panic in guard_bio_eod() if truncated_bytes > bvec->bv_len (Pavel Tikhomirov) [PSBM-55105]
  - fs: use original vfsmount for touch_atime (Stanislav Kinsburskiy) [PSBM-51009 PSBM-52373 PSBM-52817]
  - fs/block_dev: fix NULL ptr deref in freeze_bdev() (Andrey Ryabinin) [PSBM-50858]
  - ms/fs/super.c: fix WARN on alloc_super() fail path (Pavel Tikhomirov) [PSBM-43294]
  - ve: remove sync_mutex (Andrey Ryabinin)
  - fs: avoid writeback busy-loop if redirty (Maxim Patlasov) [PSBM-55919]
  - fs: fix accounting pipe buffers to kmemcg (Vladimir Davydov)
  - ve: remove sysctl_fsync_enable and use ve_fsync_behavior instead (Pavel Tikhomirov) [PSBM-34286 PSBM-34285]
  - ve/fs: namespace -- Don't fail on permissions if @ve->devmnt_list is empty (Cyrill Gorcunov) [PSBM-48188 PSBM-58329]
  - ve/fs: namespace -- Ignore device permissions during restore (Cyrill Gorcunov) [PSBM-48188]
  - ve/fs: add per-VE limit of mount points (Stanislav Kinsburskiy) [PSBM-34438 PSBM-42825 PSBM-42825 PSBM-69880 PSBM-69880 PSBM-69880 OVZ-7039]
  - ms/fsnotify: Make fdinfo to always success (Cyrill Gorcunov) [PSBM-40337]
  - ve/fs: Allow to mount ext4 and binfmt_misc under non-root ns (Kirill Tkhai) [PSBM-40100]
  - ve/fs/inotify: do not impose limit on the number of instances by default (Vladimir Davydov) [PSBM-39048]
  - ve/fs: Port diff-ve-fs-security-check-for-mount (Vladimir Davydov) [PSBM-33650]
  - mm/fs: Port diff-mm-debug-memallocation-caused-fs-reentrance (Vladimir Davydov) [PSBM-34112]
  - ve/fs/ioprio: confine ioprio_{set, get}(IOPRIO_WHO_USER) to current ve (Vladimir Davydov)
  - ve/fs/fadvise: introduce FADV_DEACTIVATE flag (Andrey Ryabinin) [PSBM-57915]
  - fs: add fadvise file_operation (Kirill Tkhai) [PSBM-54928 PSBM-54928]
  - tmpfs: shmem_fallocate must return ERESTARTSYS (Maxim Patlasov) [PSBM-43399]
  - fs/shmem: skip "relatime" in shmem_parse_options() (Kirill Tkhai)
  - vfs/nfs: add set_flags wrapper (Kirill Tkhai)
  - rh/fs: unwind changes on shift_arg_pages error path (Kirill Tkhai)
  - rh/fs: introduce "fs.relatime_interval" sysctl (Kirill Tkhai)
  - ve/fs: introduce "fs.fsync-enable" and "fs.odirect_enable" sysctls (Konstantin Khorenko) [PSBM-17903 PSBM-17157 PSBM-34286 PSBM-34285 PSBM-34286]
  - ve/binfmt_misc: destroy all nodes on ve stop (Vladimir Davydov) [PSBM-39154]
  - ve/fs/binfmt: virtualization (Stanislav Kinsburskiy) [PSBM-39154 PSBM-39154 PSBM-17903 PSBM-40100 PSBM-47737 PSBM-85685 PSBM-85052]
  - ve/fs/binfmt: move all internal data to structure (Stanislav Kinsbursky)
  - ve/devpts: Assign containers @devpts_sb on first mount (Cyrill Gorcunov) [PSBM-34931]
  - ve/fs/devpts: don't require newinstance (Konstantin Khlebnikov)
  - ve/fs: virtualize devtmpfs file system (Stanislav Kinsburskiy) [PSBM-35077 PSBM-35146 PSBM-39077]
  - nfsd: return file system superblock time granulaty on FSINFO request (Stanislav Kinsburskiy) [PSBM-66572]
  - ve/nfsd: do not print nfscld warning in a container (Stanislav Kinsburskiy) [PSBM-43468]
  - ve/nfsd: disable legacy recovery tracking for containers (Stanislav Kinsburskiy) [PSBM-43468]
  - ve/nfsd: enable UMH client tracker in a container (Stanislav Kinsbursky)
  - ve/sunrpc: containerize kthreads (Stanislav Kinsbursky)
  - ve/fs/nfsd: NFSd containerization (Stanislav Kinsburskiy)
  - ms/NFS/CIFS/SUNRPC: don't allow to freeze execution (Stanislav Kinsburskiy) [PSBM-50671 PSBM-54822]
  - ms/NFS: Don't call COMMIT in ->releasepage() (Trond Myklebust) [PSBM-77949]
  - nfs: abort delegation in dying VE (Stanislav Kinsburskiy) [PSBM-77061]
  - ve/fs/nfs: NFS containerization (Stanislav Kinsburskiy)
  - ve/fs: mark virtual filesystems as virtualized (Konstantin Khlebnikov)
  - VE/FS: containerize filesystems access (Konstantin Khorenko)
  - ms/autofs: show pipe inode in mount options (Stanislav Kinsburskiy) [PSBM-41217 PSBM-41961]
  - ve/fs/autofs: mark autofs as virtualized (Stanislav Kinsburskiy) [PSBM-26968 PSBM-86138]
  - ms/fs: Add a missing permission check to do_umount (Pavel Tikhomirov) [PSBM-43294]
  - ve/fs/locks: Make CAP_LEASE work in containers (Evgenii Shatokhin) [PSBM-46199]
  - ve/fanotify: Use ve-capable instead of plain capable test (Cyrill Gorcunov) [PSBM-41409]
  - ve/fs: allow to remount from ve user ns (Pavel Tikhomirov)
  - ve/fs/namei: fix capabilities check in sys_renameat2 () to support Containers (Stanislav Kinsburskiy)
  - ve/fs/namei: check containers capabilities in may_linkat() (Stanislav Kinsburskiy) [PSBM-40567]
  - ve/fs/cred: add ve_capable to check capabilities relative to the current VE (v2) (Andrew Vagin) [PSBM-39077]
  - VE/FS: allow to mknod inside ct (Vladimir Davydov)
  - ve/fs: Port diff-ve-fs-allow-to-remove-swapfile-hardlinks (Vladimir Davydov) [PSBM-25310 PSBM-33650]
  - fs: exec_mmap() arg corrected (Konstantin Khorenko)
  - fs: Mask appropriate filesystems FS_VIRTUALIZED (Kirill Tkhai)
  - fs: Restrict ve sync methods (Kirill Tkhai)
  - fs: Split statfs_by_dentry() (Kirill Tkhai)
  - fs: Show saved signal mask in /proc/[pid]/status (Kirill Tkhai)
  - fs: Lower ioprio in case of ioprio_set() called from CT (Kirill Tkhai)
  - ms/vfs: Allocate anon_inode_inode in anon_inode_init() (Jan Kara) [PSBM-75068]
  - ms/fs: remove now stale label in anon_inode_init() (Linus Torvalds) [PSBM-75068]
  - ms/fs: Avoid userspace mounting anon_inodefs filesystem (Jan Kara) [PSBM-75068]
  - ms/epoll: Make fdinfo to always success (Cyrill Gorcunov) [PSBM-41386]
  - ms/epoll: fix use-after-free in eventpoll_release_file (Konstantin Khlebnikov)
  - OpenVZ 7 config file (Stanislav Kinsburskiy)
  - sched: Count loadavg under rq::lock in calc_load_nohz_start() (Kirill Tkhai) [PSBM-68052]
  - ms/sched/numa: Fix use-after-free bug in the task_numa_compare (Gavin Guo) [PSBM-62208]
  - ve/sched: sched_show_task: call task_ve_name() under RCU lock (Andrey Ryabinin) [PSBM-60139]
  - ms/sched: Fix race on toggling cfs_bandwidth_used (Ben Segall) [PSBM-51056]
  - ve/sched: make load balancing more agressive (Vladimir Davydov)
  - sched: debug: show nr_failed_migrations_cpulimit (Vladimir Davydov)
  - sched: add WARN_ON's to debug task boosting (Vladimir Davydov) [PSBM-44475 PSBM-50077]
  - ms/sched/fair: Initialize throttle_count for new task-groups lazily (Konstantin Khlebnikov) [PSBM-50099]
  - sched: use topmost limited ancestor for cpulimit balancing (Vladimir Davydov) [PSBM-49203]
  - ve/fairsched: Resurrect proc fairsched files (Vladimir Davydov) [PSBM-48824]
  - ms/sched/core: Fix unserialized r-m-w scribbling stuff (Kirill Tkhai)
  - ve/sched: introduce cond_resched_may_throttle (Kirill Tkhai) [PSBM-18888 PSBM-42358]
  - sched: disable dumping cfs info on sysrq trigger (Vladimir Davydov) [PSBM-41140]
  - ve/sched: Hide steal time from inside CT (Kirill Tkhai) [PSBM-26588 PSBM-23431]
  - ms/sched/fair: Track cgroup depth (Kirill Tkhai)
  - sched/fair: only update current task boost (Vladimir Davydov)
  - ms/sched: Fix schedule_tail() to disable preemption (Kirill Tkhai)
  - sched: Port diff-sched-make-nr_cpus-limit-support-hierarchies (Stanislav Kinsburskiy) [PSBM-33642 PSBM-35082 PSBM-35251]
  - sched: Port cpustat related patches (Vladimir Davydov) [PSBM-26714 PSBM-28403 PSBM-28500 PSBM-26587 PSBM-23431 PSBM-28277 PSBM-33642 PSBM-48721 PSBM-69678 PSBM-69678 PSBM-69678 PSBM-69678 PSBM-79891]
  - sched: Port diff-sched-return-only-virtual-cpus-in-sched_getaffinity (Vladimir Davydov) [PSBM-25367 PSBM-27200 PSBM-33642]
  - sched: Port diff-sched-clear-prev-entity-if-curr-is-dequeued (Vladimir Davydov) [PSBM-33642]
  - ms/sched: Port diff-sched-increase-SCHED_LOAD_SCALE-resolution (Vladimir Davydov) [PSBM-33642]
  - sched: Port diff-sched-initialize-runtime-to-non-zero-on-cfs-bw-set (Vladimir Davydov) [PSBM-17658 PSBM-17658 PSBM-33642]
  - ve/sched: port boosting hacks against prio inversion (Stanislav Kinsburskiy) [PSBM-15441 PSBM-56984 PSBM-62208]
  - ve/sched: port vcpu hotslice (Stanislav Kinsburskiy) [PSBM-16913 PSBM-16913 PSBM-17399]
  - ve/sched: port nr cpus limit (Stanislav Kinsburskiy) [PSBM-16856 PSBM-69678 PSBM-69678]
  - sched/stat: account forks per task group (Vladimir Davydov) [PSBM-18113 PSBM-18113]
  - sched/stat: account ctxsw per task group (Vladimir Davydov) [PSBM-18113 PSBM-18113]
  - sched/stat: initial patch (Konstantin Khorenko) [PSBM-18113 PSBM-54928]
  - sched: other changes (Konstantin Khorenko)
  - sched: prohibit setting affinity from inside a CT (Konstantin Khorenko)
  - sched: put setting scheduller under CAP_SYS_ADMIN (instead of SYS_NICE) (Konstantin Khorenko)
  - sched: Add cpulimit base interfaces (Kirill Tkhai) [PSBM-69678 PSBM-69678]
  - sched: Export per task_group statistics_work (Kirill Tkhai) [PSBM-74490 PSBM-33642]
  - sched: Account ve_task_info::sleep_time (Kirill Tkhai)
  - sched: Change show_state() view (Kirill Tkhai)
  - sched: Account task_group::start_time (Kirill Tkhai)
  - sched: Add primitives to calculate nr running, sleeping, stopped and uninterruptible tasks (Kirill Tkhai)
  - sched: Account cfs_rq::nr_iowait (Kirill Tkhai)
  - sched: Count rq::nr_sleeping and cfs_rq::nr_unint (Kirill Tkhai)
  - kernel: Account nr_zombie and nr_dead (Kirill Tkhai)
  - delayacct: Add stats primitives (Kirill Tkhai)
  - ms/sched/numa: fix unsafe get_task_struct() in task_numa_assign() (Kirill Tkhai)
  - ms/sched: Fix race between task_group and sched_task_group (Kirill Tkhai)
  - ms/coredump: fix unfreezable coredumping task (Andrey Ryabinin) [PSBM-52793]
  - ve/coredump: virtualize kernel.core_pattern sysctl (Pavel Tikhomirov) [PSBM-43596]
  - ve/sysctl/net: allow net.ipv4.vs.* in CT init userns (Pavel Tikhomirov) [PSBM-63883 PSBM-63883]
  - ve/sysctl/net: allow "net.unix.max_dgram_qlen" sysctl in CT init userns (Pavel Tikhomirov) [PSBM-54530]
  - ve/sysctl: allow to write kernel/hostname and kernel/domainname entries in container (Stanislav Kinsburskiy) [PSBM-20102 PSBM-20102]
  - ve/sysctl/pidns: allow to change sysctl "ns_last_pid" from containers (Andrew Vagin)
  - sysctl: make may_detach_mounts immutable in CT (Pavel Tikhomirov) [PSBM-74521]
  - ve/sysctl/ipc: mark as virtualized (Konstantin Khorenko)
  - ve/sysctl: implement virtualized methods (Stanislav Kinsburskiy) [PSBM-18032 PSBM-18030 PSBM-29017 PSBM-43596]
  - ve/sysctl: write permission restriction (Konstantin Khlebnikov) [PSBM-18022 PSBM-56704 PSBM-18032 PSBM-18030]
  - sysctl: make "tcp_syncookies" sysctl available inside a CT (Konstantin Khorenko)
  - sysctl: make hotplug, printk and mmap_min_addr accessible inside a CT (Konstantin Khorenko)
  - sysctl: Change sysctl::show_unhandled_signals default (Kirill Tkhai)
  - ve/module: hide module refcounts from container (Andrey Ryabinin) [PSBM-57497]
  - ve/proc/net/nr_cpus: cut lines in /proc/net/softnet_stat to number of vcpus in CT (Pavel Tikhomirov) [PSBM-73238]
  - ve/proc/net: virtualize all the network proc entries (Stanislav Kinsburskiy) [PSBM-58574]
  - ve/proc/net: proc_net_create() helper introduced (Stanislav Kinsburskiy) [PSBM-58574]
  - ve/proc: fix mangling cgroup mount source path in container (Stanislav Kinsburskiy) [PSBM-34295 PSBM-52369]
  - ve/proc/time: Port diff-ve-proc-report-real_start_time-in-_proc_PID_stat-if-CONFIG_VE (Vladimir Davydov) [PSBM-22925 PSBM-22925 PSBM-33650]
  - ve/fs: drop useless d_root_check() (Konstantin Khorenko) [PSBM-41919]
  - ve/proc: use memcg limits for showing oom_score inside CT (Vladimir Davydov) [PSBM-33849]
  - ve/proc/block: Show CT allowed partitions in /proc/partitions (Stanislav Kinsburskiy) [PSBM-18889 PSBM-34805]
  - blkcg: Hide not allowed device from /proc/devices (Kirill Tkhai)
  - ve/proc: restricted proc-entries scope (Stanislav Kinsburskiy) [PSBM-18019 PSBM-18021 PSBM-40359 PSBM-58574 PSBM-55920 OVZ-6834]
  - fs/proc: print fairshed stat (Konstantin Khorenko)
  - fs/proc: enhance proc_fd_access_allowed() and provide appropriate error code to callers (Konstantin Khorenko)
  - proc: Show vcpu in do_task_stat() (Kirill Tkhai)
  - quota: missing lock in dqcache_shrink_scan() (Niu Yawei)
  - ve/quota: allow to manage quota in top CT user ns (Konstantin Khorenko) [PSBM-40281]
  - fs/quota: Compatibility with older quotactl interface (Stanislav Kinsburskiy) [PSBM-51366]
  - printk: Add touch_all_softlockup_watchdogs() to console_unlock() (Kirill Tkhai) [PSBM-49893]
  - ve/printk: per-CT printk helpers introduced (Stanislav Kinsburskiy) [PSBM-39077 PSBM-54183 PSBM-42313]
  - ve/printk: printk virtualization (Konstantin Khorenko) [PSBM-17899 PSBM-17980 PSBM-20669 PSBM-17899 PSBM-54820]
  - net/sched: restore "mpu xxx" handling (Kirill Tkhai) [PSBM-34874]
  - cpuset/mems: don't propagate changes to empty descendant cgroups (Konstantin Khorenko) [PSBM-85052]
  - cpuset/cpus: don't propagate changes to empty descendant cgroups (Konstantin Khorenko) [PSBM-85052]
  - cpuset: initial patch (Konstantin Khorenko)
  - ve/net: introduce vz_security_*_check checks (Stanislav Kinsburskiy)
  - ve/kobj: Send events per VE instead of all net-namespaces broadcasting (Stanislav Kinsburskiy)
  - ve/uevent: Use own uevent_seqnum for every VE (Konstantin Khorenko) [PSBM-17903]
  - vzevent: initial patch (Konstantin Khorenko)
  - ve/veth: don't drop skb->mark if NETIF_F_VENET is set (Andrew Vagin) [PSBM-32277]
  - vzeth: initial patch (Stanislav Kinsburskiy) [PSBM-20668 PSBM-18176]
  - ve/net: introduce TAP accounting (Stanislav Kinsburskiy) [PSBM-27713 PSBM-40629]
  - ve/net/vxlan: enable support in a container (Pavel Tikhomirov) [PSBM-53629]
  - ve/net: ipip: enable in container (Stanislav Kinsburskiy) [PSBM-48608]
  - ve/net: ip_vti: skip per net init in ve (Vladimir Davydov) [PSBM-48698]
  - ve/net/ip_gre: containerize per-net devices (Kirill Tkhai) [PSBM-24331]
  - ve/net/dummy: enable support in a container (Vasily Averin) [PSBM-43329]
  - ve/net/ppp: introduce VE_FEATURE_PPP feature (Stanislav Kinsburskiy) [PSBM-29975]
  - ve/net: Fix vlan NETIF_F_VIRTUAL feature initialization (Kirill Tkhai) [PSBM-35266]
  - ve/tun: expose "owner", "group" and "tun_flags" attributes in container (Stanislav Kinsburskiy) [PSBM-39726]
  - ve/bridge: br_dev_init: check if "bridge" feature is enabled (Evgenii Shatokhin) [PSBM-50009]
  - ve/net: restrict ethtool to CT root userns and prohibit EEPROM change (Konstantin Khorenko) [PSBM-36290 PSBM-52504]
  - ve/net/cred: add ve_capable to check capabilities relative to the current VE (v2) (Konstantin Khorenko) [PSBM-39077]
  - ve/net/xfrm: ratelimit warning on bad policy detection (Konstantin Khorenko) [PSBM-57498]
  - ve/net: restrict number of net devices for CT (Pavel Tikhomirov) [PSBM-51354]
  - ve/net/packet: show tx-ring warning only for host (Pavel Tikhomirov) [PSBM-56711]
  - VE/NET: don't oops in net_generic() on disabled features (Konstantin Khlebnikov)
  - ve/net: sit: fix crash on newlink if VE_FEATURE_SIT is disabled (Vladimir Davydov)
  - ve/net: Exclude foreign CT sockets from /proc/net/tcp{,6} (Kirill Tkhai) [PSBM-34875]
  - ve/net: Add VE_NF_CONNTRACK check in resolve_normal_ct() (Kirill Tkhai) [PSBM-35154]
  - ve/net: Add ipt_mask checks into ip6table_nat (Kirill Tkhai) [PSBM-34748]
  - ve/net: allow to rename devices in non-ve namespaces (Kirill Tkhai) [PSBM-29810 PSBM-33645]
  - ve/net/sysfs: Porting diff-ve-net-sysfs-drop-redundant-net_ipv4_route_path and diff-ve-net-route-bring-back-route_src_check (Kirill Tkhai) [PSBM-31818]
  - fs/nfs: don't use delayed unmount for nfs. (Andrey Ryabinin) [PSBM-76086]
  - ve/net,netfilter: Adjust REDIRECT target on venet device (Cyrill Gorcunov) [PSBM-59983]
  - venet: ipX_forward headroom check (Vasily Averin) [PSBM-68362 PSBM-68362]
  - veip: Add commentary about veip_shutdown_hook (Kirill Tkhai) [PSBM-77750]
  - venet: delay skb_orphan() for venet CT->host path optimization (Konstantin Khorenko) [PSBM-79456]
  - drivers/net/ve: venet network device introduced (Konstantin Khorenko)
  - ve: export ve_subsys symbol (Stanislav Kinsburskiy)
  - veip: initial patch (Konstantin Khorenko)
  - net/teql: disable "True" (or "trivial") link equalizer inside a CT (Konstantin Khorenko)
  - net: fix cbq quantum calculation (Konstantin Khorenko)
  - net/ipv6: fix MIP6 compilation (Konstantin Khorenko)
  - net/udp: honor SK_FORCE_REUSE (Konstantin Khorenko)
  - net: shift rcv_nxt appropriately in case we received only part of data (Konstantin Khorenko) [PSBM-87699]
  - net: force tcp maximum segment size (MSS) to 64K (Konstantin Khorenko)
  - net: don't push data in a socket in repair state (Konstantin Khorenko)
  - net/compilation: sysctl_tcp_adv_win_scale (Konstantin Khorenko)
  - net: honor TW_WSCALE_MASK/TW_WSCALE_SPEC (Konstantin Khorenko)
  - net: introduce ip_rt_src_check (Konstantin Khorenko)
  - net: move dev_name_hash/dev_index_hash to netdevice.h (Konstantin Khorenko)
  - tun: Create tun_flags file on for init_net only (Kirill Tkhai)
  - net: Track leaked netdev (Kirill Tkhai)
  - net: Make neigh_alloc() return ENOMEM in kmalloc() failed (Kirill Tkhai)
  - net: Add NETIF_F_VIRTUAL feature to mask devices allowed in CT (Kirill Tkhai)
  - net: Add NETIF_F_VENET netdev feature and optimized skb forwarding (Kirill Tkhai)
  - net: Add sysctl_tcp_use_sg to disable NETIF_F_SG sk route capability (Kirill Tkhai)
  - net: Make ipip feature optional (Kirill Tkhai)
  - net: Make sit feature optional (Kirill Tkhai)
  - netns: export net_assign_generic() (Konstantin Khorenko)
  - net: Show all connections in init namespace (Tony Zelenoff)
  - ms/netlabel: fix the netlbl_catmap_setlong() dummy function (Paul Moore)
  - ms/net/RDS: verify the underlying transport exists before creating a connection (Vasily Averin)
  - ve/cgroups: Introduce subgroups_limit control (Andrey Ryabinin) [PSBM-33401 PSBM-69678]
  - ve/cgroup: Allow to write to several safe cgroup files from CT (Pavel Tikhomirov) [PSBM-44981]
  - ve/cgroup: do not virtualize output of cgroup_path (Vladimir Davydov) [PSBM-34852]
  - ve/cgroup: Mangle cgroups root from inside of VE view (Cyrill Gorcunov) [PSBM-33757 PSBM-38634]
  - cgroup: Mark cgroup CGRP_VE_ROOT (Kirill Tkhai)
  - ve/cgroups: fake num_cgroups in /proc/cgroups output (Vasily Averin) [PSBM-33400]
  - VE: convert khelper_wq to kthread_worker (Konstantin Khlebnikov) [PSBM-28910]
  - ve/security: device_cgroup -- Allow manage devices in @pseudosuper state (Cyrill Gorcunov) [PSBM-48421]
  - ve/cgroup: Add pseudosuper state for restore sake (Cyrill Gorcunov) [PSBM-33664 PSBM-34291 PSBM-34299 PSBM-43169 PSBM-42573 PSBM-44981]
  - ve/kernel: allow to increase rlimit from inside container (Vladimir Davydov) [PSBM-43410]
  - ve/acct: Allow process accounting in containers (Evgenii Shatokhin) [PSBM-40587]
  - ve: introduce ve_init_user_ns() helper (Andrey Ryabinin) [PSBM-41075]
  - vecalls: fix VZCTL_GET_CPU_STAT uptime_jif scale (Vladimir Davydov) [PSBM-28811]
  - ve: Implement current_user_ns_initial() helper (Konstantin Khorenko) [PSBM-58574]
  - ve/itimer: add ve_name to warning for a NULL new_value (Dmitry Safonov) [PSBM-49818]
  - ve/cred: add ve_capable to check capabilities relative to the current VE (v2) (Konstantin Khorenko) [PSBM-39077]
  - ve: Add support of iptables mask (Konstantin Khorenko) [PSBM-32737 PSBM-34286 PSBM-34285]
  - ve: Add support of features mask (Cyrill Gorcunov) [PSBM-32737]
  - ve/lockdep: Port diff-lockdep-taint-kernel-on-circular-locking-complains (Vladimir Davydov) [PSBM-22010 PSBM-33650]
  - ve/taskstats: allow delivery of task attributes in CT context (Stanislav Kinsburskiy) [PSBM-56171]
  - ve: Port diff-ve-allow-taskstats-netlink-in-netns (Vladimir Davydov) [PSBM-33650]
  - ve/uts_ns: Implement cgroup interface to configure ve's os_release (Kirill Tkhai) [PSBM-32273]
  - uts: Add virt_utsname and /proc/sys/kernel/virt_osrelease entry (Kirill Tkhai)
  - ve/devmnt: Add a ability to show ve.mount_opts (Kirill Tkhai) [PSBM-34291 PSBM-34291]
  - ve/fs/devmnt: process mount options (Kirill Tkhai) [PSBM-32273 PSBM-40075]
  - ve/devmnt: Introduce ve::devmnt list (Kirill Tkhai) [PSBM-32273]
  - ptrace: prevent tracing "init" from inside a CT (Konstantin Khorenko)
  - ve/mm/trace: introduce vps_dumpable flag (Konstantin Khorenko) [PSBM-20666]
  - ve/mm: print OOM info to VE log (Vladimir Davydov)
  - ve: initial patch (Konstantin Khorenko) [PSBM-21953 PSBM-22882 PSBM-24622 PSBM-24622 PSBM-28031 PSBM-33480 PSBM-33555 PSBM-33561 PSBM-33833 PSBM-34030 PSBM-32284 PSBM-34450 PSBM-34497 PSBM-34286 PSBM-34285 PSBM-34422 PSBM-34286 PSBM-34285 PSBM-40280 PSBM-71414 PSBM-78078]
  - ve/userns: associate user_struct with the user_namespace (Andrey Ryabinin) [PSBM-60181]
  - ve: allow user ns in chroot (Konstantin Khlebnikov)
  - ve: Virtualize sysinfo (Kirill Tkhai)
  - ve: Replace 0 ppid with 1 (workaround for bad utils) (Kirill Tkhai)
  - ve: Customize VE uptime (Kirill Tkhai)
  - ve: Use ve_relative_clock in times() syscall and /proc/[pid]/stat (Kirill Tkhai)
  - ve: Prohibit module load and usermode_helper from inside CT (Kirill Tkhai)
  - ve: Add virtinfo subsys (Kirill Tkhai) [PSBM-20104]
  - ve: Virtualize devpts superblock (Kirill Tkhai)
  - ve: Virtualize /proc/cmdline (Kirill Tkhai)
  - ve: Virtualize /proc/swaps to watch from inside CT (Kirill Tkhai)
  - ve: Implement per ve randomize_va_space (Kirill Tkhai)
  - ve: Use ve_printk() for often kernel messages about user actions (Kirill Tkhai)
  - ve/ppc: wire OpenVZ-specific syscalls (Kir Kolyshkin)
  - ve: Add ve syscalls numbers (Kirill Tkhai)
  - ve: Prohibit containers add random entropy (Kirill Tkhai)
  - ve/sysinfo: don't clean uptime, procs and loads in containers (Pavel Tikhomirov) [PSBM-62094]
  - ve: Add VZVERSION suffix to kernel release (Kirill Tkhai)
  - ms/cgroup: switch to new percpu_ref API (Vladimir Davydov)
  - ms/cgroup: use percpu refcnt for cgroup_subsys_states (Vladimir Davydov) [PSBM-34174]
  - ms/cgroup: split cgroup destruction into two steps (Vladimir Davydov) [PSBM-34174]
  - ms/cgroup: reorder the operations in cgroup_destroy_locked() (Vladimir Davydov) [PSBM-34174]
  - cgroup: initial patch (Konstantin Khorenko) [PSBM-17927 PSBM-17927 PSBM-16529 PSBM-34035 PSBM-34035]
  - Revert: rh/kmod: use system_unbound_wq instead of khelper (Konstantin Khorenko) [PSBM-61660]
  - vzdev: initial patch (Konstantin Khorenko)
  - vzwdog: initial patch (Konstantin Khorenko) [PSBM-89580]
  - ve/device_cgroup: kill ACC_QUOTA permission (Konstantin Khorenko) [PSBM-48482]
  - ve/device_cgroup: allow to change device mount permission via cgroup (Andrey Ryabinin) [PSBM-48431]
  - ve/device_cgroup: fake allowing all devices for docker inside VZCT (Pavel Tikhomirov) [PSBM-34529 PSBM-38691]
  - capabilities: correct descriptions (Konstantin Khorenko)
  - ve/devcgroup/cred: add ve_capable to check capabilities relative to the current VE (v2) (Konstantin Khorenko) [PSBM-39077]
  - devcgroup: initial patch (Konstantin Khorenko) [PSBM-21979 PSBM-33555]
  - headers: inclusion (Konstantin Khorenko)
  - Initial patch commit + compilation fixes: commit messages history (Konstantin Khorenko) [PSBM-33584 PSBM-17651 PSBM-17886 PSBM-17909 PSBM-17918 PSBM-17915 PSBM-17917 PSBM-17914 PSBM-17902 PSBM-17924 PSBM-17926 PSBM-17924 PSBM-17918 PSBM-17930 PSBM-17931 PSBM-17945 PSBM-17960 PSBM-17971 PSBM-18875 PSBM-18876 PSBM-18877 PSBM-17908 PSBM-18878 PSBM-18879 PSBM-18056 PSBM-18882 PSBM-18884 PSBM-18899 PSBM-31125 PSBM-12955 PSBM-20089 PSBM-20089 PSBM-12523 PSBM-41530 OVZ-6600 OVZ-5192 PSBM-32912 PSBM-54816 PSBM-54819 PSBM-54928 PSBM-54928 PSBM-18113 PSBM-33760 PSBM-33755 PSBM-33926 PSBM-39077 PSBM-18531 PSBM-34089 PSBM-42087 PSBM-18113 PSBM-20541 PSBM-33642 PSBM-33841 PSBM-47061 PSBM-17904 PSBM-33650 PSBM-39077 PSBM-18885 PSBM-18885 PSBM-34494 PSBM-20810 PSBM-51255 OVZ-6409 PSBM-39167 PSBM-20100 PSBM-20100 PSBM-33239 PSBM-34777 PSBM-41804 PSBM-52390 PSBM-54408 PSBM-20663 PSBM-22149 PSBM-27695 PSBM-33849 PSBM-33849 PSBM-33849 PSBM-34066 PSBM-34007 PSBM-32284 PSBM-42313 PSBM-55365 PSBM-71414]
  - Kconfig: Kconfig.openvz includes in arch (Konstantin Khorenko)
  - Kconfig: introduce kernel/Kconfig.openvz (Konstantin Khorenko)
  - x86/SYSCALL: remove sys32 vm86 warning (Dmitry Guryanov)
  - ms/kcmp: fix standard comparison bug (Rasmus Villemoes)
  - ms/module: remove rmmod --wait option. (Rusty Russell) [PSBM-27580 PSBM-27580]
  - ms/idr: print a stack dump after ida_remove warning (Vasily Averin)
  - MS/KBD: add file kbd_bind in sysfs, which allow unbind keyboard from tty (v2) (Andrey Vagin)
  - MS/DEVICE: input_mutex isn't static now (Andrey Vagin)
  - MS/NET/IPV6: remove duplicate neigh_ifdown (Vladimir Davydov) [PSBM-13449]
  - MS/MM/SLAB: show slab_info core (Dmitry Guryanov)
  - MS/IDLE: add boot param to forcibly enable intel auto demotion (Vladimir Davydov) [PSBM-11477]
  - ms/tty: Fix potential use after free in release_one_tty (Cyrill Gorcunov)
  - ms/tty/ppc: define TIOSAK (fix tty_ioctl() compilation) (Kir Kolyshkin)
  - MS/TTY: TIOSAK Secure Attention Key ioctl (Konstantin Khlebnikov) [PSBM-11881]
  - KBUILD: build should fail on modpost errors for external modules (Konstantin Khlebnikov)


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-957.12.2.vz7.96.2]
changelog:
  - fs/fuse kio: keep fuse_file for requests waiting for shrink (Pavel Butsykin) [VSTOR-23034]
  - fs/fuse kio: style fix in pcs_fuse_submit() (Pavel Butsykin) [VSTOR-23034]
  - fs/fuse kio: add pending kio requests to kqueue (Pavel Butsykin) [VSTOR-23034]
  - fs/fuse kio: forward fuse_file pointer to kpcs_req_send() (Pavel Butsykin) [VSTOR-23034]
  - fs/fuse kio: add locked cs_get_avg_in_flight() (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement cs_stats statistics info (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: convert rpc state id to string (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement cs statistics accounting (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: remove useless pcs_cs initialization (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement fstat_lat statistics info (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement fstat statistics info (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement requests statistics info (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement pcs_strerror() (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: add retry counter for kio requests (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: make interface pcs_kio_req_list() for listing kio reqs (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: make interface pcs_kio_file_list() for listing kio files (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement iostat statistics info (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: create sysfs stat directory (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse: add conn_ctl to fuse_conn struct (Pavel Butsykin) [VSTOR-20979]
  - ms/Documentation: add watermark_scale_factor to the list of vm systcl file (Jerome Marchand) [PSBM-94102]
  - ms/mm: scale kswapd watermarks in proportion to memory (Johannes Weiner) [PSBM-94102]
  - mm/workingset: Fix memcg_inc_ws_activate() with disabled mem cgroups. (Andrey Ryabinin)
  - mm/workingset: fix workingset_activation() with memcgroups enabled (Andrey Ryabinin)
  - mm/workingset: fix possible race with memcg deletion. (Andrey Ryabinin)
  - proc/cpu/cgroup: make boottime in CT reveal the real start time (Pavel Tikhomirov) [PSBM-94263]
  - net: fix false-positive deadlock detection for sk_receive_queue lock (Pavel Tikhomirov) [VSTOR-18951]
  - ms/vhost: synchronize IOTLB message with dev cleanup (Jason Wang) [PSBM-90318]
  - ploop: Show whether device supports native discard (Kirill Tkhai) [PSBM-94662]
  - ploop: Return maintaince mode ioctls again (Kirill Tkhai) [PSBM-94662]
  - Partial revert "ploop: Enable native discard support for kaio engine" (Kirill Tkhai) [PSBM-94662]
  - Revert "ploop: Remove obsolete ioctls" (Kirill Tkhai) [PSBM-94662]
  - Revert "ploop: Remove now unused PLOOP_REQ_ZERO branches" (Kirill Tkhai) [PSBM-94662]
  - Revert "ploop: Remove now unused PLOOP_REQ_DISCARD branches" (Kirill Tkhai) [PSBM-94662]
  - Revert "ploop: Remove now unused PLOOP_REQ_RELOC_S branches" (Kirill Tkhai) [PSBM-94662]
  - Revert "ploop: Remove now unused PLOOP_E_ZERO_INDEX and PLOOP_E_DELTA_ZERO_INDEX branches" (Kirill Tkhai) [PSBM-94662]
  - config.OpenVZ.minimal: add support for e1000[e] and r8169 network cards (Konstantin Khorenko)


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-957.12.2.vz7.96.3]
changelog:
  - KVM: x86/vPMU: handle access to LBR stack regardless of PMU counters presence (Jan Dakinevich) [PSBM-94429]
  - net/drivers/i40e: suppress warning on skb linearization (Jan Dakinevich) [VSTOR-22811]
  - ms/scsi: megaraid_sas: return error when create DMA pool failed (Jason Yan) [PSBM-94466]
  - Revert "fs/fuse: add conn_ctl to fuse_conn struct" (Konstantin Khorenko)
  - Revert "fs/fuse kio: create sysfs stat directory" (Konstantin Khorenko)
  - Revert "fs/fuse kio: implement iostat statistics info" (Konstantin Khorenko)
  - Revert "fs/fuse kio: make interface pcs_kio_file_list() for listing kio files" (Konstantin Khorenko)
  - Revert "fs/fuse kio: make interface pcs_kio_req_list() for listing kio reqs" (Konstantin Khorenko)
  - Revert "fs/fuse kio: add retry counter for kio requests" (Konstantin Khorenko)
  - Revert "fs/fuse kio: implement pcs_strerror()" (Konstantin Khorenko)
  - Revert "fs/fuse kio: implement requests statistics info" (Konstantin Khorenko)
  - Revert "fs/fuse kio: implement fstat statistics info" (Konstantin Khorenko)
  - Revert "fs/fuse kio: implement fstat_lat statistics info" (Konstantin Khorenko)
  - Revert "fs/fuse kio: remove useless pcs_cs initialization" (Konstantin Khorenko)
  - Revert "fs/fuse kio: implement cs statistics accounting" (Konstantin Khorenko)
  - Revert "fs/fuse kio: convert rpc state id to string" (Konstantin Khorenko)
  - Revert "fs/fuse kio: implement cs_stats statistics info" (Konstantin Khorenko)
  - Revert "fs/fuse kio: add locked cs_get_avg_in_flight()" (Konstantin Khorenko)


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-957.12.2.vz7.96.4]
changelog:
  - ploop: Fix maintaince_type obtaining design problem (Kirill Tkhai) [PSBM-94727]
  - Revert "ploop: Disable ioctl(PLOOP_IOC_BALLOON)" (Konstantin Khorenko) [PSBM-94662]


author: Petr Sabata <contyk@redhat.com> - 1.5-1
changelog:
  - 1.5 bump
  - BuildRoot and defattr cleanup
  - Use macros in Sources
  - Drop show-ports and foreach patches -- those have been included upstream


author: Petr Sabata <contyk@redhat.com> - 1.5-2
changelog:
  - Add three latest bugfixes from upstream git on top of 1.5
  - Dropping params patch (included upstream variant)


author: David Tardon <dtardon@redhat.com> - 0:1.3.0-22
changelog:
  - Resolves: rhbz#850008 bsh - Should not own /usr/share/maven-fragments
    directory
  - Resolves: rhbz#878163 bsh - javadoc subpackage doesn't require
    jpackage-utils
  - Resolves: rhbz#878166 bsh: Public Domain not listed in license tag


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0:1.3.0-24
changelog:
  - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
  - clean up spec to follow current guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.3.0-27
changelog:
  - Remove arch-specific conditionals
  - Remove group tags
  - Remove Requires on jpackage-utils
  - Remove Requires on coreutils
  - Generate custom scripts with %jpackage_script
  - Install versionless JARs only
  - Install POM files to %{_mavenpomdir}


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.3.0-27
changelog:
  - Use %add_maven_depmap instead of legacy macros
  - Install versionless javadocs
  - Remove old Obsoletes
  - Update and format descriptions
  - Install license file with manual and javadoc packages
  - Fix Requires and BuildRequires on java
  - Fix calls to %jpackage_script


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5
changelog:
  - Apply a patch by Stephen Gallagher to patch autoconf, not configure to
    allow optflags to be passed in by build environment
  - Run autoreconf before configure
  - git rm obsolete patches
  - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1
changelog:
  - New upstream release 1.10
  - Obsolete upstreamed patches
  - Amend the multilib patch, there's no need to patch configure since we
    are running autoreconf anyways
  - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES


author: Kai Engert <kaie@redhat.com> - 2017.2.11-71
changelog:
  - Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
  - Use comments in extracted bundle files.
  - Change packaging script to support empty legacy bundles.


author: Kai Engert <kaie@redhat.com> - 2017.2.11-72
changelog:
  - Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
    as a preparation to fix bugs in the interaction between p11-kit-trust and
    Mozilla applications, such as Firefox, Thunderbird etc.
  - For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
  - Require p11-kit 0.23.5
  - Added an utility to help with comparing output of the trust dump command.


author: Kai Engert <kaie@redhat.com> - 2017.2.16-71
changelog:
  - Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
    Mozilla removed code signing trust from all CAs (rhbz#1472933)


author: Peter Jones <pjones@redhat.com> - 10.2-8
changelog:
  - Incorporate changes from Matthias Saou:
  - Include install patch, to avoid all of the ugly manual installation.
  - Cosmetic fixes (libs group, scriplets, don't mix %name with hardcode...).


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 10.2-15
changelog:
  - Patched configure to use config.{guess,sub} files so 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-virtuozzo-linux-gnu --host=x86_64-virtuozzo-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info macro can
    replace them with proper version. With this change it builds fine for AArch64
    architecture.
    Resolves: rhbz#1023783


author: Konstantin Volkov <wolf@virtuozzo.com> 7.0.0-17
changelog:
  - Enable firewalld by default, open appropriate ports, see #PSBM-54055
  - Set default timezone for host, see #PSBM-54121


author: Boris Ranto <branto@redhat.com> - 1:10.2.5-1
changelog:
  - New version (1:10.2.5-1)
  - Makefile: Fix dencoder build
  - Add fake fcgiapp.h for rgw
  - common: Build more files of libcommon in client
  - libradosstripper: Build libradostripper for rados as noinst


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-1
changelog:
  - Resolves: #1249753 challenge password not added in csr using start-tracking
  - Resolves: #1250397 Remove certmonger rekey feature in 7.2
    - Remove rekey feature
  - Related:  #1205756 Rebase certmonger to 0.77 or later
    - Update to upstream 0.78.4


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-2
changelog:
  - Resolves: #1345755 Support for specifying IPA lightweight CA
    - Add 'issuer' request option for specifying issuer
    - Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
    - Comment/whitespace fixup
    - ipa-submit: Retry without "ca" on OptionError
    - getcert: fix a potential out-of-bounds
    - Document the -X option in the ipa-submit man page
  - Resolves: #1351052 certmonger build for RHEL 7.3 failure
    - Stop assuming RSA 512 works
    - Stop assuming RSA 512 works, part two
    - Fix a flakiness in the 028-dbus test


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-3
changelog:
  - Resolves: #1367683 getcert request command fails to use Sub CA using -X
    argument
    - Fix CA option name for ipa cert-request


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-4
changelog:
  - Use required DER encoding when setting CA basic constraint (#1551635)
  - NSS 3.34 more strictly enforces length checking when verifying signatures
    (#1551702)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-5
changelog:
  - Add Requires on psmsic for killall in post script (#1458890)
  - upstream project migrated from fedorahosted.org to pagure.io (#1501723)
  - Strip CR/LF from passwords read from a file (#1545935)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-8
changelog:
  - Disable iterate-10 test which fails intermitently (#1596161)
  - Add BuildRequires for running autoreconf


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-9
changelog:
  - Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
    variables to helpers. The root cause was a bug in IPA (#1596161)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.2-11
changelog:
  - Fix license tag
  - Install LICENSE and NOTICE with javadoc package
  - Convert versioned JARs to unversioned
  - Preserve timestamp of POM file
  - Update to current packaging guidelines


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix typos in test/dispol
  - Set flex as default lexer
  - Fix checkmodule output message
  - Build policy on systems not supporting DCCP protocol
  - Fail if module name different than output base filename


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-6
changelog:
  - Add ibendport ocontext handling
  - Add support for ibendportcon labels
  - Add ibpkey ocontext handling
  - Add support for ibpkeycon labels
  - Add binary module support for xperms


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.4-1
changelog:
  - ntsysv: show systemd services and sockets
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files
  - alternatives: remove unused variable
  - alternatives: warn if the target is not a symlink
  - spec: add link to git
  - lets simplify version


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.5-1
changelog:
  - add systemd-sysv-install alias
  - don't create symlinks if they already exist
  - fix wrongly behaving LDFLAGS


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.6-1
changelog:
  - systemd-sysv-install: don't play ping-pong with systemctl
  - ntsysv: add description to systemd services
  - ntsysv: skip templates
  - Makefile: fix typo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.7.2-1
changelog:
  - alternatives: introduce --keep-missing
  - alternatives: allow family in --set and display it in --config


author: Miroslav Lichvar <mlichvar@redhat.com> 1.29.1-1
changelog:
  - update to 1.29.1 (#1053022, CVE-2014-0021)
  - fix selecting of sources with prefer option (#1061048)
  - fix potential bug in writing of drift files (#1061106)
  - replace hardening build flags with _hardened_build (#1061036)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.1-1
changelog:
  - update to 2.1 (#1117882 #1169353 #1206504 #1209568 CVE-2015-1821
    CVE-2015-1822 CVE-2015-1853)
  - extend chrony-helper to allow using servers from DNS SRV records (#1211600)
  - add servers from DHCP with iburst option by default (#1219492)
  - execute test suite


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-1
changelog:
  - update to 3.1 (#1387223 #1274250 #1350669 #1406445)
  - don't start chronyd without capability to set system clock (#1306046)
  - fix chrony-helper to escape names of systemd units (#1418968)
  - package chronyd sysconfig file (#1396840)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.2-1
changelog:
  - update to 3.2 (#1482565 #1462081 #1454765)
  - use ID from /etc/os-release to set pool.ntp.org vendor zone


author: Jeff Layton <jlayton@redhat.com> 6.2-3
changelog:
  - fixes for bugs reported by coverity:
  - update bad bit shift patch with one that patches getcifsacl.c too
  - remove some dead code from getcifsacl.c, asn1.c, and data_blob.c
  - fix bad handling of allocated memory in del_mtab in mount.cifs.c


author: Sachin Prabhu <sprabhu@redhat.com> - 6.2-8
changelog:
  - Prevent unnecessary linking of libwbclient
  - Uppercase orig_dev on 2nd try at mounting
  - Include paths.h in mtab.c
  - Clarify use of backupuid/backupgid in manpage
  - Ignore x-* mount options


author: Sachin Prabhu <sprabhu@redhat.com> - 6.2-10
changelog:
  - aclocal: fix typo in idmap.m4
  - mount.cifs: Removed extra comma in front of domain
  - mount.cifs: Accept empty domains on the command line
  - mount.cifs: Fixed command line parsing and aligned with kernel
  - mount.cifs: Remove unneeded stdbool header include
  - manpage: document mfsymlinks in the mount.cifs man page


author: Honza Horak <hhorak@redhat.com> - 0.5.2-2
changelog:
  - Fix issues found during Package Review
    Summary provides better idea what this library is for
    Using macros for make build and install
    Fix permissions of the shared library


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-16
changelog:
  - Disable NetworkManager management of resolv.conf if nameservers
    are specified by configuration.
    Resolves: rhbz#1454491


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-18
changelog:
  - Start the cloud-init init local service after the dbus socket is created
    so that the hostnamectl command works.
    Resolves: rhbz#1450521


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-23
changelog:
  - Fix a bug tha caused cloud-init to fail as a result of trying
    to rename bonds.
    Resolves: rhbz#1512247


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-24
changelog:
  - Set DHCP_HOSTNAME on Azure to allow for the hostname to be
    published correctly when bouncing the network.
    Resolves: rhbz#1434109


author: Rex Dieter <rdieter@fedoraproject.org> 2.3.3.4-6
changelog:
  - contribs-lib is not built and installed even with config (#794795, upstream ID: 3392466)
  - pkgconfig file is missing clucene-shared (upstream ID: 3461512)
  - non-descriptive descripton (#757319)


author: Petr Machata <pmachata@redhat.com> - 2.8.11-2
changelog:
  - Pass -fno-strict-aliasing to cm_sha2.c to avoid strict aliasing
    problems that GCC warns about.
  - Icon name in CMake.desktop shouldn't include filename extension.


author: Patsy Franklin <pfrankli@redhat.com> - 2.8.12.2-1
changelog:
  - Rebase to 2.8.12.2 including some recent patches. (BZ #1195919)
  - Fix to find python libs version 3.4 (BZ #1246369)
  - Don't fail if certain Qt modules are unavailable. (BZ #1192188)


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-7
changelog:
  - Fix ordering of lvm2 activation and rbdmap services.
  - Fix to avoid locking collisions when monitoring thin-pools.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-10.el7_6.3
changelog:
  - Fix component detection for MD RAID version 1.0 and 0.90.
  - Use sync io if async io_setup fails, or when use_aio=0 is set in config.
  - Fix dmstats report printing no output.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-10.el7_6.7
changelog:
  - Add io_memory_size configuration option.
  - Warn when metadata aproaches io_memory_size.
  - Ensure migration_threshold for cache is at least 8 chunks.


author: Owen Taylor <otaylor@redhat.com> - 1.18.2-12
changelog:
  - Add patches to improve display synchronization on NVIDIA
      
    When testing quadbuffer stereo patches, GNOME Shell would sometimes
    hang up on restart. This turned out to be a problem with display
    synchronization on NVIDIA. The patches added here make display
    synchronization work much more similarly with the NVIDIA drivers
    and the open source drivers, which not only fixes this bug, but should
    reduce future bugs.
      
    Resolves: #1305076

  - Add patches improving frame completion events in Cogl


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 1.16.8-1
changelog:
  - Update to latest upstream release (#1257923)
  - Remove no longer needed patch to prevent coin-or-OS crash in %check


author: Richard Hughes <richard@hughsie.com> - 1-7
changelog:
  - Add the user-writable system-wide per-machine ICC profile directory from
    the new version of the OpenIccDirectoryProposal.


author: Richard Hughes <richard@hughsie.com> 1.0.0-1
changelog:
  - New upstream version
  - Add a config option for monitors with identical EDID values
  - Allow a different input and output format in CdTransform
  - Build all installed binaries with PIE
  - Build the colord binary with full RELRO
  - Do not show a warning when using 'colormgr device-get-profile-for-qualifier'
  - Fix crash in cd-iccdump by working around an lcms2 bug
  - Fix using the color sensors on ARM hardware
  - Set the STANDARD_space metadata for the print profiles
  - Show all the translations when dumping an ICC profile


author: Richard Hughes <richard@hughsie.com> 1.0.1-1
changelog:
  - New upstream version
  - Do not unconditionally enable BPC on the color transform
  - Fix profile created time for non-UTC timezones
  - Record the gamma table in the session helper error message


author: Richard Hughes <richard@hughsie.com> 1.0.2-1
changelog:
  - New upstream version
  - Add cd_icc_save_data() so that we can easily set _ICC_PROFILE
  - Add CdIccStore to monitor directories of ICC profiles
  - Add SystemVendor and SystemModel properties to the main interface
  - Allow to specify a non-qualified path when using FindProfileByFilename
  - Allow using the key 'Filename' when using FindProfileByProperty
  - Always return the error if any sync method failed
  - Fix GObject introspection when getting lists
  - Fix GObject introspection when getting metadata


author: Richard Hughes <richard@hughsie.com> 1.0.4-1
changelog:
  - Rebase to a new upstream version to fix small security bug
  - Use %ghost in the to avoid removing databases on upgrades
  - Resolves: #1012832


author: Richard Hughes <richard@hughsie.com> 0.1.22-2
changelog:
  - Backport a patch from git master that fixes an include issue with
    projects that want to use colord-gtk.h and colord.h at the same time.


author: Richard Hughes <richard@hughsie.com> 0.1.25-1
changelog:
  - New upstream version.
  - Give the sample widget slightly curved corners and a gray outline
  - Do not use deprecated functions from libcolord
  - Fix warnings when building ColordGtk-1.0.gir
  - Fix up the licence boilerplate for CdSampleWidget


author: Jay Fenlason <fenlason@redhat.com> 1:1.2.15-1.el5
changelog:
  - Change sysconfig file to /etc/rdma/compat-dapl to match the change in dapl
  - Split out into separate source rpm from the dapl-2.0.25-2.el5.src.rpm
    Resolves: rhbz#557170 split compat-dapl into a separate srpm


author: Doug Ledford <dledford@redhat.com> - 1:1.2.15-2.el6
changelog:
  - Fix various rpmlint wanrings in spec file
  - Version all of the obsoletes
  - Now that this is no longer part of the dapl rpm, it needs its own
    doc macro so that the license and whatnot are on the system when the
    package is installed
  - Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> - 1:1.2.15-2.1.el6
changelog:
  - Include pipe-leak patch to close
    Resolves: rhbz619439 - OFED1.5.1: uDAPL - cma: memory leak of FD's (DB2 pureScale)
    This required some whitspace editing--apparently the patch was garbled
    somewhere in transit.
  - Include the cma-memleak-verbs-CQ-compl-chans-fix patch to close
    Resolves: rhbz619443 - OFED1.5.1: uDAPL handles close on forked child exit (DB2 pureScale)


author: Doug Ledford <dledford@redhat.com> - 1:1.2.19-1
changelog:
  - Update to latest upstream release (1.2.15 -> 1.2.19)
  - Remove 3 patches rolled into upstream
  - Update exclusive arch to accommodate i686 arch
  - Related: bz725016, bz724896


author: Jeff Law <law@redhat.com> - 1:2.12-1.80.4
changelog:
  - Fix passing of -z execstack to the linker.
  - Remove -mnew-mnenomics from PPC build flags
  - Pull over patch for 911307 from Fedora


author: Jan Vcelak <jvcelak@redhat.com> 1:2.3.43-3
changelog:
  - enhancement: build with hardening flags (RELRO)
  - fix: querying for IPv6 DNS records when IPv6 is disabled on the host (#835013)
  - drop unnecessary patches
  - clean configure flags


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.0-10
changelog:
  - Remove psm2 package variant. Instead use MCA exclusion using config file.
  - Related: #947311
  - Related: #1173305


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.3-1
changelog:
  - Update to upstream release 1.10.3.
  - Stop excluding psm2 MTL by default. The psm/psm2 conflict has been resolved.
  - Resolves: #1273175
  - Resolves: #1285292


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.6-1
changelog:
  - Update to upstream release 1.10.6.
  - Fix missing RPM provides.
  - Resolves: #1382800
  - Resolves: #1365792


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.7-1
changelog:
  - Update to upstream release 1.10.7.
  - Add Open MPI 3.0.0 subpackage (openmpi3).
  - Resolves: #1452826


author: Paul Wouters <pwouters@redhat.com> - 1.0.1-1
changelog:
  - Updated to 1.0.1
  - Added daemon using systemd and configuration file
  - Removed legacy spec requirements
  - Patch for: parse.c:240:34: error: 'NULL' undeclared


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 2:2.73-2
changelog:
  - moved changelog entries:
  - Define spc_t as a container_domain, so that container_runtime will transition
  to spc_t even when setup with nosuid.
  - Allow container_runtimes to setattr on callers fifo_files
  - Fix restorecon to not error on missing directory


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.76-1
changelog:
  - Allow containers to use fuse file systems by default
  - Allow containers to sendto dgram socket of container runtimes
  - Needed to run container runtimes in notify socket unit files.


author: Dan Walsh <dwalsh@redhat.com> - 0.2.0-1
changelog:
  - Add License
  - Add compatibility mode flag to only do docker specific stuff if INPUTFILE
  not specified.
  - Minor Bug fixes for non docker use cases


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.9.0-1.rhel75.gite0997c3
changelog:
  - Resolves: #1475625
  - bump to v0.9.0
  - built commit e0997c3
  - include 'rhel75' string in release field to differentiate from rhel 7.4


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-6
changelog:
  + control-center-3.26.2-6
  - Fix Clone MAC not being saved in Ethernet device properties
  - Resolves: #1467295


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-8
changelog:
  + control-center-3.26.2-8
  - Fix Wi-Fi networks not getting updated
  - Show "Wi-Fi disabled" page when Wi-Fi is disabled
  - Resolves: #1545713


author: Robert Relyea <rrelyea@redhat.com> - 1.1.0-34
changelog:
  - recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
  - own our cache file.
  - verify we are using the correct mechanisms


author: Jiri Vanek <jvanek@redhat.com> - 1.1-3
changelog:
  - commented requires on lua posix to stop blocking composes.
  - changed it to 644 to dont mislead by executable flags
  - Resolves: rhbz#1296430


author: Jiri Vanek <jvanek@redhat.com> - 1.1-5
changelog:
  - posttrans silenced, the error is appearing only in state, when there is nothing to copy
  - Resolves: rhbz#1296430


author: Jiri Vanek <jvanek@redhat.com> - 2.2-1
changelog:
  - added "jre/lib/security/blacklisted.certs" to cared files
  - moved to newest release 2.1
  - moved to new upstream at pagure.io
  - added new script of copy_jdk_configs_fixFiles.sh 
  - copy_jdk_configs.lua  aligned to it
  - Resolves: rhbz#1427463


author: Alexander Stefanov <astefanov@virtuozzo.com> 1.3.1.5
changelog:
  - add link to sources
   - fix 1.3.1.14 macro
   - manual sync with vzbuild br
   - go back to 1.3.1
   - use space instead of tab


author: Alexander Stefanov <astefanov@virtuozzo.com> 1.3.1.6
changelog:
  - fix build with vzbuild br
   - add link to sources
   - fix 1.3.1.14 macro
   - manual sync with vzbuild br
   - go back to 1.3.1
   - use space instead of tab


author: Alexander Stefanov <astefanov@virtuozzo.com> 1.3.1.7
changelog:
  - use anon git for submodule due to key errors on build node
   - fix build with vzbuild br
   - add link to sources
   - fix 1.3.1.14 macro
   - manual sync with vzbuild br
   - go back to 1.3.1
   - use space instead of tab


author: Alexander Stefanov <astefanov@virtuozzo.com> 0.0.12
changelog:
  - automigrate: use parameters of "sqlbackend" plugin only (Eugene Kolomeetz
  <klm@virtuozzo.com>)
   - use branch hci-3.0.0-vz


author: Maxim Nestratov <mnestratov@virtuozzo.com> 1.3.1.14
changelog:
  - Update submodule. Fix VSTOR-22193
   - Added git-update-submodules.sh (Denis Silakov <dsilakov@virtuozzo.com>)


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-13
changelog:
  - call utilities in colorls.* scripts with full path (#1222223)
  - tail: disable inotify in --follow for vxfs (#1109083)
  - remove circular dependency for util-linux (not relevant for RHEL 7 - #1155963)
  - sort: do not look at more than specified keys for mb locales (#1148347)
  - i18n patch: fix buffer overruns and compiler warnings (#1148347)
  - xfs: fix dd sparse false test failure on btrfs and xfs (#1223041)
  - dd: new status=progress level to print stats periodically (#1147701)
  - id/groups - print correct group for session (#1115430)
  - cp,install,mknod,mkfifo,mkdir: separate -Z and --context options
    in --help and manpage (#1084471)
  - ls: clarify --scontext/--context/--lcontext options behaviour
    in info documentation, mention deprecation (#1099508)
  - du: handle bindmount cycles more gracefully (#1238191)
  - mv: prevent possible race condition for hardlinks (#1166570)
  - df: improve filtering of NFS mounts and bind mounts
    (#1197463, #1100026, #1129661)


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-18
changelog:
  - fix xfs build failure in chrooted environment (#1263341)
  - update filesystem lists for stat and tail from latest upstream
    (#1327881, #1280357) 
  - disable id/setgid.sh test(missing chroot feature), fix 
    cp-a-selinux test (#1266500,#1266501)
  - colorls.sh - change detection of interactive shell for ksh
    compatibility (#1321648)
  - fix date --date crash with empty or invalid TZ envvar (#1325786)
  - df -l: do not hang on a dead autofs mount point (#1309247)
  - sort -h: fix functionality of human readable numeric sort for other
    than first field (#1328360)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-19
changelog:
  - timeout: fix race possibly terminating wrong process (#1439465)
  - ls: allow interruption when reading slow directories (#1421802)
  - fold: preserve new-lines in mutlibyte text (#1418505)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-23
changelog:
  - update description of the -a/--all option in df.1 man page (#1553212)
  - sort -M: fix memory leak when using multibyte locale (#1540059)


author: Konstantin Volkov <wolf@virtuozzo.com> 1.0.4
changelog:
  - Move branding to separate file, see #PSBM-58317
   - Create BINDIR during 'make install' if necessary (Denis Silakov
  <dsilakov@gmail.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 1.0.5
changelog:
  - Fix style (place the destructor above members) (Andrey Bondrov
  <abondrov@virtuozzo.com>)
   - Declare destructors explicitly to allow building with -O2 (Andrey Bondrov
  <abondrov@virtuozzo.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 1.0.6
changelog:
  - Make it possible to use exported CPPFLAGS and LDFLAGS when building the
  package (Andrey Bondrov <abondrov@virtuozzo.com>)
   - Enable hardened build, see #PSBM-58107 (Andrey Bondrov
  <abondrov@virtuozzo.com>)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-6
changelog:
  - Resolves: rhbz#1371880

  - libvotequorum: Bump version (rhbz#1371880)
  - merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
  - votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
  - merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
  - votequorum: simplify reconfigure message handling (rhbz#1371880)
  - merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-7
changelog:
  - Related: rhbz#1371880

  - Fix build on RHEL7.3 latest (rhbz#1371880)
  - merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
  - Enable aarch64 build (bz#1422598)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-8
changelog:
  - Resolves: rhbz#1434528
  - Resolves: rhbz#1434529
  - Resolves: rhbz#1434534

  - cfg: Prevents use of uninitialized buffer (rhbz#1434528)
  - merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
  - man: Fix typos in man page (rhbz#1434529)
  - merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
  - Fix typo: Destorying -> Destroying (rhbz#1434529)
  - merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
  - init: Add doc URIs to the systemd service files (rhbz#1434529)
  - merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
  - man: Modify man-page according to command usage (rhbz#1434529)
  - merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
  - Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
  - merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
  - upstart: Add softdog module loading example (rhbz#1434529)
  - merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
  - Remove deprecated doxygen flags (rhbz#1434529)
  - merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
  - Remove redundant header file inclusion (rhbz#1434528)
  - merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
  - Qdevice: fix spell errors in qdevice (rhbz#1434529)
  - merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
  - doc: document watchdog_device parameter (rhbz#1434529)
  - merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
  - Logsys: Change logsys syslog_priority priority (rhbz#1434534)
  - merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
  - logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
  - merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-9
changelog:
  - Resolves: rhbz#1445001

  - Main: Call mlockall after fork (rhbz#1445001)
  - merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
  - Disable aarch64 build (bz#1422598)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-10
changelog:
  - Resolves: rhbz#1439205
  - Resolves: rhbz#1461450
  - Resolves: rhbz#1469170
  - Resolves: rhbz#1476214

  - main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
  - merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
  - totem: Propagate totem initialization failure (rhbz#1461450)
  - merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
  - totemcrypto: Refactor symmetric key importing (rhbz#1461450)
  - merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
  - totemcrypto: Use different method to import key (rhbz#1461450)
  - merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
  - main: Add option to set priority (rhbz#1469170)
  - merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
  - main: Add support for libcgroup (rhbz#1476214)
  - merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
  - totemcrypto: Fix compiler warning (rhbz#1461450)
  - merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)


author: Jan Friesse <jfriesse@redhat.com> 2.4.3-2
changelog:
  - Resolves: rhbz#1536219

  - logging: Make blackbox configurable (rhbz#1536219)
  - merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
  - logging: Close before and open blackbox after fork (rhbz#1536219)
  - merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-20
changelog:
  - fix another bogus date in changelog
  - update config.guess/config.sub for aarm64 build (#925189)
  - run autoreconf instead of autoheader


author: Marek Polacek <polacek@redhat.com> 4.8.5-31
changelog:
  - backport s390 -mpic-data-is-text-relative feature (#1555397)
  - fix crash when write follows large read (#1463706)
  - fix emit_move_insn ICE (#1565536)
  - add missing rs6000-cpus.def (#1512202)


author: Marek Polacek <polacek@redhat.com> 4.8.5-34
changelog:
  - fix infinite looping in -fipa-cp-clone (#1546372)
  - don't look for vsld gcc.target/powerpc/pr72717.c


author: Marek Polacek <polacek@redhat.com> 4.8.5-36.2
changelog:
  - allow libitm to use HTM (#1674383)
  - fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)


author: Thomas Spura <tomspur@fedoraproject.org> - 4.0.5-3
changelog:
  - Cherry-pick patch for protocol downgrade attack (#1221666, CVE-2014-9721)
  - Remove Obsoletes:zeromq-utils
  - Remove %defattr


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-3
changelog:
  - fix the python module to work with compressed dictionaries (#972542)
  - fix various dictionary lookup errors (#986400, #986401)
  - make the library reentrant and fix compilation warnings


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-5
changelog:
  - make the simplistic check and the purging of special characters much
    less aggressive (#1003624, #985378)


author: John W. Linville <linville@redhat.com> - 1.1.3_2014.06.13-1
changelog:
  - Update wireless-regdb to version 2014.06.13
  - Add logger commands to setregdomain to make it more communicative


author: John W. Linville <linville@redhat.com> - 1.1.3_2015.04.06-2
changelog:
  - Update wireless-regdb to version 2015.04.06
  - Add patch for regdbdump to display DFS region
  - Make some improvements to setregdomain and its man page


author: Zdenek Pavlas <zpavlas@redhat.com> - 0.9.9-21
changelog:
  - update to latest HEAD
  - don't BuildRequire bash-completion in rhel
  - Fail for bad compress-type options to modifyrepo, like createrepo. BZ 886589
  - Fix options documentation. BZ 892657.
  - modifyrepo: fix --compress option bug. BZ 950724
  - modifyrepo: add --checksum and --{unique,simple}-md-filenames options


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-24
changelog:
  - mergerepo: merge package versions from multiple repos.
  - Related: bug#1178763
  - Close lock file before unlink().
  - Related: bug#1256216


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-26
changelog:
  - Make sure filename doesn't already contain a checksum.
  - Resolves: bug#1270784
  - Catch IOErrors when loading pkglist.
  - Resolves: bug#1083182
  - Add missing options to the manpage.
  - Resolves: bug#1285761


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-27
changelog:
  - Fix temporary files cleanup.
  - Resolves: bug#1406418
  - Fix --update for pkgs with same nevra.
  - Resolves: bug#1404239


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-28
changelog:
  - createrepo: allow xz and bz2 for xml files.
  - Resolves: bug#1125437
  - modifyrepo: fix handling of already compressed input.
  - Resolves: bug#1227782
  - modifyrepo: handle empty file with LZMA.
  - Resolves: bug#1287685
  - modifyrepo: docs: remove compat compress type.
  - Resolves: bug#1287714


author: Cyrill Gorcunov <gorcunov@virtuozzo.com> 3.4.0.20
changelog:
  - compel: x86,compat -- Make sure mmap fits compat task size (#PSBM-76379)
   - compel: Do not loose sign of result in compat syscall (#PSBM-76379)


author: Cyrill Gorcunov <gorcunov@virtuozzo.com> 3.4.0.24
changelog:
  - Revert "restore/cgroup: make root task enter cgroups before setup-namespaces
  action" (#PSBM-76648 #PSBM-76609)
   - soccr: c/r ipv6 sockets which handles ipv4 connections (#PSBM-72350)


author: Cyrill Gorcunov <gorcunov@virtuozzo.com> 3.4.0.25
changelog:
  - Revert "vz7: sfd: Lift up own fd limit on bootup" (#PSBM-67194)
   - vz7: service: Allow keep_open flag for a WAIT_PID command (#PSBM-58198)
   - test: static,aio01 -- Use proper type for context
   - test: sigaltstack -- Drop useless test of a leader stack (#PSBM-76744)


author: Cyrill Gorcunov <gorcunov@virtuozzo.com> 3.4.0.25.1
changelog:
  - make: Adjust version for hotfix series
   - tty: Use mnt_id for first lookup of toplevel devpts (#PSBM-78460)


author: Kirill Tkhai <ktkhai@virtuozzo.com> 3.4.0.25.53
changelog:
  - criu: Don't fail if ghost file has no parent dirs. (Vitaly Ostrosablin
  <vostrosablin@virtuozzo.com>)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-14
changelog:
  - mark the 0hourly and dailyjobs crontabs as config
  - properly handle users for whose getpwnam() returns NULL temporarily
  - log when crond is shutting down


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16
changelog:
  - disable mail from anacron with empty MAILTO
  - crontab: do not block access with PAM when running as root
  - improve the crontab man page
  - do not hardcode system_u selinux user but use the user from
    the current context


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-17
changelog:
  - make anacron not to contradict itself in syslog
    (job output does not have to be necessarily mailed)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18
changelog:
  - fix regression - spurious PAM log message from crontab (#1479064)
  - allow empty variables in crontabs (#1439217)


author: Marcel Plch <mplch@redhat.com> - 1.4.11-20
changelog:
  - Fix race condition when crontab is modified the same second
    before and after reading the crontab
  - Resolves: rhbz#1638691


author: Ondrej Kozina <okozina@redhat.com> - 1.6.7-1
changelog:
  - Update to cryptsetup 1.6.7.
  - patch: avoid use of kernel crypto API socket which is known
    to be broken in RHEL7.0 kernel (7.1+ is fine).
  - Resolves: #1206170


author: Ondrej Kozina <okozina@redhat.com> - 1.7.4-4
changelog:
  - patch: fix regression in blockwise functions
  - patch: avoid repeating error messages when device holders
    detected.
  - patch: add option to cryptsetup-reencrypt to print progress
    log sequentaly
  - patch: use --progress-frequency in reencryption dracut module
  - Resolves: #1480006 #1447632 #1479857


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-2
changelog:
  - patch: stop LUKS2 auto-recovery if device is no longer LUKS
    type
  - patch: update cryptsetup man page for --type option
  - patch: rephrase error message for invalid --type option in
    convert action
  - Resolves: #1599281 #1601477 #1601481


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-3
changelog:
  - Add expected permissions explicitly for locking directory.
  - Reinstate sed script removing library rpath from libtool
    script due to bug in upstream sources distribution.
  - Resolves: #1609847 #1610379


author: John Dennis <jdennis@redhat.com> - 5.8-11
changelog:
  - add ctags-5.8-memmove.patch
    bug #284 absoluteFilename uses strcpy on overlapping strings 
    http://sourceforge.net/p/ctags/bugs/284/  
    The bug was fixed upstream on 2012-03-26 in the following commit
    http://sourceforge.net/p/ctags/code/782/
    ctags-5.8-memmove.patch simply adds the same patch as the above commit.


author: Andreas Schneider <asn@redhat.com> - 4.6.2-7
changelog:
  - resolves: #1461336 - Fix smbclient username parsing
  - resolves: #1460937 - Fix username normalization with winbind


author: Andreas Schneider <asn@redhat.com> - 4.6.2-10
changelog:
  - resolves: #1484423 - Require at least krb5 version 1.15.1
  - resolves: #1484713 - Fix password changes for users via smbpasswd
  - resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                         returned errors


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-30
changelog:
  - 1386751 - cups-lpd program did not catch all legacy usage of ISO-8859-1
  - 1441860 - CUPS may fail to start if NIS groups are used


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-32
changelog:
  - 1468747 - CUPS failover backend allows multiple jobs to get stuck in failed queue
  - 1469816 - Failover backend won't fail-over if the printer is disconnected


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-33
changelog:
  - 1466497 - Remove weak SSL/TLS ciphers from CUPS
  - 1434153 - CUPS print jobs show incorrect number under the "pages" column


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-16
changelog:
  - Applied upstream patch to fix BrowseAllow parsing issue
    (CVE-2014-4338, bug #1091568).
  - Applied upstream patch for cups-browsed DoS via
    process_browse_data() out-of-bounds read (CVE-2014-4337,
    bug #1111510).


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-18
changelog:
  - Fix segfault in texttopdf filter (bug #1194263).
  - Improve cups-browsed efficiency (bug #1191691).
  - Fetch printer descriptions with cups-browsed (bug #1223719).
  - Fix cups-browsed "_" handling for printer names (bug #1167408).


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-21
changelog:
  - Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
    CVE-2015-3258, CVE-2015-3279).


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-43
changelog:
  - curl --socks5-{basic,gssapi}: control socks5 auth (#1409208)
  - nss: fix a memory leak when CURLOPT_CRLFILE is used (#1427883)
  - nss: do not leak PKCS #11 slot while loading a key (#1444860)
  - nss: fix a possible use-after-free in SelectClientCert() (#1473158)


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-48
changelog:
  - fix RTSP bad headers buffer over-read (CVE-2018-1000301)
  - fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
  - fix LDAP NULL pointer dereference (CVE-2018-1000121)
  - fix RTSP RTP buffer over-read (CVE-2018-1000122)
  - http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
  - doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
  - update certificates in the test-suite because they expire soon (#1572723)


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-50
changelog:
  - remove dead code, detected by Coverity Analysis
  - remove unused variable, detected by GCC and Clang


author: Jakub Jelen <jjelen@redhat.com> 2.1.26-18
changelog:
  - Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
  - Add and document ability to run saslauth as non-root user (#1188065)
  - Support AIX SASL GSSAPI (#1174322)
  - Update client library to be thread safe (#1147659)
  - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
  - Don't use unnecessary quotes around user description (#1082564)
  - Fix confusing message when config file has typo (#1022479)


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-5.2.el6
changelog:
  - Actually install the signal-handler patch
    Resolves: bz667742	Error mapping bug in dapls_wait_comp_channel


author: Doug Ledford <dledford@redhat.com> - 2.0.32-1
changelog:
  - Update to latest upstream version (2.0.25 -> 2.0.32)
  - Remove 4 patches folded into upstream release
  - Rebuild against new libibverbs and librdmacm
  - Update exclusive arch to accommodate i686 arch
  - Related: bz724896, bz725016


author: Doug Ledford <dledford@redhat.com> - 2.0.34-1
changelog:
  - Update to latest upstream version
  - Rebuild against new libibverbs (FDR link speed capable and IBoE enabled)
  - Related: bz750609


author: Jay Fenlason <fenlason@redhat.com> - 2.0.39-1
changelog:
  - Upgrade to latest version
    Resolves: rhbz#985117
  - Fix a compile problem with NULL not being defined
    Resolves: rhbz#1029509


author: Doug Ledford <dledford@redhat.com> - 2.0.39-5
changelog:
  - Bump and rebuild after retagging the latest libibverbs and librdmacm
    into the build root
  - Related: bz1123996


author: Doug Ledford <dledford@redhat.com> - 2.1.5-1
changelog:
  - Update to latest upstream release
  - Include support for s390x
  - Include support for aarch64
  - Drop old fix for NULL not defined, upstream has it resolved
  - Resolves: bz1182180, bz1197216, bz1172462, bz1044727, bz1056487


author: Jeff Moyer <jmoyer@redhat.com> - 58.2-1
changelog:
  - rebase to v58.2
  - remove patches that were backported from later versions
  - we now support >4k faults, so remove rhel-only patches
  - add libpmem dependency, and gate it on x86_64
  - pull in static checker fix for uncheck sscanf result
  - fix up use of uninitialized variable
  - Related: bz#1457566 bz#1471807 bz#1456954


author: Jeff Moyer <jmoyer@redhat.com> - 60.3-2.1
changelog:
  - Remove the btt.rules udev rule file.  This was fixed in-kernel. (Jeff Moyer)
  - Related: bz#1585122


author: Jeff Moyer <jmoyer@redhat.com> - 62-1
changelog:
  - Rebase to v62 (Jeff Moyer)
    - a new monitor command / daemon
    - an ndctl udev rule for recording the unsafe shutdown count
    - smart error injection
    - create-namespace fix for fragmented namespaces
  - Resolves: bz#1610649 bz#1611833 bz#1456320


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.1-3
changelog:
  - python3-dbus subpkg (#892474)
  - (main) Provides: python-dbus
  - BR: python-docutils
  - .spec cosmetics
  - skip failed tests on rawhide (#913936)


author: Colin Walters <walters@redhat.com> - 1.1.1-9
changelog:
  - Move modules to libdir to avoid multilib conflicts
  - And comment out test suite, since we were not actually
    failing if it failed, but it trips up an rpmdiff check
    on the output of the suite.
  - Resolves: #1076411


author: Marek Kasik <mkasik@redhat.com> - 0.26.0-1
changelog:
  - Update to 0.26.0
  - Remove editor subpackage
  - Return libdbus-1 library (not header or pkgconfig files)
  - Resolves: #1386841


author: Marek Kasik <mkasik@redhat.com> - 0.28.0-3
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Resolves: #1570569


author: Jan Vcelak <jvcelak@fedoraproject.org> 1.0.60-1
changelog:
  - new upstream release:
    + Ubuntu utopic as a symlink to gutsy
    + Compression support in fallback method for deb archives extraction


author: Jan Vcelak <jvcelak@fedoraproject.org> 1.0.62-1
changelog:
  - new upstream release:
    + fix warnings caused by change in output of dpkg 1.17.2
    + fix reporting of package versions with epoch


author: Jan Vcelak <jvcelak@fedoraproject.org> 1.0.64-1
changelog:
  - new upstream release:
    + Ubuntu vivid as a symlink to gutsy
    + move set -e out of shebang line (Debian: #762713)


author: Jan Vcelak <jvcelak@fedoraproject.org> 1.0.66-1
changelog:
  - new upstream release:
    + add support for 'stretch'
    + specify gzip for deboostrap, xz for debootstrap-udeb
    + better portability on non-Debian platforms


author: Jan Vcelak <jvcelak@fedoraproject.org> 1.0.70-1
changelog:
  - new upstream release:
    + support for jessie-kfreebsd
    + deduplicate package list when counting downloaded packages
    + add support for '--force-check-gpg'
    + switch default FTP to official redirector
    + make it possible to override the MAKEDEV variable
    + use tr instead of xargs


author: Jan Vcelak <jvcelak@fedoraproject.org> 1.0.72-1
changelog:
  - new upstream release
    + add Ubuntu wily as a symlink to gutsy
    + fix resolve_deps and setup_available in --foreign case


author: Jan Vcelak <jvcelak@fedoraproject.org> 1.0.79-1
changelog:
  - new upstream release
    + generate deburis files
    + add Ubuntu xenial as a symlink to gutsy
    + stop cleaning KEEP_DEBOOTSTRAP_DIR twice
    + add Tanglu distribution support
    + use HTTPS for VCS URLs


author: Jan Vcelak <jvcelak@fedoraproject.org> 1.0.80-1
changelog:
  - new upstream release
    + support kfreebsd & hurd arches on Ubuntu targets
  - recommend installation of debian-keyring and ubu-keyring


author: Jan Vcelak <jvcelak@fedoraproject.org> - 1.0.81-1
changelog:
  - new upstream release (RHBZ #1332736)
    + add Ubuntu yakkety as a symlink to gutsy
  - add missing dependency on xz (RHBZ #1347734)


author: Jonathan Dieter <jdieter@lesbg.com> - 3.6-0.13.20130520git
changelog:
  - Clearer error message when applydeltaiso fails (#825428) (Thanks, John!)
  - Add details to applydeltaiso and makedeltaiso man pages (#569499)
  - Add fragiso man page to deltaiso package (#569776)
  - Fix section for applydeltaiso (#548970)
  - Add arch-specific requires (#677060)


author: Jonathan Dieter <jdieter@lesbg.com> - 3.6-1
changelog:
  - Update to 3.6 which, among other things, fixes a bug when applying a deltarpm
    to create a gzip-compressed rpm using full compression


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-114
changelog:
  - Add 0226-RH-allow-overrides-section.patch
    * This is a dummy section that exists to help the transition to RHEL8
  - Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
  - Add 0228-RHBZ-1464634-hauwei-config-update.patch
  - Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
    * Do poll first, so udev_monitor_receive_device doesn't return error when
      there is no uevent
  - Add 0230-UP-allow-invalid-creates.patch
    * Allow creation of devices with no valid paths.
  - Add 0231-RHBZ-1458852-delay-readying.patch
    * Add ghost_delay configuration option to delay device activation when only
      ghost paths exist.
  - Add 0232-RHBZ-1456955-property-blacklist.patch
    * Add the "property" blacklist type.
  - Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-115
changelog:
  - Add 0233-RHBZ-1451852-1482629-nimble-config.patch
  - Add 0234-RHBZ-1500109-doc-typo.patch
  - Remove old triggerun scriptlet (bz1470384)
  - Resolves: bz #1451852, #1470384, #1482629, #1500109


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-116
changelog:
  - Add 0235-RHBZ-1480638-NVMe-support.patch
    * adds support for multipathing NVMe devices
  - Resolves: bz #1480638


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-117
changelog:
  - Modify 0235-RHBZ-1480638-NVMe-support.patch
    * remove overly-restrictive uevent filtering
  - Resolves: bz #1480638


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-118
changelog:
  - Modify 0224-RHBZ-1452210-prkey.patch
    * Improve error checking for mpathpersist
  - Resolves: bz #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-120
changelog:
  - Add 0237-RHBZ-1526876-show-sysfs-state.patch
    * Correctly get sysfs state for multipath -l output
  - Add 0238-RHBZ-1508483-mpathconf-info.patch
  - Add 0239-RHBZ-1544958-client-timeout.patch
    * increase maximum multipathd client reply timeout to 60 seconds
  - Add 0240-UPBZ-1568902-id_size.patch
    * increase maximum size of product and revision strings to deal with nvme
  - Add 0241-RHBZ-1554516-show-path-failures.patch
    * add a path failures multipathd path format wildcard
  - Add 0242-RHBZ-1541116-all-tg-pt.patch
    * add all_tg_pt configuration option to make mpathpersist send only
      one registration per host
  - Add 0243-RHBZ-1498724-save-persist-options.patch
    * allow ":aptpl" to be added to the reservation_key to fix multipathd
      aptpl persistent reservation handling
  - Add 0244-RHBZ-1562247-remove-rbd.patch
    * remove multipath support for rbd
  - Resolves: bz #1498724, #1508483, #1526876, #1541116, #1544958, #1554516
  - Resolves: bz #1562247, #1568902


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-121
changelog:
  - Add 0245-RHBZ-1584228-fix-readsector0_size.patch
    * correctly figure IO size
  - Add 0246-RHBZ-1593459-add-transport-blacklist.patch
    * and new blacklist option, "protocol"
  - Add 0247-RHBZ-1585824-mpathconf-allow-doc.patch
  - Resolves: bz #1584228, #1585824, #1593459


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-123
changelog:
  - Add 0249-RHBZ-1610263-mpathpersist-max-fds.patch
    * make mpathpersist honor max_fds multipath.conf parameter
  - Resolves: bz #1610263


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-2
changelog:
  - Improve documentation and messages on output file preallocation
    when using thin_repair and thin_restore.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc3
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - New thin_show_duplicates command.
  - Add '--skip-mappings' and '--format custom' options to thin_dump.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc6
changelog:
  - Don't open devices as writeable if --clear-needs-check-flag is not set.
  - Fix cache metadata format version 2 superblock packing.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.2-1
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - Fix segfault when dump tools are given a tiny metadata file.
  - Fix -V exiting with 1.
  - Fix thin_check when running on XML dump instead of binary data.
  - Speed up free block searches.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.3-1
changelog:
  - Update to latest bugfix and documentation update release.
  - *_restore tools wipe superblock as a last resort.
  - Add thin_check --override-mapping-root.


author: Josh Stone <jistone@redhat.com> - 9.2.0-4
changelog:
  - rhbz1366656: fix ppc64 relocation rewriting
  - rhbz1366726: check mmap constrains for locality
  - rhbz1367225: fix x86 codegen for 64-bit offsets


author: Stan Cox <scox@redhat.com> - 9.3.2-3
changelog:
  - rhbz1503116 possible soname clashes between base rhel- and devtoolset- dyninst
  - rhbz1538757 segfault with a glibc built with binutils-2.27: handle R_*_IRELATIVE


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-22
changelog:
  - Check if the target-specific variable is the same as the global
    variable, and if it is, don't free it.  Savannah bug #31743.
    Resolves: #1323206


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-23
changelog:
  - In very obscure situations we may incorrectly write the free token
    back to the pipe.
    Resolves: #1322670


author: Patsy Franklin <pfrankli@redhat.com> - 4.1-3
changelog:
  - Increase time before timeout for test fopen-fail to prevent
    failing before issuing expected error.


author: Patsy Franklin <pfrankli@redhat.com> - 4.2.1-1
changelog:
  - Rebase to make-4.2.1
    Removed two patches that have been resolved upstream.
    Reworked seven patches.
    Resolves: #1455702 and #1455705
  - make no longer segfaults inside a chroot without /dev/pts
    Resolves: #1451452 and #1455695


author: Ihar Hrachyshka <ihrachys@redhat.com> - 1.0.1-0.RC1.1
changelog:
  - removed dibbler-common package, instead put _sharedstatedir in each package
    that needs it.
  - added check section (disabled for now due to upstream bug).
  - cleaned up scripts and examples for non-Linux platforms.
  - removed Group tags.
  - build -docs package as noarch.
  - preserve timestamps for files installed with `install` and `cp`.


author: Maxim Nestratov <mnestratov@virtuozzo.com> 1.28.0.20
changelog:
  * Fri Jun 30 2017 Pavel Glushchak <pglushchak@virtuozzo.com> 1.28.0.17
   - Fixed issues with growpart and vzkernel


author: Maxim Nestratov <mnestratov@virtuozzo.com> 1.28.0.21
changelog:
  - virtuozzo-minimal element: add os-* and other packages to be able to use it
  with Heat
   - vzip: use absolute path in PREFIX and SCRIPT_HOME variables (Mikhail
  Feoktistov <mfeoktistov@virtuozzo.com>)
   - vzip: use vzctl instead of prlctl (Mikhail Feoktistov
  <mfeoktistov@virtuozzo.com>)
   - vzip: add script to create ploop images for Virtuozzo Infrastructure Platform
  (Mikhail Feoktistov <mfeoktistov@virtuozzo.com>)


author: Maxim Nestratov <mnestratov@virtuozzo.com> 1.28.0.23
changelog:
  - vzip: Set internal repo until public release isn't out
   - virtuozzo: install openstack-heat-agents and enable os-collect-config


author: Denis Silakov <dsilakov@virtuozzo.com> 0.0.159
changelog:
  - Specify list of selected columns in all dumped db tables, VSTOR-19921 (Andrey
  Ponomarenko <aponomarenko@virtuozzo.com>)


author: Denis Silakov <dsilakov@virtuozzo.com> 0.0.162
changelog:
  - Fix time adjustor usage
   - Adjust file timestamp to localtime, VSTOR-19697
   - Add some debug output


author: Denis Silakov <dsilakov@virtuozzo.com> 0.0.163
changelog:
  - Drop debug output
   - Fix time adjustor usage
   - Adjust file timestamp to localtime, VSTOR-19697
   - Add some debug output


author: Denis Silakov <dsilakov@virtuozzo.com> 0.0.165
changelog:
  - Obfuscate cluster name, VSTOR-15685
   - Drop debug output
   - Fix time adjustor usage
   - Adjust file timestamp to localtime, VSTOR-19697
   - Add some debug output


author: Denis Silakov <dsilakov@virtuozzo.com> 0.0.166
changelog:
  - Fix cluster name obfuscation in partitions.py, VSTOR-20131
   - Obfuscate cluster name, VSTOR-15685
   - Drop debug output
   - Fix time adjustor usage
   - Adjust file timestamp to localtime, VSTOR-19697
   - Add some debug output


author: Denis Silakov <dsilakov@virtuozzo.com> 0.0.168
changelog:
  - Rework change_config routine - old implementation could lead to VSTOR-16360
   - Fix cluster name obfuscation in partitions.py, VSTOR-20131
   - Obfuscate cluster name, VSTOR-15685
   - Drop debug output
   - Fix time adjustor usage
   - Adjust file timestamp to localtime, VSTOR-19697
   - Add some debug output


author: Simone Caronni <negativo17@gmail.com> - 2.3-5.20170523git8c3065c
changelog:
  - Update to latest snapshot; lots of specific Red Hat/Fedora cleanups (obsolete
    Red Hat/Fedora code, Itanium support, /boot leftovers) and module autoload.


author: Simone Caronni <negativo17@gmail.com> - 2.5.0-1.20180124git215d01a
changelog:
  - Update to latest post 2.5.0 snapshot.
  - Trim changelog.
  - Remove support for CentOS/RHEL 6, as the last two versions were not compaible
    with it (bash too old, etc.).


author: Petr Oros <poros@redhat.com> - 1:2.12-6
changelog:
  - Add preliminary support for SMBIOS 64-bit entry point (Mark Salter)
  - Add support for DDR4 memmory


author: Petr Oros <poros@redhat.com> - 1:2.12-9
changelog:
  - dmioem: Decode Acer-specific DMI type 170
  - dmioem: Decode HP-specific DMI types 212 and 219
  - dmioem: Decode HP-specific DMI type 233, and refactored 209 and 221 to use a common function
  - Resolves: #1232501


author: Petr Menšík <pemensik@redhat.com> - 2.76-1
changelog:
  - Rebase to 2.76 (#1375527)
  - Include also dhcp_release6 (#1375569)
  - Fix compilation warnings
  - Correct manual about interface aliases, warn if used without --bind*


author: Petr Menšík <pemensik@redhat.com> - 2.76-2
changelog:
  - Fix a few coverity warnings
  - package is dual-licensed GPL v2 or v3
  - don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead


author: Petr Menšík <pemensik@redhat.com> - 2.76-5
changelog:
  - Fix CVE-2017-14491
  - Fix CVE-2017-14492
  - Fix CVE-2017-14493
  - Fix CVE-2017-14494
  - Fix CVE-2017-14496
  - Fix CVE-2017-14495
  - extra fixes


author: Ondrej Vasik <ovasik@redhat.com> - 1.0-53
changelog:
  - post and postun scriptlet requires sed (#593078)
  - use standard locations for catalog.xml(#591173)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-31
changelog:
  - fix escaping of double-quotes in docbook2man (#826139)
  - fix the wrong format of C-style functions in docbook2man (#662869)
  - fix stray .fi at the end of funcsynopsis section (#662869)


author: Lokesh Mandvekar <lsm5@redhat.com> - 2.4.1-1
changelog:
  - Resolves: #1338871 - rebase to v2.4.1
  - Resolves: #1338824 - s3 driver: Sorting completed parts by part number for
  a better accordance with S3 spec (upstream PR# 1670)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-7
changelog:
  - prevent warning messages from %post section if selinux-policy is
    not installed (yet) (#1057522)
  - compile with xz compression support enabled (#1176214)
  - fix crash in sieve script compilation (#1177852)
  - wait with start after network-online target (#1209006)
  - build with tcp wrappers enabled (#1229164)
  - fixed userdb extra fields handling in passdb failure (#1234868)
  - fix valgrind option detection for make check (#1249625)
  - first valid regular user id is 1000 (#1280433)
  - fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
  - fixed header parsing when there were multiple same header names (#1224496)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-1
changelog:
  - dovecot updated to 2.2.36, pigeonhole to 0.4.24
  - fixed dsync not replicating sieve scripts (#1419426)
  - fix plugins incorrectly reporting epipe errors(#1489943)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3
changelog:
  - fix global ACL directory configuration search path (#1630380)
  - update first/last_valid_gid range patch (#1630409)


author: Rex Dieter <rdieter@fedoraproject.org> - 1:1.8.3-2
changelog:
  - doxygen is missing dependencies for texlive update (#891452)
  - doxywizard: tighten dep on main pkg


author: Than Ngo <than@redhat.com> - 1:1.8.4-3
changelog:
  - backport upstream patches to fix issues:
     * Generated XML is malformed
     * Missing space before optional option in method argument list
     * Closing ) of function in function documentation is in wrong color
     * Segmentation fault parsing a fortran file


author: Lukas Nykryn <lnykryn@redhat.com> - 033-534
changelog:
  - base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
  - base/dracut-lib.sh: remove bashism
  - Align dev_unit_name() with systemd's function.
  - dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
  Resolves: #1306640
  - 90dmsquash-live-ntfs: fix depends()
  - 90dmsquash-live: we don't have find_binary inside initramdisk
  - dracut: Ajusting variables name for --include
  Resolves: #1489882


author: Lukas Nykryn <lnykryn@redhat.com> - 033-546
changelog:
  - fcoe: handle CNAs with DCB firmware support
  Resolves: #1442663
  - mdraid: wait for rd.md.uuid specified devices to be assembled
  Resolves: #1451660
  - dracut: Introduce --force-drivers parameter and force_drivers=+ config option
  Resolves: #1577626
  - Skip iscsi attachment if no info
  Resolves: #1513397
  - Fix loading of modules in modules-load.d
  Resolves: #1547730
  - 40network: introduce ip=either6 option
  Resolves: #1582398
  - dracut-functions.sh:check_vol_slaves() speedup LV -> VG name
  Resolves: #1531503
  - dracut-function.sh:check_block_and_slaves() check for block devices
  Resolves: #1549498
  - net-lib: bump carrier timeout to 15
  Resolves: #1401811
  - dracut.sh: workaround broken read from /proc/modules
  Resolves: #1578222


author: Lukas Nykryn <lnykryn@redhat.com> - 033-551
changelog:
  - Revert "add 90multipath-hostonly module"
  - Introduce tri-state hostonly mode
  Resolves: #1599592
  - Correct paths for firmware
  Resolves: #1608491
  - Record loaded kernel modules when hostonly mode is enabled
  Resolves: #1607744


author: Jiri Popelka <jpopelka@redhat.com> - 0.7.2-5
changelog:
  - enable to specify disks with path to device file or
    with symbolic link to the device file (#766443)
  - modernize spec


author: Raphael Groner <projects.rg@smart.ms> - 0.12.0-2
changelog:
  - Generate documentation for python3
  - Split binaries in subpackage to avoid duplication
  - Execute tests
  - Fix rhbz#1304050


author: Peter Jones <pjones@redhat.com> - 2.0-1
changelog:
  - This is the 2.0 release.  It is awesome and adds XML output in order to
    support automated validation of CD images.


author: Honza Horak <hhorak@redhat.com> - 7.1-9
changelog:
  - Allow buffer length of the block to be shorter than multiple of 16, 
    even in case of DAO writing (replaces the previous fix)
    Resolves: #810483


author: Honza Horak <hhorak@redhat.com> - 7.1-11
changelog:
  - Spec file cleanup
  - Print error in case we want to write already written DVD-RW in Sequential
    Recording mode (bug #810838)
  - Add man page for dvd+rw-format


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 7.1-13
changelog:
  - when formating blu-ray as srm+pow, handle it later correctly as srm+pow, not srm
  (credits Thomas Schmitt)


author: Jakub Jelinek <jakub@redhat.com> 0.9-1
changelog:
  - fix up handling of DIE equality if more than one DIE in the same
    CU compare equal (#889283)
  - check DW_FORM_ref_addr properly during fi_multifile phase


author: Jakub Jelinek <jakub@redhat.com> 0.10-1
changelog:
  - when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
    and DW_FORM_data4 for dwarf[23] rather than vice versa (#919755)


author: Eric Sandeen <sandeen@redhat.com> 1.42.9-8
changelog:
  - e4defrag: backwards-allocated files should be defragmented (#1176785)
  - tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
  - mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
  - libext2fs: prevent buffer overflows (#1293677)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-10
changelog:
  - libext2fs: don't ignore fsync errors (#1405049)
  - Fix nroff macro issue in chattr man page (#1429213)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-11
changelog:
  - libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
  - tune2fs: edit dire warning about check intervals (#1433233)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-13
changelog:
  - e2fsck: warn if checkinterval and broken_system_clock both set (#1365594)	
  - e2fsprogs: fail to open 1k block size ext4 with bigalloc,meta_bg,^resize_inode	
   (#1448019)


author: Jiri Vanek <jvanek@redhat.com> - 2.5.2-6
changelog:
  - Fixed for JDK7 - https://fedoraproject.org/wiki/Java7_Package_Rebuild_Status
  - Added and aplied patch0, easymock2-nameClash.patch.
    This patch is removing (in easymock3 deprecated) methods, and is keeping new 
    easymock3 api in EasyMock.java for capture set of methods.
    Old methods cant be kept as deprecated as JDK7 can not compile them.
    Test was derived from easymock3' one too.


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.5.2-8
changelog:
  - Install LICENSE with javadoc package
  - Don't own _mavendepmapfragdir
  - Install POM in _mavenpomdir instead of _datadir/maven2/poms
  - Update to current packaging guidelines


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-9
changelog:
  - fixed missing systemd unit file (RHBZ#818953)
    merged fedora patches from Tom Callaway
  - fixed NETWORK test in the init script (RHBZ#1026784)
  - fixed needed rpmdiff failures (RHBZ#883988)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-14
changelog:
  - Fixed persmissions of ebtables.service (RHBZ#1288586)
  - Added upstream patch to add noflush option to ebtables-restore (RHBZ#1334271)


author: Elliott Baron <ebaron@redhat.com> - 1:4.5.2-2
changelog:
  - Build for JDK 1.6 target.
  - Add ecj-convertto1.6.patch.
  - Add Requires: java >= 1:1.6.0.
  - Resolves: rhbz#1379855


author: Peter Jones <pjones@redhat.com> - 0.8.0-6
changelog:
  - Handle -b and -o parsing in a way that matches the documentation.
    Resolves: rhbz#1174964
  - Use the right GUID when setting boot entries active/inactive
    Resolves: rhbz#1221771


author: Peter Jones <pjones@redhat.com> - 17-2
changelog:
  - Try to make covscan actually complete the scan...
    Related: rhbz#1570032
    Related: rhbz#1558937
    Related: rhbz#1520533


author: Peter Jones <pjones@redhat.com> - 36-6
changelog:
  - Fix device path generation for block devices on nonstandard device path
    roots.
    Related: rhbz#1558937
    Resolves: rhbz#1591853


author: Peter Jones <pjones@redhat.com> - 36-10
changelog:
  - Work around platform ACPI PCI(e) root drivers that don't fill in the
    "driver" symlink in sysfs.
    Resolves: rhbz#1614944


author: Peter Jones <pjones@redhat.com> - 36-11
changelog:
  - Fix device probing with no matching probes where HD() will work
    Resolves: rhbz#1613698
  - Detect partitiond md devices correctly
    Resolves: rhbz#1602414
    Resolves: rhbz#1613370


author: Mark Wielaard <mjw@redhat.com> - 0.170-1
changelog:
  - New upstream release. Remove upstreamed patches.
  - Sync provide_yama_scope with fedora.
  - Add elfutils-0.170-x86_64-backtrace-test-override.patch.


author: Timothée Floure <fnux@fedoraproject.org> - 1.5.0-4
changelog:
  - Package the man pages of elixir, elixirc, iex and mix.
  - Package (elixir-doc subpackage) the HTML documentation of eex, elixir, iex, logger and mix.
  - Change the license from ASL 2.0 and ERPL to ASL 2.0 only.


author: Timothée Floure <fnux@fedoraproject.org> - 1.6.5-2
changelog:
  - Switch from the rebar_* macros to upstream's makefile (without forgetting to
    properly set the environment) and fix the build section.
  - Backport patch0 from upstream to fix some failing tests.


author: Jan Synáček <jsynacek@redhat.com> - 1:24.3-21
changelog:
  - fix libjpeg detection fails with gcc7 (#1487557)
  - fix Emacs GUI Toolbar icons missing (#1477745)
  - fix hardening: TLS certificate warnings should be hard errors (#1403643)


author: Orion Poplawski <orion@cora.nwra.com> - 3.2.10-2
changelog:
  - Add patch to comment out stray module use in modules file when not using
    versioning (bug #895555)
  - Add patch to fix module clear command (bug #895551)
  - Add patch from modules list to add completion to avail command


author: Jan Synáček <jsynacek@redhat.com> - 3.2.10-9
changelog:
  - fix: SourceVers wrongly sets version in nested directory (#1180652)
  - fix: unload from loaded modulefile broken (#1117327)


author: jchaloup <jchaloup@redhat.com> - 2.0.1-0.2
changelog:
  - Update configuration and service file
    Fix depricated ErrWrongType after update of gogo/protobuf
    related: #1191441


author: Ivan Vecera <ivecera@redhat.com> - 2:4.8-2
changelog:
  - Added support for configurable RSS hash function
  - Fixed SFF 8079 cable technology bit parsing
  - Added support for HWTSTAMP_FILTER_NTP_ALL


author: Konstantin Volkov <wolf@virtuozzo.com> 0.3
changelog:
  - Read EULA file from virtuozzo-release package. Fixed copyrights. Removed
  obsolete ChangeLog and LICENSE files. (Andrey Ponomarenko
  <aponomarenko@virtuozzo.com>)
   - Added l18n files (Denis Silakov <dsilakov@virtuozzo.com>)
   - Fixed spec-file. Added intltool build requirement. (Andrey Ponomarenko
  <aponomarenko@virtuozzo.com>)
   - Removed obsolete LICENSE and ChangeLog files. (Andrey Ponomarenko
  <aponomarenko@virtuozzo.com>)
   - Added l10n facility (Denis Silakov <dsilakov@virtuozzo.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 0.5
changelog:
  - Fix l10n typo (Denis Silakov <dsilakov@virtuozzo.com>)
   - Added Russian l10n (Denis Silakov <dsilakov@virtuozzo.com>)
   - Rebrand spec, see #PSBM-63145


author: Konstantin Volkov <wolf@virtuozzo.com> 0.12
changelog:
  - Redesign EULA addon, VSTOR-22481 (Andrey Ponomarenko
  <aponomarenko@virtuozzo.com>)
   - Require open-sans-fonts, VSTOR-22481 (Andrey Ponomarenko
  <aponomarenko@virtuozzo.com>)


author: Milan Crha <mcrha@redhat.com> - 3.22.7-4
changelog:
  - Add patch for RH bug #1441608 (Use-after-free when setting summary for component with alarms)
  - Add patch for RH bug #1439590 ([IMAPx] Unsubscribed folders shown after refresh)


author: Milan Crha <mcrha@redhat.com> - 3.22.7-7
changelog:
  - Add patch for RH bug #1504071 (Prefer SSL over STARTTLS for mail when both are set in GOA)
  - Add patch for RH bug #1476329 (Deadlock on exit under e-categories.c:finalize_categories())


author: Milan Crha <mcrha@redhat.com> - 3.28.2-1
changelog:
  - Update to 3.28.2
  - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
  - Resolves: #1575495


author: Jan Grulich <jgrulich@redhat.com> - 0.26-2
changelog:
  - Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp
    Resolves: bz#1547207

    Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp
    Resolves: bz#1545232


author: Jan Grulich <jgrulich@redhat.com> - 0.26-3
changelog:
  - Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a
    remote attacker to cause a denial of service via a crafted tif file
    Resolves: bz#1548410


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.49-10
changelog:
  - Use vsnprintf instead of vsprintf to avoid buffer overflow
    (it happens e.g. when running systemtap testsuite)
    Resolves: #1038931


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-13
changelog:
  - Fix segfaults if Tcl is built with stubs and Expect is used directly from C program
    (patch taken from Debian project, written by Sergei Golovan)
    Resolves: #1091060


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-14
changelog:
  - Use different and probably better approach of fixing segfaults if Tcl is
    built with stubs and Expect is used directly from C program
    Resolves: #1091060


author: Till Maas <opensource@till.name> - 1.18.4-5
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Dominik Mierzejewski <rpm@greysector.net> - 1.20.2-1
changelog:
  - update to 1.20.2
  - alternativize libfakeroot and faked as well (bug 817088)
  - include Portugese manpages
  - add missing BR: libcap-devel
  - autogenerate most of the file list


author: Dominik Mierzejewski <rpm@greysector.net> - 1.20.2-2
changelog:
  - fix LD_LIBRARY_PATH for multilib environment (bug 1241527)
  - update License: tag
  - don't strip the libraries in install, just keep the executable bit
  - when converting from latin1 to utf8, don't use the converted file
    if the conversion failed: the pt manpage is already utf8


author: Chris Leech <cleech@redhat.com> - 1.0.30-4.git91c0c8c
changelog:
  - 1039779 replace README that contained mostly build instructions with
    README.redhat containing better distro-specific information


author: Chris Leech <cleech@redhat.com> - 1.0.31-1.git5dfd3e4
changelog:
  - 1274530 rebase to upstream 1.0.31+
  - no longer requires libhbaapi/libhbalinux
  - no longer attempts to connect to lldpad if DC_REQUIRED is configured off
    for all interfaces


author: Chris Leech <cleech@redhat.com> - 1.0.32-1
changelog:
  - 1384707 fcoeadm --target segfaults if non-FCoE FC targets are present
  - 1321611 fcoemon should only try to connect to lldpad when required


author: Björn Esser <bjoern.esser@gmail.com> - 1.51-4
changelog:
  - Place rpm-macros into proper location using %global macrosdir
  - Apply proper LDFLAGS
  - Fix offset in Patch1 and renamed it to match current version


author: Björn Esser <bjoern.esser@gmail.com> - 1.51-5
changelog:
  - Add needed bits for el5
  - Fix `mixed use of spaces-and tabs`
  - Minor cleanup and improved readability


author: Jon Schlueter <jschluet@redhat> - 1.51-10
changelog:
  - Rebaseline using github which is new home of fdupes
  - source tarball has unusual folder naming of fdupes-fdupes-1.51 instead of normal fdupes-1.51


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 4.0.2-4
changelog:
  - Remove maven-compiler-plugin invocation, resolves: #842591
  - Remove unneeded BR: maven-invoker-plugin


author: Mat Booth <fedora@matbooth.co.uk> - 4.2.0-1
changelog:
  - Update to latest upstream version rhbz #895404.
  - No longer need to remove maven-compiler-plugin invocation.


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-27
changelog:
  - fix CVE-2014-0207 - cdf_read_short_sector insufficient boundary check
  - fix CVE-2014-0237 - cdf_unpack_summary_info() excessive looping DoS
  - fix CVE-2014-0238 - CDF property info parsing nelements infinite loop
  - fix CVE-2014-3478 - mconvert incorrect handling of truncated pascal string
  - fix CVE-2014-3479 - fix extensive backtracking in regular expression
  - fix CVE-2014-3480 - cdf_count_chain insufficient boundary check
  - fix CVE-2014-3487 - cdf_read_property_info insufficient boundary check
  - fix CVE-2014-3538 - unrestricted regular expression matching
  - fix CVE-2014-3587 - fix cdf_read_property_info
  - fix CVE-2014-3710 - out-of-bounds read in elf note headers
  - fix CVE-2014-8116 - multiple denial of service issues (resource consumption)
  - fix CVE-2014-8117 - denial of service issue (resource consumption)
  - fix CVE-2014-9652 - out of bounds read in mconvert()
  - fix CVE-2014-9653 - malformed elf file causes access to uninitialized memory


author: Jan Kaluza <jkaluza@redhat.com> 5.11-32
changelog:
  - fix #1278737 - add support for Java 1.7 and 1.8
  - fix #1281723 - show full executable name for core
  - fix #1271636 - add support for detection of Python 2.7 byte-compiled files
  - fix #1278768 - comment out too-sensitive Pascal magic


author: Ondrej Vasik <ovasik@redhat.com> - 3.2-25
changelog:
  - own /usr/share/locale and /usr/lib/modules
  - improve filesystem content file to include symlinks and rootdir


author: Kamil Dudka <kdudka@redhat.com> - 1:4.5.10-7
changelog:
  - fix specfile issues reported by the fedora-review script
  - do not use the AM_C_PROTOTYPES macro (removed in Automake 1.12)
  - do not require gets() to be declared


author: Tomas Hozza <thozza@redhat.com> - 0.17-49
changelog:
  - Compile finger with Full RELRO
  - Explicitly use gcc
  - Use only RPM_OPT_FLAGS and RPM_LD_FLAGS
  - Add systemd as BuildRequires because of unitdir macro


author: Adam Williamson <awilliam@redhat.com> - 3.0-3
changelog:
  - Re-enable ceph deps on ppc64 (it's building again)
  - Disable RDMA support on 32-bit ARM (#1484155)


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Phil Sutter - 0.4.4.4-11
changelog:
  - core: Log unsupported ICMP types as informational only (RHBZ#1479951)
  - doc: firewall-cmd: Document --query-* options return codes (RHBZ#1372716)
  - doc: firewall-cmd: Document quirk in --reload option (RHBZ#1452137)
  - firewall-cmd: Use colors only if output is a TTY (RHBZ#1368544)
  - firewall-offline-cmd: Don't require root for help output (RHBZ#1445214)


author: Martin Kolman <mkolman@redhat.com> 19.9-4
changelog:
  - Handle next button naming also if there is only one module (#1107887) (mkolman@redhat.com)
    Related: rhbz#1107887


author: Martin Kolman <mkolman@redhat.com> 19.9-6
changelog:
  - Make Firstboot architecture specific due to s390-only files (#1162567) (mkolman@redhat.com)
    Resolves: rhbz#1162567


author: Martin Kolman <mkolman@redhat.com> 19.10-1
changelog:
  - Switch from Transifex to Zanata (#1273359) (mkolman@redhat.com)
    Related: rhbz#1273359
  - Update translations (#1273359) (mkolman@redhat.com)
    Resolves: rhbz#1273359


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2.1-11.20121204gita43f56
changelog:
  - update to 20121204gita43f56
  - create libs subpackage
  - split documentation to base and devel subpackages
  - drop defattr macros
  - add GFDL to License tag


author: Miroslav Lichvar <mlichvar@redhat.com> 1.3.0-5
changelog:
  - fix buffer overflow when processing ID3v2 metadata (CVE-2014-8962)
  - fix buffer overflow with invalid blocksize (CVE-2014-9028)


author: Ray Strode <rstrode@redhat.com> - 0.8.8-2
changelog:
  - Fix crasher in xdg-desktop-portal
    Resolves: #1503579
  - Tweak spec file so it still builds even though we need to
    autoreconf.


author: Francois Aucamp <faucamp@fedoraproject.org> - 1.3-16
changelog:
  - Added patch declaring explicit libm linking dependency (RHBZ #564899)
  - Updated source and URL tags


author: Petr Vobornik <pvoborni@redhat.com> - 4.0.3-1
changelog:
  - embeddable flag set to installable by ttembed
  - web package license updated to MIT
  - README-Trademarks.txt added


author: Akira TAGOH <tagoh@redhat.com> - 2.10.95-5
changelog:
  - Fix the race condition issue on updating cache (#1011510)
  - Fix crash issue in FcFontSort()
  - Fix an issue not copying all values from the font.


author: Akira TAGOH <tagoh@redhat.com> - 2.13.0-4.1
changelog:
  - Rebase to 2.13.0 (#1576501)
  - Rename fc-cache binary to fc-cache-{32,64} for multilib. (#1568968)
  - backport some fixes related to Flatpak.
  - Drop new syntax in config for compatibility.
  - Requires dejavu-sans-fonts instead of font(:lang=en) (#1484094)


author: Michal Srb <msrb@redhat.com> - 1.1-1
changelog:
  - Update to upstream version 1.1
  - Replace proprietary color profile with free CP from icc-profiles-openicc package
  - Resolves: rhbz#848659


author: Weinan Li <weli@redhat.com> - 5-2
changelog:
  - Add the license source note
  - Cleanup the svn metadata in source
  - Add the full instructions for creating the tar in the comment


author: Weinan Li <weli@redhat.com> - 5-3
changelog:
  - Each package must consistently use macros, use rm instead of all %{_rm}
  - Add Requires: jpackage-utils


author: Charles R. Anderson <cra@wpi.edu> - 3.0-1
changelog:
  - fping-3.0 based on new upstream at http://www.fping.org/
    - Debian patches until version 2.4b2-to-ipv6-16.
    - Modifications by Tobias Oetiker for SmokePing (2.4b2-to4)
    - Reimplemented main loop for improved performance


author: Charles R. Anderson <cra@wpi.edu> - 3.3-2
changelog:
  - use configure options to build ipv4 and ipv6 versions simultaneously
    so we can use the standard make install to get the fping6 man page,
    etc.
  - build for el6 w/cap_net_raw (el5 still needs traditional setuid)
  - use preferred Buildroot tag for el5
  - make conditional build with/without ENABLE_F_OPTION actually work


author: Charles R. Anderson <cra@wpi.edu> - 3.4-1
changelog:
  - update to 3.4 which fixes rhbz#854572 by restoring previous behavior:
    * Revert "Output statistics to stdout instead of stderr", because it breaks
      tools assuming the output goes to stderr


author: Ondrej Holy <oholy@redhat.com> - 1.0.2-11
changelog:
  - Use boolean types defined stdbool.h (#1404575)
  - Prevent stucked keys on focus out and unmap events (#1415069)
  - Fix crashes when copying images (#1417536)
  - Enable TLS 1.1 connections and later (#1312967)


author: Marek Kasik <mkasik@redhat.com> - 2.4.11-11
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197740


author: Jan Synáček <jsynacek@redhat.com> - 0.17-58
changelog:
  - Extend the input line buffer and the argument storage buffer
  - Prettify spec some more and remove trailing space


author: Martin Bříza <mbriza@redhat.com> - 4.0.1-1
changelog:
  - Update to upstream 4.0.1 (#808005)
  - Corrected Source0 link to .tar.gz extension as not all releases are available as .tar.bz2
  - Resolves #724817 - gawk-4.0.0 regression in '\' escape handling in gsub()
  - Resolves #820550 - gawk: getline in BEGIN skips 2 lines


author: Honza Horak <hhorak@redhat.com> - 2.0.35-19
changelog:
  - Spec file cleanup
  - Compile and run test suite during build
  - Using chrpath to get rid of --rpath in gd-progs


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.6.1-107.el7
changelog:
  - Fix backport of default signal handlers for spawned processes
    (RH BZ 1473411, found by Michal Kolar).


author: Honza Horak <hhorak@redhat.com> - 1.9.1-1
changelog:
  - Updated to new upstream release 1.9.1
  - Dropped -filestruct, -ndbmlock and -fhs patches, they are not 
    needed anymore and GDBM_NOLOCK is used always
  - Run testsuite


author: Honza Horak <hhorak@redhat.com> - 1.10-1
changelog:
  - Updated to new upstream release 1.10
  - Dropped -shortread patch, which has been already applied by upstream
  - Disable large file support, that is enabled by default since 1.9, 
    but not compatible with db files created using gdbm-1.8.3 and lower
  - License change to GPLv3+
  - Add doc files THANKS AUTHORS NOTE-WARNING
  - Changed text in NOTE-WARNING to correspond with build settings


author: Ray Strode <rstrode@redhat.com> 3.28.2-12
changelog:
  - Allow multiple simultaneous XDMCP logins for a user if
    xdmcp/AllowMultipleSessionsPerUser=true
    Resolves: #1679914


author: Nils Philippsen <nils@redhat.com> - 0.2.0-11
changelog:
  - replace lua-5.2 patch by upstream commit
  - fix buffer overflow in and add plausibility checks to ppm-load op
    (CVE-2012-4433)
  - fix multi-lib issue in generated documentation


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-18
changelog:
  - ported from cdda-paranoia to libcdio-paranoia, modified paranoia-cdda.patch
  - fixed bogus date in changelog


author: Jakub Martisko <jamartis@redhat.com> - 1.1.11-25
changelog:
  - add support for device names of the form /dev/srN
  - fix provided by Frantisek Kluknavsky
  - resolves:rhbz#1058446


author: Andrew Price <anprice@redhat.com> - 3.1.10-1
changelog:
  - Rebase to new upstream version 3.1.10
    Resolves: rhbz#1348601
    Resolves: rhbz#1356685
    Resolves: rhbz#1382087
    Resolves: rhbz#1405163
    Resolves: rhbz#1430399
  - Make dependency on libuuid explicit


author: Andrew Price <anprice@redhat.com> - 3.1.10-3
changelog:
  - libgfs2: Issue one write per rgrp when creating them
  - mkfs.gfs2: Fix resource group alignment issue
  - mkfs.gfs2: Free unnecessary cached pages, disable readahead
    Resolves: rhbz#1440269


author: Andrew Price <anprice@redhat.com> - 3.1.10-5
changelog:
  - Update URL in spec file
    Resolves: rhbz#1501738
  - fsck.gfs2: Make -p, -n and -y conflicting options
    Resolves: rhbz#1507091


author: Andrew Price <anprice@redhat.com> - 3.1.10-9
changelog:
  - fsck.gfs2: Don't check fs formats we don't recognise
  - libgfs2: Fix pointer cast byte order issue
    Resolves: rhbz#1616389


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.4
changelog:
  - Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
    access in the aesdecode operator (699665)
  - Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
    privilege" checking when running out of stack during exception handling
  - Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
    security check in zsetdevice function in psi/zdevice.c


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.5
changelog:
  - Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
    pagedevice replacement (699664)
  - Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
    exception table
  - Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
    can leak operator arrays
  - Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
    can leak operator arrays (incomplete fix for CVE-2018-17183)
  - Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
    allows a sandbox protection bypass
  - Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
    setpattern (700141)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.6
changelog:
  - Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
    smooth shading object (Error: /rangecheck in --run--)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.7
changelog:
  - Resolves: #1665919 pdf2ps reports an error when reading from stdin
  - Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
    copydevice handling (699661)
  - Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
    psi/zdevice2.c (700153)
  - Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
    psi/zicc.c
  - Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
    psi/zfjbig2.c (700168)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.8
changelog:
  - Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
    pseudo-operators must themselves be pseudo-operators


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.10
changelog:
  - Resolves: #1673915 - ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata
  - Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
    is available (700585)
  - Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
    is still accessible (700576)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.11
changelog:
  - Resolves: #1673398 - CVE-2019-3839 ghostscript: missing attack vector
    protections for CVE-2019-6116
  - fix for pdf2dsc regression added


author: Robert Scheck <robert@fedoraproject.org> 4.1.6-2
changelog:
  - Solved multilib problems with documentation (#465208, #474538)
  - Removed static library from giflib-devel package (#225796 #c1)


author: Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-13
changelog:
  - fall back to Basic auth if Negotiate fails
    Resolves: #1490998
  - handle request-pull when multiple tags point to the same commit
    Resolves: #1192146


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14
changelog:
  - Backport fix for CVE-2018-11235
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15
changelog:
  - move instaweb to separate git-instaweb subpackage.
  	Resolves: #1213059
  - move gnome-keyring to a separate git-gnome-keyring subpackage.
  	Resolves: #1284081


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16
changelog:
  - Remove EL-5 settings and old Fedora conditionals.
    Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
    2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
  - Fix builds using '--without docs'
  - Change git-instaweb default from lighttpd(not available in rhel7) to
    apache2.
  - Add requires for git-{instaweb,gnome-keyring} to pull them, when
    installing git-all.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17
changelog:
  - Correctly return an error from fsck on encountering a .gitmodules symlink.
    This was broken in the debian 2.1.x backport and found by covscan.
    Fix the test to catch this.
  - Correct a typo in changelog.


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19
changelog:
  - Fix httpd modules path to be independent from system architecture.
  Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
  Resolves: #1213059


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20
changelog:
  - Fix CVE-2018-17456: arbitrary code execution via .gitmodules
    Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Yanko Kaneti <yaneti@declera.com> - 1.1-5.20130122
changelog:
  - Newer upstream snapshot. Minor upstream rearrangement.
  - Remove checkout script from sources and add to git.
  - Try to actually use the bundled mathml2. Fix warnings.


author: Kalev Lember <kalevlember@gmail.com> - 3.14.2-2
changelog:
  - Revise the summary for consistency with the parallel installable
    glade2/glade3 packages (#882557)


author: Kalev Lember <kalevlember@gmail.com> - 2:3.8.2-1
changelog:
  - Revert back to gtk2-based 3.8.2 -- following upstream, the gtk3
    version is now in 'glade' package (#731227)


author: Carlos O'Donell <carlos@redhat.com> 2.17-256
changelog:
  - CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
  - Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-258
changelog:
  - Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
  - Additional robust mutex fixes (#1401665)


author: Patsy Franklin <pfrankli@redhat.com> - 2.17-260
changelog:
  - Update glibc-rh1560641.patch to initialize pad outside
    the conditional eliminating an uninitialized byte warning from
    valgrind. (#1560641)


author: Milind Changire <mchangir@redhat.com> - 3.12.2-10
changelog:
  - fixes bugs bz#1488120 bz#1565577 bz#1568297 bz#1570586 bz#1572043 
    bz#1572075 bz#1575840 bz#1575877


author: Milind Changire <mchangir@redhat.com> - 3.12.2-13
changelog:
  - fixes bugs bz#1493085 bz#1518710 bz#1554255 bz#1558948 bz#1558989 
    bz#1559452 bz#1567001 bz#1569312 bz#1569951 bz#1575539 bz#1575557 bz#1577051 
    bz#1580120 bz#1581184 bz#1581553 bz#1581647 bz#1582119 bz#1582129 bz#1582417 
    bz#1583047 bz#1588408 bz#1592666 bz#1594658


author: Milind Changire <mchangir@redhat.com> - 3.12.2-14
changelog:
  - fixes bugs bz#1547903 bz#1566336 bz#1568896 bz#1578716 bz#1581047 
    bz#1581231 bz#1582066 bz#1593865 bz#1597506 bz#1597511 bz#1597654 bz#1597768 
    bz#1598105 bz#1598356 bz#1599037 bz#1599823 bz#1600057 bz#1601314


author: Milind Changire <mchangir@redhat.com> - 3.12.2-16
changelog:
  - fixes bugs bz#1569657 bz#1608352 bz#1609163 bz#1609724 bz#1610825 
    bz#1611151 bz#1612098 bz#1615338 bz#1615440


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-13
changelog:
  - Explicitly added '-g' option into CFLAGS & CXXFLAGS to correctly build .debug_info for i386 (bug #1413034)
  - Added a workaround to correctly add hardening flags during build process (bug #1406689)


author: Bastien Nocera <bnocera@redhat.com> - 1:3.28.1-1
changelog:
  + gnome-bluetooth-3.28.1-1
  - Work-around bluez bug that would leave adapters on Discoverable
    when exiting
  - Resolves: #1567381


author: Zeeshan Ali <zeenix@redhat.com> - 3.8.2-8
changelog:
  - Remove patch 'daemon: Exit gnome-keyring-daemon when the DBus connection
    closes' (related: rhbz#1030671).


author: Debarshi Ray <rishi@fedoraproject.org> - 3.14.5-3
changelog:
  - Don't remove Telepathy accounts or expire Kerberos credentials when stopping
    goa-daemon
  Resolves: #1267534


author: Debarshi Ray <rishi@fedoraproject.org> - 3.14.5-5
changelog:
  - Ensure that temporary accounts are really removed from the keyring and
    avoid a WARNING
  Resolves: #1261940


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.28.1-6
changelog:
  - Fix missing deps in -gnome and -bonobo subpkg (#689836).
    gnome-python2-gnome should "Requires: gnome-python2-bonobo"
    gnome-python2-bonobo should "Requires: gnome-python2-canvas"


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.28.1-7
changelog:
  - Drop unused/ancient -capplet subpackage definition remains.
  - Add %?_isa to all explicit dependencies on package names.
  - Make pygtk2 dependency arch-specific (#749835).


author: Colin Walters <walters@verbum.org> - 2.28.1-12
changelog:
  - Drop requires on bonobo-activation, since it is the same as libbonobo,
    but that package dropped the provides.


author: Ray Strode <rstrode@redhat.com> - 3.28.1-5
changelog:
  - Fix gnome-disk-utility timeout at startup
    Resolves: #1593215
  - add back session properties icons
    Related: #1568620


author: Ray Strode <rstrode@redhat.com> - 3.26.2-7
changelog:
  - Fix logic error in password expiration notification bubble
    Resolves: #1530659
    Related: 1314443


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-9
changelog:
  + gnome-settings-daemon-3.26.2-9
  - Revert automatic suspend after inactivity, it was rejected
  - Related: #1449171


author: Florian Müllner <fmuellner@redhat.com> - 3.28.2-2
changelog:
  - Update rebased downstream patches
    Related: #1568624
  - Revert port to python3 of some utility tools
    Resolves: #1493526
  - Add tooltips to app names in overview
    Resolves: #1541180


author: Hans de Goede <hdegoede@redhat.com> - 0.4.0-4
changelog:
  - Drop Requires for gstreamer-plugins, as we may be used with both
    gstreamer-0.10 and 1.0. Instead apps using gnome-video-effects should add
    the necessary Requires themselves


author: Peter Jones <pjones@redhat.com> - 3.0.5-3
changelog:
  - Include ia32 bits in the x86_64 packages instead of making a separate
    32-bit package
    Resolves: rhbz#1310782


author: Peter Jones <pjones@redhat.com> - 3.0.5-6
changelog:
  - Also build the ia32 bits in a separate 32-bit package for other consumers.
    Related: rhbz#1310782


author: Peter Jones <pjones@redhat.com> - 3.0.5-8
changelog:
  - Nerf the timestamps on our .o files while building, because RHEL's ar(1) is
    horrible and silently ignores the 'D' option.  It's fine, I probably didn't
    put it there for any reason.
    Related: rhbz#1310782


author: Peter Jones <pjones@redhat.com> - 3.0.5-9
changelog:
  - One more attempt at nerfing timestamps.  It's surprising how broken this
    can be.

    "ar rDv" works just fine, but
    /usr/lib/rpm/redhat/brp-strip-static-archive is calling "%{__strip} -g
    $for_each.a", and it's rewriting our binary from ts/uid/gid of 0/0/0 to
    $epoch/$UID/$GID.  Awesomely /usr/bin/strip it seems to have 3 modes of
    operation:
    -U: the default, which adds $epoch/$UID/$GID to your binary archive
        instead of just removing stuff.  Clearly the Principle of Least
        Surprise is strong here.
    -p: preserve the timestamp from the original .a, but add UID and GID,
        because this is 1980 and people use ar(1) for archiving stuff they
        might want that out of.
    -D: Condescend at you in a command line error and explain that -D both
        is and is not a valid option:
          /usr/bin/strip: invalid option -- 'D'
          Usage: /usr/bin/strip <option(s)> in-file(s)
          Removes symbols and sections from files
          The options are:
          ...
          -D --enable-deterministic-archives
                      Produce deterministic output when stripping archives
        So I agree that it's invalid, but I think we may be pronouncing that
        second vowel differently.  They say in-VAL-id, I say IN-vuh-lid.

    Nobody should ever have to run "strace -ttt -v -f -o make.strace make
    all", just to discover the problem isn't even in there.
    Related: rhbz#1310782


author: Peter Jones <pjones@redhat.com> - 3.0.5-9
changelog:
  - Just don't build the .i686 package at all.  After a scratch build, it's
    clear that "strip -p" is not good enough, because our different builders
    have non-matching UIDs for the build process, and -p adds uid/gid to the
    archive.  So there's no way to fix the multiarch conflict here without
    either fixing that or fixing strip(1) with:
    https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=patch;h=7a093a78
    We don't strictly need the .i686 package anyway, since we've moved to
    making the dependent binaries all build the ia32 bits on x86_64 for
    other reasons.  Related: rhbz#1310782


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.0.13-7
changelog:
  - Install license file with javadoc package
  - Add missing R: java, jpackage-utils
  - Convert versioned names to versionless
  - Add rpm bug workaround
  - Update to current packaging guidelines


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.22-4
changelog:
  - allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
  - do not abort when missing hash algorithm in FIPS mode (#1078962)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9
changelog:
  - Amended fix for FIPS enforcement issue (#1163848)
  - Fixed issue with applications that close all file descriptors (#1165047)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11
changelog:
  - Applied fix for urandom FD in FIPS140 mode (#1165047)
  - Applied fix for FIPS140-2 related regression (#1110696)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13
changelog:
  - Corrected reseed and respect of max_number_of_bits_per_request in 
    FIPS140-2 mode. Also enhanced the initial tests. (#1228199)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1
changelog:
  - Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
  - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
  - When writing certificates to smart cards write the CKA_ISSUER and
    CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
  - Use the shared system certificate store (#1110750)
  - Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
    CVE-2015-7575)
  - Allow hashing data over 2^32 bytes (#1306953)
  - Ensure written PKCS#11 public keys are not marked as private (#1339453)
  - Ensure secure_getenv() is called on all uses of environment variables
    (#1344591).
  - Fix issues related to PKCS #11 private key listing on certain HSMs
    (#1351389)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7
changelog:
  - Address interoperability issue with 3.5.x (#1388932)
  - Reject CAs which are both trusted and blacklisted in trust module (#1375303)
  - Added new functions to set issuer and subject ID in certificates (#1378373)
  - Reject connections with less than 1024-bit DH parameters (#1335931)
  - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
  - Mention limitations of certtool in manpage (#1375463)
  - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
  - Do not link directly to trousers but instead use dlopen (#1379739)
  - Fix incorrect OCSP validation (#1377569)
  - Added support for pin-value in PKCS#11 URIs (#1379283)
  - Added the --id option to p11tool (#1399232)
  - Improved sanity checks in RSA key generation (#1444780)
  - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
    CVE-2017-7869


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9
changelog:
  - Address crash in OCSP status request extension, by eliminating the
    unneeded parsing (CVE-2017-7507, #1455828)


author: Anderson Sasaki <ansasaki@redhat.com> 3.3.29-8
changelog:
  - Backported --sni-hostname option which allows overriding the hostname
    advertised to the peer (#1444792)
  - Improved counter-measures in TLS CBC record padding for lucky13 attack
    (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707)
  - Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack
    (CVE-2018-10846, #1589708)
  - Address p11tool issue in object deletion in batch mode (#1375307)
  - Backport PKCS#11 tests from master branch. Some tests were disabled due to
    unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key
    generation without login, and certificates do not inherit ID from the private
    key)
  - p11tool explicitly marks certificates and public keys as NOT private objects
    and private keys as private objects
  - Enlarge buffer size to support resumption with large keys (#1542461)
  - Legacy HMAC-SHA384 cipher suites were disabled by default
  - Added DSA key generation to p11tool (#1464896)
  - Address session renegotiation issue using client certificate (#1434091)
  - Address issue when importing private keys into Atos HSM (#1460125)


author: Mike FABIAN <mfabian@redhat.com> - 20170827-1
changelog:
  - Update to upstream snapshot tarball
  - Update color emoji font to version 2.001, new design.
  - Contains the new emoji added in Unicode 10.0.0.


author: Mike FABIAN <mfabian@redhat.com> - 20170828-1
changelog:
  - Update to upstream snapshot tarball
  - split black-and-white and color fonts into different sub-packages.


author: Peter Oliver <rpm@mavit.org.uk> - 20170928-2
changelog:
  - Prefer zopflipng to optipng, since it should yield smaller files.
  - Use the font we built, rather than the one included with the source.


author: Mike FABIAN <mfabian@redhat.com> - 20180508-1
changelog:
  - Update to upstream snapshot tarball (color emoji font version 2.011)
  - Add patch to build all country flags (Resolves: rhbz#1574195)


author: Tom Callaway <spot@fedoraproject.org> - 2.6.1-4
changelog:
  - add configure option to disable generic dynamic tls model
  - disable generic dynamic tls model on s390x and aarch64


author: Simon Lukasik <slukasik@redhat.com> - 1.3.0-6
changelog:
  - Resolve multilib conflict of gpgme-config (#341351)
  - Resolve multilib conflict of gpgme.h (#341351)


author: Tomas Mraz <tmraz@redhat.com> - 1.3.2-1
changelog:
  - new upstream version
  - re-enable gpg tests (original patch by John Morris <john@zultron.com>)
  - quiet configure warning 'could not find g13'
  - there is no libgpgme-pth anymore


author: Jaromir Capik <jcapik@redhat.com> - 1.20.6-29
changelog:
  - Removing OPTFLAGS
  - Introducing full RELRO
  - Missing header dir in Makefile.in / depend
  - Fixing UsrMove for i686 (mv -f says 'directory not empty')


author: Caolán McNamara <caolanm@redhat.com> - 1.3.10-1
changelog:
  - Resolves: rhbz#1472290
    CVE-2017-7771 CVE-2017-7772 CVE-2017-7773 CVE-2017-7774
    CVE-2017-7775 CVE-2017-7776 CVE-2017-7777 CVE-2017-7778


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.1-13
changelog:
  - Fixed multilib conflicts
    Rewrote lefty IO lib to use getaddrinfo instead of gethostbyname
    (by lefty-getaddrinfo patch)
    Resolves: rhbz#881173


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.1-17
changelog:
  - Prevent possible buffer overflow in yyerror()
    Resolves: CVE-2014-1235
  - Fix possible buffer overflow problem in chkNum of scanner
    Resolves: CVE-2014-1236


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.14-4
changelog:
  - Added group-separator, no-group-separator options decription
  - Aligned output of built-in help
  - Defuzzified gnulib-tests-rm-f patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-2
changelog:
  - Fixed invalid UTF-8 byte sequence error in PCRE mode
    (by pcre-backported-fixes patch)
    Resolves: rhbz#1217080
  - Fixed buffer overrun for grep -F
    Resolves: CVE-2015-1345
  - Fixed \w and \W behaviour in multibyte locales
    Resolves: rhbz#1159012
  - Documented --fixed-regexp option
    Resolves: rhbz#1103259
  - Updated pcre buildrequires to require pcre-devel >= 7.8-7
    Related: rhbz#1217080


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-3
changelog:
  - Speedup DFA for long patterns and fixed begline/endline matching
    Resolves: rhbz#1413029
  - Added support for GREP_LEGACY_EGREP_FGREP_PS environmental variable which
    controls how egrep, fgrep show in ps output
    Resolves: rhbz#1297441


author: Bastien Nocera <bnocera@redhat.com> 0.2.14-6
changelog:
  - Enable a number of missing plugins
  Related: #1184200
  - Disable blip.tv plugin as service has now closed
  - Add patch to downgrade the gom requirements
  - Port back local-metadata plugin to libmediaart-1.0


author: Bastien Nocera <bnocera@redhat.com> - 0.3.4-3
changelog:
  - Fix size reporting in Apple Trailers source
  - Add compatibility layer to allow building with lua 5.1
  Resolves: #1477129


author: Jan Vcelak <jvcelak@redhat.com> 1.22.1-1
changelog:
  - new upstream release (#890973)
    + various fixes in manual pages
    + various fixes and improvements in macros
    + new gropdf driver for generating PDF files
  - fix: backslash-period escape does not work (#682857)
  - fix: groff ftbfs - patch does not apply (#885225)


author: Peter Jones <pjones@redhat.com> - 2.02-0.57
changelog:
  - Make "grub2" require the grub2-efi-... package on arches where there's no
    legacy build.
    Related: rhbz#1440787


author: Peter Jones <pjones@redhat.com> - 2.02-0.58
changelog:
  - Add Aarch64 FDT #address-cells and #size-cells support
    Resolves: rhbz#1436745
  - Fix ppc64 "grub2.chrp" to be "grub.chrp"
    Resolves: rhbz#1442970


author: Peter Jones <pjones@redhat.com> - 2.02-0.60
changelog:
  - Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
    exists.  This is also why the bug we fixed in 0.59 showed up at all.
    Resolves: rhbz#1443809
    Resolves: rhbz#1442970
  - Fix a regexp problem where rpm spec parser un-escapes things that
    don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
    to fail.
    Related: rhbz#1443809


author: Peter Jones <pjones@redhat.com> - 2.02-0.61
changelog:
  - Fix some minor ia32 booting bugs
    Related: rhbz#1310763
    Related: rhbz#1411748
    Related: rhbz#1300009
  - Add support for non-Ethernet network cards
    Related: rhbz#1232432
  - Add support for http booting
    Resolves: rhbz#1232432
  - Fix efi module subpackage obsoletes/provides
    Resolves: rhbz#1447723
  - Make ppc modules subpackages use different directories on the filesystem.
    Resolves: rhbz#1455243


author: Peter Jones <pjones@redhat.com> - 8.28-17
changelog:
  - Fix the ordering of creating the debug entries, so they don't get picked
    when we're choosing kernel command line defaults on upgrades.
    Related: rhbz#1212128


author: rmarshall@redhat.com - 8.28-18
changelog:
  - Patched new-kernel-pkg so that kernel installations when MAKEDEBUG is
    set would put the debugging entries after the non-debugging entries.
    Resolves: #1285601
  - Re-numbered the last set of patches to go with the flow. No actual
    changes to the patches; just a git mv to rename.
  - Re-organized and updated the grubby man page contents to include some
    features that were not documented as well as correct typos and
    re-write some entries for better clarity.
    Resolves: #1232168


author: rmarshall@redhat.com - 8.28-21
changelog:
  - Resolve issues with the recent grubby logic patches that
    appeared on the ppc platform. Fix a problem that occurred
    on systems where no kernel update had ever been installed.
    Resolves: rhbz#1285601
  - Specify the actual prune_debug file in sources.
    Resolves: rhbz#1285601


author: rmarshall@redhat.com - 8.28-23
changelog:
  - Fixes --info flag on s390/s390x.
    Related: rhbz#1285601
  - Fixes --set-default-index on s390/s390x.
    Related: rhbz#1285601
  - Allows prune_debug to run on s390/s390x.
    Resolves: rhbz#1285601


author: Wim Taymans <wtaymans@redhat.com> - 1.4.5-6
changelog:
  - Fix h264 and h265 buffer size checks
  - Fix mpegts pat parsing and add more size checks
  Resolves: rhbz#1400898


author: Akira TAGOH <tagoh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release.
  - Using autotools isn't supported in upstream anymore. switching to cmake.
  - undefined reference issues seems gone now. (#813825)


author: Miroslav Lichvar <mlichvar@redhat.com> - 5:2.0.9-3
changelog:
  - drop renaming to guile2
  - fix multilib conflicts
  - fix post scriptlet to not remove files on upgrade
  - remove obsolete code from slib trigger
  - fix weekdays in changelog


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.10.2-1
changelog:
  - 0.10.2 release
  - http://ftp.gnome.org/pub/GNOME/sources/gupnp-dlna/0.10/gupnp-dlna-0.10.2.news

   * Wed Apr 10 2013 Peter Robinson <pbrobinson@fedoraproject.org> 0.10.1-1
  - 0.10.1 release
  - http://ftp.gnome.org/pub/GNOME/sources/gupnp-dlna/0.10/gupnp-dlna-0.10.1.news


author: Ondrej Holy <oholy@redhat.com> - 1.30.3-1
changelog:
  - Update to 1.30.3
  - Disable nfs support (#1387270)
  - Revert desktop database scriplets
  - Resolves: #1386993, #1399343, #1306146, #1259746, #1344317


author: Petr Stodulka <pstodulk@redhat.com> - 1.5-8
changelog:
  - Gzip overwrite existing files when user choose "no" on yes/no question.
    It's due to wrong dupicit declaration of yesno() function in gzip.h
    which is compiled wrong with -O2 option.
    Resolves: rhbz#1201689


author: Jakub Martisko <jamartis@redhat.com> - 1.5-10
changelog:
  - doc change: missing grep options are now mentioned in the zgrep 
    man pages/help message
    Resolves: #1437002


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-11
changelog:
  - don't use mmap(2) to avoid failures on i386 with 1GB files and larger (#672917)
  - fix package URL (#676962)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-12
changelog:
  - fix possible buffer overflows, integer overflows (CVE-2011-3630 CVE-2011-3631 CVE-2011-3632)
  - update man page


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-14
changelog:
  - do not allow to hardlink files across filesystems by default (#786719)
    (use -f option to override)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.4-3
changelog:
  - PIDFile should be stored at /run instead of the default location /var/run 
  - There is  long term plan that directory /var/run will not further exist in the future Fedora versions
  - Asked upstream to add -p <PID_FILE_location> switch to influence the location of the PID File
  - Set PIDFile=/var/run/haveged.pid This is needed as long -p option is not implemented
  - https://bugzilla.redhat.com/show_bug.cgi?id=770306#c10


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.5-1
changelog:
  - Update to the version 1.5
  - Main new feature is a run time verification of the produced random numbers
  - PIDFILE set to /run/haveged.pid
  - converted README and man page to UTF-8. Informed the upstream to fix it.


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.5-2
changelog:
  - BZ 850144
  - Introduce new systemd-rpm macros in haveged spec file
  - Fedora 19 changes the way how to work with services in spec files. 
  - It introduces new macros - systemd_post, systemd_preun and systemd_postun; 
  - which replace scriptlets from Fedora 18 and older
  - see https://fedoraproject.org/wiki/Packaging:ScriptletSnippets#Systemd


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.8-1
changelog:
  - Unversioned docdir change, more info on 
    https://fedoraproject.org/wiki/Changes/UnversionedDocdirs


author: Orion Poplawski <orion@cora.nwra.com> - 1.8.12-5
changelog:
  - Add patch to fix long double conversions on ppc64le (bug #1078173)
  - Run autoreconf for patches and to remove rpaths


author: Jeff Peeler <jpeeler@redhat.com> 1.2.6-1
changelog:
  - rebase to 1.2.6
  - added new doc files
  - bump boto version requirement
  - add python-pbr buildrequire
  - fixed previous changelog date


author: Jeff Peeler <jpeeler@redhat.com> 1.2.8-1
changelog:
  - rebase to 1.2.8
  - remove wget dependency as it's no longer required
  - remove rubygems dependency as it's too big for non-ruby users


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-18
changelog:
  - adjust buildroot location (guidelines)
  - disable static libraries (guidelines)
  - tweak default payload attributes (guidelines)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-19
changelog:
  - fix the release number noted for the previous changelog entry (#225884)
  - remove unapplied "classes" patch (#225884)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.2.1-1
changelog:
  - update to 3.2.1
    - merged all patches or equivalents
    - re-merged hesinfo, so we obsolete it now
    - adds a pkgconfig configuration file for libhesiod
  - correct inconsistent changelog dates, assuming day-of-week is correct
  - add build requirement on libidn-devel
  - package the license


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.13-2
changelog:
  - Bring back config patch to fix -debuginfo, it hasn't been upstreamed yet.
  - Drop empty TODO from docs.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7
changelog:
  - Fix: "Argument list too long" when using virt-v2v on Windows guest
    with French copy of Citrix installed
    related: rhbz#1145056


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8
changelog:
  - Tolerate corruption in some hives
    resolves: rhbz#1423436
  - Switch to using git to manage patches.


author: Jiri Popelka <jpopelka@redhat.com> - 3.11-3
changelog:
  - remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
  - remove outdated de & pt man pages
  - /usr move: use _bindir macro


author: Tim Waugh <twaugh@redhat.com> - 3.13.7-2
changelog:
  - Applied patch to avoid unix-process authorization subject when using
    polkit as it is racy (CVE-2013-4325).


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.15.9-2
changelog:
  - 1069619 - Rebase to version 3.15.9 extension - solving bug 1346196 (/usr/lib/cups/filter/hpps uses python -B which is unknown), which is duplicate of bug 1202451


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-14
changelog:
  - Remove dependency on initscripts
  - Add After=network.target to systemd service
  - Resolves: rhbz#1283893, rhbz#1269717


author: Mukundan Ragavan <nonamedotc@fedoraproject.org> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Spec cleanup
  - drop unused configure options
  - Install desktop file (fixes bz#1541785)


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.7.1-5
changelog:
  - Bump http-parser release number to avoid people pulling EPEL package instead
    of RHEL package
    Resolves: rhbz#1480321


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88.1
changelog:
  - Resolves: #1560609 - httpd: active connections being terminated when httpd
    gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
    honored
  - Remove index.html, add centos-noindex.tar.gz
  - change vstring
  - change symlink for poweredby.png
  - update welcome.conf with proper aliases


author: Caolán McNamara <caolanm@redhat.com> - 1.3.2-6
changelog:
  - Resolves: rhbz#573516 have hunspell require hunspell-en to ensure
    at least one dictionary exists


author: Caolan McNamara <caolanm@redhat.com> - 2.4-0.4.20070901
changelog:
  - it_IT_README.1st says GPLv2+, but it_IT_README.txt says GPLv3+ -> 
    change license field to GPLv3+


author: Parag Nemade <pnemade AT redhat.com> - 0.2.1-2
changelog:
  - Resolves: rh#571710: Fix license tag in spec file with new upstream release
  - Removed CREDITS file as upstream provides now README and LICENSE files.


author: Parag <pnemade@redhat.com> - 0.20050929-3
changelog:
  - Use aspell source instead to pull source as BR:aspell-te
  - Resolves:rh#511262 buildrequires aspell-te


author: Michal Minar <miminar@redhat.com> 0.252-8.1
changelog:
  - Updated pci, usb and vendor ids.
  - Resolves: rhbz#1236458
  - Resolves: rhbz#1256004
  - Resolves: rhbz#1266217
  - Resolves: rhbz#1271797


author: Michal Minar <miminar@redhat.com> 0.252-8.2
changelog:
  - Updated pci, usb and vendor ids.
  - Resolves: rhbz#1292382
  - Resolves: rhbz#1291614
  - Resolves: rhbz#1324198


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.252-8.5
changelog:
  - Updated pci, usb and vendor ids
    Resolves: #1386133 #1424763
  - Removed module nx_crypto from blacklist on PowerPCs
    Resolves: #1264326


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.252-8.9
changelog:
  - Updated pci, usb, vendor ids and hwdb files
    Resolves: #1560493
  - Blacklisted sha{256,512}-mb modules
    Resolves: #1562114


author: Jay Fenlason <fenlason@redhat.com> - 1.7-1.2
changelog:
  - Split out lstopo into a -gui subpackage, so the hwloc base package
    does not pull in all of X.
    Resolves: rhbz910165


author: Don Zickus <dzickus@redhat.com> - 1.7-4
changelog:
  - Fix dangling symlink for hwloc-ls manpage
    Resolves: rhbz1081236
    Add desktop entry for lstopo
    Resolves: rhbz1229313


author: Michal Schmidt <mschmidt@redhat.com> - 1.11.8-4
changelog:
  - Rebase to 1.11.8.
  - Deal with rpaths using the method from Packaging Guidelines.
  - BuildRequire rdma-core-devel on s390(x).
  - Fix scriptlets related to hwloc-dump-hwdata.service.
  - Configure with /run as runstatedir.
  - Spec file cleanup.
  - Related: rhbz1482585


author: Caolán McNamara <caolanm@redhat.com> - 2.8.3-4
changelog:
  - Resolves: rhbz#813481 x86_64 valgrind spews, see rhbz#813780
  - Related: rhbz#813481 dump valgrind failure log


author: Jarod Wilson <jarod@redhat.com> 15-4
changelog:
  - Add support for extended join multicast API in librdmacm
  - Add support for striding RQ on mlx5
  - Resolves: rhbz#1515487, rhbz#1516571


author: Jarod Wilson <jarod@redhat.com> 15-5
changelog:
  - libmlx4: report RSS caps for improved DPDK support
  - Fix double mutex unlock in iwpmd
  - Resolves: rhbz#1527350
  - Resolves: rhbz#1542362


author: Jarod Wilson <jarod@redhat.com> 15-7
changelog:
  - i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
    causing problems with suspend and resume, and fall back to load via
    systemd rdma initscript.
  - Resolves: rhbz#1561566


author: Jarod Wilson <jarod@redhat.com> 17.1-1
changelog:
  - Rebase to upstream rdma-core v17.1 stable release
  - No more libibcm or ib sysv initscripts
  - Resolves: rhbz#1515647
  - Resolves: rhbz#1517208
  - Resolves: rhbz#1523201
  - Resolves: rhbz#1541751


author: Jarod Wilson <jarod@redhat.com> 17.1-3
changelog:
  - Grab latest stable-v17 fixes from upstream
  - Fix Provides/Obsoletes on removed libibcm
  - Fix Provides/Obsoletes on removed libehca
  - Straighten out SW parsing feature support for DPDK
  - Fix mlx5 rate-limiting support
  - Resolves: rhbz#1588096
  - Resovles: rhbz#1534856
  - Resolves: rhbz#1589525


author: Jarod Wilson <jarod@redhat.com> 17.2-2
changelog:
  - Restore SysV Initscripts ib ifup and ifdown helpers
  - Adjust MTU limit for IPoIB in datagram mode via ifup-ib
  - Resolves: rhbz#1593426
  - Resolves: rhbz#1593334


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-12
changelog:
  - Resolves: #1183909 - programs using "PreeditType: OverTheSpot" is stalled
  - Resolves: #1191825 - gtk2's immodules.cache won't be updated in some cases


author: Jay Fenlason <fenlason@redhat.com> 1.5.7-8
changelog:
  - Add the -output patch to have programs use /var/cache/ibutils
    instead of /tmp
    Resolves: bz958569


author: Doug Ledford <dledford@redhat.com> - 1.5.7-12
changelog:
  - Change ExclusiveArch to ExcludeArch instead so we don't have
    the same problem again in the future
  - Update to the git repo tarball that we shipped in rhel6.6
  - Related: bz1123998


author: Nicolas Chauvet <kwizart@gmail.com> - 1.3.0-1
changelog:
  - Rename to icc-profiles-openicc
  - Add scriptlet for icons directory
  - Use absolute path for update-mime-database
  - Drop README
  - Add directory ownership


author: Martin Gieseking <martin.gieseking@uos.de> 0.30.0-1
changelog:
  - updated to release 0.30.0
  - dropped patch as it has been applied upstream
  - removed old buildroot stuff


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.3-1
changelog:
  - Rebase to upstream version 0.31.3.
  - This version includes multiple security fixes
    CVE-2017-5208, CVE-2017-5333, CVE-2017-5332, CVE-2017-6009,
    CVE-2017-6010, CVE-2017-6011
    resolves: rhbz#1430610


author: Robert Scheck <robert@fedoraproject.org> 1.0-0.6.pre2
changelog:
  - Added patch to fix a memory leak in resolver.c (#782275, #861582)
  - Run autoreconf to recognize aarch64 (#925579)
  - Added patch to fix needlessly caused assertion failure when using
    nss-myhostname (#839750, #847124, #868065, #961236, #1007434)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0.3-3
changelog:
  - IlmBase.pc: +Requires.private: gl glu
  - -devel: drop hard-coded libGL/pkgconfig deps, let rpm autodetect now


author: Doug Ledford <dledford@redhat.com> - 1.6.2-1
changelog:
  - Update to latest upstream release (resolves bz998816)
  - Revive all_hcas patch (otherwise would be a regression)
  - Fix ibnodes -h output (another regression, bz1054545)
  - Resolves: bz998816, bz1054545


author: Michal Schmidt <mschmidt@redhat.com> - 1.6.5-1
changelog:
  - Update to latest upstream release. Adds rdma-ndd daemon.
  - Rebase patches, cherry-pick fixes from upstream git.
  - Enable build on s390(x).
  - Fixed bogus changelog dates.
  - Add Conflicts with old rdma. It needs to be aware of rdma-ndd.
  - Resolves: bz1169968


author: Honggang Li <honli@redhat.com> - 1.6.7-1
changelog:
  - Rebase to latest upstream release 1.6.7.
  - Remove patches merged into upstream release.
  - Remove sub-package rdma-ndd as it merged into rdma-core.
  - Resolves: bz1382809


author: Jay Fenlason <fenlason@redhat.com> -3.2-2_ga8c3e3e_open.2
changelog:
  - Update the -build patch and this spec file so the library is built
    with the standard optimization and security flags.
    Resolves: rhbz1070814


author: Honggang Li <honli@redhat.com> - 3.3-22_g4abbc60_open.1
changelog:
  - Rebase to latest upstream release.
  - Link against system libuuid library.
  - Spec file cleanup.
  - Related: bz1272022


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.1-5
changelog:
  - Fix upstream test failure in Pod-Simple-Texinfo
    Resolves: #970986
  - Fix @enumerate does not support start numbers greater than nine
    Resolves: #1134160


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.35-1
changelog:
  - Change how Initial Setup reconfig mode is started (#1342536) (mkolman)
    Related: rhbz#1342536
  - Add systemd scriptlets for initial-setup-reconfigure.service (#1342536) (mkolman)
    Related: rhbz#1342536


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.39-1
changelog:
  - Run GUI on the s390 if possible (#1378082) (mkolman)
    Resolves: rhbz#1378082
  - Make it possible to set stdout log verbosity level (mkolman)
    Related: rhbz#1378082
  - Make it possible to show window header (mkolman)
    Related: rhbz#1378082


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.42-1
changelog:
  - Use constant+offset when turning systemd console logging on/off (#1479787) (mkolman)
    Resolves: rhbz#1479787


author: Konstantin Volkov <wolf@virtuozzo.com> - 0.3.9.42-1.2
changelog:
  - Added additional kickstart support, see #VSTOR-7373
  - Added welcome spoke (for main language selection), see #VSTOR-6252


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.38-1
changelog:
  - ifdown-eth: we need to flush global scope as well
  - killproc/status: add missing '-b <binary>' option
  - specfile: mark 'rwtab' and 'statetab' as config files
  - spec: we need newer lvm
  - rwtab: add /var/lib/systemd/timers
  - ifup-eth: remove quote marks
  - 9.70-sync: Move everything to github
  - 9.70-sync: rwtab updated
  - 9.70-sync: service file updated
  - 9.70-sync: syconfig.txt updated
  - 9.70-sync: systemd/rhel-import-state updated
  - 9.70-sync: sysconfig/network-scripts/* updated - part 2
  - 9.70-sync: sysconfig/network-scripts/* updated - part 1
  - 9.70-sync: rc.d/init.d/network updated
  - 9.70-sync: rc.d/init.d/netconsole updated
  - 9.70-sync: rc.d/init.d/functions updated
  - 9.70-sync: ipv6-6to4.howto example updated
  - 9.70-sync: examples/networking/ifcfg-bridge updated
  - network: load NetworkManager connection via dbus
  - network: check for running NetworkManager via dbus


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.39-1
changelog:
  - sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
  - DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
  - re-add missing $HOSTNAME initialization
  - ifup: add support for VLAN_EGRESS_PRIORITY_MAP
  - rhel-autorelabel: synchronize cached writes before reboot


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.40-1
changelog:
  - require 'redhat-release' instead of /etc/system-release & conflict with older versions
  - ifup-post: always update 'nameserver' & 'search' entries in /etc/resolv.conf
  - systemd/system: symlinks for initscripts' services removed
  - *.old extension added to list of ignored files
  - ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
  - init.d/functions: convert2sec() function added
  - init.d/functions: is_true() & is_false() extended by ON/OFF support
  - usleep(1) calls replaced with sleep(1) calls
  - network-scripts: DBus calls forwarded to /dev/null
  - network-scripts: firewall-cmd replaced with DBus calls
  - ARPUDATE option introduced


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.41-1
changelog:
  - ifdown-post: fix logical error in commit 5d61564
  - network-functions: use POSIX forwarding instead of bash-ism


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.42-1
changelog:
  - rhel-autorelabel: set UEFI boot order (BootNext) same as BootCurrent
  - network-functions: use tr to upper case strings rather than awk
  - sysconfig/readonly-root: Clarify the usage of readonly-root
  - network-functions: add error messages for bonding installation
  - sysctl.conf.s390: drop SHMALL and SHMMAX
  - network.service: 'reload' removed
  - rhel-readonly.service: target name for random seed fixed
  - init.d/functions: fix sourcing for ksh


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.45-1
changelog:
  - network: parsing of /proc/mounts returned (bug #1572659)
  - netconsole: LSB header added (bug #1508489)
  - ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-4.el7
changelog:
  - Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
    - ipa client uninstall: clean the state store when restoring hostname
  - Resolves: #1598117 client uninstall fails when installed using non-existing hostname
    - ipa client uninstall: clean the state store when restoring hostname
  - Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
    - Fix regression: Handle unicode where str is expected
  - Resolves: #1591824 Installation of replica against a specific master
    - Query for server role IPA master
    - Only create DNS SRV records for ready server
    - Delay enabling services until end of installer
    - replicainstall: DS SSL replica install pick right certmonger host
    - Fix CA topology warning
    - Fix race condition in get_locations_records()
    - Fix DNSSEC install regression
    - Handle races in replica config
  - Resolves: #1591647 Increase WSGI worker process count
    - Use 4 WSGI workers on 64bit systems
  - Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
    - Tune DS replication settings
  - Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in <module>#012
    - Removing filesystem encoding check
  - Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
    - Removing filesystem encoding check


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-5.el7
changelog:
  - Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in <module>#012
    - Removing filesystem encoding check
  - Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
    - Removing filesystem encoding check


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-6.el7
changelog:
  - Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
    - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
  - Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
    - Re-open the ldif file to prevent error message
  - Resolves: #1608783 ipa trust-add fails in FIPS mode.
    - Move fips_enabled to a common library to share across different plugins
    - ipasam: do not use RC4 in FIPS mode


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-7.el7
changelog:
  - Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
    - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
  - Resolves: #1598662 Replica installation fails with connection refused error 
    - Do not set ca_host when --setup-ca is used
  - Resolves: #1577108 Improve Custodia client and key distribution handling
    - Fix KRA replica installation from CA master
  - Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
    - Fix ipa-replica-install when key not protected by PIN
  - Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
    - uninstall -v: remove Tracebacks
  - Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
    - ipa commands: print 'IPA is not configured' when ipa is not setup
    - Disable message about log in ipa-backup if IPA is not configured
  - Resolves: #1591824 Installation of replica against a specific master
    - Do not set ca_host when --setup-ca is used
  - Resolves: #1594141 Replication races in DogtagInstance.setup_admin
    - Catch ACIError instead of invalid credentials
  - Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
    - DS replication settings: fix regression with <3.3 master
  - Resolves: #1623113 Replica install: certmonger sometimes fails
    - Wait for client certificates
    - Auto-retry failed certmonger requests


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-8.el7
changelog:
  - Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
    - Clear next field when returnining list elements in queue.c
    - Add cmocka unit tests for ipa otpd queue code
  - Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
    - Clear next field when returnining list elements in queue.c
    - Add cmocka unit tests for ipa otpd queue code
  - Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
    - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-9.el7
changelog:
  - Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
    - ipa-replica-install: properly use the file store
  - Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
    - ipa-replica-install: fix pkinit setup
  - Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
    - Update minimum selinux-policy to 3.13.1-224


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-10.el7
changelog:
  - Resolves: 1630361 PKINIT fails in FIPS mode
    - Ensure that public cert and CA bundle are readable
    - Always make ipa.p11-kit world-readable
    - Make /etc/httpd/alias world readable & executable
    - Fix permission of public files in upgrader


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-10.el7_6.2
changelog:
  - Resolves: 1659492 searching for ipa users by certificate fails
    - ipaldap.py: fix method creating a ldap filter for IPACertificate
    - ipatests: add xmlrpc test for user|host-find --certificate
  - Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
    - ipa upgrade: handle double-encoded certificates
    - ipatests: add upgrade test for double-encoded cacert
    - ipatests: fix TestUpgrade::test_double_encoded_cacert
  - Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
    - Add a shared-vault-retrieve test
    - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
  - Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
    - ipatest: add test for ipa-pkinit-manage enable|disable
    - PKINIT: fix ipa-pkinit-manage enable|disable
  - Resolves: 1659499 automember-rebuild crashes
    - Find orphan automember rules
  - Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
    - replication: check remote ds version before editing attributes


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-10.el7_6.3
changelog:
  - Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
    - Update mod_nss cipher list so there is overlap with a 4.x master
  - Resolves: 1672342 Fix compile issue with new 389-ds	
    - ipa-sidgen: make internal fetch_attr helper really internal	
  - Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
    - Add workaround for slow host/service del
    - Optimize cert remove case
  - Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
    - replica installation: add master record only if in managed zone
    - ipatests: add test for replica in forward zone


author: Michal Ruprich <mruprich@redhat.com> - 3.1.7-1
changelog:
  - Related: #913329 - [RFE] include iperf3 in RHEL 7
                     - adding latest version before including iperf3 in RHEL-7


author: Michal Ruprich - 3.1.7-2
changelog:
  - Related: #913329 - [RFE] include iperf3 in RHEL 7
                     - adding requires to spec file for devel package


author: Boris Ranto <branto@redhat.com> - 0:1.8.15-7
changelog:
  - New release (0:1.8.15-7)
  - ID:437 - sel: Fix "sel time set <time>"
  - ID 408 - fix sel list last X listing


author: Josef Ridky <jridky@redhat.com> - 0:1.8.18-3
changelog:
  - Fix issues with warning: dereferencing type-punned pointer 
    will break strict-aliasing rules from RPMDiff


author: Phil Sutter <psutter@redhat.com> [4.11.0-5.el7]
changelog:
  - ip neigh: allow flush FAILED neighbour entry (Matteo Croce) [1469945]
  - tc: fix typo in manpage (Phil Sutter) [1417162]
  - link_gre6: really support encaplimit option (Phil Sutter) [1459600]
  - tc: m_xt: Prevent a segfault in libipt (Phil Sutter) [1465599]


author: Phil Sutter <psutter@redhat.com> [4.11.0-6.el7]
changelog:
  - link_gre6: Fix for changing tclass/flowlabel (Phil Sutter) [1487486]
  - utils: return default family when rtm_family is not RTNL_FAMILY_IPMR/IP6MR (Stefano Brivio) [1475762]
  - netns: avoid directory traversal (Phil Sutter) [1468529]
  - Disable -fexceptions CFLAG passed by build system (Phil Sutter) [1418715]


author: Phil Sutter <psutter@redhat.com> [4.11.0-9.el7]
changelog:
  - lib/libnetlink: update rtnl_talk to support malloc buff at run time (Hangbin Liu) [1380803]
  - lib/libnetlink: re malloc buff if size is not enough (Hangbin Liu) [1380803]
  - iplink: double the buffer size also in iplink_get() (Hangbin Liu) [1380803]
  - iplink: check for message truncation in iplink_get() (Hangbin Liu) [1380803]
  - iproute: Add support for extended ack to rtnl_talk (Hangbin Liu) [1380803]
  - libnetlink: drop unused parameter to rtnl_dump_done (Hangbin Liu) [1380803]
  - netlink: Change rtnl_dump_done to always show error (Hangbin Liu) [1380803]


author: Phil Sutter <psutter@redhat.com> [4.11.0-10.el7]
changelog:
  - tc: flower: add support for matching on ip tos and ttl (Kamal Heib) [1456539]
  - iplink: Update usage in help message (Kamal Heib) [1456539]
  - tc: flower: add support for tcp flags (Kamal Heib) [1456539]
  - devlink: Add option to set and show eswitch encapsulation support (Kamal Heib) [1456539]
  - pedit: Introduce ipv6 support (Kamal Heib) [1456539]
  - pedit: Check for extended capability in protocol parser (Kamal Heib) [1456539]
  - pedit: Do not allow using retain for too big fields (Kamal Heib) [1456539]
  - pedit: Fix a typo in warning (Kamal Heib) [1456539]
  - tc: Reflect HW offload status (Kamal Heib) [1456539]
  - devlink: Add support for pipeline debug (dpipe) (Kamal Heib) [1456539]
  - devlink: Change netlink attribute validation (Kamal Heib) [1456539]
  - Update linux headers (Phil Sutter) [1456539]


author: Phil Sutter <psutter@redhat.com> [4.11.0-11.el7]
changelog:
  - ss: add AF_VSOCK support (Stefano Brivio) [1472759]
  - ss: allow AF_FAMILY constants >32 (Stefano Brivio) [1472759]
  - uapi: add include linux/vm_sockets_diag.h (Stefano Brivio) [1472759]
  - iproute: build more easily on Android (Phil Sutter) [1472759]


author: Phil Sutter <psutter@redhat.com> [4.11.0-12.el7]
changelog:
  - man: tc-csum.8: Fix inconsistency in example description (Phil Sutter) [1417162]
  - link_gre6: Detect invalid encaplimit values (Phil Sutter) [1459600]


author: Jakub Čajka <jcajka@redhat.com> - 2.4.8-1
changelog:
  - Resolves: #1182038 - [7.2 FEAT] iprutils package update - ppc64/ppc64le
  - Resolves: #1183460 - RHEL7.1 BE: iprutils: Set known zeroed after format


author: Sinny Kumari <skumari@redhat.com> - 2.4.11.1-1
changelog:
  - Resolves: #1274367 - [7.3 FEAT] iprutils package update
  - Resolves: #1297921 - IPR: Raid migration fails to kick while executing through command line


author: Sinny Kumari <skumari@redhat.com> - 2.4.12.1-1
changelog:
  - Resolves: #1364131 - Integrate various important bug fixes for iprutils in
    RHEL7.3 by updating iprutils to 2.4.12


author: Sinny Kumari <skumari@redhat.com> - 2.4.16.1-1
changelog:
  - Resolves: #1587834 - vpdupdate takes over an hour on system with 104 drive
  - Resolves: #1521052 - iprutils package update for POWER
  - Resolves: #1547891 - iprconfig unable to Download microcode on all applicable devices
  - Resolves: #1576013 - iprconfig tools shows wrong error message, while creating raid using RI SSDs and normal SSDs


author: Thomas Woerner <twoerner@redhat.com> - 6.19-5
changelog:
  - New service sub package to provide the ipset service (RHBZ#1136257)
    Service and start-stop script from F-24
  - Fixed ipset package summary (RHBZ#1195171)
    Spec file derived from F-24


author: Thomas Woerner <twoerner@redhat.com> - 6.19-6
changelog:
  - Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
  - Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
  - No save on reload, but legacy save action (RHBZ#1136257)


author: Thomas Woerner <twoerner@redhat.com> - 6.29-1
changelog:
  - Rebase to 6.29 (RHBZ#1351299)
  - Fixes:
    - Backport ipset capability to run in namespaces (RHBZ#1226051)
    - Fix service save with empty ipset list and existing ipset save file
      (RHBZ#1377621)
    - Fix internal error at printing to output buffer (RHBZ#1395865)


author: Stefano Brivio <sbrivio@redhat.com> - 6.38-1
changelog:
  - Rebase to 6.38 (RHBZ#1557600):
    - hash:ipmac type support added to ipset, userspace part (Tomasz Chilinski)
  - Refactor /etc/sysconfig/ipset.start-stop
  - Fixes:
    - IPSet Service Monolithic Operation (RHBZ#1440741)
    - "systemctl start ipset" doesn't handle existing ipset's having counters
      (RHBZ#1502212)


author: Phil Sutter - 1.4.21-20
changelog:
  - Prevent iptables.service and ip6tables.service from running in parallel
    (RHBZ#1486803)
  - Don't restart services upon upgrade (RHBZ#1380141)


author: Phil Sutter - 1.4.21-25
changelog:
  - Fix for stopping iptables and ip6tables at the same time (RHBZ#1560012)
  - Propagate errors on service stop (RHBZ#1560012)


author: Phil Sutter - 1.4.21-27
changelog:
  - libxt_tcpmss: Detect invalid ranges (RHBZ#1128510)
  - ip(6)tables-save/restore: Exit if invalid option was given (RHBZ#1465078)
  - ip(6)tables-save/restore: Require value to -W option (RHBZ#1465078)
  - ip(6)tables-save/restore: Don't accept -W without -w (RHBZ#1465078)
  - Ignore security table when setting policies (RHBZ#1494012)
  - Fix spec file changing SRPM content (RHBZ#1531290)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-7
changelog:
  - ping hung when it cannot receive echo reply (#1362463)
  - arping documentation inconsistency (#1351704)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-9
changelog:
  - IPv4 vs IPv6 inconsistency on return value of ping (#1362388)
  - ping6 does not use device specified with -I parameter (#1371824, #1424965)
  - double cap_free call in ping_common.c (#1410114)
  - ping assumes EACCESS errors are due to broadcast addresses (#1387315)
  - ping -t with multicast address without effect on ppc64 (#1373333)
  - arping -c <n> does not exit when the device is deleted (#1387542)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-4.gitc4bce43
changelog:
  - ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
  - Resolves: bz#1062644
    (pxe boot fails if next-server details come from a different dhcp server)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-5.gitc4bce43.el7
changelog:
  - ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
  - ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
  - ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
  - ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
  - ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
  - ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
  - ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
  - Resolves: bz#1031518
    (iPXE does not honor specified boot device)
  - Resolves: bz#857123
    (Guests never get an iPXE prompt)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-6.gitc4bce43.el7
changelog:
  - ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
  - ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
  - ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
  - Resolves: bz#1084561
    (RFE: ship UEFI drivers for ipxe in RHEL-7.y)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-2.git6366fa7a.el7
changelog:
  - ipxe-Enable-IPv6-protocol-in-non-QEMU-builds.patch [bz#1350167]
  - Resolves: bz#1350167
    (ipxe: enable IPV6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-3.git6366fa7a.el7
changelog:
  - ipxe-Add-pci_find_next_capability.patch [bz#1242850]
  - ipxe-Add-virtio-1.0-constants-and-data-structures.patch [bz#1242850]
  - ipxe-Add-virtio-1.0-PCI-support.patch [bz#1242850]
  - ipxe-Add-virtio-net-1.0-support.patch [bz#1242850]
  - ipxe-Renumber-virtio_pci_region-flags.patch [bz#1242850]
  - ipxe-Fix-virtio-pci-logging.patch [bz#1242850]
  - Resolves: bz#1242850
    (Ipxe can not recognize "network device" when enable virtio-1 of virtio-net-pci)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-4.git6366fa7a.el7
changelog:
  - ipxe-Send-TCP-keepalives-on-idle-established-connections.patch [bz#1322056]
  - ipxe-enable-e1000e-rom.patch [bz#1361534]
  - Resolves: bz#1322056
    (ipxe freeze during HTTP download with last RPM)
  - Resolves: bz#1361534
    (RFE: Integrate e1000e implementation in downstream QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-5.git6366fa7a.el7
changelog:
  - ipxe-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1316329]
  - Resolves: bz#1316329
    ([RFE] Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.7-2
changelog:
  - fixed unused variable revealed by covscan
  - fixed ignored pid argument (#1155632)
  - warning when irqbalance started under non-root (#1155799)
  - more robust signal handling (#1158937)
  - fixed hostname in manpage (#1162251)


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-6
changelog:
  - 1507945 force start iscsiuio for boot session recovery with qedi
  - 1457359 start systemd socket listeners, otherwise if iscsid is started
    directly iscsiuio doesn't activate as expected


author: Brian C. Lane <bcl@redhat.com> 1.0.9-1
changelog:
  - Add python-isomd5sum package with python bindings
  - Add callback and interrupt support to the python library
  - Add RPM_OPT_FLAGS to CFLAGS and update makefile to use CFLAGS from environment


author: Brian C. Lane <bcl@redhat.com> 1.0.10-1
changelog:
  - Fix for gcc type-punned and sizeof pointer warnings. (bcl)
  - Add exit code 2 for user abort (#907600) (bcl)
  - Cleanup TABs and update Copyrights (bcl)
  - Standardize *FLAGS in Makefile (ryan)


author: Rafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - netr: Add Netronome TC flower firmware (rhbz 1518900)
  - Revert amd-ucode for fam17h (rhbz 1533945)


author: Rafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311
changelog:
  - nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
  - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cf
changelog:
  - Update to latest upstream linux-firmware image for assorted netdrv updates
  - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - amd: update microcode for family 15h (rhbz 1574575)


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab
changelog:
  - Update to latest upstream linux-firmware image for assorted netdrv updates
  - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - nvidia: update firmware for Pascal GPUs (rhbz 1625514)


author: Michal Srb <msrb@redhat.com> - 1.2-0.11.20100217cvs
changelog:
  - Install license in javadoc package (Resolves: #888420)
  - Removed dependency on jai-imageio-core from javadoc package (Resolves: #888423)


author: Michal Srb <msrb@redhat.com> - 0:1.1.2-13
changelog:
  - Prevent XXE and RCE in JSTL XML tags
  - Apply correction for previous CVE-2015-0254 patch (prevent XXE in <x:transform>)
  - Resolves: CVE-2015-0254


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171211)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)


author: Josef Ridky <jridky@redhat.com> - 1.900.1-30
changelog:
  - Multiple security fixes (fixed by thoger):
    CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
    CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
    CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
    CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
    CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
    CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
  - Fix implicit declaration warning caused by security fixes above


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.3
changelog:
  - Separate bootstrap option as it should not be tied to the JDK used.
  - Enable bootstrapping on JIT architectures going forward.
  - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.5
changelog:
  - Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.8
changelog:
  - Set install directories in configure so that @prefix@ is substituted correctly in tapset
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.9
changelog:
  - Require a JDK with RH1334465/PR2956 fixed and turn off bootstrapping for Zero architectures.
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Update to IcedTea 1.13.13 & OpenJDK 6 b41.
  - Fix context for rpath patch following PR3213.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.201-2.6.16.1
changelog:
  - Bump to 2.6.16 and u201b00.
  - Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.201-2.6.17pre01.0
changelog:
  - Bump to 2.6.17pre01.
  - Add support for icedtea_snapshot so we can build pre-releases.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.211-2.6.17.0
changelog:
  - Bump to 2.6.17.
  - Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
  - Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
  - Resolves: rhbz#1661577


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.7.0.211-2.6.17.1
changelog:
  - Produce debug symbols for libpulse-java.so
  - Set IT_CFLAGS=-g so that debug symbols for the pulse audio
  - native library are being produced. This is needed to fix
  - rpmdiff errors of missing .debug_info in pulse-java.so.debug.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-0
changelog:
  - Add port of 8189170 to AArch64 which is missing from upstream 8u version.
  - Resolves: rhbz#1661577


author: Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2
changelog:
  - Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
  - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-3
changelog:
  - Update patch for RH1566890.
    - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
      rh1566890-CVE_2018_3639-speculative_store_bypass.patch
    - Added dependent patch,
      rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-0
changelog:
  - Update to aarch64-shenandoah-jdk8u201-b13.
  - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream.
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u202-b08.
  - Remove patches included upstream
    - JDK-8211387/PR3559
    - JDK-8207057/PR3613
    - JDK-8165852/PR3468
    - JDK-8073139/PR1758/RH1191652
    - JDK-8044235
    - JDK-8172850/RH1640127
    - JDK-8209639/RH1640127
    - JDK-8131048/PR3574/RH1498936
    - JDK-8164920/PR3574/RH1498936
  - Re-generate patches
    - JDK-8210647/RH1632174
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-0
changelog:
  - Update to aarch64-shenandoah-jdk8u212-b02.
  - Remove patches included upstream
    - JDK-8197429/PR3546/RH153662{2,3}
    - JDK-8184309/PR3596
    - JDK-8210647/RH1632174
  - Re-generate patches
    - JDK-8203030
  - Add casts to resolve s390 ambiguity in calls to log2_intptr
  - Resolves: rhbz#1693468


author: Jaromir Capik <jcapik@redhat.com> 0:5.0-6
changelog:
  - Fixing #835786 - javacc: Invalid upstream URL
  - Minor spec file changes according to the latest guidelines


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.3.1-2
changelog:
  - Remove workaround for guice-no_aop
  - Remove fedora-review subpackage
  - Resolves: rhbz#1016667
  - Related: rhbz#1015158


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.1.3-7
changelog:
  - Remove unneeded dependency from POM: maven-cobertura-plugin
  - Remove unneeded dependency from POM: maven-findbugs-plugin
  - Resolves: rhbz#880692


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-5
changelog:
  - Moving from rpmfusion-free to Fedora because it will be free of known patents
    in all countries from 2012-04-04 onwards
  - Changed license from GPL to GPLv2+ and included up-to-date license file


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.5.1-1
changelog:
  - New upstream release
  - Updated nopprof patch to match new release
  - Fixed a few bogus changelog entries


author: Michal Srb <msrb@redhat.com> - 9.0.3-4
changelog:
  - Add missing BR: maven-plugin-build-helper
  - Add MIT license text
  - Don't install CDDL license
  - More specific explanation why tests are disabled


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 9.0.3-6
changelog:
  - Clean unused conditional code
  - Remove unused system-related code
  - Remove jetty binary package
  - Install license files with jetty-util package


author: Parag <pnemade AT redhat DOT com> - 0.003-13
changelog:
  - Resolves:rh#847621 - better enabling autohinting by default
  - Resolves:rh#847623 - fontconfig file isn't shipped in rpm
  - Resolves:rh#847627 - Malformed fontconfig config file


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1:1.8.5-11
changelog:
  - Thanks to Ville Skyttä (bz#875343) build against libedit instead of readline
  	what simplify licensing apparently without any loss of functionality


author: Michal Srb <msrb@redhat.com> - 0-0.14.20090319svn
changelog:
  - Install license file with javadoc subpackage (Resolves: rhbz#975411)
  - Add file containing link to CC-BY license text


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-3
changelog:
  - Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
    decode/encode process alters original data (cfu)
  - Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-4
changelog:
  - Bugzilla #1671244 - x25519 allowed in FIPS mode [rhel-7.6.z] (ascheel)
  - Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
    chain [rhel-7.6.z] (jmagne)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-5
changelog:
  - Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
    chain [rhel-7.6.z] (jmagne)


author: Chris Spike <chris.spike@arcor.de> 2:1.0-0.8.20100930svn1125
changelog:
  - Updated to latest upstream svn revision
  - Installed pom.xml
  - Added 'net.sf.jtidy:jtidy' to maven depmap
  - Added 'jtidy:jtidy' to maven depmap


author: Michal Srb <msrb@redhat.com> - 0:4.10-7
changelog:
  - Build-time dependency perl-MD5 replaced with perl(Digest::MD5)
  - Description cleanup (Resolves: #888389)


author: Michal Srb <msrb@redhat.com> - 0:4.11-7
changelog:
  - Drop "-SNAPSHOT" from version ID
  - See: https://lists.fedoraproject.org/pipermail/java-devel/2013-August/004923.html


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8
changelog:
  - Fix vlock doesn't perform PAM account management or credential reinitialization
    Resolves: #1032140


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14
changelog:
  - Replace CtrlL_Lock with Caps_Lock in generated us.map
    Resolves: #1441411
  - Improve man pages and usage messages quality and consistency
    Resolves: #949015


author: Jan Grulich <jgrulich@redhat.com> 0.9.0.8-2
changelog:
  - remove mobile-broadband-mobile-provider-devel as BR
  - add ModemManager as runtime dependency
  - add mobile-broadband-mobile-provider as runtime dependency


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-10
changelog:
  - Avoid duplicates in solid device automounter kcm
    Resolves: bz#1084191
  - Enable automount overrides even when automatic mounting is disabled
    Resolves: bz#1084497


author: Jan Grulich <jgrulich@redhat.com> - 6:4.14.8-6
changelog:
  - KAuth: verify that whoever is calling us is actually who he says he is (CVE-2017-8422)
    Resolves: CVE-2017-8422


author: Pingfan Liu <piliu@redhat.com> 2.0.15-15
changelog:
  - dracut-module-setup.sh: pass ip=either6 param for ipv6
  - dracut-module-setup.sh: install /etc/hosts when using fence_kdump
  - update kdump-anaconda-addon-003-29-g4c517c5.tar.gz


author: Pingfan Liu <piliu@redhat.com> 2.0.15-18
changelog:
  kdumpctl: Rebuild initramfs if loaded kernel modules changed
  dracut-module-setup.sh: don't include multipath-hostonly
  Add document to declare FCoE support (V2)
  Revert "Add document to declare FCoE support"
  Add document to declare FCoE support
  makedumpfile: fix makedumpfile Not tainted in 2nd kernel


author: Pingfan Liu <piliu@redhat.com> 2.0.15-20
changelog:
  - makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
  - dracut-module-setup: Fix DRM module inclusion test for hyper-v
  - kdumpctl: remove some cmdline inheritage from 1st kernel
  - kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
  - kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
  - Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
  - dracut-module-setup: Fix test for inclusion of DRM modules


author: John Dennis <jdennis@redhat.com> - 0.5-1
changelog:
  - Fix default port bug
    Strip the port from the URL if it matches the scheme (e.g. 80 for
    http and 443 for https)


author: David Howells <dhowells@redhat.com>
changelog:
  - Adjust the manual page for 'keyctl unlink' to show keyring is optional.
  - Add --version support for the keyutils version and build date.


author: David Howells <dhowells@redhat.com> - 1.5.4-1
changelog:
  - Fix the keyctl padd command and similar to handle binary input.
  - Make keyctl show able to take a keyring to dump.
  - Make keyctl show able to take a flag to request hex key IDs.
  - Make keyctl show print the real ID of the root keyring.


author: David Howells <dhowells@redhat.com> - 1.5.6-1
changelog:
  - Fix the request-key.conf.5 manpage.
  - Fix the max depth of key tree dump (keyctl show) [BZ 1002761].
  - The input buffer size for keyctl padd and pinstantiate should be larger [BZ 1002761].
  - Add keyctl_invalidate.3 manpage [BZ 1002761].


author: David Howells <dhowells@redhat.com> - 1.5.7-1
changelog:
  - Provide a utility function to find a key by type and name.
  - Allow keyctl commands to take a type+name arg instead of a key-id arg.
  - Add per-UID get_persistent keyring function [BZ 1014739].


