# changelog

author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-30
changelog:
  - Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
    failures with newest openssl.
    Resolves: rhbz#1416123
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Extend 'gem_' macros for pre-release version support.
    Resolves: rhbz#1397390
  - Make symlinks for json gem.
    Resolves: rhbz#1308992


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-31
changelog:
  - Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
    * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
    Resolves: CVE-2017-0903
  - Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
    Resolves: CVE-2017-0899
  - Fix a DOS vulernerability in the query command (CVE-2017-0900).
    Resolves: CVE-2017-0900
  - Fix a vulnerability in the gem installer that allowed a malicious gem
      to overwrite arbitrary files (CVE-2017-0901).
    Resolves: CVE-2017-0901
  - Fix a DNS request hijacking vulnerability (CVE-2017-0902).
    * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
    Resolves: CVE-2017-0902
  - Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
    * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
    Resolves: CVE-2017-0898
  - Escape sequence injection vulnerability in the Basic
      authentication of WEBrick (CVE-2017-10784).
    * ruby-2.2.8-sanitize-any-type-of-logs.patch
    Resolves: CVE-2017-10784
  - Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
    * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
    Resolves: CVE-2017-14064
  - Command injection vulnerability in Net::FTP (CVE-2017-17405).
    * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
    Resolves: CVE-2017-17405
  - Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
    * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
    Resolves: CVE-2017-14033
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Resolves: CVE-2017-17790


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-32
changelog:
  - Add Psych.safe_load
    * ruby-2.1.0-there-should-be-only-one-exception.patch
    * ruby-2.1.0-Adding-Psych.safe_load.patch
    Related: CVE-2017-0903
  - Disable Tokyo TZ tests broken by recen tzdata update.
    * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
    Related: CVE-2017-0903


author: Jun Aruga <jaruga@redhat.com> - 2.0.0.648-35
changelog:
  - Kill bundled certificates.
  - Add macros to edit files lists in .gemspec
  - Fix buffer under-read in String#unpack
    Resolves: CVE-2018-8778
  - Fix HTTP response splitting in WEBrick
    Resolves: CVE-2017-17742
  - Fix DoS by large request in WEBrick
    Resolves: CVE-2018-8777
  - Fix directory traversal by poisoned NULL byte in Dir.
    Resolves: CVE-2018-8780
  - Fix file and directory creation with directory traversal.
    Resolves: CVE-2018-6914
  - Fix socket creation by poisoned NULL byte.
    Resolves: CVE-2018-8779
  - Fix: return default path with nonexistent home dir
  - Fix flags not propagated in Array#pack and String#unpack.
    Resolves: CVE-2018-16396
  - Fix strictly interpret octal fields in tar headers.
    Resolves: CVE-2018-1000075
  - Fix a security error for duplicate files in a package.
    Resolves: CVE-2018-1000076
  - Enforce URL validation on spec homepage attribute.
    Resolves: CVE-2018-1000077
  - Mitigate XSS vulnerability in homepage attribute.
    Resolves: CVE-2018-1000078
  - Prevent Path Traversal issue during gem installation.
    Resolves: CVE-2018-1000079
  - Fix unsafe Object Deserialization Vulnerability in gem owner.
    Resolves: CVE-2018-1000074
  - Refresh expired certificates.
  - Fix path traversal when writing to a symlinked basedir outside of the root
    Resolves: CVE-2018-1000073


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-36
changelog:
  - Introduce `Gem::UserInteraction#verbose` method as precondition to fix
    CVE-2019-8321.
    * rubygems-2.3.0-refactor-checking-really_verbose.patch
  - Fix escape sequence injection vulnerability in verbose.
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325
    * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch


author: Vít Ondruch <vondruch@redhat.com> - 1.1-1
changelog:
  - Bump version.
  - Add -scldevel sub-package.
    Resolves: rhbz#1063297
  - Add -build package dependency on scl-utils-build.
    Resolves: rhbz#1058615
  - Add LICENSE, README and man page.
    Resolves: rhbz#1061459


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-42
changelog:
  - Update to Ruby 1.9.3-p484.
    - Resolves: rhbz#1033904
  - Fix heap overflow in floating point parsing (CVE-2013-4164).
    - Resolves: rhbz#1033492
  - Allow MD5 in OpenSSL for tests.


author: Josef Stribny <jstribny@redhat.com> - 1.9.3.448-43
changelog:
  - Fix depending collections can't point into correct directory
    - Resolves: rhbz#1002434
  - Fix binary extensions cannot be loaded from an scl namespace other than ruby193
    - Resolves: rhbz#998845


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-49
changelog:
  - Explicitly depend on libyaml, to workaround issues with scl prefixed libyam.
    Resolves: rhbz#1070763


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.484-50
changelog:
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164004
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Related: rhbz#1164004
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Related: rhbz#1164004


author: <vondruch@redhat.com> - 1.7.8-2
changelog:
  - Update to Bundler 1.7.8.
    Resolves: rhbz#1194243
  - Use symlinks for vendored libraries.
    Resolves: rhbz#1163076


author: Vít Ondruch <vondruch@redhat.com> - 0.16.0-1
changelog:
  - Update to thor 0.16.0.
  - Remove rubygem(diff-lcs) dependency, since it is just optional.
  - Remove rubygem(ruby2ruby) dependnecy, since it is just optional, to allow
    conversion of Rakefiles to Thorfiles (but it doesnt work withou ParseTree anyway).


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.0.0-52.dev.git70ca035
changelog:
  - built commit 70ca035 with additional patches to change default root and
  to revert apply cgroups earlier


author: Honza Horak <hhorak@redhat.com> - 0.17-77
changelog:
  - Free already alocated memory when parsing of RPC request failed
  - Require systemd instead of systemd-units
  - Remove SysV init converting


author: Petr Kubat <pkubat@redhat.com> - 0.17-81
changelog:
  - Remove execute permissions from *.service files (#1422022)
  - Fix wrong Source url (#1418690)
  - Add BSD license text (#1418686)


author: Andreas Schneider <asn@redhat.com> - 4.9.1-1
changelog:
  - resolves: #1649434 - Update to version 4.9.1
  - resolves: #1648852 - Fix out of bound array access in ctdb
  - resolves: #1647960 - Fix segfault in the debug system with hardended build
  - resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
  - resolves: #1650452 - Add smbc_setOptionProtocols()
  - resolves: #1659513 - Fix testparm/pdbedit crash
  - resolves: #1529301 - Added new 'net ads spn' command
  - resolves: #1595277 - Fix manpage for 'net ads lookup'
  - resolves: #1600274 - Fix vfs_audit log which does not show full path names
  - resolves: #1623140 - Fix handling the 'disable netbios' option
  - resolves: #1624227 - Connect to spoolss with the correct version information
  - resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
  - resolves: #1579401 - Implement 'net ads leave --keep-account'
  - resolves: #1624227 - Fix spoolss client operations against newer Windows
                         versions
  - resolves: #1656405 - Fix looking up local system accounts


author: Andreas Schneider <asn@redhat.com> - 4.9.1-2
changelog:
  - resolves: #1674403 - Fix panic when setting 'force group' on a share with
                         an active connections
  - resolves: #1670720 - Fix installation of samba-python
  - resolves: #1669476 - Fix user lookup via UPN


author: Andreas Schneider <asn@redhat.com> - 4.9.1-3
changelog:
  - resolves: #1479451 - Fix 'net' command auth with Kerberos
  - resolves: #1686158 - Fix printing with CUPS
  - resolves: #1662408 - Fix username/password printing with CUPS


author: Andreas Schneider <asn@redhat.com> - 4.9.1-4
changelog:
  - resolves: #1690222 - Fix --max-protocol documentation of smbclient
  - resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
  - resolves: #1696524 - Fix CVE-2019-3880


author: Andreas Schneider <asn@redhat.com> - 4.9.1-8
changelog:
  - resolves: #1754838 - Fix username/password auth with smbspool
  - resolves: #1754835 - Fix builtin groups creation.


author: Andreas Schneider <asn@redhat.com> - 4.9.1-9
changelog:
  - resolves: #1759445 - Fix trusted domain enumeration in windind caused
                         a Active Directory update


author: Andreas Schneider <asn@redhat.com> - 4.8.3-1
changelog:
  - related: #1558560 - Rebase to Samba version 4.8.3
  - resolves: #1579398 - Add winbind localauth krb5 plugin


author: Andreas Schneider <asn@redhat.com> - 4.8.3-4
changelog:
  - resolves: #1614132 - Fix delete-on-close after smb2_find
  - resolves: #1614265 - Fix CVE-2018-1139
  - resolves: #1614269 - Fix CVE-2018-10858


author: Nils Philippsen <nils@redhat.com> - 1.0.14-10
changelog:
  - add missing documentation files AUTHORS, COPYING, README
  - don't distribute sane-style.rc
  - use %buildroot consistently
  - explain missing xcam.desktop file


author: Nils Philippsen <nils@redhat.com> - 1.0.14-14
changelog:
  - clean up:
    - don't BR: gimp-devel, R: sane-backends
    - get rid of buildroot, %makeinstall and %clean section
    - dont obsolete/provide "sane" (ancient)


author: Matej Habrnal <mhabrnal@redhat.com> - 0.13-13
changelog:
  - add support for Ruby
    - Related: #1334604
  - actualize list of normalization function in satyr
    - Related: #1332869
  - fix defects found by coverity
    - Related: #1336390


author: <kwenning@redhat.com> - 1.3.1-3
changelog:
  - mention timeout caveat with SBD_DELAY_START
    in configuration template
  - make systemd wait for sbd-start to finish
    before starting pacemaker or dlm

    Resolves: rhbz#1525981


author: <kwenning@redhat.com> - 1.3.1-7
changelog:
  - reenable sbd on upgrade so that additional
    links to make pacemaker properly depend on
    sbd are created

    Resolves: rhbz#1525981


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.0-2
changelog:
  - rebuild against pacemaker 1.20 to make sbd actually use
    the new libpengine API

    Resolves: rhbz#1661233


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.0-3
changelog:
  - finalize cmap connection if disconnected from cluster
  - make handling of cib-connection loss more robust

    Resolves: rhbz#1691484


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.1-11
changelog:
  - Fix mounted filesystem is shown as disabled when fstab entry uses link, UUID or LABEL
    Resolves: #921487


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.0-5
changelog:
  - Add support for arbitrary names of network devices in Linux_NetworkPortImplementsIPEndpoint
    association
    Resolves: #682386
  - Remove macros from changelog, register to sfcb


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.2.0-3
changelog:
  - Fix provider segfaults when enumerating instances of Linux_SysfsAttribute class
  - Fix provider doesn't show much sysfs entries
  - Add mofs registration for various CIMOMs


author: Tomas Bzatek <tbzatek@redhat.com> - 0.8.0-10.20120315cvs
changelog:
  - Add support for rsyslog $IncludeConfig directive (#971807)
  - Add support for filter definitions (#971807)
  - Various rsyslog compatibility fixes (#971807)


author: Roman Rakus <rrakus@redhat.com> - 2.2.7-3
changelog:
  - Fixed a typo
  - Added missing providers
  - improved providers registration
  - Fixed owning of filesystem's directories (man)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-7
changelog:
  - Fix sblim-gather is installing files under /etc/tmpfiles.d/
    Resolves: #1180992
  - Build with PIE and full RELRO
    Resolves: #1092566


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-8
changelog:
  - Fix reposd crashes with SIGFPE during calcluation of interval metric when there
    are duplicate data values in the repository
    Resolves: #1467038


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use Pegasus root/interop instead of root/PG_Interop
  - Enable System Z specific providers for s390 and s390x architecture
    Resolves: #1545811


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.16-3
changelog:
  - Fix indCIMXmlHandler crash in IndCIMXMLHandlerInvokeMethod with Embedded Instances 
    Resolves: #957747
  - Fix sfcb creates invalid XML with embedded object inside embedded object
    Resolves: #957742


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.16-11
changelog:
  - Fix connection fails to openwsman with sfcbLocal frontend
    Resolves: #1047781
  - Fix multilib issue with man page and config file
    Resolves: #1067842


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.5-6
changelog:
  - Move libcimcClientXML.so from -devel to main package - it's needed for proper function
    Resolves: #1056407


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-7
changelog:
  - Fix wrong usage of libcurl API, which caused segfaults when wbemcli was used
    with https scheme (patch by kdudka@redhat.com)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-10
changelog:
  - Backport (slightly modified) configurable SSL version feature from upstream,
    update man page accordingly
    Resolves: #1239115


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-11
changelog:
  - Update default CA certificate file path due to recent changes in tog-pegasus
    Resolves: #1320077
  - Fix wbemcli dont accept dot (.) as password character on command line
    Resolves: #1103368
  - Fix bogus date in %changelog


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.43-4
changelog:
  - Mark SELinux rules as machine only (RHBZ#1630739)
  - Mark service disabled rules as machine only (RHBZ#1630739)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.43-5
changelog:
  - Remove ensure_gpgcheck_repo_metadata rule from profiles (RHBZ#1703010)
  - Deduplicate CCE assigned to rules (RHBZ#1703092)


author: Jan Černý <jcerny@redhat.com> - 0.1.43-12
changelog:
  - Make aide and smart card rules not applicable to containers (RHBZ#1711893)
  - Added rule dconf_db_up_to_date to ensure dconf databases are up-to-date (RHBZ#1631378)


author: Martin Preisler <mpreisle@redhat.com> 1.1.1-1
changelog:
  - Require English fonts (bz#1134418)
  - Updated with latest upstream URLs
  - Reorganized the spec a little
  - Removed SCL related parts from the spec
  - Updated to new upstream release 1.1.1


author: Watson Sato <wsato@redhat.com> 1.1.4-1
changelog:
  - Updated to new upstream release 1.1.4 (rhbz#1404394)
  - UX improvements
  - Fixed fetch remote resources warning (rhbz#1367923)
  - Improved error message when scanning a remote machine in which openscap-scanner
    is not installed (rhbz#1368463)
  - Fixed search on disabled item (rhbz#1368493)
  - Fixed multi benchmark tailoring use case
  - Fixed a bug that caused tailored profiles to have titles duplicated (rhbz#1320197)
  - Fixed path of tailoring file in dry run output (rhbz#1368516)
  - Now Workbench doesn't allow edit of values with prohibitedChanges attribute
  - Added --version and --help command line options (rhbz#1368527)
  - Improved workflow of dry run execution (rhbz#1385549)
  - Check capabilities of oscap with propper arguments (rhbz#1368463)
  - Show number of selected rules in profile listing


author: Martin Preisler <mpreisle@redhat.com> 1.1.6-1
changelog:
  - Updated to new upstream release 1.1.6
  - Tri-state checkboxes for tailoring
  - Fixed remote host and port being cleared when scan starts
  - Fiixed formating of Profile html description in Tailoring Window
  - Fixed oscap message "Downloading ... ok" appearing as an error
  - Fixed tab order of widgets in main window
  - Load Content as the default button of the SSG integration dialog
  - New validation of the customization file name
  - Generate bash and Ansible remediation roles from profiles
  - Generate bash and Ansible remediation roles from results after scanning
  - Fixed a short integer overflow when using ssh port numbers higher than 32k
  - Fixed long loading times on OSX
  - Open tailoring file directly via command line


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.0-4
changelog:
  - Add patch to use build_dir argument in build_extension
  - Fix rpmlint warnings
  - License Updated
  - Don't build with python3


author: Jan Zeleny <jzeleny@redhat.com> - 20130529-13
changelog:
  - bump the version to get in sync with 7.1 branch
  - Reflect the state of %nfsmountable macro in collections' rpm macro files
  - escape all the % chars in changelog


author: Petr Hracek <phracek> - 4.1.0-0.20.20120314git3c2946
changelog:
  - Multiple packages are installing files under /etc/tmpfiles.d
  - comply http://fedoraproject.org/wiki/Packaging:Guidelines#Tmpfiles.d
  - Resolves: rhbz#1121958


author: Cole Robinson <crobinso@redhat.com> - 1.7.5-1
changelog:
  - Rebased to version 1.7.5
  - Support for obtaining SMBIOS tables directly from QEMU.
  - XHCI USB controller fixes for real hardware
  - seavgabios: New driver for "coreboot native vga" support
  - seavgabios: Improved detection of x86emu versions with incorrect
    emulation.
  - Several bug fixes and code cleanups


author: Cole Robinson <crobinso@redhat.com> - 1.8.0-1
changelog:
  - Rebased to version 1.8.0
  - Initial support for USB3 hubs
  - Initial support for SD cards (on QEMU only)
  - Initial support for transitioning to 32bit mode using SMIs (on QEMU TCG
    only)
  - SeaVGABIOS improvements


author: Roman Kagan <rkagan@virtuozzo.com> 1.8.2-2.vz7
changelog:
  - build on x86_64 but with native toolchain
  - drop main package to be able to use ExclusiveArch
  - drop bootsplash from 128k bios otherwise it doesn't fit in size due to older
    compiler


author: Rui Matos <rmatos@redhat.com> - 3.8.0-5
changelog:
  - Fix for "seahorse-nautilus broken by glib2 regression related to
    SIGCHLD warnings"
  - Resolves: #1093123


author: Martin Briza <mbriza@redhat.com> - 4.2.1-9
changelog:
  - Backported commit from upstream to fix treating "x26" as "&" character
  - Added virtual provide for gnulib according to http://fedoraproject.org/wiki/Packaging:No_Bundled_Libraries 
    Resolves: #812067 #821776


author: Martin Briza <mbriza@redhat.com> - 4.2.2-1
changelog:
  - New release
  - Dropping included patches: sed-4.2.1-data-loss.patch sed-4.2.1-fix-0x26-on-RHS.patch sed-4.2.1-makecheck.patch
  - Dropping unused patch sed-4.2.1-dummyparam.diff
  - Regenerated sed-4.2.{1,2}-copy.patch
  - Minor change to patching (creating backup files)


author: Jan Pacner <jpacner@redhat.com> - 4.2.2-5
changelog:
  - Related: #948598 (Man page scan results for sed; introduce -c argument, add
    help for -b --binary arguments, cleanup arguments & help)


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.6
changelog:
  - Allow nova_t domain to use pam
  Resolves: rhbz:#1645270
  - sysstat: grant sysstat_t the search_dir_perms set
  Resolves: rhbz#1645271


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.8
changelog:
  - Add interface domain_rw_all_domains_keyrings()
  Resolves: rhbz#1665815
  - Allow gssd_t domain to read/write kernel keyrings of every domain.
  Resolves: rhbz#1665815


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.9
changelog:
  - Allow gssd_t domain to manage kernel keyrings of every domain.
  Resolves: rhbz#1665815
  - Add new interface domain_manage_all_domains_keyrings()
  Resolves: rhbz#1665815


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.11
changelog:
  - Update nagios_run_sudo boolean with few allow rules related to accessing sssd
  Resolves: rhbz#1692893


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.14
changelog:
  - Allow nrpe_t domain to read process state of systemd_logind_t
  - Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
  - Allow nrpe_t domain to be dbus cliennt
  - Allow ngaios to use chown capability
  Resolves: rhbz#1692893


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-246
changelog:
  - Allow ngaios to use chown capability
  Resolves: rhbz#1653309
  - Dontaudit gpg_domain to create netlink_audit sockets
  Resolves: rhbz#1535109
  - Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
  Resolves: rhbz#1558836
  - Update domain_can_mmap_files() boolean to allow also mmap lnk files


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-247
changelog:
  - Fix typo in gpg SELinux module
  - Update gpg policy to make ti working with confined users
  Resolves: rhbz#1535109
  - Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
  Resolves: rhbz#1653309
  - Allow nrpe_t domain to be dbus cliennt
  Resolves: rhbz#1653309
  - Add interface sssd_signull()
  Resolves: rhbz#1653309
  - Update userdomains to allow confined users to create gpg keys
  Resolves: rhbz#1535109


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-249
changelog:
  - Allow nrpe_t domain to read process state of systemd_logind_t
  - Add interface systemd_logind_read_state()
  Resolves: rhbz#1653309


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-252.4
changelog:
  - Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
  Resolves: rhbz#1766095


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.6-2
changelog:
  - Fixed milter_helo regression (milter-helo-fix patch)
    Resolves: rhbz#895552
  - Fixed bogus dates in changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.7-5
changelog:
  - Explicitly enabled sm-client statistics
    Resolves: rhbz#890585
  - Enable ECDHE support
    Resolves: rhbz#1124827
  - Properly set {client_port} value on little endian machines,
    patch by Kelsey Cumminngs <kgc@corp.sonic.net>
    Resolves: rhbz#1210914
  - Added makemap and its manual page into alternatives
    Resolves: rhbz#1225891
  - Modified nm-dispatcher script to asynchronously restart sendmail and
    not block the connection activation
    Resolves: rhbz#1237070
  - Added config options allowing disablement of TLS 1.1/2
    Resolves: rhbz#1281476
  - Fixed problem with e-mails not sending from IPv6 enabled server
    to servers with MX record pointing to CNAME
    Resolves: rhbz#1294870
  - Added editmap
    Resolves: rhbz#1342393
  - Removed systemd limit for sendmail restarts to workaround failure due to
    rapid restarts caused by NetworkManager dispatcher script
    Resolves: rhbz#1395102
  - Fixed op.pdf
    Resolves: rhbz#1401070


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.29-1
changelog:
  - Fix sealert message for process2 (#1507909)
  - Remove additional "If " string from plugin messages (#1177347)
  - Fix semi-translated messages (#1332126)
  - Make labels on GtkButtons translatable
  - Set translation domain for Gtk.Builder() object to have strings correctly translated (#1370100)
  - Do not split If sentences to framework and plugins (#1177347)
  - Don't stop when the plugin directory is empty
  - Change "check_for_man" return value upon failure
  - Fix "plugin details" message content
  - Add "init_args" function to Plugin 
  - Fix sealert crash when setroubleshootd fails to start (#1405003)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-1
changelog:
  - Fix summary and "if" text for AVCs with unknown target path (#1437772)
  - Remove unused booleans.py file
  - src/sealert: Finish dbus communication after error (#1461486)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-3
changelog:
  - Check for the existence of setroubleshoot group separately (#1478118)
  - Fix AVC.__typeMatch to handle aliases properly (#1459844, #1459835, #1459875)
  - Fix allowed_target_types (#1460642, #1460648)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-4
changelog:
  - Catch exceptions caused by lookup_signature (#1636369, #1627908)
  - Fix translation of hex values in AVCs (#1477236)


author: Petr Lautrbach <plautrba@redhat.com> - 3.0.65-1
changelog:
  - Remove duplicated strings from sys_resource.py
  - Spelling fixes
  - Fix catchall plugin message for capability2
  - Stop executing restorecon plugin on specified path prefixes


author: Vit Mojzis <vmojzis@redhat.com> - 3.0.66-1
changelog:
  - Fix catchall plugin message for process2 (#1507909)
  - Correct grammatical errors (#1331780)
  - Do not split If sentences to framework and plugins (#1177347)
  - Fix typo in "lt" translation header (#1468985)
  - catchall_boolean.py - 'None' man page is None man page
  - Fix restorecon "then" text (#1332097)


author: Vit Mojzis <vmojzis@redhat.com> - 3.0.67-1
changelog:
  - bind_ports: Do not use when there are no allowed_target_types (#1255627)
  - Fix summary and "if" text for AVCs with unknown target path (#1437772)
  - Update translations


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-3
changelog:
  - add more securetty required for mainframes (#1067347)
  - set SHELL envvar to /bin/bash in bashrc (#1063552)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-5
changelog:
  - reserve uidgid pair 142:142 for activemq (#1086923)
  - add xfs to /etc/filesystems, fallback to /proc/filesystems
    (#1123832)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-6
changelog:
  - change reservation of 185:185 to jboss user (#1192413)
  - reserve uidgid pair 167:167 for ceph (#1221043)
  - reserve uidgid for systemd-network(192:192) (#1213820)
  - reserve uidgid for systemd-resolve(193:193) (#1213820)
  - mention systemd-jounal-gateway can be dynamic (#1213820)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-7
changelog:
  - add basic empty subuid/subgid files for docker (#1311278)
  - specify full path to utilities in /etc/profile and /etc/bashrc
    (#1331871)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-8
changelog:
  - fix group id for tape in /etc/group (should be 33) (#1433020)
  - provide a way how to override set envvars through sh.local file(#1344007)
  - provide a way how to override set ennvars through csh.local file


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-10
changelog:
  - fix crudp name in /etc/protocols (#1566469)
  - do not list /sbin/nologin and /usr/sbin/nologin in /etc/shells
    (#1571104)


author: Richard W.M. Jones <rjones@redhat.com> - 0-1.1.20110622svn
changelog:
  - Fix date in release string.
    NB: To make this version > than the previous, I had to use 1.1.20110622
    instead of 0.1.20110622, since the old second field was 20110623.
  - Unset MAKEFLAGS, since parallel make breaks the build.
  - Bring the spec file up to modern standards.


author: Jan Synáček <jsynacek@redhat.com> - 1.2.0.10-9
changelog:
  - dos2unix'ed the patch
  - Call dos2unix before patching and dos2unix Makefile as well
  - Use %{_sbindir} instead of '/sbin'


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-25
changelog:
  - prevent creating users ".." or "." or with all numeric usernames (#1373645)
  - raise limit for passwd and shadow entry length but also prevent
    writing longer entries (#1422497)
  - consider also supplementary group membership in newgrp (#1425078)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-1
changelog:
  - rebase to current upstream release to bring newuidmap and newgidmap
  - re-allow all numeric usernames when SHADOW_ALLOW_ALL_NUMERIC_USER
    environment variable is set


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-2
changelog:
  - ignore LOGIN_PLAIN_PROMPT variable in login.defs
  - correct wrong SUB_UID/GID_COUNT default in manual page (#1690522)


author: Bastien Nocera <bnocera@redhat.com> - 1.8-3
changelog:
  + shared-mime-info-1.8-3
  - Remove triggers, they're not supported in RHEL 7.4's RPM
  Resolves: #1433916


author: Bastien Nocera <bnocera@redhat.com> - 1.8-4
changelog:
  + shared-mime-info-1.8-4
  - Fix CSV files being associated with LibreOffice Math instead
    of LibreOffice Calc
  - Resolves: #1438589


author: Petr Pisar <ppisar@redhat.com> - 4.13.3-2
changelog:
  - Fix decoding from positional argument while overriding output file
    (bug #901895)
  - Fix decoding to standard output when output file is - or /dev/stdout
    (bug #901895)


author: Peter Jones <pjones@redhat.com> - 0.9-1
changelog:
  - Update to 0.9-1
  - Fix early call to BS->Exit()
    Resolves: rhbz#1115843
  - Implement shim on aarch64
    Resolves: rhbz#1100048
    Resolves: rhbz#1190191


author: Peter Jones <pjones@redhat.com> - 10-1
changelog:
  - Update to 10-1
  - Support ia32
    Resolves: rhbz#1310766
  - Handle various different load option implementation differences
  - TPM 1 and TPM 2 support.
  - Update to OpenSSL 1.0.2k


author: Peter Jones <pjones@redhat.com> - 11-1
changelog:
  - Update to 11-1
    Related: rhbz#1310766
  - Fix regression in PE loader
    Related: rhbz#1310766
  - Fix case where BDS invokes us wrong and we exec shim again as a result
    Related: rhbz#1310766


author: Peter Jones <pjones@redhat.com> - 15-3
changelog:
  - Fight with binutils to try to get a binary without timestamps in it.  Again.
    Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 15-4
changelog:
  - Fight with binutils to try to get a binary without timestamps in it.
    Again, but without breaking aarch64 this time.
    Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 15-5
changelog:
  - Fix a couple more things that are breaking reproducability, and thus
    breaking external review.
    Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 0.9-2
changelog:
  - Apparently I'm *never* going to learn to build this in the right target
    the first time through.
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 10-0.1
changelog:
  - Support ia32
    Resolves: rhbz#1310766
  - Handle various different load option implementation differences
  - TPM 1 and TPM 2 support.
  - Update to OpenSSL 1.0.2k


author: Peter Jones <pjones@redhat.com> - 11-0.1
changelog:
  - Update to 11-0.1 to match shim-11-1
    Related: rhbz#1310766
  - Fix regression in PE loader
    Related: rhbz#1310766
  - Fix case where BDS invokes us wrong and we exec shim again as a result
    Related: rhbz#1310766


author: Nathan Scott <nathans@redhat.com> - 0.6.2-1
changelog:
  - Switch to enabling the Java 8+ maven modules only now.
  - Add unitsofmeasurement prefix to package name.
  - Update to latest upstream sources.


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1.0-8
changelog:
  - Fix Obsolete: that was wrong when renaming the package.
  - The font base folder was listed twice (one was hidden in the font macro)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.3.0-6
changelog:
  - Add ASM dependency only to a single module, not all of them
  - Disable animal-sniffer plugin
  - Don't generate auto-requires for optional dependencies


author: Michal Srb <msrb@redhat.com> - 2.3.0-7
changelog:
  - sisu-inject-bean: add dependency on asm
  - Fix dependencies on javax.inject and javax.enterprise.inject
  - Remove bundled JARs and .class files from tarball


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.3.0-8
changelog:
  - Remove unneeded animal-sniffer BuildRequires
  - Add forge-parent to BuildRequires to ensure it's present


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-4
changelog:
  - Fixed: UPN-based search for AD users does not match an entry in slapi-nis map cache
  - Resolves: #1361123
  - Fixed: slapi-nis plugin modifies DS data
  - Resolves: #1360245


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-5
changelog:
  - Resolves: #1473572
  - Fixed: Make changes in overrides available in the compat tree at runtime
  - Resolves: #1473577
  - Fixed: slapi-nis should use requests to SSSD with ability to cancel them with a timeout


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-8
changelog:
  - Fixed: #1473572
  - Changes of ID overrides now force clearing of affected SSSD cache entries on IPA master
  - Related: #1473577
  - Synchronize timeout-enabled code with ipa-extdom-extop


author: Daniel Axelrod <daxelrod@datto.com> - 1:7.0-6
changelog:
  - Remove unused patches
  - Drop pre script for migrating from unsupported Fedora versions
  - Replace sed with configure switch


author: Rajeesh K Nambiar <rajeeshknambiar@gmail.com> 5.0.1-1
changelog:
  - New upstream release 5.0.1 introducing Unicode 5.1 compatibility
  - Resolves Meera size issues
  - Drop upstreamed patches for RHBZ# 545683, 616324 and 781938
  - Resolves RHBZ# 803183
  - Spec cleanup


author: Pravin Satpute <psatpute@redhat.com> 5.0.1-2
changelog:
  - Resolved bug 803234
  - Updated panose for Meera, RaghuMalayalam and Kalyani
  - Changed conf file of Rachana from Sans to Serir


author: Pravin Satpute <psatpute@redhat.com> 6.0-1
changelog:
  - Resolves: rh#1023847 - Upstream new release with fix against Harfbuzz NG
  - New release 6.0 with many new features and bug fixes
  - v2 opentype spec support for Malayalam (mlm2) for Meera, Rachana, Raghumalayalam
  - Full support to Harfbuzz, Adobe and Uniscribe shaping engines
  - Cleaned up and updated lookup tables
  - Meaningful names to glyphs to help with Lookup tables reusability
  - Old Figures and other Typographical glyphs to Rachana
  - Dotreph positioning using GPOS 'abvm' lookup
  - Unicode 6.1 Malayalam glyphset for many fonts


author: Michal Srb <msrb@redhat.com> - 1.11-5
changelog:
  - Replace bundled base64 implementation
  - Replace bundled gdata-java-client classes with apache-commons-codec


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-5
changelog:
  - patch: Fix failure in invoking btrfs internal comparison of subvolumes
  - patch: Remove references to missing programs from man pages
  - Resolves: #1060806, #1063844


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-6
changelog:
  - patch: Add norecovery option mounting XFS read-only snapshot
  - patch: Fix ACL modification failure with XFS filesystem
  - patch: Sync SELinux context of .snapshots subvolume (btrfs only)
  - Resolves: #1064111, #1065969, #1069312


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-7
changelog:
  - patch: fix empty-pre-post cleanup algorithm
  - patch: add conditionals for btrfs library versions
  - Resolves: #1071973 #1142954


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-9
changelog:
  - patch: fix snapperd abort while passing large data over dbus
  - patch: workaround linkage issue on s390 and ppc64le
  - Resolves: #1229353


author: Ondrej Kozina <okozina@redhat.com> - 0.2.8-1
changelog:
  - Update to snapper 0.2.8
  - patch: rule out race while mounting lvm snapshot
  - Resolves: #1250371 #1262370


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.2-2
changelog:
  - Resolves: rhel#1017015 Use readline, not compat-readline5-devel
  - Added two patches fixing -Wformat issues
  - Enable hardened build
  - Cleanup obsolete spec file lines


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-2
changelog:
  - Change install directory to /usr/lib*/pkcs11/
  - Install pkcs11 module file
  - Use official upstream tar ball
  - Create ods user to own softhsm/token files
  - Enable migration tools (for epel6 softhsm-v1 installs)
  - Require p11-kit, nss-tools, for SoftHSM PKCS #11 Module file
  - Copy pk11install.c from coolkey package which is not built on all arches
  - Enable hardened build
  - Add upstream official source url
  - Add devel package
  - Excluding i686/ppc (make check fails and we are a leave package)
  - (thanks to Petr for jumping in for the initial build while I was too busy)


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-3
changelog:
  - Fix softhsm2-pk11install buid and post call
  - Do not use --with-objectstore-backend-db (causes issues on i686)


author: Petr Spacek <pspacek@redhat.com> - 2.0.0rc1-1
changelog:
  - Resolves: rhbz#1193892 Rebase to latest upstream version
  - i686/ppc/s390 architectures are now included in the build


author: Pavel Moravec <pmoravec@redhat.com> = 3.4-4
changelog:
  - [libvirt] fix per-process cgroup collection
    Resolves: bz1148381
  - [ceph] exclude temporary mount locations from collection
    Resolves: bz1449904
  - [policies/redhat] make missing 'filesystem' package non-fatal
    Resolves: bz1393961


author: Pavel Moravec <pmoravec@redhat.com> = 3.4-7
changelog:
  - [openstack plugins] Tripleo specific containerized services
    Resolves: bz1463635
  - [jars] Scan only /usr/{share,lib}/java by default
    Resolves: bz1482574
  - [gluster_block] Added new plugin gluster_block
    Resolves: bz1491964


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-2
changelog:
  - [vdo] revise collected files
    Resolves: bz1509079
  - further updates to OSP plugins in containerized environment
    Resolves: bz1506908
  - [opendaylight] new plugin
    Resolves: bz1483414
  - collect all keystone domains
    Resolves: bz1491042
  - haproxy, etcd and docker tracebacks
    Resolves: bz1519267
  - [origin] fix typo in oc adm diagnostics
    Resolves: bz1463509
  - [postgresql] Call SCL pg_dump with proper path
    Resolves: bz1494420


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-4
changelog:
  - [pcp] really apply sizelimit to logs collected
    Resolves: bz1353873
  - [opendaylight] collect more logs and puppet config
    Resolves: bz1483414
  - [plugins] allow add_cmd_output to collect binary output
    Resolves: bz1494420
  - [openstack_ironic] collect drivers, ports and much more
    Resolves: bz1517767
  - [openstack_cinder] check for api service running
    Resolves: bz1506908


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-5
changelog:
  - [rabbitmq] Log collection when run in containerized OSP
    Resolves: bz1525620
  - [ipa] add KRA logs and correct PKI directories
    Resolves: bz1535390
  - [opendaylight] Enable plugin by puppet-opendaylight package
    Resolves: bz1483414
  - [etcd] Do not collect private etcd keys
    Resolves: bz1539038


author: Adrian Reber <adrian@lisas.de> - 3.1.6-1
changelog:
  - updated to 3.1.6
  - removed buildroot and clean section
  - fixed "missing c++ source language detection for .cxx extension" (#728311)
  - fixed "source-highlight : Conflicts with autoconf-archive" (#797794)


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 14.4.1-4
changelog:
  - removed liblpc10 from source tarball due to licensing uncertainity
  - added license file to libgsm
  - fixed bogus dates in changelog


author: Jiri Kucera <jkucera@redhat.com> - 14.4.1-7
changelog:
  - Fix CVE-2017-18189
    Upstream patch: https://sourceforge.net/p/sox/code/ci/09d7388c8ad5701ed9c59d1d600ff6154b066397/
    Resolves: #1553590


author: Petr Lautrbach <plautrba@redhat.com> 3.3.2-17
changelog:
  - document rawbody's split into chunks (#892350)
  - avoid using array of cleaned uris <fkrska@redhat.com> (#892348)


author: Petr Lautrbach <plautrba@redhat.com> 3.4.0-1
changelog:
  - update to 3.4.0
  - Apply fix for amavisd and spampd reloading after rules updates. Fixes bug #1145654


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-3
changelog:
  - Fix CVE-2018-11781 - Local user code injection in the meta rule syntax
  - Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for
  - scan timeouts and resulting denial of service
  - Resolves: rhbz#1632999


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-4
changelog:
  - Add missing Requires for perl(XSLoader) and perl(ExtUtils::MakeMaker),
  - which are no longer auto-generated due to a (expected) change in rpm-build
  - Related: rhbz#1632999


author: Kalev Lember <kalev@smartlink.ee> - 1.9-1
changelog:
  - Update to 1.9
  - Added libsparsehash.pc pkgconfig file
  - The -devel subpackage is no longer noarch as the new .pc file
    needs to go in arch-specific _libdir


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2-0.17.rc1
changelog:
  - update config.guess and config.sub for aarch64 (#926562)
  - make some dependencies arch-specific
  - remove obsolete macros


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-4
changelog:
  - Revert back to spice 0.12 behaviour where QXL guest resources for cursor
    commands are only released when the current cursor is replaced. This avoids
    a QEMU regression causing crashes during migration
    Resolves: rhbz#1567944


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-5
changelog:
  - Don't mute Record channel on client reconnection
    Resolves: rhbz#1549132
  - Allow to configure TLS protocol versions and ciphers which SPICE will use for
    TLS communications
    Resolves: rhbz#1562213
  - Enable ECDH ciphers with OpenSSL 1.0
    Resolves: rhbz#1566597


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-7
changelog:
  - Fix off-by-one error during guest-to-host memory address conversion
    Resolves: CVE-2019-3813
  - Add patch for upstream commit 48179332d9da0. This should help with corrupted
    spice-html5 displays
    Resolves: rhbz#1573739
  - Add missing minimum openssl version Requires for patch #24
    Resolves: rhbz#1627693


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 15-7
changelog:
  - Fix build requires and requires (#884632)
  - Cleanup specfile for latest guidelines 
  - Add ASL license text


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-9
changelog:
  - Don't install rsyslog config file. This can cause duplicate logging
    to syslog in rhel6->rhel7 upgrades, and is not really useful anyway
    as the same functionality can be achieved with journald
    Resolves: rhbz#1136881


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-11
changelog:
  - Add client to guest audio volume synchronization
    Resolves: rhbz#1264102
  - Exit with error when virtio channel device is missing
    Resolves: rhbz#1256704


author: Victor Toso <victortoso@redhat.com> - 0.14.0-14
changelog:
  - Do not allow drag-and-drop on (gdm) login screen
    Resolves: rhbz#1328761
  - Do not allow drag-and-drop on locked screen
    Resolves: rhbz#1323623


author: Victor Toso <victortoso@redhat.com> - 0.14.0-17
changelog:
  - Fix 'Dependency failed for Activation socket' message
    Resolves: rhbz#1545212
  - Fix socket leak
    Resolves: rhbz#1650596


author: Victor Toso <victortoso@redhat.com> - 0.14.0-18
changelog:
  - Fix clipboard logs on requests for targets on grab from client
    Resolves: rhbz#1594876
  - Make some clipboard logs debug instead of error
    Resolves: rhbz#1686008


author: Christophe Fergeau <cfergeau@redhat.com> 2.8-7
changelog:
  - Adjust selinux policy to allow use of USB redirection
    Resolves: rhbz#1075173
  - Add test page to package
    Resolves: rhbz#959194


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.17.git5c6f0024
changelog:
  - Latest pre 4.3 snapshot
  - Includes fix for mksquashfs hangs
  - Switch to get pre-release updates from the stable branch at kernel.org


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.18.gitaae0aff4
changelog:
  - Latest pre 4.3 stable snapshot
  - A few minor bug fixes
  - Improvements in getting status info while running unsquashfs


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.20-5
changelog:
  - Resolves: #1404817 - SIGSEV in TunnelStateData::handleConnectResponse()
    during squid reconfigure and restart


author: Doug Ledford <dledford@redhat.com> - 0.0.4-13
changelog:
  - Further tweaks to LSB init script headers
  - Add a %post and %preun scriptlets to add/remove the init script


author: Honggang Li <honli@redhat.com> - 1.0.3-1
changelog:
  - Update to latest upstream version 1.0.3.
  - Remove executable permission bits of srpd.service.
  - Start srpd.service before remote-fs service.
  - Resolves: bz1092530, bz1273181, bz1274119


author: Michal Židek <mzidek@redhat.com> - 1.16.4-12
changelog:
  - Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                           - This was partially fixed by the rebase, but one
                             spec file change was missing.


author: Michal Židek <mzidek@redhat.com> - 1.16.4-14
changelog:
  - Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                             and fails otherwise


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-15
changelog:
  - Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                             /trusts


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-17
changelog:
  - Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                             properly


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-18
changelog:
  - Resolves: rhbz#1710286 - The server error message is not returned if
                             password change fails


author: Michal Židek <mzidek@redhat.com> - 1.16.4-21
changelog:
  - Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
  - Rebuild japanese gmo file explicitly


author: Michal Židek <mzidek@redhat.com> - 1.16.4-21.1
changelog:
  - Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                             config option for known domains [rhel-7.7.z]


author: Michal Židek <mzidek@redhat.com> - 1.16.4-21.2
changelog:
  - Resolves: rhbz#1801207 - id command taking 1+ minute for returning user
                             information [rhel-7.7.z] (


author: Alexey Tikhonov <atikhono@redhat.com> - 1.16.4-21.3
changelog:
  - Resolves: rhbz#1807934 - sssd failover leads to delayed and failed logins
                             [rhel-7.7.z]


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-1
changelog:
  - rebase to most up2date upstream tarball, remove patches already upstream, fix
    code movements in patches (#928758)
  - fix man-page-day objections (private #948866)
  - fix the build for aarch64 (#926571)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-2
changelog:
  - package spax and scpio separately (#959917)
  - fedora-review fixes, unapplied patch
  - make the spax to be pax alternative (#960007)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-7
changelog:
  - we should provide /etc/rmt symlink for a while (related to #968980)
  - use the ssh as the default remote access method


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 1.1.0-1
  — Update to new stable release
  — Major refactoring now that some sanity prevailed upstream in font naming
    Be careful if you used the old font family names


author: Peter Hatina <phatina@redhat.com> - 2.1.0-3
changelog:
  - Changes for EPEL-7
    - Lower systemd required version to 208
    - Rewrite BuildRequires for systemd-devel


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.5.2-4
changelog:
  - Fix seg fault in udiskslvmhelper
    Resolves: rhbz#1436914
  - lvm2daemonutil.c: Close FD for spawned process
    Resolves: rhbz#1463843


author: DJ Delorie <dj@redhat.com> - 4.12-1
changelog:
  - Rebase to strace 4.12, which fixes...
    + Support BLKPG_RESIZE_PARTITION (#1329673)
    + Support getrandom() (#1374268)
    + Fix endless loop in io_submit (#1165548)
  - Merge upstream patches for vhangup and chown
  - Skip some tests on older kernels (RHEL 6)
  - Remove -m64 that rpm macros adds
  - Show mode with O_TMPFILE (#1377847)


author: DJ Delorie <dj@redhat.com> - 4.12-2
changelog:
  - Adjust O_TMPFILE patch to include support even if the
    build-time headers don't have it. (#1377847)


author: DJ Delorie <dj@redhat.com> - 4.12-5
changelog:
  - Handle unexpected CLONE_PTRACE events. (#1466535)
  - Skip tests for s390/ppc64le as well as s390x/ppc64.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.0-2
changelog:
  - Fixed initialization crash of IMV and IMC particularly
    attestation imv/imc as libstrongswas was not getting initialized.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-1
changelog:
  Resolves: #1049523
  Resolves: #1036846
  Resolves: #1007548
  - Modified spec file significantly to reflect the current state of
    the package, as this rebase enables several major modules: TNC
    client and server (IF-TNCCS), IMC-IMV (IF-M), PT-TLS (RFC 6876),
    SWID IMC/IMV, charon daemon and it related libs and modules,
    tnc-pdp, tnc-ifmap plugins.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-2
changelog:
  Resolves: #1049523
  Resolves: #1036846
  Resolves: #1007548
  - A typo caused a patch not being applied, so fixed that and
    bumping the number number.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-4
changelog:
  Resolves:#1067119
  - Fixed full hardening for strongswan (full relro and PIE).
    The previous macros had a typo and did not work
    (see bz#1067119).
  - Fixed files permissions for executables and config files to
    correctly reflect their intent.
  - Fixed tnc package description to eliminate rpmlint errors.
  - Fixed pki binary and moved it to /usr/libexece/strongswan as
    others binaries are there too to eliminate rpmlint errors.
  - Fixed systemd service name to "strongimv TNC".
  - Removed the dependency on gmp-devel


author: Avesh Agarwal <avagarwa@redhat.com> - 5.2.0-1
changelog:
  Resolves: #1120371
  - Rebase to new upstream release 5.2.0
  - IMA/TPM based remote attestation
  - Aikgen tool to generate an Attestation Identity Key bound
    to a TPM
  - PT-EAP transport protocol (RFC 7171) for TNC
  - Enabled support for acert for checking X509 attribute certificate
  - Updates local patches
  - Spec file update
  - openac tool replaced with pki --acert


author: Avesh Agarwal <avagarwa@redhat.com> - 4.55-1
changelog:
  - New upstream realease 4.55
  - Updated local patches
  - enabled fips mode
  - Fixed for pod2man as it build-requires perl-podlators


author: Avesh Agarwal <avagarwa@redhat.com> - 4.56-1
changelog:
  - New upstream realease 4.56.
  - Updated local patches.
  - Fixed upstream URL in spec file.
  - Sourced URL of sha256 hash file in spec file.


author: Tomáš Mráz <tmraz@redhat.com> - 4.56-5
changelog:
  - Allow TLS 1.1 and TLS 1.2 in FIPS mode
  - Documentation fixes of curve and accept/connect options (#1197340)
  - Add negotiated protocol version to the logs (#1275613)


author: Andrey Bondrov <abondrov@virtuozzo.com> - 4.56-6.2
changelog:
  - Create symlinks for /etc/nsswitch.conf, /etc/resolv.conf, /etc/localtime,
    /dev/zero and /dev/null in working directory


author: Vritant Jain <vrjain@redhat.com> 1.17.7-1
changelog:
  - 1297493, 1297485: Restrict visibility of subscription-manager caches.
    (awood@redhat.com)
  - pull translations from zanata 1.17.X, after pushing 1.16.X translations to
    1.17.X and pushing keys file (vrjain@redhat.com)
  - update keys using make gettext (vrjain@redhat.com)
  - pull translations from zanata 1.16.X (vrjain@redhat.com)
  - 1328729: add registry.redhat.io to default registry_hostnames
    (vrjain@redhat.com)
  - Add lxml requirement to test-requirements. (awood@redhat.com)
  - Add noop implementation for deprecated Makefile target. (awood@redhat.com)
  - Force version to be converted to a string. (awood@redhat.com)
  - Correct incorrectly defined options for custom install command.
    (awood@redhat.com)
  - Let setup.py handle populating version.py (awood@redhat.com)
  - Eliminate loading modules from /usr/share/rhsm. (awood@redhat.com)
  - Switch to using lxml for linting. (awood@redhat.com)
  - Handle pep8/flake8 not being available in build environments.
    (awood@redhat.com)
  - Exclude OSTree packages from installation by default. (awood@redhat.com)
  - Make XPath searching 2.6 compatible. (awood@redhat.com)
  - Fix errors found by new linters (awood@redhat.com)
  - Don't use super() with ElementTree.XMLParser. (awood@redhat.com)
  - Add some comments on build philosophy. (awood@redhat.com)
  - Disable version.py generation via setup.py. (awood@redhat.com)
  - Reorganize spec file. (awood@redhat.com)
  - Address issue where Flake8 checked the same file multiple times.
    (awood@redhat.com)
  - Makefile changes. (awood@redhat.com)
  - Consolidate targets in Makefile. (awood@redhat.com)
  - Pare down the Makefile. (awood@redhat.com)
  - Remove items from Makefile now handled by setuptools. (awood@redhat.com)
  - Align Makefile with changes made in setup.py. (awood@redhat.com)
  - Remove docs for long deprecated program. (awood@redhat.com)
  - Fix deprecated XPath expression.  Remove call to missing command.
    (awood@redhat.com)
  - Add icon and Glade files files into setup.py (awood@redhat.com)
  - Add desktop files to setuptools build. (awood@redhat.com)
  - Merge translations back into desktop file. (awood@redhat.com)
  - Add linter to search for undefined Glade handlers. (awood@redhat.com)
  - Check for use of undefined widgets (awood@redhat.com)
  - Use *args for multiple glob searches. (awood@redhat.com)
  - Scan .glade files not .ui files for problematic constructs.
    (awood@redhat.com)
  - Detect debug imports and flag them. (awood@redhat.com)
  - Use extensions that won't be confused for source files. (awood@redhat.com)
  - Simplify AST checking and make it more flexible. (awood@redhat.com)
  - Use AST parsing to find constructs that confuse xgettext. (awood@redhat.com)
  - Add linting commands. (awood@redhat.com)
  - Use some distutils provided utilities.  Refactor. (awood@redhat.com)
  - Begin process of moving to distutils for building. (awood@redhat.com)
  - 1283749: Change some registration dialogs to error (wpoteat@redhat.com)


author: Vritant Jain <vrjain@redhat.com> 1.17.8-1
changelog:
  - 1335537: Fix typo in proxy message (wpoteat@redhat.com)
  - Remove sys.path shenanigans that break yum imports. (awood@redhat.com)
  - 1330054: Set hostname, port and prefix on default button clicked
    (csnyder@redhat.com)
  - 1325083: Fix available sort order (csnyder@redhat.com)
  - 874735: Support fact collection of multiple ips per interface
    (csnyder@redhat.com)
  - Added basic SLES compatibility Tested against SLES 11 SP3
    (darinlively@gmail.com)
  - drop xtraceback nose plugin usage as it is not available as an PRM
    (bcourt@redhat.com)
  - Fix Flake8 Errors (bcourt@redhat.com)
  - 1337817:  The 'Start-End Date' of expired subscription is not in red status
    when the subscription expired. (vrjain@redhat.com)
  - 1319678: Alter the return message for removing entitlements at server
    (wpoteat@redhat.com)


author: Vritant Jain <vrjain@redhat.com> 1.17.9-1
changelog:
  - 1353662: Explicitly use ConsumerIdentity keypath and certpath methods
    (csnyder@redhat.com)
  - 1268307, 1268043, 1257179: Disable back button on registration dialog when
    there is no back (wpoteat@redhat.com)
  - 1335371: Allow auto-attach in GUI when system status is partial
    (wpoteat@redhat.com)


author: Vritant Jain <vrjain@redhat.com> 1.17.10-1
changelog:
  - 1362138: Change method signature for Anaconda addon (jkonecny@redhat.com)
  - 1251516: Disable import when registered (wpoteat@redhat.com)
  - 1336880: Print virt_limit attributes with rct cat-manifest.
    (rjerrido@outsidaz.org)
  - 1351370: Ensure rhsmd exits on exceptions (csnyder@redhat.com)
  - 1336883: Add --no-content switch to cat-manifest to reduce output.
    (rjerrido@outsidaz.org)
  - 1264108: Clear error message on back action (wpoteat@redhat.com)
  - 1334916: Move logging configuration to rhsm.conf (csnyder@redhat.com)
  - 1360909: The refresh command now requests entitlement cert regeneration
    (crog@redhat.com)
  - 1333904: 1333906: Append accessible name to contain selected value
    (wpoteat@redhat.com)
  - 1351009: Modify message to cover more scenarios (wpoteat@redhat.com)
  - 1323276: Don't display or store 'None' in proxy values (wpoteat@redhat.com)
  - 1327179: Check proxy configuration at GUI startup (wpoteat@redhat.com)


author: Vritant Jain <vrjain@redhat.com> 1.17.11-1
changelog:
  - 1366301: Entitlement regeneration failure no longer aborts refresh
    (crog@redhat.com)
  - 1366055: Add docs for the LOGGING section to rhsm.conf man page
    (csnyder@redhat.com)
  - 1365280: Change default log level back to INFO (csnyder@redhat.com)
  - 1336428: Check notification object before use (wpoteat@redhat.com)
  - Zanata pull from 1.17.X (vrjain@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.17.14-1
changelog:
  - 1372673: Ensure user is able to skip auto attach during initial-setup
    (csnyder@redhat.com)
  - 1330515: Account for keyboard interrupt (wpoteat@redhat.com)
  - 1369522: Add cat-manifest --no-content to bash completion
    (khowell@redhat.com)
  - 1368362: Do not display logging config error on upgrade (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.17.15-1
changelog:
  - 1366799: Do not check for a releaseVer override when in container
    (csnyder@redhat.com)
  - 1367657: Escape RestlibExceptions for gui display (csnyder@redhat.com)


author: Joe Orton <jorton@redhat.com> - 1.7.14-13
changelog:
  - fix mod_authz_svn regression with mod_auth_kerb (#1306431)
  - fix "svn diff" property handling (#1378178)
  - fix permissions of /run/svnserve to match tmpfiles (#1496243)


author: Radovan Sroka <rsroka@redhat.com> - 1.8.19p2-9
changelog:
  - RHEL 7.4 erratum
  - removed patch for output truncation (1454571) which introduced regression
    Resolves: rhbz#1360687


author: Radovan Sroka <rsroka@redhat.com> 1.8.19p2-12
changelog:
  - RHEL 7.5 erratum
  - Fixed exit codes for `sudo -l -U <user>`
  - Fixed truncated output when log_output is enabled
  - Updated use_pty and IO logging manpage

    Resolves: rhbz#1458696
    Resolves: rhbz#1454571
    Resolves: rhbz#1490358

  - Fixed second pass LDAP filter expression in the sudoers ldap backend
    - inclomplete patch for rhbz#1485397


author: Radovan Sroka <rsroka@redhat.com> 1.8.19p2-13
changelog:
  - RHEL 7.5 erratum
  - Fixed sudo -l checking results whether user should be authenticated
  - Enabled LDAP filter patch
  - Fixed double free in sssd

    Resolves: rhbz#1505409
    Resolves: rhbz#1511850
    Resolves: rhbz#1518104


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-1
changelog:
  - RHEL-7.6 erratum
    Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
    Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
    Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
    Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
    Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
    Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
    Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-2
changelog:
  - RHEL-7.6 erratum
    Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
    Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
    Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets


author: Radovan Sroka <rsroka@redhat.com> 1.8.23-4
changelog:
  - RHEL-7.7 erratum
    Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
    Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'


author: Jakub Jelen <jjelen@redhat.com> - 1.8.19p2-8
changelog:
  - RHEL 7.4 erratum
  - Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
    Resolves: rhbz#1455402


author: Nils Philippsen <nils@redhat.com> - 4.0.2-10
changelog:
  - ship licenses as documentation in the base package (#1019315)
  - hardlink duplicate documentation/license files


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.9-1.4
changelog:
  - Completely remove dependency on prelink/execstack (RHBZ#1093261).
  - Rebuild for aarch64 and ppc64le (1125690).


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-1
changelog:
  - Rebase to supermin 5.1.15.
    resolves: rhbz#1271255
  - Create supermin5-devel package containing RPM dependency generator.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-3
changelog:
  - Add all upstream patches since 5.1.15 was released.
  - These should improve boot performance and initrd size.


author: Noriko Hosoi <nhosoi@redhat.com> - 4.1.0-1
changelog:
  - release 4.1.0-1
  - Resolves: Bug 1324983 - Rebase: svrcore
              Added systemd ask password support (DS 48450)


author: Adam Tkac <atkac redhat com> 2.0.8-1
changelog:
  - update to 2.0.8 (#851364)
  - swig207-rh830660.patch merged
  - swig207-r13128.patch merged
  - swig-rh841245.patch merged


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0.10-1
changelog:
  - Update to 2.0.10
  - swig203-rh706140.patch merged
  - swig204-rh752054.patch merged
  - Create swig-2.0.10-Fix-x390-build.patch


author: Tim Waugh <twaugh@redhat.com> 1.4-4
changelog:
  - Applied patches from Jiri Popelka:
    - Fix off-by-one error in call to readlink.
    - Fix possible buffer overrun found by coverity.


author: Peter Jones <pjones@redhat.com> - 4.05-12
changelog:
  - Toolchain changes between when this originally got built and 4.05-9 means
    4.05-9 - 4.05-11 don't actually work.
    Related: rhbz#1085434


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-9
changelog:
  - related: #846699
    do the renaming of nfsiostat properly, with patch
  - resolves: #1332662
    added tapestat utility for monitoring tape drives


author: Michal Sekletár <msekleta@redhat.com> - 10.1.5-18
changelog:
  - add -f flag to force fdatasync() after sa file update (#1662094)
  - don't call filesystem count functions when we are not collecting fs statistics (#1670060)
  - skip autofs when gathering filesystem statistics (#1670060)
  - fix use of incorrect preposition in sar man page (#1624410)
  - fix CPU usage reporting (#1618688)


author: Nils Philippsen <nils@redhat.com> - 1.10.0-1
changelog:
  - use pkexec instead of consolehelper
  - read/write /etc/localtime as symbolic link and only fall back to using
    /etc/sysconfig/clock if it is present (#824033)


author: Nils Philippsen <nils@redhat.com> - 1.10.1-1
changelog:
  - don't trip over missing /etc/sysconfig/network file (#857412)
  - pull updated translations
  - install and use timezone translations properly


author: Nils Philippsen <nils@redhat.com> - 1.10.5-1
changelog:
  - pull updated and new translations (#878319)
  - catch (rare) errors from fork()
  - catch unavailable display (#766936)
  - pull updated time zones


author: Jan Synáček <jsynacek@redhat.com> - 1.10.6-3
changelog:
  - remove invalid source links (#1502430)
  - system-config-date can't enable ntp because /bin/systemd doesn't exist (#1381321)


author: Thomas Woerner <twoerner@redhat.com> 1.2.29-4
changelog:
  - fixed possible privilege escalation flaw via use of python pickle
    (CVE-2011-2520), replaced pickle by json (rhbz#717985) and (rhbz#722991)
  - stop D-BUS firewall mechanism on update


author: Than Ngo <than@redhat.com> - 2.0.13-17
changelog:
  - Resolves: bz#1258363 - gtkWarning showing in terminal while launch kdump
  - Resolves: bz#1279298 - system-config-kdump throws traceback on keyboard interruption
  - Resolves: bz#1082420 - error display Basic Settings option "Current kdkump Memory" value
  - Resolves: bz#1077470 - target settings option "Raw device" does not list VirtIO devices
  - Resolves: bz#1384943 - add fadump memory reservation support in system-config-kdump (fadump)
  - Resolves: bz#1404780 - add support variable amount of memory as crashkernel value


author: Ville Skyttä <ville.skytta@iki.fi> - 1.3.1-11
changelog:
  - Add dependency on newt-python (#845391, Sandro Mani).
  - Fix bogus dates in %changelog and rpmlint tabs vs spaces warning.


author: Nils Philippsen <nils@redhat.com> - 1.3.1-12
changelog:
  - use consistent names for patches, create backup files
  - use polkit/pkexec instead of consolehelper
  - add man page


author: Nils Philippsen <nils@redhat.com> - 1.4.0-1
changelog:
  - version 1.4.0
  - remove ancient obsoletes and bogus requirements
  - require systemd >= 30 for localed
  - update gtk-update-icon-cache scriptlets


author: Chris Lumens <clumens@redhat.com> - 2.9.1-1
changelog:
  - Fix an error reading the timezone in generate mode (#916346, #924764). (clumens)
  - Remove the documentation (#915737). (clumens)
  - Display hidden groups in the package selection UI (#915029). (clumens)
  - Default to SHA512, same as anaconda (#915013). (clumens)
  - Add the system-config-keyboard dep back in (#909355). (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.9.2-1
changelog:
  - Transifex has moved, so update the config. (clumens)
  - Remove the Japanese-specific man page. (clumens)
  - Update the system-config-kickstart man page to something useful (#948447). (clumens)
  - Fix a typo. (clumens)


author: Parag Nemade <pnemade AT redhat DOT com> - 1.4.0-2
changelog:
  - Resolves:rh#1040298 - OK button should be disabled always for the default selected language
  - Resolves:rh#1040309 - Fix 'No Group named...exists' dialog produced traceback & warning messages
  - Resolves:rh#1045993 - Change language name from Oriya to Odia.


author: Tim Waugh <twaugh@redhat.com> 1.4.1-17
changelog:
  - Applied upstream patch to fix job retrieval (bug #1119227).
  - Applied upstream patch to fix Gdk.color traceback (bug #1112334).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.4.1-20
changelog:
  - 1145739 - cannot add samba printer without python-smbc
  - 1203219 - Tracebacks due to selection/cursor handling
  - 1296815 - system-config-printer should require gtk3 instead of gtk2
  - 1164188 - ImportError: No module named cairo
  - 1140627 - Nested class are not allowed


author: Nils Philippsen <nils@redhat.com> - 1.3.4-1
changelog:
  - don't ask libuser to create a home directory over an existing one (#908852,
    patch by Miloslav Trmač)
  - correct check if SELinux is enabled


author: Lukas Czerner <lczerner@redhat.com> 0.4-2
changelog:
  - Remove btrfs resize support (#986116)
  - Unmount all btrfs subvolumes when removing a filesystem
  - Fix size argument parsing for create and snapshot command
  - Fix list output for some cases
  - Add support to create encrypted volumes with crypt backend (#1012523)
  - Add dry-run option
  - Fix removing volumes with crypt backend
  - Add raid1 and raid10 support for lvm backend (#1012518)
  - Allow to check btrfs volumes (#986105)
  - Fix error handling when trying to resize btrfs subvolume (#986111)
  - Fix ssm mount command so it detects directory properly


author: Lukas Czerner <lczerner@redhat.com> 0.4-4
changelog:
  - Suppress backtrace when a command fails (#1054349)
  - Fix ssm to recognize units in new btrfs output properly (#1052327)
  - Use correct sysfs file to get size for a partition (#1053651)
  - Fix ssm to be able add a device with signature to btrfs file system (#1053741)
  - Resognize btrfs devices from new btrfs output properly (#1052330)


author: Lukas Czerner <lczerner@redhat.com> 0.4-6
changelog:
  - Fix listing of snapshots created by yum-fs-snapshot (#1094646)
  - Provide lvm thin provisioning support (#1115131)
  - Create mount point if it does not exist (#1134983)
  - Support percentage size argumetns (#1139263)
  - Fix bug when deleting inactive lv (#1142292)
  - Fix bug when listing empty dm tables (#1113584)


author: Jan Tulak <jtulak@redhat.com> 0.4-9
changelog:
  - Fix unhandled exception for some locales set through LC_ALL (#1679591)
  - Fix ssm resize fails with python stack trace (#1654583)
  - Fix poor luks password throwing an error (#1141871)
  - Fix unable to list thinpools with the same name (#1619476)
  - Fix ssm list delay in detecting xfs growth (#1664652)
  - Fix exported lvm volumes issue
  - Send udev change events for btrfs operations and on all fs creations
  - Fix issues with partitions on loopback devices
  - Better error reporting for some situations


author: Deepak Bhole <dbhole@redhat.com> - 1.1.5-1
changelog:
  - Resolves: rhbz#663322
  - Sync with F14:
    - Update to 1.1.5 which fixes rhbz 493898 and adds more translations


author: Jiri Vanek <jvanek@redhat.com> - 1.1.5-4
changelog:
  - added jre-java patch to work corectly with java directories and not
    just with  jre  symlinks
    backward compatibility preserved
  - added correct recognition of icedtea-web plugin
  - added disabledUnderline patch
  - added tuiWidth patch
  - Resolves: rhbz#731039
  - Resolves: rhbz#725718


author: Omair Majid <omajid@redhat.com> - 1.1.5-9
changelog:
  - Remove libuser-python dependency
  - Update to work with newer alternatives
   - added new-jdk-paths.patch
   - this patch is disabled, untill more work is done in upstream
  - Resolves: rhbz#1070976


author: Jiri Vanek <jvanek@redhat.com> - 1.1.5-10
changelog:
  - Renamed (to baseurl) url macro to prevent shadowing
  - Added BSD license to list of Licenses
   - (COPYING.icon says it's a 2-clause BSD license)
  - removed buildroot definition and manual removing of it
  - Resolves: rhbz#1070976


author: Jiri Vanek <jvanek@redhat.com> - 1.1.6-1
changelog:
  - updated to upstream release of 1.1.6
  - removed all upstreamed patches
  - Resolves: rhbz#1283904
  - Resolves: rhbz#1080838


author: Jiri Vanek <jvanek@redhat.com> - 1.1.7.1-1
changelog:
  - updated to latest upstream, removed upstreamed patches
  - Resolves: rhbz#1283904
  - Resolves: rhbz#1080838


author: Lukas Nykryn <lnykryn@redhat.com> - 219-62.2
changelog:
  - journald: do not store the iovec entry for process commandline on stack (#1657788)
  - journald: set a limit on the number of fields (1k) (#1657792)
  - journal-remote: set a limit on the number of fields in a message (#1657792)
  - journald: free cmdline buffers owned by iovec (#1666646)


author: Konstantin Volkov <wolf@virtuozzo.com> - 219-62.1
changelog:
  - Correct RHEL memory hotplug udev rule, see #PSBM-91180
  - Avoid udev timeout_warn overflow, see #PSBM-91180
  - Do not wait for SIGCHLD after SIGKILL sent in udev, see #PSBM-91180


author: Lukas Nykryn <lnykryn@redhat.com> - 219-64
changelog:
  - detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
  - core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
  - networkd: respect DHCP UseRoutes option (#1663365)
  - networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
  - networkd: dont crash when mtu changes (#6594) (#1663365)
  - tmpfiles: "e" takes globs (#1641764)
  - tmpfiles: 'e' is supposed to operate on directory only (#1641764)
  - tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
  - bus-message: do not crash on message with a string of zero length (#1643396)
  - Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
  - set automount state to waiting when the mount is stopped (#1651257)
  - core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
  - shorten hostname before checking for trailing dot (#1631625)
  - journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
  - local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
  - rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
  - 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
  - core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
  - units/rescue.service.in: fix announcement message (#1660422)
  - systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
  - main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
  - shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
  - journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
  - journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
  - journal-remote: show error message if output file name does not end with .journal (bz#1267552)
  - artificially serialize building of .policy files (#1272485)
  - cryptsetup: add support for sector-size= option (#9936) (#1571801)
  - cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
  - journal: fix syslog_parse_identifier() (#1657794)
  - journal: do not remove multiple spaces after identifier in syslog message (#1657794)
  - tmpfiles: change ownership of symlinks too (#1620110)
  - tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
  - shared/install: allow "enable" on linked unit files (#1628575)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-65
changelog:
  - backport fd_is_fs_type (#1663143)
  - backport chase_symlinks (#1663143)
  - fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
  - fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
  - sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
  - notify: add new --uid= command (#1663143)
  - core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
  - journald: respect KeepFree= as well as MaxUse= values (#1361893)
  - shutdown: in_container was used before its definition (#1693716)
  - core: Fix edge case when processing /proc/self/mountinfo (#1691511)
  - sd-bus: deal with cookie overruns (#1693559)
  - Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
  - Allocate temporary strings to hold dbus paths on the heap (#1667871)
  - sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
  - udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
  - udev: call poll() again after killing the spawned process (#1697909)
  - udev: check age against both timeouts to prevent integer wraparound (#1697909)
  - avoid possible hang if our child process hangs (#1697909)
  - missing: when adding syscall replacements, use different names (#1694605)
  - include sys/sysmacros.h in more places (#1694605)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-66
changelog:
  - sd-bus: unify three code-paths which free struct bus_container (#1643394)
  - hashmap: don't use mempool (#1609349)
  - man: be more explicit about thread safety of sd_journal (#1609349)
  - selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)


author: Konstantin Volkov <wolf@virtuozzo.com> - 219-63.8
changelog:
  - Set default swapoff timeout to 15 minutes, call systemd-swapoff.sh wrapper with timeout parameter, see #VSTOR-23607


author: Lukas Nykryn <lnykryn@redhat.com> - 219-67.1
changelog:
  - return error value on failure (#1729226)
  - revert local changes made during backport of the test (#1729226)
  - core/timer: Prevent timer looping when unit cannot start (#1729230)
  - core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
  - core: rerun GC logic for a unit that loses a reference (#1729228)
  - pid1: rename unit_check_gc to unit_may_gc (#1729228)
  - pid1: include the source unit in UnitRef (#1729228)
  - pid1: fix collection of cycles of units which reference one another (#1729228)
  - pid1: free basic unit information at the very end, before freeing the unit (#1729228)
  - pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
  - service: relax PID file symlink chain checks a bit (#8133) (#1729414)
  - path-util: fix more path_is_mount e792e890f fallout (#1279231)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-67.4
changelog:
  - core: when restarting services, don't close fds (#1798162)
  - unit: rework a bit how we keep the service fdstore from being destroyed during
   service restart (#1798162)
  - tests: add basic journal test (#1798162)
  - tests: add regression test for `systemctl restart systemd-journald` (#1798162)
  - tests: add test that journald keeps fds over termination by signal (#1798162)


author: David Smith <dsmith@redhat.com> - 3.1-3
changelog:
  - Added patches for:
  - rhbz1425568 task_dentry_path() fix
  - rhbz1431263 arm64 hardware breakpoint crash fix
  - rhbz1430828 replace task_exe_file() with current_exe_file()
  - rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
  - rhbz1433391 workaround parser issue in nfs_proc.stp
  - rhbz1428120 update lookup_bad_addr()


author: Frank Ch. Eigler <fche@redhat.com> - 3.2-3
changelog:
  - rhbz1506230 (netif_receive_skb_internal probing)
  - rhbz1490862 (f2fs tracepoint header workarounds)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-9
changelog:
  - Add patch to fix CVE-2010-2642, CVE-2011-0433 (afm-fix patch)
  - New version of patch for CVE-2011-0764, also fixes CVE-2011-1552,
    CVE-2011-1553, CVE-2011-1554 (type1-inv-rw-fix patch)
    Resolves: rhbz#772899
  - Add explicit NVR requires to apps subpackage (consumes libt1(x).so)
  - Fix rpmlint warning (mixed-use-of-spaces-and-tabs)


author: Rex Dieter <rdieter@fedoraproject.org> 1.8-1
changelog:
  - taglib-1.8

  -* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.2-2
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild


author: gil cattaneo <puntogil@libero.it> 0:1.2.1-1
changelog:
  - Upgraded to 1.2.1
  - remove ant-nodeps reference
  - changed group in javadoc sub package (from Development/Documentation in Documentation)
  - add maven metadata
  - add manual
  - Adapt to current guidelines.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-37
changelog:
  - Improve message with response directions to reflect new option
    for user names with dot character


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-42
changelog:
  - Add systemd support (thanks to Zbigniew Jędrzejewski-Szmek and Jóhann B. Guðmundsson)
    Resolves: #737219


author: Nathaniel McCallum <npmccallum@redhat.com> - 4-1
changelog:
  - Import SRPM from Fedora (tang-4-3.fc26)
  - Remove nagios dependency
  - Adjust http-parser version for RHEL


author: Tomas Repik <trepik@redhat.com> - 2:1.26-32
changelog:
  - restore incremental backups correctly, files were not being removed (rhbz#1184697)
  - fix the behavior of tar when --directory option is used together with
    --remove-files
  - repair the ignorance of --xattrs-exclude/include options (rhbz#1341786)
  - Intorduce new option '--keep-directory-symlink'


author: Pavel Raiskup <praiskup@redhat.com> - 1.26-33
changelog:
  - extract: deterministic archive type detection (rhbz#1437297)
  - avoid hang when extracting with --xattrs --skip-old-files (rhbz#1408168)
  - fix listing of large sparse members (rhbz#1347229)


author: Maurizio Lombardi <mlombard@redhat.com> - 2.1.fb46-4
changelog:
  - Properly detect errors when writing backup files. (Closes: #80) (#81)
  - Read number of backup files to keep from file
  - config: defend on '/etc/target/backup' directory
  - config: backup when current config is different from recent backup copy
  - config: rename key 'kept_backups' as 'max_backup_files'
  - backup: global option to tune max no. of backup conf files


author: Andy Grover <agrover@redhat.com> - 0.3.1-5
changelog:
  - Update require-password.patch
  - Change target.yaml to not include a commented-out default password


author: Andy Grover <agrover@redhat.com> 0.6.1-1
changelog:
  - Update to latest version, make needed changes
  - Drop patches:
    * require-password.patch
    * use-std-ssl.patch
  - Change requires from python-lvm to lvm2-python-libs


author: Petr Machata <pmachata@redhat.com> - 4.1-2.20130314
changelog:
  - Fix mfence patch.  Since the __TBB_full_memory_fence macro was
    function-call-like, it stole () intended for function invocation.


author: Petr Machata <pmachata@redhat.com> - 4.1-6.20130314
changelog:
  - Drop ExclusiveArch altogether. TBB has a fallback code that works
    irrespective of the architecture.


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.4-1
changelog:
  - Upgrade 1.9.4 release
  - Fixed bad day-of-week of first entry in changelog
  - Do not install on systems with efi partition
    See https://access.redhat.com/articles/2217041
    Resolves: rhbz#1275031
    Resolves: rhbz#1293526
    Resolves: rhbz#1307176
    Resolves: rhbz#1313876
    Resolves: rhbz#1332691


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.4-2
changelog:
  - Test for UEFI system with /sys/firmware/efi, rather than looking in
    the boot directory for an efi directory.
  - Allow install on UEFI platform, but with warning message, in order to
    permit completion of provisioning.
    Resolves: rhbz#1356571


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.6-3
changelog:
  Apply patches from upstream since realease of 1.9.6
    Resolves: rhbz#1515081
    Resolves: rhbz#1511798


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.13-5
changelog:
  - Fixed fork, enabled threading (by notifier-thread-fork-fix patch)
    Resolves: rhbz#869315
  - Rebuild to fix systemtap on aarch64
    Resolves: rhbz#1238479


author: Tom Lane <tgl@redhat.com> 1.8.0-1
changelog:
  - Update to pgtcl 1.8.0.
  - Relabel license as PostgreSQL now that that's separately recognized by OSI.


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-4
changelog:
  - Drop downstream patch (drop root privileges)
  - Add libcap-ng as a new build dependency
  - Related: #1262283


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-4
changelog:
  - Resolves: #1664648 - tcpdump post creates user and groups unconditionally, raising alerts in corporate environment


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-1
changelog:
  - New upstream version 4.9.0. Resolves: #1422473
  - Add legacy -P switch with warning. Related to #1422473 and #1292056


author: David Kaspar <dkaspar@redhat.com> - 6.18.01-8
changelog:
  - Upstream's $anyerror variable re-introduced. (#1123854)
  - Fix for hang inside the 'wait' built-in of tcsh added. (#1181682)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.18.01-9
changelog:
  - 'if statement' parsing fixed when the space is missing after ')'. (#1273892)
  - Quote backslashes properly to preserve them in `...` expressions. (#1319816)
  - Fix for tcsh being interruptible while waiting for child process. (#1269370)
  - Fix of memory leak when using the 'source' built-in command.      (#1273513)
  - Print error message on stderr (instead of stdout).                (#1273498)
  - Use GLIBC's malloc instead of builtin malloc.                     (#1315713)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.18.01-12
changelog:
  - Fix another regression in tcsh-6.18.01-quote-backslashes-properly.patch
    Related: #1334751

  - Fix regression in tcsh-6.18.01-use-stderr-upon-error.patch
    Related: #1273498


author: Brian Pepple <bpepple@fedoraproject.org> - 0.6.0-1
changelog:
  - Update to 0.6.0
  - Drop python subpackage. gobject-introspection is used now.
  - Drop unnecessary buildroot cleaning in install section.
  - Update BR for farstream02-devel.


author: Kalev Lember <klember@redhat.com> - 0.24.1-1
changelog:
  - Update to 0.24.1
  - Fix the build with glib 2.46 and later
  - Rebuild against gobject-introspection 1.54
  - Resolves: #1507813


author: Debarshi Ray <rishi@fedoraproject.org> - 1:5.14.1-5
changelog:
  - Add %check to run the upstream test suite on each build (Red Hat #1000705)
  - Resort to using chrpath for removing rpaths instead of hacking libtool


author: Martin Sehnoutka <msehnout@redhat.com> - 1:0.17-60
changelog:
  - Introduce new -i switch
  - ip addresses will be logged into utmp instead of hostname
  - Resolves: #1323094


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-63
changelog:
  - Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                      - additional info added to manpage


author: Michal Ruprich - 1:0.17-64
changelog:
  - Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                      - more clear formulation of man page note - previous note was a bit ambiguous


author: Dan Kenigsberg <danken@cs.technion.ac.il> - 0.1-12
changelog:
  - Rebuilt against existing David Type1 fonts. Bug #509697
  - Require specific culmus font packages and obsolete tetex-fonts-hebrew-0.1-9. Bug #485639


author: Parag Nemade <pnemade AT redhat DOT com> - 0.1-20
changelog:
  - Resolves:rh#921852 - Four culmus subpackages are not listed in build require
  - Added BR: and R: for the following packages
  - culmus-hadasim-clm-fonts, culmus-simple-clm-fonts
  - culmus-stamashkenaz-clm-fonts, culmus-stamsefarad-clm-fonts


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.1-5
changelog:
  - Fix upstream test failure in Pod-Simple-Texinfo
    Resolves: #970986
  - Fix @enumerate does not support start numbers greater than nine
    Resolves: #1134160


author: Than Ngo <than@redhat.com> - 2:2012-34.20130427_r30134
changelog:
  - Resolves: bz#1064453, add missing texlive-metapost and groff.enc
    Resolves: bz#948532, add missing manpages for pdfxmltex, xmltex
    Resolves: bz#1213886, tex4ht-bin requires latex
    Resolves: bz#1217556, port for poppler-0.26.5
    Resolves: bz#1035679, scriptlet errors when installing texlive packages
    Resolves: bz#1184987, add texlive-titling


author: Than Ngo <than@redhat.com> - 2:2012-39.20130427_r30134
changelog:
  - Resolves: #1320337 - dependiency on texlive-xetex-def
  - Resolves: #1350485 - updmap from texlive-tetex-bin cannot be executed
  - Resolves: #1337925 - scriptlet errors
  - Resolves: #1186825 - add coreutils for post/unpost


author: Daiki Ueno <dueno@redhat.com> - 0.5.0-2
changelog:
  - fix <test> usage in fontconfig files (Closes: #837538)
  - refresh fontconfig files with the latest upstream version


author: Daiki Ueno <dueno@redhat.com> - 0.5.0-4
changelog:
  - disable X fonts.dir generation
  - remove obsolete -compat subpackage
  - remove %defattr from %files
  - add missing "make" in %build


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-14
changelog:
  - Fix rendering on big endian system
    Resolves: bz#1618777

    Do not automatically kill sessions
    Resolves: bz#1646889


author: Petr Pisar <ppisar@redhat.com> - 1.7-39
changelog:
  - Fix maximal RSS report (bug #702826)
  - Clean spec file
  - Recompute CPU usage at finer level (bug #527276)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.13-5
changelog:
  - Enabled threading
    Resolves: rhbz#676880
  - Fixed crash if there are no fonts installed (by no-fonts-fix patch)
    Resolves: rhbz#1218943


author: Miloslav Trmač <mitr@redhat.com> - 2.11-3
changelog:
  - Drop the cron.daily script, systemd default configuration handles the same
    places.
    Resolves: #906455


author: Jiri Kucera <jkucera@redhat.com> - 2.11-6
changelog:
  - Added --fuser option support.
  - Fixed bad URL, Source0, and bogus date in spec.
    Resolves: #1330328


author: Sven Lankes <sven@lank.es> 1.5-1
changelog:
  - New upstream release
  - Do the right thing (tm) and revert to $upstream-behaviour: 
     No longer install tmux setgid and no longer use /var/run/tmux 
     for sockets. Use "tmux -S /var/run/tmux/tmux-`id -u`/default attach"
     if you need to access an "old" tmux session
  - tmux can be used as a login shell so add it to /etc/shells


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-8
changelog:
  - Fix build failure in fedora rawhide. It was caused due to 
    removal of CMAKE_INSTALL_LIBDIR macro from /etc/rpm/cmake.macros 
    that was present in previous fedora releases.


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-12
changelog:
  - Fixes for rhbz #985785 to fix crash issue in Filecert manager
    in platidimv.
  - Fixed crashing of attestation imv so while loading due to
    wrong static initialization order in attestation imv.
  - Fixes some coverity scan errors.
  - Fixed comilation when sysconf dir variable is not defined on a
    local system. Added some messaging outputs during compilations.
  - Fixed erroneous data type conversion issues causing wrong outputs
    and with potential for data corruption.
  - Fixes tncutil build issue from upstream commit
  - Fixes typo in assignment in platidimv from upstream commit
  - Fixes Fix typo in variable declaraction in hostscannerimv
    from upstream commit
  - Fixes imcv shared library build issue from upstream commit


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-13
changelog:
  - Implemented support for dlopen
  - Removed libtool support
  - Fixed imv and imc build issues arising from a
    previous upstream patch
  - Fixed a few coverity scan error issues


author: Stephen Gallagher <sgallagh@redhat.com> - 2:2.12.1-15
changelog:
  - Generate SSL certificates with x509v3 and CA:FALSE
  - Automatically import self-signed certificates into local trust-store
  - Move SSL certificate generation into the systemd service file
  - Resolves: #1041555


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-1
changelog:
  - Fix packaging of tmpfiles
    Resolves: #1180993
  - Add install Platform_LINUX_XSCALE_GNU.h, Linkage.h and CIMListener.h to -devel
    because of lmiwbem (CIMListener class), add symlink to libpeglistener.so.1
    Resolves: #1120701
  - Update to upstream version 2.14.1
    Resolves: #1097187, #1039050, #1007386
  - Fix sending of SNMPv3 traps
    Resolves: #1218954


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-2
changelog:
  - Remove files created in %check
    Resolves: #1232341
  - Fix setupSDK in -devel
    Resolves: #1127399
  - Add snmp tests to the -test rpm and enable them, configure snmptrapd
    in test setup phase
    Related: #1218954


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-4
changelog:
  - Fix ppc64le SDK
    Resolves: #1266235
  - Move SSL certificates to more convenient place, update related scripts
    and README.RedHat.SSL
    Resolves: #1308809
  - Change repository update to get rid of warning messages during cleanup
    Resolves: #1257085
  - Remove TESTID environment variable which breaks automatic testing in Beaker
    Resolves: #1266655
  - Add CIMEnumerationContext.h and UintArgs.h to -devel
    Resolves: #1335873
  - Fix wrong formatting in cimconfig man page
    Resolves: #1263895
  - Add missing description of httpSessionTimeout to cimconfig man page
    Resolves: #1263894


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-2
changelog:
  - Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
  - Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-3
changelog:
  - Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
  - Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
  - Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-5
changelog:
  - Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
  - Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-9
changelog:
  - Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet
  - Resolves: rhbz#1552375 CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources
  - Resolves: rhbz#1552374 CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users
  - Resolves: rhbz#1590182 CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
  - Resolves: rhbz#1608609 CVE-2018-8034 tomcat: host name verification missing in WebSocket client
  - Resolves: rhbz#1588703 Backport of Negative maxCookieCount value causes exception for Tomcat
  - Resolves: rhbz#1472950 shutdown_wait option is not working for Tomcat
  - Resolves: rhbz#1455483 Add support for characters "<" and ">" to the possible whitelist values


author: Matthew Harmsen <mharmsen@redhat.com> 7.2.0-2
changelog:
  - Changed build so that it did not package and depend upon the specfile being
    included inside the tarball


author: Matthew Harmsen <mharmsen@redhat.com> - 7.2.1-3
changelog:
  - Bugzilla Bug #1394416 - Rebase tomcatjss to 7.2.x in RHEL 7.4 (mharmsen)
  - ## 'tomcatjss-support-for-event-API.patch' resolves the following issues
    - tomcatjss Pagure Issue #4 - Support for Event API (edewata)


author: Matthew Harmsen <mharmsen@redhat.com> 7.2.1-7
changelog:
  - Updated jss build and runtime dependencies
  - Bugzilla Bug #1596769 - Tomcatjss: Add support for TLS_*_SHA384
    ciphers (cfu)


author: Jack Magne <jmagne@redhat.com> 7.2.1-8
changelog:
  - Bugzilla Bug #1632618 - CC: tomcatjss: unable to enable OCSP checking
    from peer AIA extension [rhel-7.6.z] (jmagne)


author: Bastien Nocera <bnocera@redhat.com> 3.14.3-1
changelog:
  - Update to 3.14.3
  - Re-add opensubtitles plugin, as it doesn't depend on PyXDG anymore
  Resolves: #1174589


author: Bastien Nocera <bnocera@redhat.com> 3.14.3-4
changelog:
  - Remove Python3 plugins, they're mostly accessory plugins,
    and RHEL 7.2 only support Python2 for now
  Resolves: #1259643


author: Ray Strode <rstrode@redhat.com> 3.14.3-5
changelog:
  - Add more goo to the compat desktop file to prevent them
    from exposing in control-center
  Related: #1259292


author: John D. Ramsdell <ramsdell@mitre.org> - 1.0-6
changelog:
  - Changed URL to SourceForge development site.
  - Changed source to NEU site.
  - Quoted % references in macros within changelog.
  - README: Note tpm-tools only needed to take ownership of a TPM.


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.3.9-3
changelog:
  - Fix garbage being printed in tpm_version output
  - backport spec file cleanups
  Resolves: rhbz#1654985


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-2
changelog:
  - Removed BuildRequires for gcc
  - Move tpm2-abrmd systemd service to /usr/lib/systemd/system
  - Added scriptlet for tpm2-abrmd systemd service
  - Use autoreconf instead of bootstrap


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-4
changelog:
  - Rename and relocate udev rules file to _udevrulesdir
  - Update scriptlet to add service name after systemd_postrun


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.1.0-11
changelog:
  - Fix Requires to be against tpm2-tss instead of tpm2-tss-devel
  - Add BuildRequires to specify version tpm2-tss-devel needed
  - Add Requires to tpm2-abrmd-devel for tpm2-tss-devel
  resolves: rhbz#1627827


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-4
changelog:
  - Dependency check failed for Requires again, here to fix this
  - Update release version and changelog


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.1.0-5
changelog:
  - Remove epel dependencies
  - Change tpm2-tss dependency to not be tied to 1 version
  - Fix resource leak in InitSysContext
  - Clean up HashEKPublicKey
  - Add needed null checks to tpm2_getmanufec
  - clean up resource leak in tpm2_getmanufec
  - use strdup to get server address in tpm2_getmanufec
  - change preparePcrSelections_g to void
  - return on success in print_rc_tpm_error_code
  - Update release version
  resolves: rhbz#1275029 - Add tpm2.0-tools package


author: Sun Yunying <yunying.sun@intel.com> - 1.0-2
changelog:
  - Remove global macro pkg_version to avoid duplicate of version
  - Use ExclusiveArch instead of ExcludeArch
  - Use less wildcard in %files section to be more specific
  - Add trailing slash at end of added directory in %file section
  - Remove autoconf/automake/pkgconfig(cmocka) from BuildRequires
  - Increase release version to 2


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.0-3
changelog:
  - Add systemd unit for resourcemgr
  - Add utils subpackage
  - Add Makefile.am patch to install test programs
  - Add patch to swap out AX_PTHREAD for different check
  - Increase release version to 3
  resolves: rhbz#1275027 - Add TPM 2.0 System API (SAPI) library


author: John Kacur <jkacur@redhat.com> - 2.6.0-7
changelog:
  - Updated to latest upstream, which among many fixes also includes
  - external library for other programs to link to trace-cmd
  - bash completion
  Resolves: rhbz#1445825


author: Kamil Dudka <kdudka@redhat.com> - 1:3.2.5d-11
changelog:
  - install man pages using the correct file name suffix
  - provide the fig2ps2tex.sh man page as a symlink


author: Pravin Satpute <psatpute@redhat.com> 3.0.9-42
changelog:
  - Resolves: rh#1125703 ttmkfdir fails to build on arch: ppc64le (Generic build failure)
  - Patch from Peter Robinson <pbrobinson@redhat.com>


author: John Kacur - 0.13-3
changelog:
  - Display usage instead of traceback when -c missing args or args is incorrect
  Resolves: rhbz#1268287


author: John Kacur - 0.13-4
changelog:
  - CLI-start-a-process-from-tuna
  - docs: upgrade tuna.8 man page with option -r
  Resolves: rhbz#1235829


author: John Kacur - 0.13-5
changelog:
  - Rebuild to document
    tuna thows an exception instead of an error message when sched_setaffinity returns EINVAL
    This was actually fixed in v0.13-1
  Resolves: rhbz#1290445


author: John Kacur - 0.13-6
changelog:
  - Use errno codes instead of plain numbers
  - Exit with a message instead of a traceback in isolate_cpus
  Resolves: rhbz#1472840


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1643654
    - disable KSM only once, re-enable it only on full rollback
      resolves: rhbz#1622239
    - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
      resolves: rhbz#1649408
    - updated virtual-host profile
      resolves: rhbz#1569375
    - added log message for unsupported parameters in plugin_net
      resolves: rhbz#1533852
    - added range feature for cpu exclusion
      resolves: rhbz#1533908
    - make a copy of devices when verifying tuning
      resolves: rhbz#1592743
    - fixed disk plugin/plugout problem
      resolves: rhbz#1595156
    - fixed unit configuration reading
      resolves: rhbz#1613379
    - reload profile configuration on SIGHUP
      resolves: rhbz#1631744
    - use built-in functionality to apply system sysctl
      resolves: rhbz#1663412


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#1643654
    - used dmidecode only on x86 architectures
      resolves: rhbz#1688371
    - recommend: fixed to work without tuned daemon running
      resolves: rhbz#1687397


author: Patsy Franklin <pfrankli@redhat.com> - 2018d-1
changelog:
  - Rebase to tzdata-2018d
    - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
    - Antarctica/Casey station changed to UTC+8 on March 11.


author: Patsy Franklin <pfrankli@redhat.com> - 2018e-2
changelog:
  - Rebase to tzdata-2018e
    - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
    - In this update, the upstream project now defaults to using
      the "vanguard" data implementation which includes negative DST offsets.
      However, we are continuing to provide the "rearguard" format
      for data which does not use negative DST offsets to provide
      better compatibility with existing tools.  We intend to transition
      to the "vanguard" data implementation in the future.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018e-4
changelog:
  - Brazil moved the start of DST from the first Sunday in November
    to the third Sunday in November.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018f-1
changelog:
  - Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
  - Add patch to remove use of 25:00.
  - Drop previous change to DST in Brazil.  The government rescinded the
    change.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018g-1
changelog:
  - Rebase to tzdata-2018g
    - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
      planned.  This change is effective Octobober 28, 2018.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018i-1
changelog:
  - Rebase to tzdata-2018i (includes changes from tzdata-2018h)
    - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
    - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
    - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
      transition with the Qyzylorda change.
    - Metlakatla, Alaska will observe PST for this winter only.
    - Predict that Morocco will continue to adjust clocks around Ramadan.
    - Also include predictions for Iran from 2038 through 2090.


author: Patsy Griffin Franklin <patsy@redhat.com> - 2019a-1
changelog:
  - Rebase to tzdata-2019a
    - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
      previously predicted.
    - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
      of Pacific standard time.


author: Patsy Griffin <patsy@redhat.com> - 2019b-1
changelog:
  - Rebase to tzdata-2019b
    - Brazil will no longer observe DST going forward.
    - The 2019 spring transition for Palestine occurred 03-29, not 03-30.


author: Patsy Griffin <patsy@redhat.com> - 2019c-1
changelog:
  - Rebase to tzdata-2019c
    - Fiji will observe DST from 2019-11-10 to 2020-01-12.
    - Norfolk Island will begin observing Australian-style DST on 2019-10-06.


author: Patsy Griffin <patsy@redhat.com> - 2020a-1
changelog:
  - Rebase to tzdata-2020a
    - Morocco will spring forward on 2020-05-31 rather than
      previously predicted 2020-05-24.
    - Canada's Yukon region changed to year round UTC -07
      effective 2020-03-08.
    - America/Godthab was renamed to America/Nuuk.


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7.3-2
changelog:
  - Put back the hack to ensure hardening
    Related: rhbz#1477736
  - Fix the relationship between new udisks2 and storaged
    Related: rhbz#1477736


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7.3-3
changelog:
  - Add and use a service for cleaning up mount point directories
    Resolves: rhbz#1384796
  - Do not try to create file watchers for RAIDs without redundancy
    Resolves: rhbz#1400056


author: Vojtech Trefny <vtrefny@redhat.com> - 2.7.3-7
changelog:
  - core: Add Encrypted.Resize method
    Resolves: rhbz#1567992
  - Fix checking for distribution and version in integration tests
    Resolves: rhbz#1508385
  - Do not skip integration tests on CentOS/RHEL
    Resolves: rhbz#1511974
  - Fix failing MDRAID integration test
    Resolves: rhbz#1511986


author: Tomas Bzatek <tbzatek@redhat.com> - 2.7.3-9
changelog:
  - Build udisks2-lsm subpackage (#1672664)
  - Fix sigint source removal on daemon exit (#1643350)
  - CVE-2018-17336: Fix format string vulnerability in udisks_log (#1637427)
  - Describe command options in the udisksctl man page (#1568269)


author: Petr Menšík <pemensik@redhat.com> - 1.6.6-1
changelog:
  - Rebase to 1.6.6
  - Enable RFC 8145 Trust Anchor Signaling to help the root zone get keytag statistics
  - Enable ipsecmod support


author: Martin Osvald <mosvald@redhat.com> - 1.6.6-2
changelog:
  - Do not search for DNSSEC info when domain-insecure is set
    for stub zone (#1678550)
  - Remove KSK-2010 from configuration files - it has been revoked (#1665503)


author: Kamil Dudka <kdudka@redhat.com> - 2.01-3
changelog:
  - provide a man page for units_cur as a symlink to units.1
  - mention the --check-verbose option in units.1 man page


author: David Tardon <dtardon@redhat.com> - 0.4-6
changelog:
  * Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4-5
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-15
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196134 #1196122 #1196126 #1196130


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-16
changelog:
  - Added patch for build option "-Werror=format-security"
  - Added support of non-unicode non-latin charset
  - Fix print of non-ascii filenames
  - Fix troubles with symlinks for archives with many files
    Resolves: rhbz#1276746, rhbz#1286165, rhbz#1276744


author: Jakub Martisko <jamartis@redhat.com> - 6.0-19
changelog:
  - rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
  - make linking flags configurable from the specc file
  - set linking flags to use relro hardening
    Related: #1531116


author: Richard Hughes <rhughes@redhat.com> - 0.9.20-7
changelog:
  - Mark the devel-docs subpackage as noarch to silence a rpmdiff false positive.
  - Resolves: #1070661


author: Bastien Nocera <bnocera@redhat.com> - 0.99.7-1
changelog:
  - Update to 0.99.7
  - Add Bluetooth LE battery support
  - Fix critical action after resume from hibernate
    Resolves: #1584245


author: Rakesh Pandit <rakesh@fedoraproject.org> 0.7.5-1
changelog:
  - Upgrade to 0.7.5:
  -  Improved docs
  -  Test suite
  - 0.7.4
  -  Cleaned up code and fixed memory leaks
  - 0.7.3
  -  Builds for Cygwin, minor bug fix
  -  Changes in build system.
  -  Added: Qt Assistant documentation output
  - 0.7.2
  -  Improved and cleaned API


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> 20170801-3
changelog:
  - *-devel subpackage added
  - typos & syntax fixed for AppStream files
  - NimbusSansNarrow-BdOblique.* renamed to *-BoldOblique
  - *-nimbus-sans-narrow subpackage dropped
  - priority/ordering decreased [60->61]
  - ship *.otf format files as well


author: Thomas Haller <thaller@redhat.com> 1.2.7-3
changelog:
  - Add manual page for usb_modeswitch_dispatcher and fix errors in
    manual page of usb_modeswitch (rhbz#948451, rhbz#884203).


author: Lubomir Rintel <lkundrak@v3.sk> - 2.4.0-2
changelog:
  - Add the previously omitted systemd service file (rh #1352055)
  - Fix crash with invalid arguments (rh #1358472)


author: Daniel Kopeček <dkopecek@redhat.com> 0.7.0-7
changelog:
  - RHEL 7.5 erratum
    - Fixed usbguard-daemon on systems with kernel >= 4.13
    - Use distribution specific usbguard-daemon.conf instead
      of the upstream version
    Resolves: rhbz#1516930


author: Daniel Kopeček <dkopecek@redhat.com> 0.7.0-8
changelog:
  - RHEL 7.5 erratum
    - Require a lower version of libaudit during build-time
    Resolves: rhbz#1491313


author: Daniel Kopeček <dkopecek@redhat.com> - 0.7.4-1
changelog:
  - RHEL 7.6 erratum
    - Replaced asciidoctor dependency with asciidoc
    Resolves: rhbz#1508878 - Rebase USBGuard to latest upstream
    Resolves: rhbz#1487229 - [RFE] improve log error messages for invalid usbguard-daemon.conf values
    Resolves: rhbz#1487233 - invalid path for AuditFilePath in usbguard-daemon.conf is ignored


author: Daniel Kopeček <dkopecek@redhat.com> - 0.7.4-2
changelog:
  - RHEL 7.6 erratum
    - Restore old behavior for loading IPC access control files
    Resolves: rhbz#1487229 - [RFE] improve log error messages for invalid usbguard-daemon.conf values


author: Hans de Goede <hdegoede@redhat.com> - 0.6-3
changelog:
  - Fix usbredirserver not listening for ipv6 connections (rhbz#957470)
  - Fix a few (harmless) coverity warnings


author: Hans de Goede <hdegoede@redhat.com> - 0.6-5
changelog:
  - Use the new libusb autodetach kernel driver functionality
  - Fix a usbredirparser bug which causes tcp/ip redir to not work (rhbz#1005015)


author: Victor Toso <victortoso@redhat.com> - 0.6-8
changelog:
  - Fix migration due lack of capabilities from source host
    Resolves: rhbz#1185167
  - New callback to drop isoc packets in order to avoid high memory
    consumption in the client
    Resolves: rhbz#1312913


author: Miloslav Trmač <mitr@redhat.com> - 1.110-1
changelog:
  - Update to usermode-1.110.
    Note that this drops halt/poweroff/reboot helpers, the respective
    implementations in systemd now include PolicyKit support.  Spec file change
    based on a patch by Lennart Poettering <lpoetter@redhat.com>.
    Resolves: #804088, #849208


author: Jiri Kucera <jkucera@redhat.com> - 1.111-6
changelog:
  - Fix inconsistent capitalization in userhelper.8
    Fix URL and Source
    Fix bogus dates
    Resolves: #1349840, #1502441


author: Björn Esser <bjoern.esser@gmail.com> - 1.9.9-5
changelog:
  - revert "Root package should be noarch too".
  - add provides %{name} for -devel subpkg.
  - add a note about why the mainpkg is arched.


author: Karel Zak <kzak@redhat.com> 2.23.2-54
changelog:
  - fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
  - fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
  - fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
  - fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
  - fix #1562125 - "setarch ppc<*>" fails with "Unrecognized architecture"
  - fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
  - fix #1528959 - rbind creates duplicate entries in /proc/mounts
  - fix #1538721 - mount man page says sync option has no effect for ext4
  - fix #1252764 - icrnl is not set when autologin is used
  - fix #1561200 - [RFE] - sulogin: improve support for locked root account
  - fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device


author: Karel Zak <kzak@redhat.com> 2.23.2-59
changelog:
  - fix #1618711 - exec option in mount unable to override the implicit noexec in user option
  - fix #1616264 - Login to emergency shell failed


author: Karel Zak <kzak@redhat.com> 2.23.2-60
changelog:
  - fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login


author: Karel Zak <kzak@redhat.com> 2.23.2-61
changelog:
  - #1203378 - Cannot use swapon with fallocated XFS swapfile
  - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
  - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
  - #1639465 - Bad formatting in agetty.8 man page
  - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
  - #1678451 - Unable to mount to a directory that matches a dm device under /dev


author: Michal Hlavinka <mhlavink@redhat.com> - 1.6.2-20
changelog:
  - drop last man page change, that option is just for compatibility
  - fix NAME section of man pages to be whatis friendly


author: Michal Hlavinka <mhlavink@redhat.com> - 1.6.2-23
changelog:
  - drop uuid-pgsql subpackage, it is outdated and does not work, use 
    uuid-ossp module from postgresql-contrib instead


author: Hans de Goede <hdegoede@redhat.com> - 0.8.8-1
changelog:
  - New upstream release 0.8.8
  - Add patches from upstream git to improve Pixart JPEG decoding
  - Add patch from upstream git to fix building with latest kernels (rhbz#823863)


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2
changelog:
  - Add a few libv4l2rds patches from upstream, which bring libv4l2rds to its
    final API / ABI, so that apps build against it won't need a rebuild in the
    future


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-8
changelog:
  - Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
  - Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-9
changelog:
  - valgrind 3.13.0 (fedora).
  - Update description.
  - Drop all upstreamed patches.
  - Add valgrind-3.13.0-ppc64-check-no-vsx.patch
  - Add valgrind-3.13.0-epoll_pwait.patch (#1462258)
  - Add valgrind-3.13.0-ppc64-diag.patch
  - Add valgrind-3.13.0-arm64-hwcap.patch (#1464211)
  - Add valgrind-3.13.0-arm-index-hardwire.patch (#1466017)
  - Add valgrind-3.13.0-ucontext_t.patch
  - Add valgrind-3.13.0-gdb-8-testfix.patch
  - Add valgrind-3.13.0-disable-vgdb-child.patch
  - Add --error-exitcode=1 to /bin/true check.
  - Add valgrind-3.13.0-xml-socket.patch
  - Add valgrind-3.13.0-ppc64-vex-fixes.patch
  - Add valgrind-3.13.0-amd64-eflags-tests.patch
  - Add valgrind-3.13.0-suppress-dl-trampoline-sse-avx.patch
  - Add valgrind-3.13.0-static-tls.patch
  - Workaround gdb/python bug in testsuite (#1434601)


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-11
changelog:
  - Make building of libmpi wrapper explicit (#1530219)
  - Add valgrind-3.13.0-debug-alt-file.patch
    and valgrind-3.13.0-build-id-phdrs.patch (#1589844)
  - Add valgrind-3.13.0-s390-cgijnl.patch (#1589848)
  - Add valgrind-3.13.0-ppc64-mtfprwa-constraint.patch (#1589852)


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-13
changelog:
  - Improved valgrind-3.13.0-arm64-hwcap.patch (#1593686)
  - Add valgrind-3.13.0-arm64-ptrace.patch (#1593682)


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.2-1
changelog:
  - New upstream release
  - Rebased sphinx makefile patch
  - Added systemd services patch from Federico Schwindt


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.3-1
changelog:
  - New upstream release
  - Removed systemd patch included upstream
  - Rebased trivial Werr-patch for varnish-4.0.3
  - Added patch to build on el5


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.4-1
changelog:
  - New upstream release
  - Package scripts are now external
  - Removed old stuff about building rpm from source checkout
  - Removed commented stuff about libs-static subpackage
  - Removed patches merged upstream
  - Added the example vcl files to the package
  - red hat epel7 builders set _pkgdocdir fedora style without version


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.4-3
changelog:
  - Fixed owner/group for varnishncsa/varnishlog logfiles, #1401272
  - Patched varnishlog.service and varnishncsa.service to run as simple
    services, without pidfile handling, closes #1401272
  - Patched logrotate script to use systemd reload instead of kill
  - Added package ownership to "ghost" varnish.pid


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.4-4
changelog:
  - Fixed missing user and group in varnish.service, so varnishd
    runs as user and group 'varnish' instead of 'nobody'
  - Readded missing varnishlog.initrc


author: Petr Pisar <ppisar@redhat.com> - 1.9-14
changelog:
  - Fix a security warning by compiler (bug #1037376)
  - Move the executable to /usr/sbin
  - Modernize the spec file


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.146-16
changelog:
  - VDO start command now does index memory checking
  - Module target is now "vdo" instead of "dedupe"
  - VDO remove with no device no longer puts a spurious file in /dev
  - ANsible module no longer fails on modification operations
  - Resolves: rhbz#1510567
  - Resolves: rhbz#1530358
  - Resolves: rhbz#1535597
  - Resolves: rhbz#1536214


author: - Andy Walsh <awalsh@redhat.com> - 6.1.1.24-1
changelog:
  - Rebased to 6.1.1 branch from github
  - Resolves: rhbz#1576701
  - Removed obsolete nagios module.
  - Modified spec files to use systemd macros
  - Resolves: rhbz#1531111
  - Updated the vdo.8 man page
  - Resolves: rhbz#1547786
  - Improved some error messages


author: - Andy Walsh <awalsh@redhat.com> - 6.1.1.84-1
changelog:
  - Improved and corrected man pages.
  - Improved error handling in vdo script when stopping volumes in use.
  - Resolves: rhbz#1511106
  - Modified the vdo script to return more specific error exit codes.
  - Resolves: rhbz#1543954
  - Improved detection of existing formats when creating new volumes.
  - Resolves: rhbz#1557464
  - Improved VDO Ansible testing playbooks.
  - Fixed compilation errors on newer versions of GCC.
  - Removed the --physical-size option to vdoformat since VDO now always uses
    the entire device on which it resides.
  - Modified vdo script to use /dev/disk/by-id to describe the location of
    VDO volumes when possible.
  - Fixed a bug where VDO would always be created with a dense index even
    when a sparse index was requested.
  - Resolves: rhbz#1570156
  - Modified the vdo script to accept decimal points or commas when
    specifying the --indexMem option.
  - Resolves: rhbz#1552146
  - Changed vdo script to not accept --vdoSlabSize=0 as a way of specifying
    the default since it was confusing. The default can be obtained by merely
    omitting the parameter entirely.
  - Resolves: rhbz#1564181
  - Modified the vdo script to require the --force option to remove a VDO
    whose underlying device is not present.
  - Resolves: rhbz#1535476


author: - Andy Walsh <awalsh@redhat.com> - 6.1.1.99-2
changelog:
  - Modified the vdo script to not allow creation of a VDO device on top of
    an already running VDO device.
  - Resolves: rhbz#1572640
  - Made the ordering of the output of vdo list stable.
  - Resolves: rhbz#1589363
  - Added the proper dist tag
  - Resolves: rhbz#1588043


author: - Andy Walsh <awalsh@redhat.com> - 6.1.1.111-3
changelog:
  - Added support for issuing fullness warnings via dmeventd
  - rhbz#1519307
  - Provided missing error code to text translation for vdoDumpConfig.
  - Resolves: rhbz#1595129
  - Improved error reporting when using pvcreate in the vdo script to check
    for pre-existing devices when creating a VDO volume.
  - Resolves: rhbz#1557464


author: - Andy Walsh <awalsh@redhat.com> - 6.1.1.120-3
changelog:
  - Improved error messages in the vdo script when failing to stop a device.
  - Resolves: rhbz#1511106
  - Improved man pages.
  - Resolves: rhbz#1572640
  - Modified vdo script to ignore (but preserve) unrecognised parameters in
    the vdo config file so that config files are compatible across versions.
  - Resolves: rhbz#1604060
  - Updated Ansible module to change block map cache size on existing volumes
  - Resolves: rhbz#1541170


author: - Andy Walsh <awalsh@redhat.com> - 6.1.2.38-3
changelog:
  - Fixed more error path memory leaks.
    - Resolves: rhbz#1609426
  - Improved man pages.
    - Resolves: rhbz#1636047
  - Improved checking for existing LVM physical volumes when formatting a new
    VDO volume.
    - Resolves: rhbz#1687797
  - Fixed a bug which would cause the default logical size to be 480 KB
    smaller than it could be without causing over-provisioning.
    - Resolves: rhbz#1532697
  - Removed extraneous man pages.
    - Resolves: rhbz#1643284
  - Allowed VDO backing devices to be specified by major:minor device number.
    - Resolves: rhbz#1637762
  - Improved behavior when attempting to create a VDO volume whose name conflicts
    with an existing dm target.
    - Resolves: rhbz#1588140
  - Modified vdo script to report fewer errors when removing a VDO which
    sits atop a missing device.
    - Resolves: rhbz#1535476


author: - Andy Walsh <awalsh@redhat.com> - 6.1.2.41-4
changelog:
  - Removed the VDO Ansible module and associated examples from this package.
    - Resolves: rhbz#1536515
  - Improved error messages from the vdo script.
    - Resolves: rhbz#1688481


author: <sshedmak@redhat.com> - 1.1.2-1
changelog:
  - Fixed FSType, Preferred Styles, UniqueID and Fullname
  - Fixed Invalid Glyph Names reported by fontlint
  - with exceptions string added in License


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-2
changelog:
  - 1383902 - CPU spikes to 100% and timeouts observed in strace when opening yaml extensions using vim


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-3
changelog:
  - 1267826 - Include c++11 syntax highlighting in vim
  - 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.629-1
changelog:
  - 1563419 - Vim in RHEL 7 is older than VIM in RHEL 6 (Rebase)
  - 1377316 - [RFE] make _remote_ vim doing the right decisions about 'set background'


author: Ondrej Holy <oholy@redhat.com> - 3.22.0-6
changelog:
  - Do not restart service after unclean exit code
  - Do not listen all if invalid interface is provided
  - Resolves: #1546043, #1580577


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.3-1
changelog:
  - Rebased to virt-manager-1.4.3 (rhbz#1472271)
  - The rebase also fixes the following bugs:
      rhbz#1486313, rhbz#1461684, rhbz#1456185, rhbz#1455491, rhbz#1453094
      rhbz#1446486, rhbz#1441127, rhbz#1430642


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.3-2
changelog:
  - domain: don't add URI into params for tunneled migration (rhbz#1456185)
  - diskbackend: convert to long the calculated size (rhbz#1450908)
  - diskbackend: get a proper size of existing block device while cloning (rhbz#1450908)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.3-3
changelog:
  - delete: undefine only persistent domain (rhbz#1517119)
  - localization: update Japanese translations (rhbz#1481239)


author: Pavel Hrdina <phrdina@redhat.com> - 1.5.0-1
changelog:
  - Rebased to virt-manager-1.5.0 (rhbz#1562102)
  - The rebase also fixes the following bugs:
      rhbz#1527834, rhbz#1544479


author: Pavel Hrdina <phrdina@redhat.com> - 1.5.0-2
changelog:
  - virtinst: Remove only auto-generated channel source path (rhbz#1591670)
  - virtinst: read CPU model from domain capabilities (rhbz#1525337)
  - virtinst: compare host and domain cpu models (rhbz#1525337)
  - virtinst: Trivial spelling fix (rhbz#1525337)
  - domain: cpu: Add set_defaults (rhbz#1525337)
  - guest: Add DomainCapabilities caching (rhbz#1525337)
  - guest: Default to cpu mode=host-model if libvirt is new enough (rhbz#1525337)
  - virt-manager: Wire up support for default mode=host-model (rhbz#1525337)
  - cpu: Have host-copy use domcaps if qemu is new enough (bz 1637767) (rhbz#1525337)
  - domain.numatune: Remove cpuset_str_to_tuple (rhbz#1566818)
  - domain.numatune: Remove MEMORY_MODES (rhbz#1566818)
  - domain.numatune: Drop cpuset validation (rhbz#1566818)
  - graphics: move all listen code into one place (rhbz#1565968)
  - cli: fix typos in virt-install --help output (rhbz#1533015)
  - cli: Fix --boot smbios_mode=sysinfo (bz 1570549) (rhbz#1570549)
  - virt-clone: fix force-copy of empty cdrom or floppy disk (rhbz#1564863)
  - cli: Drop clear_attr property (rhbz#1550513)
  - virtinst: cli: fix ParserBoot to return the parsed object (rhbz#1550513)
  - virtManager: clone: check which storage pools supports volume cloning (rhbz#1463066)
  - virtManager: domain: override rename_domain in vmmDomainVirtinst (rhbz#1667308)
  - virtManager: createinterface: don't delete ip-config window (rhbz#1563638)
  - virtManager: clone: build default clone path if we know how (rhbz#1565106)
  - prefs: Add a setting to enable/disable libguestfs inspection (rhbz#1566187)


author: Pavel Hrdina <phrdina@redhat.com> - 1.5.0-3
changelog:
  - domcapabilities: fix detection if host-model is safe to use (rhbz#1525337)
  - cloner: don't fail to clone VM if nvram file doesn't exist (rhbz#1679021)
  - domcapabilities: actually fix detection if host-model is safe to use (rhbz#1525337)
  - domcapabilities: introduce get_cpu_security_features (rhbz#1582667)
  - domain: cpu: introduce set_model function (rhbz#1582667)
  - domain: cpu: automatically add CPU security features for "custom" mode (rhbz#1582667)
  - domcapabilities: remove recommended CPU features from security features (rhbz#1582667)
  - domcapabilities: fix typo in function name (rhbz#1582667)
  - cli: introduce CPU secure parameter (rhbz#1582667)
  - domcapabilities: add caching of CPU security features (rhbz#1582667)
  - virt-manager: add new checkbox to control CPU security features (rhbz#1582667)
  - DomainCpu: fix detection of CPU security features (rhbz#1582667)
  - DomainCpu: check CPU model name only if model exists (rhbz#1582667)


author: Pavel Hrdina <phrdina@redhat.com> - 1.5.0-5
changelog:
  - clone: Fix inverted --nonsparse check (rhbz#1675743)
  - cli: fix sysinfo type parsing (rhbz#1707380)
  - domcapabilities: detect MDS new vulnerability (rhbz#1582667)


author: Pavel Hrdina <phrdina@redhat.com> - 1.5.0-6
changelog:
  - manager: Fix mem, disk, net stats graphs (bz 1543896) (rhbz#1710772)
  - cli: fix cpu secure option to actually work (rhbz#1582667)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.8-2
changelog:
  - New upstream version 1.0.8.
  - Requires tiny change to ocaml-libvirt, hence dep bump.
  - Clean up the spec file.
  - Remove explicit BR ocaml-camomile (not used AFAIK).


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.8-6
changelog:
  - Include processcsv.py script and man page, but on RHEL only
    (RHBZ#665817, RHBZ#912020)
  - Clear executable stack flag on PPC, PPC64 (RHBZ#605124).


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.8-23
changelog:
  - Use libvirt virConnectGetAllDomainStats API for better performance, accuracy
  - Include all changes from Fedora Rawhide
    resolves: rhbz#1422795


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 5.0-8
changelog:
  - Show authentication dialog if in kiosk mode and connecting to ovirt
    Resolves: rhbz#1459808
  - Keep the remove-viewer-connect dialog window on top
    Resolves: rhbz#1459800
  - Show overwrite confirmation when saving screenshot file
    Resolves: rhbz#1455832
  - Fix REST endpoint used to load the storagedomains
    Resolves: rhb#1427467


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 5.0-9
changelog:
  - Drop downstream specific patch reverting string change
    Related: rhbz#1481243
  - Fix scope declaration of enable_autotools macro
    Resolves: rhbz#1504132
  - Fix wrong date in previous changelog entry
    Resolves: rhbz#1504132
  - Save oVirt uri after connecting to guest
    Resolves: rhbz#1459792
  - Adjust reference to spice-gtk man page
    Resolves: rhbz#1477966


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 5.0-10
changelog:
  - Adjust reference to spice-gtk man page for remote-viewer
    Resolves: rhbz#1477966
  - Update translations
    Resolves: rhbz#1481243


author: Victor Toso <victortoso@redhat.com> - 5.0-12
changelog:
  - Centralize recent dialog
    Resolves: rhbz#1508274
  - Always add guest name as comment
    Resolves: rhbz#1623756
  - Mark PrintScreen as translatable
    Resolves: rhbz#1510411
  - Remove symlink to spice-xpi-client-remote-viewer on update (it was dropped)
    Resolves: rhbz#1658325


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-7
changelog:
  - Add support for detecting POWER KVM and LPAR
    resolves: rhbz#1147876
  - Detect RHEV/oVirt
    resolves: rhbz#1249438
  - Detect ACPI boot aarch64 guest
    resolves: rhbz#1275349
  - Fix typo in manual page
    resolves: rhbz#1099289


author: Richard W.M. Jones <rjones@redhat.com> - 1.18-2
changelog:
  - Rebase to Fedora Rawhide / upstream version.
  - Include upstream patches since 1.18 was released.
    resolves: rhbz#1476878


author: Christopher Snyder <csnyder@redhat.com> 0.20-1
changelog:
  - 1389729: Add missing xml section for test (fran@caosdigital.com)
  - 1389729: virt-who incorrectly reports 'name' instead of 'hostname' for RHEV
    hosts (fran@caosdigital.com)
  - 1450747: Continue running destination threads on internal failure
    (csnyder@redhat.com)
  - 1444718: Log name of config when duplicate reports are retrieved
    (csnyder@redhat.com)
  - 1447264: Keep running on InvalidPasswordFormat given other valid configs
    (csnyder@redhat.com)
  - 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
    (csnyder@redhat.com)
  - 1369107: Update docs and log messages to show the *.conf requirement
    (csnyder@redhat.com)
  - 1436517: Fix api base detection for rhevm version 3 and 4
    (csnyder@redhat.com)
  - 1442337: Send updates immediately the first run (csnyder@redhat.com)
  - Do not join threads not started, fix up fake backend (csnyder@redhat.com)
  - 1439317: Ensure reports are still sent despite duplicate configurations
    (csnyder@redhat.com)
  - DestinationThreads now send all reports (csnyder@redhat.com)
  - Adds IntervalThread base class and refactors Virt classes
    (csnyder@redhat.com)
  - Remove reference to nonexistant method _set_option (csnyder@redhat.com)
  - Update ConfigManager to produce destination and source mappings.
    (csnyder@redhat.com)
  - Implemements a threadsafe datastore (csnyder@redhat.com)
  - Move from using processes to threads (csnyder@redhat.com)
  - 1436517: Set Version header for version detect (pcreech@redhat.com)
  - 1403640: Fix syntax error in exception handling (pcreech@redhat.com)
  - Update the spec file for builds on more downstream platforms
    (csnyder@redhat.com)
  - Add releaser for rhel-7.4 (khowell@redhat.com)
  - 1391512: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 0.20.2-1
changelog:
  - 1458184: better reading of environment variables (jhnidek@redhat.com)
  - 1401867: Enable logging of rhsm module to rhsm.log (jhnidek@redhat.com)
  - 1404117: Check parameter consistency and refactoring (jhnidek@redhat.com)
  - Adds a patch number to virt-who versioning (csnyder@redhat.com)
  - 1401420: xen supports only uuid/hostname as hypervisor_id
    (jhnidek@redhat.com)
  - 1458674: Update use of result data to match the new async api
    (csnyder@redhat.com)
  - 1452436: virt-who prints host-to-quest mapping everytime (jhnidek@redhat.com)
  - 1357761: Do not check passwords to be in latin1 encoding (jhnidek@redhat.com)
  - 1457101: Continue running despite malformed configs (csnyder@redhat.com)
  - 1409984: Retry initial report retrieval on connection timeout
    (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 0.21.0-1
changelog:
  - Update hypervisorCheckInAsync test for new config sections
    (csnyder@redhat.com)
  - Update Config Refactor with changes from master (csnyder@redhat.com)
  - Removed usage of old Config (not unit tests) (jhnidek@redhat.com)
  - Further clean up of unit tests (jhnidek@redhat.com)
  - Create Xen Config Subclass (jhnidek@redhat.com)
  - Create Rhevm Config Subclass (jhnidek@redhat.com)
  - Create VDSM config subclass (wpoteat@redhat.com)
  - Clean up ConfigSection Unit tests (jhnidek@redhat.com)
  - Adds FakeVirtConfigSection (csnyder@redhat.com)
  - Configuration subclass for hyperv (wpoteat@redhat.com)
  - Implement EsxConfigSection (khowell@redhat.com)
  - Libvirtd ConfigSection Subclass (jhnidek@redhat.com)
  - Adds EffectiveConfig, ConfigSection (csnyder@redhat.com)
  - Adds warning message for deprecated env vars (csnyder@redhat.com)
  - 1503700: Updates to the job polling frequency (csnyder@redhat.com)
  - 1502821: Remove undocumented, broken env var "VIRTWHO_DISABLE_ASYNC"
    (csnyder@redhat.com)
  - 1466015: Warn of deprecation of command line options in next release
    (wpoteat@redhat.com)
  - remove non-existant variable fake_is_hypervisor (adarshvritant@gmail.com)
  - 1485865: Do not replace /etc/virt-who.conf on rpm upgrade
    (csnyder@redhat.com)
  - Utilize the owner from the first report seen, if we do not know the owner
    (csnyder@redhat.com)
  - Updates based on review (use str.format) (csnyder@redhat.com)
  - Fix example fake config in man docs (adarshvritant@gmail.com)
  - Add m2crypto dependency (adarshvritant@gmail.com)
  - 1211435: Don't send host-to-geust mapping, when env, owner are wrong
    (jhnidek@redhat.com)
  - 1408556: Log which owner updated mappings are being sent to
    (csnyder@redhat.com)


author: Kevin Howell <khowell@redhat.com> 0.21.1-1
changelog:
  - 1511308: Only ESX supports: exclude_host_parents and filter_host_parents.
    (jhnidek@redhat.com)
  - 1509596: Use qemu+ssh transport if not provided (libvirt)
    (csnyder@redhat.com)
  - 1511308: Xen and Hyper-V do not support some filter options
    (jhnidek@redhat.com)
  - 1510760: Ensure virt-who exits properly (w/ no good conf)
    (csnyder@redhat.com)
  - 1509606: Remove duplicate output of validation messages (csnyder@redhat.com)
  - 1509597: Fix issue with cli consistancy check for vdsm (csnyder@redhat.com)
  - 1509595: Only expect owner on HostGuestAssociationReports
    (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 0.21.2-1
changelog:
  - 1510310: Ensure that owner and env are required where necessary
    (csnyder@redhat.com)
  - 1512778: ESX should require username, password, and server values
    (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 0.21.4-1
changelog:
  - 1353119: Add JSON-RPC support for VDSM (khowell@redhat.com)
  - 1509597: Enable to use virt-who with VDSM again (jhnidek@redhat.com)


author: Akira TAGOH <tagoh@redhat.com> - 20121230-2
changelog:
  - Drop -common package and keep consistent state of the directory
    by using the macro. (#893789)
  - Drop old Obsoletes and Provides line.


author: Jiri Kucera <jkucera@redhat.com> - 0.3.9-9
changelog:
  - Backport ecef526 (Stop using crypt_get_error)
    Backport 23a1ff0 (Fix nonsensical error messages on missing keys)
    Fix License, URL and Source0 tags
    Resolves: #1502399, #1574988, #1593855, #1454358


author: Christian Krause <chkr@fedoraproject.org> - 0.5.3-13.svn457
changelog:
  - Use tmpfiles.d service to correctly handle /var/run/vpnc (#656719)
  - Update vpnc-script:
    - fix negative MTU (#693235)
    - use restorecon to relabel /dev/net and /var/run/vpnc (#731382)
  - Various minor spec file cleanup


author: Martin Sehnoutka <msehnout@redhat.com> - 3.0.2-20
changelog:
  - Resolves: #1147551 - Missing isolate_* options, incorrect default values of
    max_clients, max_per_ip in man vsftpd.conf


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.0.2-22
changelog:
  - Resolves: #1432054 - secure ftp stopped working with default TLS settings in the new vsftpd package


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.2-23
changelog:
  - Redefine VSFTP_COMMAND_FD to 1
  - Resolves: rhbz#1443055
  - Document the relationship of text_userdb_names and chroot_local_user
  - Resolves: rhbz#1508021
  - Document allow_writeable_chroot in the man page
  - Resolves: rhbz#1508022
  - Improve documentation of ascii_* options
  - Resolves: rhbz#1517227
  - Add new filename generation algorithm for STOU command
  - Resolves: rhbz#1479237


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.2-25
changelog:
  - Add config option log_die allowing to pass error messages to syslog
  - Add config option bind_retries allowing to change the max number
  - of attempts to find a listening port for the PASV/EPSV command
  - Resolves: rhbz#1318198


author: Debarshi Ray <rishi@fedoraproject.org> - 0.46.1-1
changelog:
  - Update to 0.46.1
  - Drop upstreamed patches
  - Drop workaround for old GTK+ bug (#1238315)
  - Rebase downstream patches
  Resolves: #1387056


author: Debarshi Ray <rishi@fedoraproject.org> - 0.46.1-2
changelog:
  - Restore gnome-pty-helper
  - Add git.mk and other dependencies to regenerate the build scripts
  Resolves: #1443504


author: Denys Vlasenko <dvlasenk@redhat.com> [3.10.0-693.16.1.el7]
changelog:
  - [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
  - [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
  - [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
  - [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
  - [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
  - [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
  - [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
  - [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
  - [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
  - [fs] userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
  - [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
  - [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
  - [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
  - [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
  - [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
  - [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
  - [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
  - [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]

  - [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
  - [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
  - [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
  - [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
  - [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
  - [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
  - Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
  - [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
  - [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
  - [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
  - [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
  - [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
  - [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
  - [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
  - [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
  - [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
  - [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
  - [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
  - [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
  - [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
  - [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
  - [x86] spec_ctrl: ibrs_enabled() is expected to return > 1 (Andrea Arcangeli) [1519795 1519798]
  - [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
  - [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
  - Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
  - [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
  - [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
  - [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
  - [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
  - [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
  - [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
  - [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
  - [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
  - [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
  - [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
  - [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
  - [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
  - [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
  - [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
  - [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
  - [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
  - [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
  - [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
  - [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
  - [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
  - [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
  - [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
  - [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-693.17.1.vz7.43.1]
changelog:
  - target: call alua helper before reporting group states to initiator (Andrei Vagin)
  - target: move alua user helper from group to device (Andrei Vagin)
  - ms/mm/memcontrol.c: try harder to decrease [memory,memsw].limit_in_bytes (Andrey Ryabinin) [PSBM-80732]
  - mm: try harder to decrease cache.limit_in_bytes (Andrey Ryabinin) [PSBM-80732]
  - ms/memcg: refactor mem_cgroup_resize_limit() (Yu Zhao) [PSBM-80732]
  - ms/mm: memcontrol: fix transparent huge page allocations under pressure (Johannes Weiner) [PSBM-80732]
  - ms/mm: memcontrol: simplify detecting when the memory+swap limit is hit (Johannes Weiner) [PSBM-80732]
  - ms/mm: memcontrol: factor out reclaim iterator loading and updating (Johannes Weiner) [PSBM-75892]
  - mm/vmscan: call wait_iff_congested() only if we have troubles in recaliming (Andrey Ryabinin) [PSBM-61409]
  - mm/vmscan: Use per-zone sum of reclaim_stat to change zone state. (Andrey Ryabinin) [PSBM-61409]
  - mm/vmscan: collect reclaim stats across zone (Andrey Ryabinin) [PSBM-61409]
  - ms/mm: throttle on IO only when there are too many dirty and writeback pages (Michal Hocko) [PSBM-61409]
  - ms/mm, vmscan: enhance mm_vmscan_lru_shrink_inactive tracepoint (Michal Hocko) [PSBM-61409]
  - ms/mm, vmscan: extract shrink_page_list reclaim counters into a struct (Michal Hocko) [PSBM-61409]
  - ms/mm, vmscan: add active list aging tracepoint (Michal Hocko) [PSBM-61409]
  - ms/mm: fix direct reclaim writeback regression (Hugh Dickins)
  - ms/mm/compaction: fix wrong order check in compact_finished() (Joonsoo Kim)
  - ms/mm, compaction: properly signal and act upon lock and need_sched() contention (Vlastimil Babka)
  - ms/mm/compaction: avoid rescanning pageblocks in isolate_freepages (Vlastimil Babka)
  - ms/mm/compaction: do not count migratepages when unnecessary (Vlastimil Babka)
  - ms/mm, compaction: terminate async compaction when rescheduling (David Rientjes)
  - ms/mm, compaction: embed migration mode in compact_control (David Rientjes)
  - ms/mm, compaction: add per-zone migration pfn cache for async compaction (David Rientjes)
  - ms/mm, compaction: return failed migration target pages back to freelist (David Rientjes)
  - ms/mm, migration: add destination page freeing callback (David Rientjes)
  - ms/mm/compaction: cleanup isolate_freepages() (Vlastimil Babka)
  - ms/mm/compaction: clean up unused code lines (Heesub Shin)
  - ms/mm, compaction: ignore pageblock skip when manually invoking compaction (David Rientjes)
  - ms/mm, compaction: determine isolation mode only once (David Rientjes)
  - ms/mm/compaction: clean-up code on success of ballon isolation (Joonsoo Kim)
  - ms/mm/compaction: check pageblock suitability once per pageblock (Joonsoo Kim)
  - ms/mm/compaction: change the timing to check to drop the spinlock (Joonsoo Kim)
  - ms/mm/compaction: do not call suitable_migration_target() on every page (Joonsoo Kim)
  - ms/mm/compaction: disallow high-order page for migration target (Joonsoo Kim)
  - ms/mm, compaction: avoid isolating pinned pages (David Rientjes)
  - ms/mm: compaction: reset scanner positions immediately when they meet (Vlastimil Babka)
  - ms/mm: compaction: do not mark unmovable pageblocks as skipped in async compaction (Vlastimil Babka)
  - ms/mm: compaction: encapsulate defer reset logic (Vlastimil Babka)
  - ms/mm: compaction: trace compaction begin and end (Mel Gorman)
  - ms/mm/compaction.c: periodically schedule when freeing pages (David Rientjes) [PSBM-81070]
  - ms/kbuild: add -fno-PIE (Sebastian Andrzej Siewior)
  - ms/scripts/has-stack-protector: add -fno-PIE (Sebastian Andrzej Siewior)
  - ms/loop: fix concurrent lo_open/lo_release (Linus Torvalds) [PSBM-80876]
  - fence-watchdog: print alive messages (Pavel Tikhomirov)
  - ms/dccp: call inet_add_protocol after register_pernet_subsys in dccp_v6_init (Xin Long) [PSBM-80708]
  - ms/dccp: call inet_add_protocol after register_pernet_subsys in dccp_v4_init (Xin Long) [PSBM-80708]
  - net/dccp: fix use after free in tw_timer_handler() (Andrey Ryabinin) [PSBM-80708]
  - ms/dccp: Unlock sock before calling sk_free() (Arnaldo Carvalho de Melo) [PSBM-80708]
  - ms/dccp: defer ccid_hc_tx_delete() at dismantle time (Eric Dumazet) [PSBM-80708]
  - tcache: Fix race between tcache_invalidate_node() and tcache_attach_page() (Kirill Tkhai)
  - tcache: Refactor tcache_shrink_scan() (Kirill Tkhai)
  - mm/tcache: invalidate existing page during cleancache_put_page() (Andrey Ryabinin) [PSBM-80712]
  - target: pass a device name to an alua user helper (Andrei Vagin)
  - ms/fs, mm: account filp cache to kmemcg (Shakeel Butt) [PSBM-80839]
  - tty: Use RCU read lock to iterate tasks and threads in __do_SAK() (Kirill Tkhai) [PSBM-80340]
  - tty: Avoid threads files iterations in __do_SAK() (Kirill Tkhai) [PSBM-80340]
  - Revert "do_SAK: Don't recursively take the tasklist_lock" (Kirill Tkhai) [PSBM-80340]
  - ve/net: partially return ms permission check for ethtool commands (Pavel Tikhomirov)
  - ve/netns: fix counting of network namespaces limits (Pavel Tikhomirov)
  - ve/fs/files: always try to shrink big fdtables, not only on CT restore (Konstantin Khorenko) [PSBM-78827]
  - ve/fs/files: Shrink big fdtable on close in is_pseudosuper mode (Kirill Tkhai) [PSBM-78827]
  - ve/fs/files: Add fdtable_align() helper (Kirill Tkhai) [PSBM-78827]
  - ve/fs/files: Add new argument to expand_files() (Kirill Tkhai) [PSBM-78827]
  - ms/vfs: grab the lock instead of blocking in __fd_install during resizing (Mateusz Guzik) [PSBM-78827]
  - ms/fs/file.c: don't acquire files->file_lock in fd_install() (Eric Dumazet) [PSBM-78827]
  - target: add an user-mode helper to handle changes of a group state (Andrei Vagin)
  - ve/cgroup: hide ve and ub cgroups in CT (Pavel Tikhomirov) [PSBM-80421]
  - Revert "ve/proc/cpuset: do not show cpuset in CT" (Konstantin Khorenko) [PSBM-30541 PSBM-58423]
  - mm: add warning about high order allocations (Andrey Ryabinin) [PSBM-79892]
  - Revert "Kconfig: disable SELinux" (Konstantin Khorenko) [PSBM-80637]
  - target: add read/write/sync latency counter (Andrey Grafin)
  - target: add histogram for LUN statistics (Andrey Grafin)
  - target: add extra counters for LUN statistics (Andrey Grafin)
  - target: Move scsi_port_stats from se_port to se_lun (Andrey Grafin)
  - target: don't call an unmap callback if a range length is zero (Andrei Vagin) [PSBM-79534]
  - ms/IB/core: Init subsys if compiled to vmlinuz-core (Dmitry Monakhov)
  - ms/scsi: virtio: Reduce BUG if total_sg > virtqueue size to WARN. (Richard W.M. Jones) [PSBM-79523 PSBM-78839]
  - ms/KVM: x86/vPMU: ignore access to LBR-related MSRs (Jan Dakinevich) [PSBM-75679]
  - ms/perf/x86/intel: make reusable LBR initialization code (Jan Dakinevich) [PSBM-75679]
  - ms/x86: intel-family.h: Add GEMINI_LAKE SOC (Len Brown) [PSBM-75679]
  - ms/dccp: CVE-2017-8824: use-after-free in DCCP code (Mohamed Ghannam) [PSBM-78647]
  - ms/KVM: VMX: remove I/O port 0x80 bypass on Intel hosts (Andrew Honig) [PSBM-78651]
  - ms/KVM: nVMX: do not fill vm_exit_intr_error_code in prepare_vmcs12 (Paolo Bonzini) [PSBM-77171 PSBM-77171]
  - ms/KVM: MMU: always terminate page walks at level 1 (Ladi Prosek) [PSBM-74910]
  - ms/KVM: nVMX: update last_nonleaf_level when initializing nested EPT (Ladi Prosek) [PSBM-74910]
  - ms/KVM: Add kvm_vcpu_get_idx to get vcpu index in kvm->vcpus (Christoffer Dall)
  - ms/KVM: Provide function for VCPU lookup by id (David Hildenbrand)
  - ms/kvm: x86: hyperv: make VP_INDEX managed by userspace (Roman Kagan)
  - ms/kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Roman Kagan)
  - ms/KVM: x86: fix NULL deref in vcpu_scan_ioapic (Wanpeng Li)
  - KVM: VMX: Do not BUG() on out-of-bounds guest IRQ (Jan H. Schönherr) [PSBM-72381]
  - KVM: async_pf: Let guest support delivery of async_pf from guest mode (Wanpeng Li) [PSBM-56498]
  - KVM: async_pf: avoid async pf injection when in guest mode (Wanpeng Li) [PSBM-56498]
  - KVM: async_pf: Force a nested vmexit if the injected #PF is async_pf (Wanpeng Li) [PSBM-56498]
  - KVM: async_pf: Add L1 guest async_pf #PF vmexit handler (Wanpeng Li) [PSBM-56498]
  - KVM: nVMX: Fix exception injection (Wanpeng Li) [PSBM-56498]
  - ms/kvm: nVMX: Don't allow L2 to access the hardware CR8 (Jim Mattson) [PSBM-72332]
  - ms: Revert "KVM: nested VMX: disable perf cpuid reporting" (Jim Mattson) [PSBM-68274]
  - ms/kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Roman Kagan)
  - ms/kvm: x86: CPUID.01H:EDX.APIC[bit 9] should mirror IA32_APIC_BASE[11] (Jim Mattson) [PSBM-63209]
  - Revert "ms/KVM: x86: reset MMU on KVM_SET_VCPU_EVENTS" (Konstantin Khorenko) [PSBM-62341 PSBM-63993 PSBM-64259 PSBM-63253 PSBM-63962]
  - KVM: x86: fix maintaining of kvm_clock stability on guest CPU hotplug (Denis Plotnikov) [PSBM-59784]
  - KVM: x86: remaster kvm_write_tsc code (Denis Plotnikov) [PSBM-59784]
  - kvm: fix RH rebase fallouts: wake up SynIC message waiters (Roman Kagan)
  - KVM: x86: avoid redundant REQ_EVENT (Denis Plotnikov) [PSBM-43522]
  - ms/kvm:vmx: more complete state update on APICv on/off: lost hunk (Evgeny Yakovlev) [PSBM-57821]
  - ms/KVM: i8254: use atomic_t instead of pit.inject_lock (Radim Krčmář) [PSBM-56972]
  - ms/KVM: i8254: add kvm_pit_reset_reinject (Radim Krčmář) [PSBM-56972]
  - ms/KVM: i8254: simplify atomics in kvm_pit_ack_irq (Radim Krčmář) [PSBM-56972]
  - ms/KVM: x86: Hyper-V tsc page setup: an addition (Paolo Bonzini) [PSBM-54338]
  - vhost-net: enable zerocopy tx by default (Michael S. Tsirkin) [PSBM-52390]
  - ms/KVM: x86: Hyper-V tsc page setup (Paolo Bonzini)
  - ms/KVM: x86: always fill in vcpu->arch.hv_clock (Paolo Bonzini) [PSBM-46245]
  - ms/kvm:vmx: more complete state update on APICv on/off (Roman Kagan) [PSBM-46939]
  - ms/kvm/x86: Pass return code of kvm_emulate_hypercall (Andrey Smetanin) [PSBM-44419]
  - ms/kvm/x86: Hyper-V VMBus hypercall userspace exit (Andrey Smetanin) [PSBM-44419]
  - ms/kvm/x86: Reject Hyper-V hypercall continuation (Andrey Smetanin) [PSBM-44419]
  - ms/drivers/hv: Move VMBus hypercall codes into Hyper-V UAPI header (Andrey Smetanin) [PSBM-44419]
  - ms/kvm/x86: Rename Hyper-V long spin wait hypercall (Andrey Smetanin) [PSBM-44419]
  - kvm: do not SetPageDirty for file mappings (Maxim Patlasov) [PSBM-43243]
  - ms/kvm/x86: Hyper-V SynIC timers tracepoints (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V SynIC tracepoints (Andrey Smetanin)
  - ms/kvm/x86: Update SynIC timers on guest entry only (Andrey Smetanin)
  - ms/kvm/x86: Skip SynIC vector check for QEMU side (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V fix SynIC timer disabling condition (Andrey Smetanin)
  - ms/kvm/x86: Reorg stimer_expiration() to better control timer restart (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Andrey Smetanin)
  - ms/kvm/x86: Drop stimer_stop() function (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V timers fix incorrect logical operation (Andrey Smetanin)
  - ms/kvm/x86: Remove Hyper-V SynIC timer stopping (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V SynIC timers (Andrey Smetanin) [PSBM-58415]
  - ms/kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Andrey Smetanin)
  - ms/kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Andrey Smetanin)
  - ms/kvm/x86: Rearrange func's declarations inside Hyper-V header (Andrey Smetanin)
  - ms/drivers/hv: Move struct hv_timer_message_payload into UAPI Hyper-V x86 header (Andrey Smetanin)
  - ms/drivers/hv: Move struct hv_message into UAPI Hyper-V x86 header (Andrey Smetanin)
  - ms/drivers/hv: Move HV_SYNIC_STIMER_COUNT into Hyper-V UAPI x86 header (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V kvm exit (Andrey Smetanin)
  - ms/KVM: x86: use delivery to self in hyperv synic (Radim Krčmář)
  - ms/kvm/x86: Hyper-V synthetic interrupt controller (Konstantin Khorenko) [PSBM-54815]
  - ms/kvm/irqchip: kvm_arch_irq_routing_update renaming split (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V HV_X64_MSR_VP_RUNTIME support (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V HV_X64_MSR_VP_INDEX export for QEMU. (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V HV_X64_MSR_RESET msr (Andrey Smetanin)
  - ve/kvm: Allow scheduler throttling in __vcpu_run() (Kirill Tkhai) [PSBM-42358]
  - md: add support for dm-crypted ploops (Maxim Patlasov) [PSBM-53386]
  - ms/crypto: skcipher - Fix blkcipher walk OOM crash (Herbert Xu)
  - ms/crypto: cryptd - initialize child shash_desc on import (Ard Biesheuvel)
  - ms/crypto: scatterwalk - Fix test in scatterwalk_done (Herbert Xu)
  - ms/crypto: gcm - Filter out async ghash if necessary (Herbert Xu)
  - ms/crypto: hash - Fix page length clamping in hash walk (Herbert Xu)
  - ms/crypto: user - lock crypto_alg_list on alg dump (Mathias Krause)
  - ms/crypto: algif_hash - wait for crypto_ahash_init() to complete (Wang, Rui Y)
  - ms/crypto: shash - Fix has_key setting (Herbert Xu)
  - ms/crypto: algif_skcipher - Load TX SG list after waiting (Herbert Xu) [PSBM-53860]
  - ms/crypto: algif_skcipher - Fix race condition in skcipher_check_key (Herbert Xu) [PSBM-53860]
  - ms/crypto: algif_hash - Fix race condition in hash_check_key (Herbert Xu) [PSBM-53860]
  - ms/crypto: af_alg - Forbid bind(2) when nokey child sockets are present (Herbert Xu) [PSBM-53860]
  - ms/crypto: algif_skcipher - Remove custom release parent function (Herbert Xu) [PSBM-53860]
  - ms/crypto: algif_hash - Remove custom release parent function (Herbert Xu) [PSBM-53860]
  - ms/crypto: af_alg - Allow af_af_alg_release_parent to be called on nokey path (Herbert Xu) [PSBM-53860]
  - ms/crypto: skcipher - Add crypto_skcipher_has_setkey (Herbert Xu) [PSBM-53860]
  - ploop: fix trim_extent_mappings() locking (Vasily Averin) [PSBM-78538 PSBM-45999]
  - ploop: fix dio_invalidate_cache() (Maxim Patlasov) [PSBM-73999]
  - ploop: add dependency for CBT in Kconfig (Cyrill Gorcunov)
  - ploop/modules: set module author for Virtuozzo modules (Konstantin Khorenko) [PSBM-43847]
  - ploop/license: put correct copyrights into file headers (Konstantin Khorenko) [PSBM-43847]
  - ploop: make error messages about intersecting extents more verbose (v2) (Maxim Patlasov)
  - ploop: fix race on map->levels[] update (Maxim Patlasov)
  - ploop: push_backup: ploop_pb_get_pending should wait again instead of ENOENT (Maxim Patlasov) [PSBM-68608]
  - ploop: show ino and sdev for ploop images in sysfs (Andrei Vagin) [PSBM-68404]
  - ploop: fix typo in ploop_pb_get_first_req_from_tree (Maxim Patlasov) [PSBM-67513]
  - block/ploop: Add resched points in ploop thread. (Andrey Ryabinin) [PSBM-66617]
  - ploop: push_backup: BUG() on list corruption in ploop_pb_add_req_to_tree() (Maxim Patlasov) [PSBM-65786 PSBM-65786]
  - ploop: fix IS_PSTORAGE() macro: add check for "vstorage" (Maxim Patlasov)
  - ploop: pio_nfs does not require PLOOP_REQ_ISSUE_FLUSH (v2) (Maxim Patlasov)
  - ploop: add comments about possible leaks (Konstantin Khorenko) [PSBM-52219]
  - ploop: don't leak ploop_freeblks_ctl_extent (Dmitry Safonov) [PSBM-51362]
  - ploop: push_backup: ploop_pb_init must always spawn health_monitor (Maxim Patlasov)
  - ploop: push_backup: avoid deadlock on PLOOP_PEEK (Maxim Patlasov)
  - ploop: push_backup: avoid preq->state corruption (Maxim Patlasov)
  - ploop: ploop_grow must nullify holes (Maxim Patlasov) [PSBM-55685]
  - ploop: push_backup: fix pbd->ppb_lock deadlock (Maxim Patlasov)
  - ploop: add support for dm-crypted ploops (Andrey Ryabinin) [PSBM-50858]
  - ploop: keep frozen block device pointer instead of super_block pointer (Andrey Ryabinin) [PSBM-50858]
  - ploop: drop bdev refcounter on freeze_bdev() failure (Andrey Ryabinin)
  - ploop: io_direct: delay f_op->fsync() until index_update for reloc requests (v3) (Maxim Patlasov) [PSBM-47026 PSBM-47026]
  - ploop: factor out add preq to fsync_queue (Maxim Patlasov)
  - ploop: factor ->write_page() out (Maxim Patlasov)
  - ploop: fix freeze/thaw ioctls (Maxim Patlasov) [PSBM-49699]
  - ploop: fix free_list starvation (Maxim Patlasov) [PSBM-49454]
  - ploop: introduce plo->blockable_reqs counter (Maxim Patlasov) [PSBM-49454]
  - ploop: introduce plo->free_qlen counter (Maxim Patlasov) [PSBM-49454]
  - ploop: fix fsync_reqs accounting (Maxim Patlasov) [PSBM-49454]
  - ploop: release plo->ctl_mutex for thaw_bdev in PLOOP_IOC_THAW handler (Vladimir Davydov) [PSBM-49699]
  - ploop: add PLOOP_IOC_FREEZE and PLOOP_IOC_THAW ioctls (Maxim Patlasov) [PSBM-49091]
  - ploop: reloc vs extent_conversion race fix (Dmitry Monakhov) [PSBM-47107 PSBM-49143]
  - ploop: push_backup: implement timeout functions (Maxim Patlasov) [PSBM-48082]
  - ploop: push_backup: health monitor thread (Maxim Patlasov) [PSBM-48082]
  - ploop: push_backup: add timeout tunable (Maxim Patlasov)
  - ploop: push_backup: extend pb_set (Maxim Patlasov)
  - ploop: push_backup: factor rb_erase() out (Maxim Patlasov)
  - ploop: push_backup: introduce pb_set structure (Maxim Patlasov) [PSBM-48082 PSBM-48082]
  - ploop: fixup barrier handling during relocation (Maxim Patlasov)
  - ploop: fix barriers for PLOOP_E_RELOC_NULLIFY (Maxim Patlasov)
  - ploop: generalize issue_flush (Dmitry Monakhov)
  - ploop: remove preflush from dio_submit (Maxim Patlasov)
  - ploop: resurrect delay_fua for io_direct (Maxim Patlasov)
  - ploop: minor rework of ->write_page() io method (Dmitry Monakhov)
  - ploop: resurrect delayed_fua for io_kaio (Maxim Patlasov)
  - ploop: minor rework of ploop_req_delay_fua_possible (Maxim Patlasov) [PSBM-47107]
  - ploop: deadcode cleanup in dio_submit() (Dmitry Monakhov)
  - ploop: skip redundant fsync for REQ_FUA in post_submit (Dmitry Monakhov)
  - ploop: fix barriers for ordinary requests (Maxim Patlasov)
  - ploop: io_kaio: fix silly bug in kaio_complete_io_state() (Maxim Patlasov)
  - ploop: fix counting bio_qlen (Maxim Patlasov)
  - ploop: fix gendisk disk_stats to be seen on partition (Maxim Patlasov) [PSBM-48266]
  - ploop: "Parallels loopback device" -> "Virtuozzo loopback device" (Konstantin Khorenko) [PSBM-43847]
  - ploop: push_backup: PLOOP_PEEK mode of ioctl(PLOOP_IOC_PUSH_BACKUP_IO) (Maxim Patlasov) [PSBM-47764]
  - ploop: push_backup: rework lockout machinery (Maxim Patlasov) [PSBM-47680 PSBM-47680]
  - ploop: push_backup: copy stop status back to userspace (Maxim Patlasov) [PSBM-47429]
  - ploop: io_direct: delay f_op->fsync() until FLUSH|FUA (v2) (Maxim Patlasov) [PSBM-47026]
  - ploop: push_backup: merge pbd->cbt_map back to CBT (Maxim Patlasov) [PSBM-47429]
  - ploop: push_backup: improve ioctl(PLOOP_IOC_PUSH_BACKUP_IO) (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: introduce ppb->reported_map (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: implement auto destroy (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: factor out destroy (Maxim Patlasov) [PSBM-45000]
  - ploop: get rid of direct calls to file->f_op->fsync() (Maxim Patlasov)
  - ploop: get rid of dio_fsync() (Maxim Patlasov)
  - ploop: io_direct: check for fsync fop on startup (Maxim Patlasov)
  - ploop: get rid of FOP_FSYNC (Maxim Patlasov)
  - ploop: avoid costly user-controllable kmalloc() calls (Andrey Ryabinin) [PSBM-47303]
  - ploop: push_backup: optimize ploop_pb_put_reported() (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: optimize ploop_pb_get_pending() (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: show uuid (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: fix ploop_push_backup_io_read() (Maxim Patlasov) [PSBM-45000]
  - ploop: force journal commit after dio_post_submit() (Dmitry Monakhov) [PSBM-45730]
  - ploop: push_backup cleanup (Maxim Patlasov)
  - ploop: wire push_backup into state-machine (Maxim Patlasov)
  - ploop: implement PLOOP_IOC_PUSH_BACKUP_IO (Maxim Patlasov) [PSBM-45000]
  - ploop: introduce pbd (Maxim Patlasov) [PSBM-45000]
  - ploop: io_direct must fsync after fallocate (Maxim Patlasov) [PSBM-45326 PSBM-46146]
  - ploop: must acquire write access on space allocation (Maxim Patlasov) [PSBM-20150]
  - ploop: use FALLOC_FL_CONVERT_UNWRITTEN in io_direct (Maxim Patlasov) [PSBM-22381]
  - ploop: replace BLOCK_UNINIT (Maxim Patlasov) [PSBM-22381]
  - ploop: fix direct_io prealloc checks (Maxim Patlasov) [PSBM-22381]
  - ploop: update gendisk disk_stats (Maxim Patlasov) [PSBM-41247]
  - ploop: rename extent maps management funtions (Alexey V. Vissarionov)
  - ploop: disable WRITE SAME for io_kaio (Maxim Patlasov) [PSBM-41965]
  - ploop: release io_context on ploop_thread() exit (Maxim Patlasov) [PSBM-39956]
  - ploop: do not use fiemap beyond eof (Maxim Patlasov) [PSBM-26762 PSBM-39251]
  - ploop: use GFP_NOIO in ploop_make_request (Vladimir Davydov) [PSBM-38842]
  - ploop: fix race on prealloc request (Maxim Patlasov) [PSBM-35095]
  - ploop: dio_fastmap() must refresh bvec_merge_data (Maxim Patlasov)
  - ploop: fix processing sync bios (Maxim Patlasov) [PSBM-33630]
  - ploop: added into pvd header new close signatures (Andrey Smetanin) [PSBM-33882]
  - ploop: fix busyloop on secondary discard bio (Andrey Smetanin) [PSBM-30451]
  - ploop: add a separate queue for discard bio-s (v2) (Andrey Smetanin) [PSBM-27676]
  - ploop: added printk of function, line, backtrace before ploop_set_error (Andrey Smetanin)
  - ploop: force FUA of nullified blocks for BAT grow (Andrey Smetanin) [PSBM-31969]
  - ploop: mark reloc reqs to force FUA/fsync(kaio) for index update I/O (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: mark reloc reqs to force FUA before write of relocated data (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: make image fsync at I/O complete if it's required by FUA/fsync force flag or by req->req_rw (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: do preflush or postfua according force FUA/flush flags, and delay FUA if possible but add force FLUSH to req if so (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: direct: to support truly FLUSH/FUA of req we need mark first bio FLUSH, write all bios and mark last bio as FLUSH/FUA (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: define struct ploop_request->state flags to force pre FLUSH before write IO and FUA/fsync at I/O complete (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: added ploop_req_delay_fua_possible() func that detects possible delaying of upcoming FUA to index update stage (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: notify blktrace about bio completions (Andrey Smetanin)
  - ploop: warning on "disk full" condition (Andrey Smetanin)
  - ploop: make manual abort transition verbose (Andrey Smetanin)
  - ploop: zero blocks on reuse (Andrey Smetanin) [PSBM-25391]
  - ploop: roll back alloc_head on ENOSPC (Andrey Smetanin) [PSBM-24694]
  - ploop: put top-delta back if merge failed (Andrey Smetanin) [PSBM-25252]
  - ploop: fix spurious hole complains (Andrey Smetanin)
  - ploop: expose open_count to sysfs (Andrey Smetanin) [PSBM-24754]
  - ploop: ensure non-empty delta list on running ploop (Andrey Smetanin) [PSBM-25102]
  - ploop: bug on bad fiemap (v2) (Andrey Smetanin) [PSBM-26762]
  - ploop: add ioctl to limit size of top delta (v2) (Andrey Smetanin) [PSBM-22002]
  - ploop: prioritize BAT operations (Andrey Smetanin)
  - ploop: fix race in ploop_tracker_init() (Andrey Smetanin) [PSBM-22993]
  - ploop: fix check_zero optimization v2 (Andrey Smetanin) [PSBM-23452]
  - ploop: fix a race condition on relocation of blocks (Andrey Smetanin) [PSBM-23905]
  - ploop: support 4K block-size of host block-device (Andrey Smetanin) [PSBM-21989]
  - ploop: skip writes of zeroes to unallocated blocks by default (Andrey Smetanin) [PSBM-22506 PSBM-22381]
  - ploop: reverse order of fdatawait and fsync fop (Andrey Smetanin)
  - ploop: fix sync delay for sync requests (Andrey Smetanin) [PSBM-22381]
  - ploop: fix iblk-to-sector calculations (Andrey Smetanin) [PSBM-22961]
  - ploop: rework accounting images_size (Andrey Smetanin) [PSBM-20432]
  - ploop: report holes in pio_direct (v2) (Andrey Smetanin) [PSBM-20770]
  - ploop: prevent disclosure 4 bytes of the stack kernel (Andrey Smetanin)
  - ploop: prevent dangerous ploop-umount (Andrey Smetanin) [PSBM-21474]
  - ploop: check new size of block device on ioctl(GROW) (Andrey Smetanin) [PSBM-21027]
  - ploop: fix dio_fsync wait (Andrey Smetanin) [PSBM-18049]
  - ploop: fix accounting ploop_io_images_size (Andrey Smetanin) [PSBM-19906]
  - ploop: fixed deadlock by interrupts off inside lookup_extent_mapping (Andrey Smetanin) [PSBM-32614]
  - ploop: fix deadlock inside dio_alloc_sync - lock inside while() but unlock outside (Andrey Smetanin)
  - ploop: purge plo->map on merge (Maxim Patlasov) [PSBM-27891]
  - ploop: set PLOOP_MAP_IDENTICAL bit on merge (Maxim Patlasov) [PSBM-24408]
  - ploop: update i_size on preallocation (Maxim Patlasov)
  - ploop: support of explicit unplug: unplug callback (Maxim Patlasov) [PSBM-18168]
  - ploop: support of explicit unplug: start and stop plugging (Maxim Patlasov) [PSBM-18168]
  - ploop: check ENOSPC callback (Maxim Patlasov) [PSBM-18168]
  - ploop: port io_kaio module (Maxim Patlasov) [PSBM-18168]
  - ploop: congestion detection (Maxim Patlasov) [PSBM-18168 PSBM-11585]
  - ploop: generic support of writeback control (Maxim Patlasov) [PSBM-18168 PSBM-11585]
  - ploop: check error from freeze_bdev (Maxim Patlasov) [PSBM-28460]
  - ploop: fix file->f_count leak in raw_complete_snapshot() (Kirill Tkhai)
  - ploop: add ploop to the tree (Maxim V. Patlasov) [PSBM-51358 PSBM-51358]
  - block: cbt: fix potential deadlock (Maxim Patlasov)
  - cbt: license: put correct copyrights into file headers (Konstantin Khorenko) [PSBM-43847]
  - cbt: don't leak ce_reserved64 in cbt_ito userspace (Dmitry Safonov) [PSBM-51361]
  - cbt: blk_cbt_update_size() must return if cbt->block_max not changed (Maxim Patlasov)
  - cbt: blk_cbt_update_size() should not copy uninitialized data (Maxim Patlasov) [PSBM-48120]
  - cbt: fix possible race on alloc_page() (Maxim Patlasov)
  - cbt: new api: blk_cbt_map_merge() (Maxim Patlasov) [PSBM-47429 PSBM-47429]
  - cbt: fix panic in blk_cbt_map_copy_once() (Maxim Patlasov) [PSBM-47416]
  - cbt: fix cbt->block_max calculation (Maxim Patlasov)
  - cbt: add uuid arg to blk_cbt_map_copy_once() (Maxim Patlasov) [PSBM-45000]
  - cbt: add blk_cbt_map_copy_once() helper (Maxim Patlasov) [PSBM-45000]
  - cbt: fix page allocation (Maxim Patlasov)
  - cbt: make __blk_cbt_set() smarter (Maxim Patlasov)
  - cbt: introduce CBT_PAGE_MISSED (Maxim Patlasov)
  - cbt: factor out alloc_page (Maxim Patlasov) [PSBM-45000]
  - config.OpenVZ: enable cbt - changed block tracking (Konstantin Khorenko) [PSBM-34156]
  - cbt: introduce changed block tracking (Dmitry Monakhov) [PSBM-34156 PSBM-54928]
  - fs/fuse/dev: improve ->splice() with fragmented memory (Andrey Ryabinin) [PSBM-77949]
  - fuse: fuse_request_send_background() must clear FR_PENDING (Maxim Patlasov) [PSBM-78342 PSBM-74661 PSBM-74660 PSBM-74226]
  - ms/fs/fuse: fix ioctl type confusion (Jann Horn) [PSBM-75073]
  - fuse: skip invalidate_inode_pages2 on truncate (Maxim Patlasov) [PSBM-76437]
  - fuse: do not call end_page_writeback earlier than fuse_flush_writepages (Maxim Patlasov) [PSBM-68454]
  - fuse: ioctl(FIEMAP) support (Maxim Patlasov) [PSBM-68226]
  - fuse: fallocate must return error if mode is not supported (Maxim Patlasov)
  - fuse: add support for fallocate(FL_ZERO_RANGE) (Maxim Patlasov)
  - fuse: allow to mount if process is in init_user_ns (Stanislav Kinsburskiy) [PSBM-67185]
  - fuse: optimize writepages search (Maxim Patlasov) [PSBM-59254]
  - fuse: ioctl() to bind fuse device to input queue (Maxim Patlasov)
  - fuse: separate iqueue for clones (Maxim Patlasov)
  - ms/fuse: fix use after free issue in fuse_dev_do_read() (Maxim Patlasov)
  - ms/fuse: clear FR_PENDING flag when moving requests out of pending queue (Maxim Patlasov)
  - ms/fuse: separate pqueue for clones (Maxim Patlasov)
  - ms/fuse: introduce per-instance fuse_dev structure (Maxim Patlasov)
  - ms/fuse: device fd clone (Maxim Patlasov)
  - ms/fuse: abort: no fc->lock needed for request ending (Maxim Patlasov)
  - ms/fuse: no fc->lock for pqueue parts (Maxim Patlasov)
  - ms/fuse: no fc->lock in request_end() (Maxim Patlasov)
  - ms/fuse: cleanup request_end() (Maxim Patlasov)
  - ms/fuse: request_end(): do once (Maxim Patlasov)
  - ms/fuse: add req flag for private list (Maxim Patlasov)
  - ms/fuse: pqueue locking (Maxim Patlasov)
  - ms/fuse: abort: group pqueue accesses (Maxim Patlasov)
  - ms/fuse: cleanup fuse_dev_do_read() (Maxim Patlasov)
  - ms/fuse: move list_del_init() from request_end() into callers (Maxim Patlasov)
  - ms/fuse: duplicate ->connected in pqueue (Maxim Patlasov)
  - ms/fuse: separate out processing queue (Maxim Patlasov)
  - ms/fuse: use list_for_each_entry() for list traversing (Maxim Patlasov)
  - ms/fuse: simplify request_wait() (Maxim Patlasov)
  - ms/fuse: no fc->lock for iqueue parts (Maxim Patlasov)
  - ms/fuse: allow interrupt queuing without fc->lock (Maxim Patlasov)
  - ms/fuse: iqueue locking (Maxim Patlasov)
  - ms/fuse: dev read: split list_move (Maxim Patlasov)
  - ms/fuse: abort: group iqueue accesses (Maxim Patlasov)
  - ms/fuse: duplicate ->connected in iqueue (Maxim Patlasov)
  - ms/fuse: flush requests on umount (Maxim Patlasov)
  - ms/fuse: separate out input queue (Maxim Patlasov)
  - ms/fuse: req state use flags (Maxim Patlasov)
  - ms/fuse: simplify req states (Maxim Patlasov)
  - ms/fuse: don't hold lock over request_wait_answer() (Maxim Patlasov)
  - ms/fuse: simplify unique ctr (Maxim Patlasov)
  - ms/fuse: rework abort (Maxim Patlasov)
  - ms/fuse: fold helpers into abort (Maxim Patlasov)
  - ms/fuse: use per req lock for lock/unlock_request() (Maxim Patlasov)
  - ms/fuse: req use bitops (Maxim Patlasov)
  - ms/fuse: simplify request abort (Maxim Patlasov)
  - ms/fuse: call fuse_abort_conn() in dev release (Maxim Patlasov)
  - ms/fuse: add memory barrier to INIT (Maxim Patlasov)
  - ms/fuse: fold fuse_request_send_nowait() into single caller (Maxim Patlasov)
  - ms/fuse: check conn_error earlier (Maxim Patlasov)
  - ms/fuse: account as waiting before queuing for background (Maxim Patlasov)
  - ms/fuse: reset waiting (Maxim Patlasov)
  - ms/fuse: fix background request if not connected (Maxim Patlasov)
  - ms/fuse: initialize fc->release before calling it (Maxim Patlasov)
  - fuse: fuse_prepare_write() cannot handle page from killed request (Maxim Patlasov) [PSBM-54547]
  - fuse: fuse_writepage_locked must check for FUSE_INVALIDATE_FILES (v2) (Maxim Patlasov)
  - fuse: fuse_writepages_fill must check for FAIL_IMMEDIATELY (Maxim Patlasov)
  - fuse: cleanup struct fuse_fill_data (Maxim Patlasov)
  - fuse: cleanup fuse_wait_on_page_writeback (Maxim Patlasov)
  - fuse: fuse_blocked_for_wb must check rw_files (Maxim Patlasov) [PSBM-57460]
  - fuse: trust server file size unless opened (Maxim Patlasov) [PSBM-57047]
  - fuse: ratelimint dio complains (Maxim Patlasov) [PSBM-55782]
  - fuse: fuse_send_writepage() must check FUSE_S_FAIL_IMMEDIATELY (Maxim Patlasov)
  - fuse: no mtime flush on fdatasync (Maxim Patlasov) [PSBM-55919]
  - fuse: relax i_mutex coverage in fuse_fsync (Maxim Patlasov) [PSBM-55919]
  - fuse: queue work for aio_complete (v3) (Maxim Patlasov) [PSBM-54547]
  - fuse: process small sync direct reads synchronously (Maxim Patlasov)
  - ms/fuse: handle only fatal signals while waiting request answer (Stanislav Kinsburskiy) [PSBM-53581]
  - ms/fuse: fuse_flush must check mapping->flags for errors (Maxim Patlasov) [PSBM-49821]
  - ms/fuse: fsync() does not return IO errors (Alexey Kuznetsov) [PSBM-49821]
  - fuse: enable synchronous close for both "pstorage://" and "vstorage://" fs types (Andrey Zaitsev) [PSBM-47206]
  - fuse: increase min/max_dirty_pages up to 256/512 MB (Vladimir Davydov)
  - fuse: resend interrupted release (Maxim Patlasov) [PSBM-45428]
  - ms/fuse: break infinite loop in fuse_fill_write_pages() (Maxim Patlasov)
  - fuse: allow to mount fuse filesystems inside CT (Andrey Ryabinin) [PSBM-41075]
  - fuse: virtualize file system (Stanislav Kinsburskiy) [OVZ-6498]
  - fuse: fix erroneous unlock_page() in fuse_send_writepages() (Maxim Patlasov)
  - fuse: release cleanup (Maxim Patlasov)
  - fuse: fix deadlock in fuse_flush() (Maxim Patlasov) [PSBM-29381]
  - fuse: invalidate_files backward compatibility mode (Maxim Patlasov)
  - fuse: fix writeback/release race (Maxim Patlasov) [PSBM-26148]
  - fuse: report details of aio failure (Maxim Patlasov) [PSBM-23696]
  - fuse: fail lost-lease notification if async_read (Maxim Patlasov)
  - fuse: skip waiting for fuse writeback (Maxim Patlasov)
  - fuse: prevent queueing new requests after (Maxim Patlasov)
  - fuse: kill requests on "lost-lease" event (Maxim Patlasov)
  - fuse: add "killed" bit to fuse request (Maxim Patlasov)
  - fuse: add page_cache bit to fuse request (Maxim Patlasov)
  - fuse: the list of all opened files (Maxim Patlasov)
  - fuse: do not flush files opened ro (Maxim Patlasov) [PSBM-20562]
  - fuse: add mount option to disable close_wait (Maxim Patlasov)
  - fuse: make umount synchronous (Maxim Patlasov) [PSBM-19305]
  - fuse: print initialized flag in conn info (Maxim Patlasov)
  - fuse: extend report on pstorage errors (Maxim Patlasov)
  - fuse: do not use RELEASE on directory (Maxim Patlasov) [PSBM-17195]
  - fuse: add missed fuse_file_put() (Maxim Patlasov)
  - fuse: cleanups in fuse writeback (Maxim Patlasov) [PSBM-16442 PSBM-16442]
  - fuse: pass "fc" to fuse_invalidate_files() (Maxim Patlasov)
  - fuse: implement invalidate_files notification (Maxim Patlasov) [PSBM-16105]
  - fuse: report size from server if no openers exist (Maxim Patlasov) [PSBM-15941]
  - fuse: account read/write requests into iopslimit (Maxim Patlasov)
  - fuse: improve bdi dirty memory limits for fuse (Maxim Patlasov) [PSBM-13700 PSBM-45497]
  - fuse: enable async_dio for pcs (Maxim Patlasov)
  - fuse: optimize fuse_vma_close() (Maxim Patlasov)
  - fuse: do not oops in fuse writepage (Maxim Patlasov) [PSBM-10752]
  - fuse: account directio requests into ioacct (Maxim Patlasov)
  - fuse: wire iolimit sleep-hook into directio path. (Maxim Patlasov)
  - fuse: account read/write requests into iostat (Maxim Patlasov)
  - fuse: set num_openers on create (Maxim Patlasov) [PSBM-13820]
  - fuse: i_size to be updated on first open (Maxim Patlasov) [PSBM-13636]
  - fuse: reimplement synchronous close (Maxim Patlasov)
  - fuse: Wait for real writeback to finish on file (Maxim Patlasov)
  - fuse: virtualize context pid (Maxim Patlasov)
  - fuse: some fairness in handling writeback (Maxim Patlasov)
  - fuse: Fuse ctl file with connection info (Maxim Patlasov)
  - fuse: Show open files in fusectl (Maxim Patlasov)
  - fuse: Show active requests in fusectl files (Maxim Patlasov)
  - fuse: fuse-ve-odirect sysctl (Maxim Patlasov) [PSBM-18167]
  - fuse: direct_enable mount option (Maxim Patlasov) [PSBM-18167]
  - fuse: set req->background flag for fuse_writepages (Maxim Patlasov) [PSBM-18167]
  - fuse: kaio support (Maxim Patlasov) [PSBM-18167]
  - fuse: Turn writeback cache on (Maxim V. Patlasov)
  - fuse: Fix O_DIRECT operations vs cached writeback misorder - v2 (Maxim V. Patlasov)
  - fuse: fuse_flush() should wait on writeback (Maxim V. Patlasov)
  - fuse: fuse_writepage_locked() should wait on writeback (Maxim V. Patlasov)
  - fuse: Implement writepages and write_begin/write_end callbacks (Maxim V. Patlasov)
  - fuse: Flush files on wb close (Maxim V. Patlasov)
  - fuse: Trust kernel i_mtime only (Maxim V. Patlasov)
  - ms/fuse: Trust kernel i_size only (Pavel Emelyanov)
  - ms/fuse: Connection bit for enabling writeback (Pavel Emelyanov)
  - ms/fuse: Prepare to handle multiple pages in writeback (Pavel Emelyanov)
  - ms/fuse: Prepare to handle short reads (Pavel Emelyanov)
  - ms/fuse: Getting file for writeback helper (Pavel Emelyanov)
  - ms/fuse: Linking file to inode helper (Pavel Emelyanov)
  - vzprivnet: Enable module in configs (Pavel Tikhomirov) [PSBM-43685]
  - ip6_vzprivnet: Add ip6_vzprivnet driver (Konstantin Khorenko)
  - ip_vzprivnet: Add ip_vzprivnet driver (Konstantin Khorenko)
  - fence-watchdog/arptables: add ability to filter by watchdog timeout (Pavel Tikhomirov)
  - fence-watchdog: Add xt_wdog_tmo netfilter match (Pavel Tikhomirov) [PSBM-23253]
  - fence-watchdog: Add fence-watchdog driver (Pavel Tikhomirov)
  - connector: add VE SS hook (Stanislav Kinsburskiy) [PSBM-60227]
  - connector: take VE from socket upon callback (Stanislav Kinsburskiy)
  - connector: containerize "connector" proc entry (Stanislav Kinsburskiy)
  - proc connector: send events to both VEs if not in VE#0 (Stanislav Kinsburskiy)
  - proc connector: use per-ve netlink sender helper (Stanislav Kinsburskiy)
  - proc connector: take namespaces from VE (Stanislav Kinsburskiy)
  - proc connector: pass VE to event fillers (Stanislav Kinsburskiy)
  - proc connector: take number of listeners and per-cpu conters from VE (Stanislav Kinsburskiy)
  - proc connector: call proc-related init and fini routines explicitly (Stanislav Kinsburskiy)
  - proc connector: add per-ve init and fini foutines (Stanislav Kinsburskiy)
  - proc connector: add pid namespace awareness (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for exit event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for coredump event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for comm event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for ptrace event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for sid event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for id event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for exec event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for fork event (Stanislav Kinsburskiy)
  - proc connector: generic proc_event_connector() helper introduced (Stanislav Kinsburskiy)
  - connector: take cn_already_initialized from VE (Stanislav Kinsburskiy)
  - connector: per-ve helpers intoruduced (Stanislav Kinsburskiy)
  - connector: use device stored in VE (Stanislav Kinsburskiy)
  - connector: per-ve init and fini helpers introduced (Stanislav Kinsburskiy)
  - connector: introduce VE-aware get_cdev() helper (Stanislav Kinsburskiy)
  - connector: store all private data on VE structure (Stanislav Kinsburskiy)
  - connector: remove redundant input callback from cn_dev (Stanislav Kinsburskiy) [PSBM-60227]
  - connector: bump skb->users before callback invocation (Florian Westphal) [PSBM-71904]
  - ms/kernel/ucount.c: mark user_header with kmemleak_ignore() (Luis R. Rodriguez) [PSBM-76924]
  - ms/debugobjects: Make kmemleak ignore debug objects (Waiman Long) [PSBM-76924]
  - ms/module: Fix load_module() error path (Peter Zijlstra) [PSBM-69081]
  - ms/module: Optimize __module_address() using a latched RB-tree (Peter Zijlstra) [PSBM-69081]
  - ms/rbtree: Implement generic latch_tree (Peter Zijlstra) [PSBM-69081]
  - ms/seqlock: Introduce raw_read_seqcount_latch() (Peter Zijlstra) [PSBM-69081]
  - ms/rcu: Move lockless_dereference() out of rcupdate.h (Peter Zijlstra) [PSBM-69081]
  - ms/seqlock: Better document raw_write_seqcount_latch() (Peter Zijlstra) [PSBM-69081]
  - ms/rbtree: Make lockless searches non-fatal (Peter Zijlstra) [PSBM-69081]
  - ms/new helper: wait_event_killable_exclusive() (Stanislav Kinsburskiy) [PSBM-53581]
  - ms/bio: fix unbalanced page refcounting in bio_map_user_iov (Vitaly Mayatskikh)
  - ms/ipv6: avoid unregistering inet6_dev for loopback (WANG Cong) [PSBM-75641]
  - ms/qla2xxx/target: Add TFO->abort_task for aborted task resources release (Kirill Tkhai) [PSBM-73161]
  - ms/pidns: fix NULL dereference in __task_pid_nr_ns() (Eric Dumazet) [PSBM-75247]
  - ms/ALSA: seq: Fix use-after-free at creating a port (Takashi Iwai) [PSBM-75344]
  - ms/trylock_super(): replacement for grab_super_passive() (Konstantin Khlebnikov) [PSBM-73370]
  - ms/kernel/kcmp.c: drop branch leftover typo (Cyrill Gorcunov)
  - ms/x86: Fix norandmaps/ADDR_NO_RANDOMIZE (Oleg Nesterov)
  - ms/timerfd: Protect the might cancel mechanism proper (Thomas Gleixner) [PSBM-70060]
  - ms/workqueue: fix ghost PENDING flag while doing MQ IO (Roman Pen) [PSBM-69788]
  - ms/devpts: fix null pointer dereference on failed memory allocation (Colin Ian King) [PSBM-67757]
  - ms/pty: Remove pty_unix98_shutdown() (Peter Hurley) [PSBM-67757]
  - ms/ipv4: ip_do_fragment: fix headroom tests (Vasily Averin) [PSBM-68362]
  - ms/sctp: do not peel off an assoc from one netns to another one (Xin Long) [PSBM-79325]
  - ms/sctp: listen on the sock only when it's state is listening or closed (Xin Long) [PSBM-64050]
  - ms/ipvs: fix memory leak in ip_vs_ctl.c (Tommi Rantala) [PSBM-65033]
  - ms/Don't trigger congestion wait on dirty-but-not-writeout pages (Linus Torvalds) [PSBM-68029]
  - ms/x86/spinlocks/paravirt: Fix memory corruption on unlock (Raghavendra K T) [PSBM-68212]
  - ms/x86/ticketlock: Fix spin_unlock_wait() livelock (Oleg Nesterov) [PSBM-68212]
  - ms/x86/spinlock: Replace ACCESS_ONCE with READ_ONCE (Christian Borntraeger) [PSBM-68212]
  - ms/ipv6: ip6_fragment: fix headroom tests and skb leak (Florian Westphal) [PSBM-68362 OVZ-6915]
  - ms/ /proc/PID/status: show all sets of pid according to ns (Chen Hanxiao) [PSBM-62139]
  - ms/ipv4: fix a deadlock in ip_ra_control (WANG Cong) [PSBM-64752]
  - ms/ipv6: fix a lockdep splat (Eric Dumazet) [PSBM-61714]
  - ms/kprobes/x86: Return correct length in __copy_instruction() (Eugene Shatokhin) [PSBM-66876]
  - ms/module: keep percpu symbols in module's symtab (Miroslav Benes) [PSBM-66337]
  - ms/kcmp: fs/epoll: wrap kcmp code with CONFIG_CHECKPOINT_RESTORE (Cyrill Gorcunov) [PSBM-60161]
  - ms/procfs: fdinfo: extend information about epoll target files (Cyrill Gorcunov) [PSBM-60161]
  - ms/kcmp: add KCMP_EPOLL_TFD mode to compare epoll target files (Cyrill Gorcunov) [PSBM-60161]
  - ms/pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes (Eric W. Biederman)
  - ms/pid_ns: Fix race between setns'ed fork() and zap_pid_ns_processes() (Kirill Tkhai)
  - ms/prctl: Allow local CAP_SYS_ADMIN changing exe_file (Kirill Tkhai) [PSBM-66313]
  - nsfs: add ioctl to get a parent namespace (Pavel Tikhomirov) [PSBM-57362 PSBM-57362]
  - kernel: add a helper to get an owning user namespace for a namespace (Pavel Tikhomirov) [PSBM-57362 PSBM-57362]
  - nsfs: add ioctl to get an owning user namespace for ns file descriptor (Pavel Tikhomirov) [PSBM-57362 PSBM-57362]
  - ms/pidns: expose task pid_ns_for_children to userspace (Kirill Tkhai) [PSBM-58669]
  - ms/ns: allow ns_entries to have custom symlink content (Kirill Tkhai) [PSBM-58669]
  - ms/ipc/shm: Fix shmat mmap nil-page protection (Davidlohr Bueso) [PSBM-61275]
  - ms/pidns: fix free_pid() to handle the first fork failure (Kirill Tkhai) [PSBM-56705]
  - ms/tracing/filter: Do not allow infix to exceed end of string (Steven Rostedt (Red Hat)) [PSBM-60885]
  - ms/futex: Fix potential use-after-free in FUTEX_REQUEUE_PI (Peter Zijlstra) [PSBM-62103]
  - ms/ipsec: Fix aborted xfrm policy dump crash (Evgenii Shatokhin) [PSBM-78287]
  - ms/xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Andy Whitcroft) [PSBM-63199]
  - ms/xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Andy Whitcroft) [PSBM-63199]
  - ms/ipv4: fix buffer overflow in ip_options_compile() (Eric Dumazet) [PSBM-62999]
  - ms/neigh: disallow un-init_net to change thresh of neigh (Gao feng) [PSBM-59964 PSBM-63020]
  - ms/pvclock: introduce seqcount-like API (Paolo Bonzini) [PSBM-60589]
  - ms/iovec: make sure the caller actually wants anything in memcpy_fromiovecend (Sasha Levin) [PSBM-59577]
  - ms/kernel/groups: Account group_info allocations (Andrey Ryabinin) [PSBM-56703]
  - ms/udp: must lock the socket in udp_disconnect() (Eric Dumazet) [PSBM-57512]
  - ms/percpu: fix this_cpu_sub() subtrahend casting for unsigneds (Greg Thelen) [PSBM-63424]
  - ms/cgroup: fix rmdir EBUSY regression in 3.11 (Hugh Dickins) [PSBM-53314]
  - ms/kernel/groups: Use __GFP_NOWARN on user triggerable allocation (Andrey Ryabinin) [PSBM-56703]
  - ms/posix_acl: Clear SGID bit when setting file permissions (Jan Kara)
  - ms/block: fix use-after-free in sys_ioprio_get() (Omar Sandoval)
  - ms/ipv6: fix a potential deadlock in do_ipv6_setsockopt() (WANG Cong)
  - ms/ipv4: fix a potential deadlock in mcast getsockopt() path (WANG Cong)
  - block/nbd: use REQ_TYPE_DRV_PRIV instead of REQ_TYPE_SPECIAL (Konstantin Khorenko) [PSBM-54928]
  - ms/dm: remove dummy definition of 'struct dm_table' from dm-ioctl.c (Andrey Ryabinin) [PSBM-50727]
  - dm-crypt: add ability to use keys from the kernel key retention service (Andrey Ryabinin) [PSBM-44218]
  - ms/keys: fallback to user_match if type->match is not available. (Andrey Ryabinin) [PSBM-60876]
  - ms/KEYS: fix key refcount leak in keyctl_read_key() (Eric Biggers) [PSBM-72405]
  - ms/KEYS: fix dereferencing NULL payload with nonzero length (Eric Biggers) [PSBM-74938]
  - ms/KEYS: don't let add_key() update an uninstantiated key (Eric Biggers) [PSBM-73342]
  - sunrpc: bc_svc_flush_queue_net() helper introduced (Stanislav Kinsburskiy)
  - sunrpc: take net from task client only is available (Stanislav Kinsburskiy) [PSBM-69434]
  - sunrpc: do not place task to sleep if has to be killed (Stanislav Kinsburskiy) [PSBM-68214]
  - sunrpc: use rpc_killall_tasks helper when "kill_tasks" toggle is raised (Stanislav Kinsburskiy)
  - sunrpc: fix race between "kill_tasks" set and actual task killing (Stanislav Kinsburskiy) [PSBM-68214]
  - sunrpc: pending tasks kill helper added (Stanislav Kinsburskiy) [PSBM-66510]
  - sunrpc: bring back SUNRPC task abort logic (Stanislav Kinsburskiy) [PSBM-66510]
  - sunrpc: add "kill-tasks" proc entry (Stanislav Kinsburskiy) [PSBM-66510]
  - lib/stackdepot.c: bump stackdepot capacity from 16MB to 128MB (Dmitry Vyukov) [PSBM-69081]
  - kcov: do not instrument lib/stackdepot.c (Alexander Potapenko) [PSBM-69081]
  - config.OpenVZ: add kcov code coverage (Konstantin Khorenko) [PSBM-56169]
  - ms/kcov: properly check if we are in an interrupt (Andrey Konovalov) [PSBM-56169]
  - ms/kcov: don't profile branches in kcov (Andrey Ryabinin) [PSBM-56169]
  - ms/kcov: don't trace the code coverage code (James Morse) [PSBM-56169]
  - ms/kernel: add kcov code coverage (Dmitry Vyukov) [PSBM-56169 PSBM-56169]
  - modules: set module author for Virtuozzo modules (Konstantin Khorenko) [PSBM-43847]
  - license: put correct copyrights into file headers (Konstantin Khorenko) [PSBM-43847 PSBM-40069]
  - kernel: call task_work_run() before exit_task_namespaces() (Andrei Vagin) [PSBM-68266]
  - wait: Teach do_wait() to know entered tasks (Kirill Tkhai)
  - irq: make definition of irq_set_vcpu_affinity() static (Alexey V. Vissarionov)
  - trace: add debug prints to nail down busyloop in tracing_read_pipe (Stanislav Kinsburskiy) [PSBM-53928]
  - scsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly (Xin Long)
  - scsi/eh: fix hang adding ehandler wakeups after decrementing host_busy (Pavel Tikhomirov) [PSBM-69788]
  - debug/scsi: debug Scsi_Host recovery (Maxim Patlasov) [PSBM-44228]
  - scsi/debug: make scsi error loud (Dmitry Monakhov) [PSBM-54665]
  - rh/net/driver: compilation fix for amd8111e_pci_tbl (Konstantin Khorenko) [PSBM-69674]
  - rh/drm: fix compilation (Konstantin Khorenko) [PSBM-69674]
  - Kconfig.openvz: force CGROUP_PERF if compiling VZ Containers code (Konstantin Khorenko) [PSBM-51360]
  - config: Enable CONFIG_TCM_QLA2XXX module (Konstantin Khorenko) [PSBM-73161]
  - config.OpenVZ: increase default value for vm.mmap_min_addr (Konstantin Khorenko) [PSBM-56697]
  - config-vz: add DISABLE_DEV_COREDUMP=n option (Konstantin Khorenko) [PSBM-54194]
  - config.OpenVZ: add more options (disabled) which depend on EXPERT (Konstantin Khorenko) [PSBM-69674]
  - config.OpenVZ: add mhvtl virtual tape module (Konstantin Khorenko) [PSBM-69293]
  - drivers/target/mhvtl: introduce a virtual tape module (Konstantin Khorenko) [PSBM-69293]
  - drivers/bnx2x: Limit setting of the max mtu (Andrey Ryabinin) [PSBM-77016]
  - config.OpenVZ.debug: enable panic-on-oops in debug kernel (Konstantin Khorenko)
  - config.OpenVZ: disable RH_KABI_SIZE_ALIGN_CHECKS (Andrey Ryabinin)
  - config.OpenVZ: enable TAP accounting (Konstantin Khorenko) [PSBM-27713]
  - config.OpenVZ.debug: Enable audit subsystem in config" (Konstantin Khorenko) [PSBM-38898]
  - config.OpenVZ: enable NBD module (Konstantin Khorenko) [PSBM-31858]
  - rh7/user_ns: enable unprivileged user namespaces by default (Konstantin Khorenko)
  - x86: "pages zeroing on free" option introduced (Stanislav Kinsburskiy) [PSBM-33071]
  - config.OpenVZ: enable fencing watchdog for HA cluster support (Konstantin Khorenko) [PSBM-40736]
  - config.OpenVZ: enable CONFIG_LOCALVERSION_AUTO (Konstantin Khorenko) [PSBM-34957]
  - ve/seccomp, ptrace: Save original BPF program when setting the filer (Cyrill Gorcunov) [PSBM-55593]
  - ms/seccomp, ptrace: add support for dumping seccomp filters (Tycho Andersen) [PSBM-55322 PSBM-55593]
  - ms/seccomp: add ptrace options for suspend/resume (Andrew Vagin) [PSBM-39517]
  - x86: Show vcpu cpuflags in cpuinfo (Kirill Tkhai)
  - x86: cpuinfo: Refactor c_start() (Kirill Tkhai)
  - arch/x86: disable cpuid faulting on reboot and cpu offline (Vladimir Davydov) [PSBM-30548 PSBM-33638]
  - arch/x86: only enable cpuid faulting for containers (Vladimir Davydov) [PSBM-30516 PSBM-33638]
  - arch/x86: introduce cpuid override (Vladimir Davydov) [PSBM-28682 PSBM-33638]
  - ms/x86: drop _PAGE_FILE and pte_file()-related helpers (Kirill A. Shutemov) [PSBM-52992 PSBM-54928]
  - ms/asm-generic: drop unused pte_file* helpers (Kirill A. Shutemov) [PSBM-52992]
  - ms/ipc/shm: handle removed segments gracefully in shm_mmap() (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d() (Kirill Tkhai) [PSBM-78359]
  - mm/memcg: limit page cache in memcg hack (Andrey Ryabinin) [PSBM-77547]
  - ms/mm: memcontrol: use vmalloc fallback for large kmem memcg arrays (Johannes Weiner) [PSBM-76752]
  - ms/mm: introduce kv[mz]alloc helpers (Andrey Ryabinin) [PSBM-76752]
  - ms/x86/mm: Make in_compat_syscall() work during exec (Dmitry Safonov)
  - ms/x86/hugetlb: Adjust to the new native/compat mmap bases (Dmitry Safonov)
  - ms/x86/mm: Make mmap(MAP_32BIT) work correctly (Dmitry Safonov)
  - ms/x86/mm: Introduce mmap_compat_base() for 32-bit mmap() (Dmitry Safonov)
  - ms/x86/mm: Add task_size parameter to mmap_base() (Dmitry Safonov)
  - ms/x86/mm: Introduce arch_rnd() to compute 32/64 mmap random base (Dmitry Safonov)
  - ms/x86: standardize mmap_rnd() usage (Kees Cook)
  - x86/mm: Support mremap()'ing vdso vma (Dmitry Safonov)
  - x86/vdso: Add 64-bit vdso map API (Dmitry Safonov) [PSBM-67017]
  - ve/vdso: virtualized monotonic gettime through vdso (Andrey Ryabinin) [PSBM-66451 PSBM-66888 PSBM-68050]
  - x86/vdso/prctl: Return size of vdso blob for ARCH_MAP_VDSO_32 (Dmitry Safonov)
  - x86/vdso/prctl: fail if vdso present in ARCH_MAP_VDSO_32 (Dmitry Safonov) [PSBM-66485]
  - x86/arch_prctl/vdso: add ARCH_MAP_VDSO_* (Dmitry Safonov) [PSBM-28517]
  - x86/vdso: Fix build failure with GCC5 (Andrey Ryabinin)
  - ve/vdso: x86 -- Disable virtualization in native x86-32 mode (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86 -- Eliminate race in vdso allocation, v2 (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86-32 -- Implement kernel version virtualization (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86-64 -- Implement kernel version virtualization (Cyrill Gorcunov) [PSBM-30093]
  - arch: x86: perf_event_intel: do not taint kernel when irq loop is stuck (Vladimir Davydov) [PSBM-49258]
  - mm/memcg: get precise stat2 counters for statistics. (Andrey Ryabinin) [PSBM-69332]
  - mm/memcg: improve mem_cgroup_dcache_is_low() performance. (Andrey Ryabinin) [PSBM-68644 PSBM-69145]
  - mm: memcontrol: add stats for reclaimable and unreclaimable stats (Vladimir Davydov) [PSBM-54816 PSBM-54816 PSBM-54816 PSBM-54816]
  - memcg/bc: account dcache size (Vladimir Davydov) [PSBM-20089]
  - vziolimit/fs/ext4: allow to throttle due to iolimit while reading directory blocks (Vladimir Davydov)
  - config.OpenVZ: add "vziolimit" module (Konstantin Khorenko) [PSBM-20104]
  - cfq/vziolimits: add virtinfo hook for vziolimits (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-iostat-wire-vziolimit-into-deadline-io_scheduler (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: add bc cgroup control (Dmitry Monakhov) [PSBM-32281]
  - vziolimit: Add vziolimit driver (Dmitry Monakhov) [PSBM-20104]
  - sched/vziolimit: Port diff-fairsched-do-not-account-iothrottled-tasks-in-loadavg-core (Vladimir Davydov) [PSBM-33642]
  - mm/iolimits: fix double I/O accounting for iolimits (Andrew Perepechko)
  - pfcache/fork: don't inherit vm_private_data on fork (Pavel Tikhomirov) [PSBM-44587]
  - pfcache/ub: account pfcache peer files in ub0 (Andrey Ryabinin) [PSBM-56167]
  - pfcache: hide trusted.pfcache from listxattr (Pavel Tikhomirov) [PSBM-52180]
  - ve/xattr: allow to set trusted.xxx for container admin (Pavel Tikhomirov) [PSBM-51102 OVZ-6791 PSBM-51009]
  - ve/xattr: prohibit getxattr/setxattr trusted.pfcache (Pavel Tikhomirov) [PSBM-51102 OVZ-6791]
  - pfcache: do not account peer files to memcg (Vladimir Davydov)
  - pfcache/ext4: drop pfcache csum on fallocate (Dmitry Monakhov) [PSBM-33644]
  - ms/ext4: fix lazytime optimization (Dmitry Monakhov)
  - ms/ext4: add optimization for the lazytime mount option (Dmitry Monakhov)
  - ext4: Add ioctl EXT4_IOC_SET_RSV_BLOCKS V2 (Dmitry Monakhov) [PSBM-25929]
  - ext4: add mfsync support (Dmitry Monakhov) [PSBM-18567 PSBM-34909 PSBM-34910]
  - pfcache: do not ignore TTU_MUNLOCK in try_to_unmap_file() (Maxim Patlasov)
  - pfcache: iterate peer list only for shared pages (Maxim Patlasov)
  - pfcache: add hashed peers for ext4 (Konstantin Khorenko) [PSBM-20098]
  - pfcache: add generic mapping peers (Konstantin Khlebnikov) [PSBM-20098 PSBM-52992 PSBM-52992]
  - ms/vfs: Remove second variable named error in __dentry_path (Pavel Tikhomirov) [PSBM-34245]
  - ms/vfs: reinitialize error for resetart in prepend_path as in ms (Pavel Tikhomirov) [PSBM-34245]
  - xfs: allow to mount xfs fs inside a Container (Konstantin Khorenko) [PSBM-72401]
  - ms/xfs: rework buffer dispose list tracking (Dmitry Monakhov) [PSBM-55577]
  - ms/xfs-convert-buftarg-lru-to-generic-code-fix (Andrew Morton) [PSBM-55577]
  - ms/xfs: convert buftarg LRU to generic code (Dmitry Monakhov) [PSBM-55577]
  - Revert: [fs] xfs: rework buffer dispose list tracking (Dmitry Monakhov) [PSBM-55577]
  - ms/xfs_qm: lost hunk from "ms/list_lru: add helpers to isolate items" (Vladimir Davydov) [PSBM-42319]
  - ms/xfs_qm: lost hunk from "ms/list_lru: introduce list_lru_shrink_{count,walk}" (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: fix dquot isolation hang (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: convert dquot cache lru to list_lru (Vladimir Davydov) [PSBM-42319 PSBM-42319]
  - ve/xfs: add missing ub_io_account_dirty in set_page_dirty (Vladimir Davydov)
  - ms/ext4: limit number of scanned extents in status tree shrinker (Jan Kara) [PSBM-78944]
  - ms/ext4: change LRU to round-robin in extent status tree shrinker (Zheng Liu) [PSBM-70858]
  - ms/ext4: track extent status tree shrinker delay statictics (Zheng Liu) [PSBM-70858]
  - ms/ext4: improve extents status tree trace point (Zheng Liu) [PSBM-70858]
  - ms/fs/ext4: __ext4_es_shrink() rename 'ret' to 'shrunk' (Andrey Ryabinin)
  - ext4: send abort uevent on ext4 journal abort (Dmitry Monakhov) [PSBM-68848]
  - ve/fs/ext4: allow container's root to change immutable attribute. (Andrey Ryabinin) [PSBM-60148]
  - ext4: add generic uevent infrastructure (Dmitry Monakhov) [PSBM-66618]
  - ext4: Discard preallocated block before swap_extents (Dmitry Monakhov)
  - ms/ext4: improve ext4lazyinit scalability (Dmitry Monakhov) [PSBM-49658]
  - ve/ext4: treat panic_on_errors as remount-ro_on_errors in CTs (Dmitry Monakhov)
  - ext4: fix race aio-dio vs freeze_fs (Dmitry Monakhov) [PSBM-39352]
  - ms/fs: add dirtytime_expire_seconds sysctl (Dmitry Monakhov)
  - ms/fs: make sure the timestamps for lazytime inodes eventually get written (Dmitry Monakhov)
  - ms/vfs: add find_inode_nowait() function (Dmitry Monakhov)
  - ms/vfs: add support for a lazytime mount option (Dmitry Monakhov) [PSBM-20411]
  - jbd2: raid amnesia protection for the journal (Dmitry Monakhov) [PSBM-15484]
  - ext4: fallocate mode - convert and extend (Dmitry Monakhov) [PSBM-22381]
  - ms/ext4: use ext4_ext_next_allocated_block instead of mext_next_extent (Dmitry Monakhov)
  - ext4: update defragmentation codebase (Konstantin Khorenko)
  - ext4: Fix error handling after filesystem abort (Dmitry Monakhov)
  - jbd2: make shure that we do not miss aborted state (Dmitry Monakhov)
  - ext4: pfcache_csum mount option (Konstantin Khlebnikov)
  - ext4: make data=writeback mode safe (Kirill Tkhai)
  - ext4: quarantee rename atomic behavior (Kirill Tkhai)
  - ext4: Provide a balloon nipple for management (Konstantin Khorenko) [PSBM-41222]
  - ext4: Don't show the active balloon to user (Maxim V. Patlasov)
  - ext4: Teach statfs to report reduced disk usage (Maxim V. Patlasov)
  - ext4: Teach the fs where the balloon inode is (Maxim V. Patlasov)
  - fs/ext4: ext4_ioctl should check for CAP_SYS_ADMIN, not for CAP_SYS_RESOURCE (Konstantin Khorenko)
  - fs/ext3: add_dirent_to_buf() should return an error, not always 0 (Konstantin Khorenko)
  - fs/ext3: check for CAP_SYS_ADMIN, not CAP_SYS_RESOURCE in ext3_ioctl() (Konstantin Khorenko)
  - blk/ploop: Add BLKPG_GET_PARTITION operation (Kirill Tkhai)
  - ext4/ploop: ask ploop about ENOSPC condition (Kirill Tkhai)
  - block/ploop: export put_io_context_active() (Maxim V. Patlasov)
  - vzstat: initial patch (Konstantin Khorenko) [PSBM-54928]
  - ve/mm/kstat: Port diff-ve-kstat-disable-interrupts-around-seqcount-write-lock (Vladimir Davydov) [PSBM-33650]
  - sched: Account task_group::cpustat,taskstats,avenrun (Konstantin Khorenko) [PSBM-33642]
  - # This is a combination of 2 commits. # This is the 1st commit message: (Kirill Tkhai)
  - ms/net/xfrm: validate 'dir' value in xfrm_migrate() (Evgenii Shatokhin) [PSBM-69273]
  - ipv6/sit: account and don't WARN on ip_tunnel_prl structs allocation (Andrey Ryabinin) [PSBM-58330]
  - net: cleanup headers inclusion (Stanislav Kinsburskiy)
  - net: fix silly mistake with TCP cgroup memory pressure check (Stanislav Kinsburskiy) [PSBM-66468]
  - ms/net/8021q: create device with all possible features in wanted_features (Andrey Vagin) [PSBM-61141]
  - ms/ipv6: check sk sk_type and protocol early in ip_mroute_set/getsockopt (Xin Long) [PSBM-65826]
  - ms/ip6mr: fix notification device destruction (Nikolay Aleksandrov) [PSBM-65345]
  - ms/net: fix creation adjacent device symlinks (Alexander Y. Fomichev) [PSBM-58300]
  - ms/net: prevent of emerging cross-namespace symlinks (Alexander Y. Fomichev) [PSBM-58300 PSBM-58300]
  - config.OpenVZ: add and enable INET_RAW_DIAG - RAW: socket monitoring interface (Konstantin Khorenko) [PSBM-51614]
  - ms/net: sysctl: fix a kmemleak warning (Li RongQing) [PSBM-76924]
  - ms/net: raw sockets diag interface compilation fix (Konstantin Khorenko)
  - ms/ipv6: add IPV6_HDRINCL option for raw sockets (Hannes Frederic Sowa) [PSBM-51614]
  - ms/net: ip, raw_diag -- Use jump for exiting from nested loop (Cyrill Gorcunov) [PSBM-51614]
  - ms/net: ip, diag: include net/inet_sock.h (Arnd Bergmann) [PSBM-51614]
  - ms/net: ip, diag -- Add diag interface for raw sockets (Cyrill Gorcunov) [PSBM-51614]
  - rh/net: add recursion limit to GRO (sd@queasysnail) [PSBM-53507]
  - net: Iterate only online cpus in __snmp6_fill_stats64() (Kirill Tkhai) [PSBM-50993]
  - net: Allow pass cpu mask into snmp_fold_field{, 64}() (Kirill Tkhai)
  - net: Add ipv6 statistics cpu notifier (Kirill Tkhai)
  - net: Fix use after free and double free in get_net_ns_by_id() (Kirill Tkhai)
  - net: limit a number of namespaces which can be cleaned up concurrently (Andrei Vagin)
  - ve/pid: Export kernel.pid_max via ve cgroup (Pavel Tikhomirov) [PSBM-48397]
  - ve/netns: limit number of network namespaces per container (Andrei Vagin) [PSBM-49690]
  - net: packet: rework rx/tx ring pages accounting (Vladimir Davydov) [PSBM-47873 PSBM-63654]
  - ms/af_packet: remove a stray tab in packet_set_ring() (Dan Carpenter)
  - ms/af_unix: move unix_mknod() out of bindlock (WANG Cong) [PSBM-56179]
  - ms/af_unix: split 'u->readlock' into two: 'iolock' and 'bindlock' (Linus Torvalds) [PSBM-56179]
  - net/af_unix: charge buffers to kmemcg (Vladimir Davydov) [PSBM-34562]
  - ms/net: sock: move ->sk_shutdown out of bitfields (Andrey Ryabinin) [PSBM-47023]
  - ve/modules: allow NFS modules autoload in Containers (Stanislav Kinsburskiy) [PSBM-58178]
  - ve/net/ip6tables: fix autoloading of the ip6table_raw module from CT (Andrey Ryabinin) [PSBM-50548 PSBM-54244]
  - ve/netfilter/ipset: allow modules autoload (Pavel Tikhomirov) [PSBM-46102]
  - ve/netlink: allow IPVS netlink messages to CT init userns (Pavel Tikhomirov) [PSBM-63883]
  - ve/net/ipvs: allow IPVS modules autoload in CT (Pavel Tikhomirov) [PSBM-63883]
  - ve/net/vxlan: enable support and autoload in a container (Pavel Tikhomirov) [PSBM-53629]
  - ve/kmod/ebtable: allow to autoload ebtable_* modules from inside a CT (Konstantin Khorenko) [PSBM-66435]
  - ve/kmod/whitelist: allow dummy module autoloading (Pavel Tikhomirov) [PSBM-43329 PSBM-52061]
  - ve/kmod/whitelist: allow overlay fs module autoloading (Dmitry Safonov) [PSBM-51043]
  - ms/kmod: remove false positive warning "waiting module removal not supported: please upgrade" (Rusty Russell) [PSBM-27580 OVZ-6748 PSBM-47877]
  - FIXME: to drop: ve/kernel/taint: Port diff-taint-message-enhanced-with-dump (Vladimir Davydov) [PSBM-25867 PSBM-33650 PSBM-52719]
  - module: fix memory leak in load_module (Stanislav Kinsburskiy) [PSBM-65033]
  - module: fix memory leak in free_module (Stanislav Kinsburskiy) [PSBM-65033]
  - ve/kmod: Allow netfilter conntrack inside VE (Cyrill Gorcunov) [PSBM-47359]
  - ve/kmod: Add modules to whitelist for c/r sake (Cyrill Gorcunov) [PSBM-46789 PSBM-46789]
  - ve/kmod: list of allowed to autoload in CT modules (Dmitry Safonov) [PSBM-41216 PSBM-41216]
  - ve/kmod: allow to autoload nf_log_ipv[46] (Vladimir Davydov) [PSBM-38573]
  - ve/kmod: Add rules for new {ip, ip6, x}table modules (Kirill Tkhai) [PSBM-33631]
  - ve/kmod: Add rules for autoloading (new) nf_tables (Kirill Tkhai) [PSBM-33631]
  - ve/kmod: Port autoloading from CT (Konstantin Khorenko) [PSBM-28910 PSBM-38666]
  - ms/tty/vt: Fix the memory leak in visual_init (Dongxing Zhang) [PSBM-76924]
  - ms/tty: n_hdlc: get rid of racy n_hdlc.tbuf (Alexander Popov) [PSBM-61962]
  - ms/TTY: n_hdlc, fix lockdep false positive (Jiri Slaby) [PSBM-61963]
  - ms/tty: Fix unsafe ldisc reference via ioctl(TIOCGETD) (Peter Hurley) [PSBM-53939]
  - ve/vtty: Don't free console mapping until no clients left (Cyrill Gorcunov) [PSBM-39463]
  - ve/tty: vtty -- Drop TTY_PINNED_BY_OTHER bit (Cyrill Gorcunov)
  - ve/vtty: Don't close unread master peer if slave is nonzero (Cyrill Gorcunov) [PSBM-41985 PSBM-41672]
  - ve/vtty: n_tty -- Allow write on sole slave vtty peer (Cyrill Gorcunov) [PSBM-40740]
  - ve/vtty: Don't zap termios fields on slave peer (Cyrill Gorcunov) [PSBM-41057]
  - ve/vtty: Make indices to match pcs6 scheme (Cyrill Gorcunov) [PSBM-40088]
  - ve/tty: Use ve_capable in vhangup syscall (Cyrill Gorcunov) [PSBM-40053]
  - ve/tty: vt -- Implement per VE support for console and terminals (Cyrill Gorcunov) [PSBM-34533 PSBM-34532 PSBM-34107 PSBM-32686 PSBM-32685]
  - ve/tty: vt -- Fix nil dereference due to race (Cyrill Gorcunov) [PSBM-37929]
  - ve/vt: Drop debug vars from console code (Cyrill Gorcunov)
  - ve/tty: vt -- Add dummy stubs (Cyrill Gorcunov) [PSBM-34324]
  - ve/tty: console -- Enhance container console to support per VE ops (Cyrill Gorcunov) [PSBM-34357]
  - ve/tty: vzcon -- Add container dummy console support (Cyrill Gorcunov) [PSBM-32686]
  - ve/tty: Disable /dev/console in VE environment (Cyrill Gorcunov) [PSBM-32686 PSBM-32728]
  - ms/audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore)
  - ve/audit: allow changing loginuid for VE root (Pavel Tikhomirov) [PSBM-64487]
  - ms/x86/coredump: Always use user_regs_struct for compat_elf_gregset_t (Dmitry Safonov)
  - ms/x86/signal: Remove bogus user_64bit_mode() check from sigaction_compat_abi() (Dmitry Safonov)
  - ms/x86/signal: add SA_{X32,IA32}_ABI sa_flags (Dmitry Safonov) [PSBM-28517]
  - ms/x86/ptrace: down with test_thread_flag(TIF_IA32) (Dmitry Safonov) [PSBM-28517]
  - ms/x86/coredump: use pr_reg size, rather that TIF_IA32 flag (Dmitry Safonov) [PSBM-28517]
  - memcg: charge kmem allocations accounted to UBC in PCS6 to memcg (Konstantin Khorenko) [PSBM-54928 PSBM-54928]
  - mm/memcg: Fix potential softlockup during memcgroup shutdown. (Andrey Ryabinin) [PSBM-76011]
  - mm/memcg: Don't enable interrupts too soon. (Andrey Ryabinin) [PSBM-76011]
  - ms/mm: cma: fix incorrect type conversion for size during dma allocation (Rohit Vaswani) [PSBM-73053]
  - mm: issue panic() on bad page/pte bugs if panic_on_warn is set (Andrey Ryabinin) [PSBM-70168]
  - ms/kasan: support panic_on_warn (Dmitry Vyukov) [PSBM-75786]
  - ms/mm: mempool: kasan: don't poot mempool objects in quarantine (Andrey Ryabinin) [PSBM-73165]
  - kasan: fix races in quarantine_remove_cache() (Dmitry Vyukov) [PSBM-69081]
  - kasan: drain quarantine of memcg slab objects (Greg Thelen) [PSBM-69081]
  - kasan: eliminate long stalls during quarantine reduction (Dmitry Vyukov) [PSBM-69081]
  - kasan: update kasan_global for gcc 7 (Dmitry Vyukov) [PSBM-69081]
  - ms/mm/mempolicy: Add cond_resched() in queue_pages_pte_range() (Andrey Ryabinin) [PSBM-79273]
  - mm, mempolicy: task->mempolicy must be NULL before dropping final reference (David Rientjes) [PSBM-69081]
  - kasan: remove the unnecessary WARN_ONCE from quarantine.c (Alexander Potapenko) [PSBM-69081]
  - x86, kasan, ftrace: Put APIC interrupt handlers into .irqentry.text (Alexander Potapenko) [PSBM-69081]
  - kasan: avoid overflowing quarantine size on low memory systems (Alexander Potapenko) [PSBM-69081]
  - kasan: improve double-free reports (Andrey Ryabinin) [PSBM-69081]
  - mm/kasan: get rid of ->state in struct kasan_alloc_meta (Andrey Ryabinin) [PSBM-69081]
  - mm/kasan: get rid of ->alloc_size in struct kasan_alloc_meta (Andrey Ryabinin) [PSBM-69081]
  - mm/kasan, slub: don't disable interrupts when object leaves quarantine (Andrey Ryabinin) [PSBM-69081]
  - mm/kasan: fix corruptions and false positive reports (Andrey Ryabinin) [PSBM-69081]
  - lib/stackdepot.c: use __GFP_NOWARN for stack allocations (Kirill A. Shutemov) [PSBM-69081]
  - mm, kasan: switch SLUB to stackdepot, enable memory quarantine for SLUB (Alexander Potapenko) [PSBM-69081]
  - kasan/quarantine: fix bugs on qlist_move_cache() (Joonsoo Kim) [PSBM-69081]
  - kasan: add newline to messages (Dmitry Vyukov) [PSBM-69081]
  - mm, kasan: don't call kasan_krealloc() from ksize(). (Alexander Potapenko) [PSBM-69081]
  - lib/stackdepot: avoid to return 0 handle (Joonsoo Kim) [PSBM-69081]
  - lib/stackdepot.c: allow the stack trace hash to be zero (Alexander Potapenko) [PSBM-69081]
  - mm: kasan: initial memory quarantine implementation (Alexander Potapenko) [PSBM-69081]
  - mm, kasan: fix compilation for CONFIG_SLAB (Alexander Potapenko) [PSBM-69081]
  - mm, kasan: stackdepot implementation. Enable stackdepot for SLAB (Alexander Potapenko) [PSBM-69081]
  - arch, ftrace: for KASAN put hard/soft IRQ entries into separate sections (Alexander Potapenko) [PSBM-69081]
  - mm, kasan: add GFP flags to KASAN API (Alexander Potapenko) [PSBM-69081]
  - mm/mempool: avoid KASAN marking mempool poison checks as use-after-free (Matthew Dawson) [PSBM-69081]
  - mm, kasan: SLAB support (Alexander Potapenko) [PSBM-69081]
  - kasan: various fixes in documentation (Andrey Konovalov) [PSBM-69081]
  - Documentation: kasan: fix a typo (Wang Long) [PSBM-69081]
  - kasan: show gcc version requirements in Kconfig and Documentation (Joe Perches) [PSBM-69081]
  - mm/memcg: sleep if mem_cgroup_force_empty_list() stumped on busy page (Andrey Ryabinin) [PSBM-70021]
  - mm: Count list_lru_one::nr_items lockless (Kirill Tkhai) [PSBM-69296]
  - mm: Make list_lru_node::memcg_lrus RCU protected (Kirill Tkhai)
  - mm: Add rcu field to struct list_lru_memcg (Kirill Tkhai) [PSBM-69296]
  - ms/mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp (Keno Fischer) [PSBM-70151]
  - mm/memcg: reclaim only kmem if kmem limit reached (Andrey Ryabinin) [PSBM-69226]
  - ms/mm: use sc->priority for slab shrink targets (Josef Bacik) [PSBM-69226]
  - ms/x86, efi, kasan: #undef memset/memcpy/memmove per arch (Andrey Ryabinin)
  - mm/memcg: reclaim memory on reaching kmem limit. (Andrey Ryabinin) [PSBM-68242 PSBM-70556]
  - ms/mm: fix sleeping function warning from __put_anon_vma (Hugh Dickins) [PSBM-65033]
  - ms/mm: vmscan: fix IO/refault regression in cache workingset transition (Andrey Ryabinin) [PSBM-68029]
  - mm: Change formula of calculation of default min_free_kbytes (Kirill Tkhai) [PSBM-69296]
  - ms/mm: vmscan: reduce size of inactive file list (Rik van Riel) [PSBM-68029]
  - ms/vmscan: fix increasing nr_isolated incurred by putback unevictable pages (Jaewon Kim) [PSBM-68029]
  - ms/mm: Follow-up for "larger stack guard gap, between vmas" (Hugh Dickins) [PSBM-67431]
  - ms/mm: larger stack guard gap, between vmas (Hugh Dickins) [PSBM-67431]
  - ms/memcg: make mem_cgroup_read_stat() unsigned (Greg Thelen) [PSBM-56256]
  - ms/mm/list_lru.c: avoid error-path NULL pointer deref (Alexander Polakov) [PSBM-67300]
  - ms/mm/memcontrol.c: fix the margin computation in mem_cgroup_margin() (Li RongQing) [PSBM-67076]
  - mm/memcg, ub: fix overflow in mem_cgroup_apply_beancounter() (Andrey Ryabinin)
  - ms/mm: prevent KASAN false positives in kmemleak (Dmitry Vyukov) [PSBM-66617]
  - ms/mm: fix crashes from mbind() merging vmas (Hugh Dickins) [PSBM-59566]
  - mm: fix false positive WARN on fs reenterence (Andrey Ryabinin) [PSBM-58279]
  - ms/mm/memcontrol.c: fix order calculation in try_charge() (Andrey Ryabinin) [PSBM-62827]
  - mm/memcg: don't release memcg->css too early (Andrey Ryabinin) [PSBM-62827]
  - ve/memcg: enable kmem accounting for all cgroups (Vladimir Davydov) [PSBM-62827]
  - mm/memcg: make __memcg_activate_kmem() to actually activate kmem (Andrey Ryabinin) [PSBM-62827]
  - mm/memcg: fix kmem pages uncharging uncharge_batch() (Andrey Ryabinin) [PSBM-62827]
  - ms/mm: memcg: fix race condition between memcg teardown and swapin (Johannes Weiner) [PSBM-62080]
  - ms/mm, oom: remove task_lock protecting comm printing (David Rientjes) [PSBM-56178]
  - mm/memcontrol: fix shmem accounting (Andrey Ryabinin) [PSBM-58984]
  - ms/mm: memcontrol: only mark charged pages with PageKmemcg (Vladimir Davydov) [PSBM-51558]
  - ms/mm: memcontrol: teach uncharge_list to deal with kmem pages (Vladimir Davydov) [PSBM-51558]
  - ms/mm: memcontrol: revert use of root_mem_cgroup res_counter (Johannes Weiner) [PSBM-51558 PSBM-58993]
  - ms/userns, pidns: Force thread group sharing, not signal handler sharing. (Eric W. Biederman) [PSBM-44152]
  - ms/mm: memcontrol: use page lists for uncharge batching (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: rewrite uncharge API (Johannes Weiner) [PSBM-51558 PSBM-70742]
  - ms/mm: memcontrol: rewrite charge API (Johannes Weiner) [PSBM-51558 PSBM-70741]
  - ms/mm: memcontrol: remove ordering between pc->mem_cgroup and PageCgroupUsed (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: catch root bypass in move precharge (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: simplify move precharge function (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: remove explicit OOM parameter in charge path (Michal Hocko) [PSBM-51558]
  - ms/mm: memcontrol: retry reclaim for oom-disabled and __GFP_NOFAIL charges (Johannes Weiner) [PSBM-51558]
  - ms/mm: huge_memory: use GFP_TRANSHUGE when charging huge pages (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: reclaim at least once for __GFP_NORETRY (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: rearrange charging fast path (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: fold mem_cgroup_do_charge() (Johannes Weiner) [PSBM-51558]
  - ms/memcg: sanitize __mem_cgroup_try_charge() call protocol (Johannes Weiner) [PSBM-51558]
  - ms/memcg: do not replicate get_mem_cgroup_from_mm in __mem_cgroup_try_charge (Michal Hocko) [PSBM-51558]
  - ms/memcg: get_mem_cgroup_from_mm() (Johannes Weiner) [PSBM-51558]
  - ms/memcg: remove unnecessary !mm check from try_get_mem_cgroup_from_mm() (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcg: push !mm handling out to page cache charge function (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcg: inline mem_cgroup_charge_common() (Johannes Weiner) [PSBM-51558]
  - mm/memcontrol: res_counter -> page_counter transition (Andrey Ryabinin) [PSBM-54816 PSBM-54816 PSBM-54816 PSBM-54816]
  - mm: memcontrol: fix meminfo:SUnreclaim output in containers (Vladimir Davydov)
  - memcg: add mem_cgroup_get/put helpers (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - net/mm/packet: Pre-account maximum socket buffer into cg memory (v3) (Pavel Emelyanov) [PSBM-33584]
  - mm/netlink: Make all in-cg memory be kmem accounted (Pavel Emelyanov) [PSBM-33584]
  - net/mm/udp: Charge ingress buffers into cg memory (Pavel Emelyanov) [PSBM-33584 PSBM-39084]
  - net/mm/tcp: Limit orphan sockets per-cg (Pavel Emelyanov) [PSBM-33584 PSBM-34215]
  - net/mm/tcp: Charge socket buffers into cg memory (v3) (Pavel Emelyanov) [PSBM-33584]
  - kernel/freezer: don't freeze stopped & about to be ptraced task (Andrey Ryabinin) [PSBM-40683]
  - ms/freezer: Do not freeze tasks killed by OOM killer (Cong Wang) [PSBM-38758]
  - oom: fix NULL ptr deref on oom if memory cgroup is disabled (Vladimir Davydov) [PSBM-43328]
  - oom: make berserker more aggressive (Vladimir Davydov)
  - oom: zap unused oom_scan_process_thread arguments (Vladimir Davydov)
  - oom: do not ignore score of exiting tasks (Vladimir Davydov)
  - mm: memcontrol: check more carefully if current is oom killed (Vladimir Davydov)
  - oom: do not select child that has already been killed (Vladimir Davydov) [PSBM-40842]
  - ve/memcg: do not ignore oom_guarantee for unlimited cgroups (Vladimir Davydov) [PSBM-44683]
  - oom: resurrect berserker mode (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-17930]
  - oom: pass points and overdraft to oom_kill_process (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: rework logic behind memory.oom_guarantee (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-37915]
  - oom: drop OOM_SCAN_ABORT (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: introduce oom timeout (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-38581]
  - oom: rework locking design (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - memcg: add lock for protecting memcg->oom_notify list (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - exit: clear TIF_MEMDIE after exit_task_work (Vladimir Davydov) [PSBM-44683]
  - ms/mm: oom_kill: clean up victim marking and exiting interfaces (Vladimir Davydov) [PSBM-26973]
  - ms/oom: thaw the OOM victim if it is frozen (Vladimir Davydov) [PSBM-26973]
  - ms/oom: add helpers for setting and clearing TIF_MEMDIE (Vladimir Davydov) [PSBM-26973]
  - ms/oom: make sure that TIF_MEMDIE is set under task_lock (Vladimir Davydov) [PSBM-26973]
  - ms/oom: don't count on mm-less current process (Vladimir Davydov) [PSBM-26973]
  - ms/mm, oom: remove unnecessary exit_state check (Vladimir Davydov) [PSBM-26973]
  - oom: do not dump all tasks info on each oom kill (Vladimir Davydov)
  - ms/vhost/net: extend device allocation to vmalloc (Michael S. Tsirkin) [PSBM-42199]
  - ms/mm: replace vma->sharead.linear with vma->shared (Kirill A. Shutemov) [PSBM-52992]
  - ms/rmap: drop support of non-linear mappings (Kirill A. Shutemov) [PSBM-52992]
  - ms/rmap: rmap_walk: move VM_BUG_ON to rmap_walk_file (Vladimir Davydov) [PSBM-42214]
  - ms/mm/rmap: extend rmap_walk_xxx() to cope with different cases (Vladimir Davydov) [PSBM-42015]
  - ms/mm/rmap: make rmap_walk to get the rmap_walk_control argument (Vladimir Davydov) [PSBM-42015]
  - ms/mm/rmap: factor lock function out of rmap_walk_anon() (Vladimir Davydov) [PSBM-42015]
  - ms/selftests: add memfd/sealing page-pinning tests (Andrew Vagin) [PSBM-39834]
  - ms/selftests: add memfd_create() + sealing tests (Andrew Vagin) [PSBM-39834]
  - ms/shm: add memfd_create() syscall (Andrew Vagin) [PSBM-39834]
  - prctl: remove one-shot limitation for changing exe link (Stanislav Kinsburskiy) [PSBM-26967 PSBM-47315]
  - prctl: reduce requirements to exe link change (Stanislav Kinsburskiy) [PSBM-50867]
  - ve/prctl_set_mm: allow to change mm content in ve (Stanislav Kinsburskiy) [PSBM-26967]
  - ms/mm/slub.c: list_lock may not be held in some circumstances (David Rientjes)
  - ms/memcg: rework memcg_update_kmem_limit synchronization (Vladimir Davydov) [PSBM-54816]
  - mm: memcontrol: fix race between kmem uncharge and charge reparenting (Vladimir Davydov) [OVZ-6756 PSBM-54816 PSBM-62827 PSBM-62827]
  - ms/mm: fix regression in remap_file_pages() emulation (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: remove rest usage of VM_NONLINEAR and pte_file() (Kirill A. Shutemov) [PSBM-52992 PSBM-70740]
  - ms/proc: drop handling non-linear mappings (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: drop vm_ops->remap_pages and generic_file_remap_pages() stub (Kirill A. Shutemov) [PSBM-52992 PSBM-54928]
  - ms/mm: drop support of non-linear mapping from fault codepath (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: drop support of non-linear mapping from unmap/zap codepath (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: replace remap_file_pages() syscall with emulation (Kirill A. Shutemov) [PSBM-52992]
  - mm: memcontrol: add memory.numa_migrate file (Vladimir Davydov) [PSBM-50875 PSBM-76970]
  - mm: fix truncate_inode_pages_range() for filesystems without buffer-heads (Maxim Patlasov) [PSBM-50629]
  - mm/page_alloc: don't return freed pages from alloc_pages() (Andrey Ryabinin) [PSBM-49918]
  - mm: default collapse huge pages if there's at least 1/4th ptes mapped (Vladimir Davydov) [PSBM-48885]
  - mm: memcontrol: fix race between user memory reparent and charge (Vladimir Davydov) [PSBM-49117]
  - config: disable numa balancing by default (Vladimir Davydov) [PSBM-49131]
  - mm: vmscan: never wait on writeback pages (Vladimir Davydov) [PSBM-48115]
  - ms/mm: memcontrol: reclaim when shrinking memory.high below usage (Johannes Weiner) [PSBM-48546]
  - mm: charge/uncharge kmemcg from generic page allocator paths (Vladimir Davydov)
  - mm: Move PageBalloon and PageBuddy helpers to page-flags.h (Vladimir Davydov)
  - mm: memcontrol: drop memcg_kmem_commit_charge (Vladimir Davydov)
  - arch: x86: don't charge kernel page tables to kmemcg (Vladimir Davydov)
  - ms/x86/kasan: instrument user memory access API (Andrey Ryabinin)
  - ms/mm/kasan: add API to check memory regions (Andrey Ryabinin)
  - ms/mm/kasan: print name of mem[set,cpy,move]() caller in report (Andrey Ryabinin)
  - ms/kernel/sysrq: restore touch_nmi_watchdog() in show_state_filter() (Andrey Ryabinin) [PSBM-47486]
  - kernel/sysrq: reset watchdog on all cpus while during sysrq-w (Andrey Ryabinin) [PSBM-47486]
  - ms/dcache: add missing lockdep annotation (Linus Torvalds)
  - ms/dcache: dentry_kill() doesn't need the second argument now (Al Viro)
  - ms/dcache: dealing with the rest of shrink_dentry_list() livelock (Al Viro)
  - ms/dcache: shrink_dentry_list(): take parent's ->d_lock earlier (Al Viro)
  - ms/dcache: expand dentry_kill(dentry, 0) in shrink_dentry_list() (Al Viro)
  - ms/dcache: split dentry_kill() (Al Viro)
  - ms/dcache: lift the "already marked killed" case into shrink_dentry_list() (Al Viro)
  - ms/dcache: don't need rcu in shrink_dentry_list() (Miklos Szeredi)
  - ms/dcache: fold try_prune_one_dentry() (Al Viro)
  - ms/dcache: fold d_kill() (Vladimir Davydov) [PSBM-47312]
  - ve/mm: introduce min threshold for dcache (Vladimir Davydov) [PSBM-34161]
  - dcache: zap dentry_lru_del() (Vladimir Davydov)
  - ms/dcache: don't remove from shrink list in select_collect() (Al Viro) [PSBM-44210]
  - ms/dcache: dentry_kill(): don't try to remove from shrink list (Vladimir Davydov) [PSBM-44210]
  - ms/memcg: make mem_cgroup_read_{stat|event}() iterate possible cpus instead of online (Tejun Heo)
  - mm: memcontrol: account shmem pages (Vladimir Davydov)
  - arch: x86: fix accounting page tables to kmemcg (Vladimir Davydov)
  - mm/vmalloc: add v[mz]alloc_account helpers (Vladimir Davydov)
  - ms/slab: add SLAB_ACCOUNT flag (Vladimir Davydov)
  - ms/memcg: only account kmem allocations marked as __GFP_ACCOUNT (Vladimir Davydov)
  - Revert "ms/gfp: add __GFP_NOACCOUNT" (Vladimir Davydov)
  - Revert "ms/sysfs: do not account sysfs_ino_ida allocations to memcg" (Vladimir Davydov)
  - mm: memcontrol: add swapin/out stats (Vladimir Davydov) [PSBM-46104]
  - ms/mm: slab: free kmem_cache_node after destroy sysfs file (Dmitry Safonov) [PSBM-43010]
  - ms/slub: do not assert not having lock in removing freed partial (Steven Rostedt) [PSBM-43010]
  - ms/slub: use lockdep_assert_held (Peter Zijlstra) [PSBM-43010]
  - memcg: ignore memory.low for cgroups w/o tasks (Vladimir Davydov) [PSBM-44192]
  - ms/vmscan: do not force-scan file lru if its absolute size is small (Vladimir Davydov)
  - memcg: never fail kmem allocations (Vladimir Davydov)
  - ub/mm/writeback: do not check dirty limits for ub0 (Vladimir Davydov)
  - ve/mm/page-writeback: Introduce per-CT dirty memory limit (Andrey Ryabinin) [PSBM-33841]
  - mm: page_idle: look up page anon_vma carefully when checking references (Vladimir Davydov) [PSBM-42015 PSBM-42015]
  - ve/mm: allow container's root to ignore mlock limit (Andrey Ryabinin) [PSBM-41405]
  - ms/kasan: fix kmemleak false-positive in kasan_module_alloc() (Andrey Ryabinin) [PSBM-41328]
  - ms/include/linux/kmemleak.h: needs slab.h (Andrew Morton)
  - ve/mm,oom: print information about ve of killed task (Andrey Ryabinin) [PSBM-40610]
  - ms/mm: introduce idle page tracking (Vladimir Davydov) [PSBM-32460]
  - ms/mm/mm_init.c: make creation of the mm_kobj happen earlier than device_initcall (Vladimir Davydov) [PSBM-32460]
  - ms/sysfs: create bin_attributes under the requested group (Vladimir Davydov) [PSBM-32460]
  - ms/mmu-notifier: add clear_young callback (Vladimir Davydov) [PSBM-32460]
  - ms/proc: add kpagecgroup file (Vladimir Davydov) [PSBM-32460]
  - ms/memcg: add page_cgroup_ino helper (Vladimir Davydov) [PSBM-32460]
  - ms/x86/mm, kasan: Silence KASAN warnings in get_wchan() (Andrey Ryabinin)
  - ms/compiler, atomics, kasan: Provide READ_ONCE_NOCHECK() (Andrey Ryabinin)
  - ms/x86/process: Unify 32bit and 64bit implementations of get_wchan() (Thomas Gleixner)
  - ms/x86/process: Add proper bound checks in 64bit get_wchan() (Thomas Gleixner)
  - ms/x86/asm/entry: Create and use a 'TOP_OF_KERNEL_STACK_PADDING' macro (Andrey Ryabinin)
  - ms/mm/page-writeback.c: fix divide by zero in bdi_dirty_limits() (Maxim Patlasov) [PSBM-40116]
  - memcg: do not allow to disable oom from inside a container (Vladimir Davydov)
  - ms/memcg: change oom_info_lock to mutex (Michal Hocko)
  - ms/memcg, oom: lock mem_cgroup_print_oom_info (Michal Hocko)
  - memcg: do not loop in mem_cgroup_reclaim if killed (Vladimir Davydov)
  - kexec, kasan: increase KEXEC_AUTO_RESERVED_SIZE under CONFIG_KASAN=y (Andrey Ryabinin) [PSBM-39339 PSBM-56847]
  - kasan: introduce single-shot mode and enable it by default (Andrey Ryabinin) [PSBM-39339]
  - kasan: always taint kernel on report. (Andrey Ryabinin) [PSBM-39339]
  - kasan: update reported bug types for not user nor kernel memory accesses (Andrey Konovalov) [PSBM-39339]
  - mm, slub, kasan: enable user tracking by default. (Andrey Ryabinin) [PSBM-39339]
  - arch: x86: charge page tables to memcg/kmem (Vladimir Davydov) [PSBM-33840 PSBM-34562]
  - gfp: add __get_free_kmem_pages helper (Vladimir Davydov)
  - gfp: inc __GFP_BITS_SHIFT (Konstantin Khorenko)
  - pipe: uncharge page on ->steal (Vladimir Davydov)
  - fs: account anon pipe buffers to memcg/kmem (Vladimir Davydov) [PSBM-39052]
  - vmalloc: account to memcg/kmem (Vladimir Davydov) [PSBM-33839]
  - mm: vmscan: fix do_try_to_free_pages() livelock (Lisa Du) [PSBM-35155]
  - mm: vmscan: fix the page state calculation in too_many_isolated (Vinayak Menon) [PSBM-35155]
  - config.OpenVZ: add KASan support for debug kernels (Konstantin Khorenko) [PSBM-39339]
  - ms/x86/kasan: Add message about KASAN being initialized (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Fix boot crash on AMD processors (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Flush TLBs after switching CR3 (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Fix KASAN shadow region page tables (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/init: Clear 'init_level4_pgt' earlier (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: Makefile: shut up warnings if CONFIG_COMPILE_TEST=y (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/mempool.c: kasan: poison mempool elements (Andrey Ryabinin) [PSBM-26429]
  - ms/mm, mempool: poison elements backed by slab allocator (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan, module: move MODULE_ALIGN macro into <linux/moduleloader.h> (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan, module, vmalloc: rework shadow allocation for modules (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: enable instrumentation of global variables (Andrey Ryabinin) [PSBM-26429]
  - ms/module: fix types of device tables aliases (Andrey Ryabinin) [PSBM-26429]
  - ms/kernel: add support for .init_array.* constructors (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: vmalloc: pass additional vm_flags to __vmalloc_node_range() (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: vmalloc: add flag preventing guard hole allocation (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: enable stack instrumentation (Andrey Ryabinin) [PSBM-26429]
  - ms/x86_64: kasan: add interceptors for memset/memmove/memcpy functions (Andrey Ryabinin) [PSBM-26429]
  - ms/lib: add kasan test module (Andrey Ryabinin) [PSBM-26429]
  - ms/kmemleak: disable kasan instrumentation for kmemleak (Andrey Ryabinin) [PSBM-26429]
  - ms/fs: dcache: manually unpoison dname after allocation to shut up kasan's reports (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: add kernel address sanitizer support for slub allocator (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: introduce metadata_access_enable()/metadata_access_disable() (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: share object_err function (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: introduce virt_to_obj function (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: page_alloc: add kasan hooks on alloc and free paths (Andrey Ryabinin) [PSBM-26429]
  - ms/x86_64: add KASan support (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: disable memory hotplug (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: add kernel address sanitizer infrastructure (Andrey Ryabinin) [PSBM-26429]
  - ms/MODULE_DEVICE_TABLE: fix some callsites (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: SLUB_DEBUG=n: use the same alloc/free hooks as for SLUB_DEBUG=y (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: move slab related stuff from util.c to slab_common.c (Andrey Ryabinin) [PSBM-26429]
  - ms/MIPS: Use NUMA_NO_NODE instead of -1 for node ID. (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/vmalloc: use wrapper function get_vm_area_size to caculate size of vm area (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: memcontrol: reclaim at least once for __GFP_NORETRY (Johannes Weiner)
  - ms/mm/vmscan: never isolate more pages than necessary (Vladimir Davydov) [PSBM-35275]
  - mm/compaction: fix too_many_isolated() (Konstantin Khorenko)
  - mm: Port diff-mm-add-sysctl-vm.force_scan_thresh (Vladimir Davydov) [PSBM-29968 PSBM-33640 PSBM-77547]
  - mm: Port diff-mm-vmscan-disable-fs-related-activity-for-direct-direct-reclaim (Vladimir Davydov) [PSBM-20210 PSBM-33640]
  - ms/pagemap: Port diff-ms-pagemap-do-not-leak-physical-addresses-to-non-privileged-userspace (Vladimir Davydov) [PSBM-32308 PSBM-33640]
  - ms/headers: Support GCC 5 (Cyrill Gorcunov)
  - ms/memcg: issue memory.high reclaim after refilling percpu stock (Vladimir Davydov)
  - ms/memcg: do not call high reclaim if !__GFP_WAIT (Konstantin Khorenko)
  - ms/memcg: port memory.high (Vladimir Davydov)
  - memcg: count oom kills (Vladimir Davydov) [PSBM-20089]
  - memcg: add oom_guarantee (Vladimir Davydov) [PSBM-20089]
  - ms/mm/sysfs: do not account sysfs_ino_ida allocations to memcg (Vladimir Davydov)
  - ms/mm/gfp: add __GFP_NOACCOUNT (Vladimir Davydov)
  - ms/mm/memcg: do not use vmalloc for mem_cgroup allocations (Vladimir Davydov)
  - mm/memcg: remove memcg from kmemcg_sharers list on css free (Vladimir Davydov)
  - ms/mm/vmscan.c: don't forget to free shrinker->nr_deferred (Vladimir Davydov)
  - tswap: Add optimization for zero-filled pages (Kirill Tkhai) [PSBM-66499]
  - ve/mm/cleancache: count only successful put in the cleancache_puts counter (Andrey Ryabinin) [PSBM-63964]
  - fs/block_dev: always invalidate cleancache in invalidate_bdev() (Andrey Ryabinin) [PSBM-63908]
  - cleancache: avoid pointless cleancache_invalidate_inode() calls. (Andrey Ryabinin) [PSBM-63908]
  - fs/cleancache: fix data invalidation in the cleancache during direct_io (Andrey Ryabinin) [PSBM-63908]
  - meminfo: show size of tswap (Andrey Ryabinin)
  - meminfo: show size of tcache (Vladimir Davydov)
  - mm: transcendent swap cache (Vladimir Davydov) [PSBM-32063 PSBM-72584 PSBM-77015]
  - mm/frontswap: invalidate expired data on a dup-store failure (Vladimir Davydov) [PSBM-34269 PSBM-34269]
  - memcg: allow to disable cleancache per memcg (Vladimir Davydov) [PSBM-34163]
  - mm: introduce transcendent file cache (Vladimir Davydov) [PSBM-31757 PSBM-72584 PSBM-77015 PSBM-77154 PSBM-78354]
  - mm/vmscan: Introduce PF_MEMCG_RECLAIM task flag to identify memcg reclaim. (Andrey Ryabinin)
  - ms/cleancache: remove limit on the number of cleancache enabled filesystems (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: forbid overriding cleancache_ops (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: zap uuid arg of cleancache_init_shared_fs (Vladimir Davydov) [PSBM-31915]
  - ms/fs/ocfs2: copy fs uuid to superblock (Vladimir Davydov) [PSBM-31915]
  - ms/memcg: port low limit (Vladimir Davydov) [PSBM-31752]
  - ms/slub: make dead caches discard free slabs immediately (Vladimir Davydov) [PSBM-25018]
  - ms/slub: never fail to shrink cache (Vladimir Davydov) [PSBM-25018]
  - ms/slub: fix off by one in number of slab tests (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: reparent list_lrus and free kmemcg_id on css offline (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: add helpers to isolate items (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: free memcg_caches slot on css offline (Vladimir Davydov) [PSBM-25018]
  - ms/slab: use css id for naming per memcg caches (Vladimir Davydov) [PSBM-25018]
  - ms/slab: link memcg caches of the same kind into a list (Vladimir Davydov) [PSBM-25018]
  - ms/slab: embed memcg_cache_params to kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab_common: move kmem_cache definition to internal header (Vladimir Davydov) [PSBM-25018]
  - ms/fs: make shrinker memcg aware (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: introduce per-memcg lists (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: organize all list_lrus to list (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: get rid of ->active_nodes (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: add rwsem to synchronize against memcg_caches arrays relocation (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: rename some cache id related variables (Vladimir Davydov) [PSBM-25018]
  - ms/vmscan: per memory cgroup slab shrinkers (Vladimir Davydov) [PSBM-25018]
  - ms/fs: consolidate {nr,free}_cached_objects args in shrink_control (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: introduce list_lru_shrink_{count,walk} (Vladimir Davydov) [PSBM-25018]
  - ms/mm: vmscan: invoke slab shrinkers from shrink_zone() (Konstantin Khorenko) [PSBM-25018]
  - ms/memcg: zap memcg_slab_caches and memcg_slab_mutex (Vladimir Davydov) [PSBM-25018]
  - ms/slub: use sysfs'es release mechanism for kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/slub: fix memcg_propagate_slab_attrs (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_name argument of memcg_create_kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap __memcg_{charge,uncharge}_slab (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: fix possible use-after-free in memcg_kmem_get_cache() (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: use generic slab iterators for showing slabinfo (Vladimir Davydov) [PSBM-25018]
  - ms/slab: print slabinfo header in seq show (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab: Give s_next and s_stop slab-specific names (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab: Sharing s_next and s_stop between slab and slub (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_can_account_kmem (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: move memcg_update_cache_size to slab_common.c (Vladimir Davydov)
  - ms/memcg: don't call memcg_update_all_caches if new cache id fits (Vladimir Davydov)
  - ms/memcg: move memcg_{alloc,free}_cache_params to slab_common.c (Vladimir Davydov)
  - ms/mm: vmscan: remove shrink_control arg from do_try_to_free_pages() (Vladimir Davydov)
  - ms/mm: vmscan: move call to shrink_slab() to shrink_zones() (Vladimir Davydov)
  - ms/mm: vmscan: respect NUMA policy mask when shrinking slab on direct reclaim (Vladimir Davydov)
  - ms/mm: vmscan: call NUMA-unaware shrinkers irrespective of nodemask (Vladimir Davydov)
  - ms/slab: delete cache from list after __kmem_cache_shutdown succeeds (Vladimir Davydov)
  - ms/memcg: cleanup kmem cache creation/destruction functions naming (Vladimir Davydov)
  - ms/memcg: memcg_kmem_create_cache: make memcg_name_buf statically allocated (Vladimir Davydov)
  - ms/memcg: get rid of memcg_create_cache_name (Vladimir Davydov)
  - ms/memcg, slab: simplify synchronization scheme (Vladimir Davydov)
  - ms/memcg, slab: merge memcg_{bind,release}_pages to memcg_{un}charge_slab (Vladimir Davydov)
  - ms/memcg, slab: do not schedule cache destruction when last page goes away (Vladimir Davydov)
  - ms/mm: get rid of __GFP_KMEMCG (Vladimir Davydov)
  - ms/mm/sl[aou]b: Move kmallocXXX functions to common code (Christoph Lameter)
  - ms/slob: Rework #ifdeffery in slab.h (Christoph Lameter)
  - ms/sl[au]b: charge slabs to kmemcg explicitly (Vladimir Davydov)
  - ms/slub: rework sysfs layout for memcg caches (Vladimir Davydov)
  - ms/slub: adjust memcg caches when creating cache alias (Vladimir Davydov)
  - ms/memcg, slab: do not destroy children caches if parent has aliases (Vladimir Davydov)
  - ms/memcg, slab: unregister cache from memcg before starting to destroy it (Vladimir Davydov)
  - ms/memcg, slab: separate memcg vs root cache creation paths (Vladimir Davydov)
  - ms/memcg, slab: never try to merge memcg caches (Vladimir Davydov)
  - ms/memcg, slab: cleanup memcg cache creation (Vladimir Davydov)
  - ms/memcg: fix mutex not unlocked on memcg_create_kmem_cache fail path (Vladimir Davydov)
  - ms/memcg: remove unused code from kmem_cache_destroy_work_func (Vladimir Davydov)
  - ms/memcg: do not account memory used for cache creation (Glauber Costa)
  - ms/memcg: also test for skip accounting at the page allocation level (Glauber Costa)
  - ms/memcg: remove KMEM_ACCOUNTED_ACTIVATED flag (Vladimir Davydov)
  - ms/memcg, slab: RCU protect memcg_params for root caches (Vladimir Davydov)
  - ms/memcg: get rid of kmem_cache_dup() (Vladimir Davydov)
  - ms/memcg, slab: fix races in per-memcg cache creation/destruction (Vladimir Davydov)
  - ms/memcg: fix possible NULL deref while traversing memcg_slab_caches list (Vladimir Davydov)
  - ms/memcg, slab: fix barrier usage when accessing memcg_caches (Vladimir Davydov)
  - ms/memcg, slab: clean up memcg cache initialization/destruction (Vladimir Davydov)
  - ms/memcg, kmem: use cache_from_memcg_idx instead of hard code (Qiang Huang)
  - ms/memcg, kmem: rename cache_from_memcg to cache_from_memcg_idx (Qiang Huang)
  - ms/memcg, kmem: use is_root_cache instead of hard code (Qiang Huang)
  - ms/memcg, slab: kmem_cache_create_memcg(): fix memleak on fail path (Vladimir Davydov)
  - ms/slab: clean up kmem_cache_create_memcg() error handling (Vladimir Davydov)
  - ms/memcg: don't need to free memcg via RCU or workqueue (Li Zefan)
  - ms/memcg: kill memcg refcnt (Li Zefan)
  - ms/memcg: don't need to get a reference to the parent (Li Zefan)
  - ms/memcg: use css_get/put for swap memcg (Li Zefan)
  - ms/memcg: use css_get/put when charging/uncharging kmem (Li Zefan)
  - ms/memcg: don't use mem_cgroup_get() when creating a kmemcg cache (Li Zefan)
  - ms/memcg: use css_get() in sock_update_memcg() (Li Zefan)
  - ms/vfs: fix dentry LRU list handling and nr_dentry_unused accounting (Linus Torvalds)
  - ms/fs/super.c: fix lru_list leak for real (Al Viro)
  - ms/super: fix for destroy lrus (Glauber Costa)
  - ms/list_lru: dynamically adjust node arrays (Glauber Costa) [PSBM-42319]
  - mm: workingset: convert shrinker to count/scan API (Vladimir Davydov)
  - ms/fs: convert inode and dentry shrinking to be node aware (Dave Chinner)
  - ms/list_lru: remove special case function list_lru_dispose_all. (Glauber Costa)
  - ms/dcache: convert to use new lru list infrastructure (Dave Chinner)
  - ms/shrinker: Kill old ->shrink API. (Dave Chinner)
  - md/raid5: use new shrinker API (Dmitry Safonov)
  - ms/shrinker: convert remaining shrinkers to count/scan API (Dave Chinner)
  - ms/hugepage: convert huge zero page shrinker to new shrinker API (Glauber Costa)
  - ms/drivers: convert shrinkers to new count/scan API (Vladimir Davydov) [PSBM-34838 PSBM-42317]
  - ms/fs: convert fs shrinkers to new scan/count API (Vladimir Davydov) [PSBM-34838]
  - ms/vmscan: per-node deferred work (Glauber Costa)
  - ms/shrinker: add node awareness (Dave Chinner)
  - ms/inode: move inode to a different list inside lock (Glauber Costa)
  - ms/inode: convert inode lru list to generic lru list code. (Dave Chinner)
  - ms/shrinker: convert superblock shrinkers to new API (Dave Chinner) [OVZ-6646 PSBM-42760]
  - ms/mm: new shrinker API (Dave Chinner)
  - ms/dcache: remove dentries from LRU before putting on dispose list (Dave Chinner)
  - ms/dentry: move to per-sb LRU locks (Dave Chinner)
  - ms/dcache: convert dentry_stat.nr_unused to per-cpu counters (Dave Chinner)
  - ms/super: fix calculation of shrinkable objects for small numbers (Glauber Costa)
  - ms/fs: bump inode and dentry counters to long (Glauber Costa)
  - mm: make task with TIF_MEMDIE die faster (Kirill Tkhai)
  - mm: add independed bio pool for swapout (Kirill Tkhai) [PSBM-14619]
  - mm/fuse/oom: Show writeback_temp stats in oom message (Maxim Patlasov)
  - mm/swap: do not uncharge on reuse_swap_page (Vladimir Davydov)
  - mm/swap: comment about managing swap inside a CT (Konstantin Khorenko)
  - mm: Do not leak node data to CT's /proc/vmstat (Kirill Tkhai)
  - mm: Add oom_group to set custom oom_score_adj (Kirill Tkhai)
  - rh/mm: Drop off Live Kernel Self Migration (TRACK_DIRTY_PAGES) (Cyrill Gorcunov)
  - ms/mm: softdirty: keep bit when zapping file pte (Peter Feiner)
  - ms/mm: softdirty: clear VM_SOFTDIRTY flag inside clear_refs_write() instead of clear_soft_dirty() (Cyrill Gorcunov)
  - ms/kmemcg: don't allocate extra memory for root memcg_cache_params (Andrey Vagin)
  - ms/mm: save soft-dirty bits on swapped pages (Cyrill Gorcunov)
  - Makefile: make VZVERSION evaluated dynamically (Konstantin Khorenko) [PSBM-34957]
  - dummy: add dummy modules for service vz init script (Konstantin Khorenko) [PSBM-31333 PSBM-20104 PSBM-31333]
  - vzlist: add vzlist from 2.6.32-x as is (Dmitry Guryanov) [PSBM-20095 PSBM-20095 PSBM-20095 PSBM-19217]
  - vznetstat: Port diff-vznetstat-support-of-resetting-of-traffic-statistics-on-running-CTs (Vladimir Davydov) [PSBM-21243 PSBM-21243 PSBM-33650]
  - vznetstat: apply vznetstat patches from 2.6.32 as is (Stanislav Kinsburskiy) [PSBM-20094 PSBM-20094 PSBM-32912 PSBM-20094 PSBM-32072 PSBM-19217 PSBM-33650 PSBM-34837 PSBM-35011 PSBM-35178 PSBM-35178 PSBM-52219 PSBM-79502]
  - ub: add heuristic check for memory overcommit (Stanislav Kinsburskiy) [PSBM-45695 PSBM-48891]
  - ub: show swapin/out in /proc/bc/<bc>/vmaux (Vladimir Davydov) [PSBM-46104]
  - ve/fs/sync: per containter sync and syncfs (Stanislav Kinsburskiy) [PSBM-39583 PSBM-39583 PSBM-44125 PSBM-44125 PSBM-44684]
  - ub/fs/writeback: per-CT fs writeback (Andrey Ryabinin) [PSBM-33841 PSBM-43375]
  - ubc: proc show stats in ve user ns (Pavel Tikhomirov) [PSBM-40433]
  - ub: sync exec_ub on fork (Vladimir Davydov) [PSBM-54928]
  - ub/fs: resurrect sync accounting (Vladimir Davydov) [PSBM-34007]
  - ub/fs: account writeback io (Stanislav Kinsburskiy) [PSBM-34007 PSBM-34007]
  - ub: ressurrect iostat and ioprio reporting (Stanislav Kinsburskiy) [PSBM-34007]
  - ub: ressurrect ioprio_set IOPRIO_WHO_UBC (Vladimir Davydov) [PSBM-34007]
  - ub/memcg: introduce ub_total_pages (Stanislav Kinsburskiy) [PSBM-33849 PSBM-34035 PSBM-47147]
  - mm/bc: Port diff-bc-shmem-fix-accounting-on-error-path (Vladimir Davydov) [PSBM-22198 PSBM-33637]
  - ub/netfilter: account x_tables to ub (Vladimir Davydov) [PSBM-20089]
  - ubc: initial patch (Konstantin Khorenko) [PSBM-20665 PSBM-20540 PSBM-24622 PSBM-28377 PSBM-26039 PSBM-15568 PSBM-20089 PSBM-39435 PSBM-20089 PSBM-20089 PSBM-29895 PSBM-31973 PSBM-33729 PSBM-33732 PSBM-20089 PSBM-20089 PSBM-20089 PSBM-33487 PSBM-20089 PSBM-20089 PSBM-20089 PSBM-20089 PSBM-28682 PSBM-31006 PSBM-33637 PSBM-34035 PSBM-34035 PSBM-34035 PSBM-34007 PSBM-34007 PSBM-34007 PSBM-39327 PSBM-52219]
  - ub: Track task mm ub (Kirill Tkhai)
  - ub: Execute posix timers in ub0 (Kirill Tkhai)
  - ub: Add dirty page accounting (Kirill Tkhai)
  - ub: Set ub0 to do softirq (Kirill Tkhai)
  - ub: Account siginfo (Kirill Tkhai)
  - ub: Show task ub info in /proc/[pid]/status etc (Kirill Tkhai)
  - ve/proc: Port diff-ve-proc-add-buffers-field-to-meminfo (Vladimir Davydov) [PSBM-19448 PSBM-34444 PSBM-33650]
  - ub: Split meminfo_proc_show() (Kirill Tkhai)
  - ub: Add address_space::dirtied_ub (Kirill Tkhai)
  - ub: Account file struct (Kirill Tkhai)
  - ub: Show ub memory on sysrq mem show (Kirill Tkhai)
  - ub: Add flock accounting (Kirill Tkhai)
  - ub: Add pty accounting (Kirill Tkhai)
  - ms/netlink: fix an use-after-free issue for nlk groups (Vasily Averin) [PSBM-71747]
  - ve/netlink: allow messages with family PF_BRIDGE type RTM_xxxNEIGH in CT (Pavel Tikhomirov) [PSBM-53629]
  - netlink/diag: report flags for netlink sockets (Andrey Vagin) [PSBM-28386]
  - netlink: add an ability to restore messages in a receive queue (Andrey Vagin) [PSBM-28386]
  - netlink: allow to set peeking offset for sockets (Stanislav Kinsburskiy) [PSBM-28386 PSBM-48484 PSBM-28386 PSBM-57921]
  - ve/net/ip6tables: fix autoloading of the ip6table_raw module from CT (Andrey Ryabinin) [PSBM-50548 PSBM-54244]
  - net: Add dependence xt_socket match on nf_conntrack_ipv4 (Kirill Tkhai) [PSBM-69269]
  - ms/netfilter: kill the fake untracked conntrack objects (Stanislav Kinsburskiy) [PSBM-71153]
  - net: Mark conntrack users in nftables (Kirill Tkhai) [PSBM-51050]
  - net: Mark conntrack users in xtables (Kirill Tkhai) [PSBM-51050 PSBM-54823 PSBM-54823]
  - net: Primitives to enable conntrack allocation (Stanislav Kinsburskiy) [PSBM-51050 PSBM-54823 PSBM-56500]
  - ve/nf_conntrack: expose "nf_conntrack_events*" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_acct" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_max" in containers (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: allow expose of priviledged sysctl inside containers (Stanislav Kinsburskiy) [PSBM-40044 PSBM-40044 PSBM-54530]
  - ms/netfilter: xt_TCPMSS: add more sanity tests on tcph->doff (Eric Dumazet) [PSBM-80346]
  - ms/netfilter: Restore xt_connlimit version 0 (Kirill Tkhai) [PSBM-40186]
  - config.OpenVZ: enable netfilter module xt_match_wdog_tmo (Konstantin Khorenko) [PSBM-40736]
  - ms/netfilter: Allow xt_owner in any user namespace (Eric W. Biederman) [PSBM-69409]
  - netfilter: always create netfilter per-net objects for ipv4/ipv6 (Stanislav Kinsburskiy) [PSBM-68767]
  - netfilter: always create per-net "filter" tables objects (Stanislav Kinsburskiy) [PSBM-58574]
  - netfilter: check per-ve netfilter status on actual operation (Stanislav Kinsburskiy) [PSBM-58574]
  - netfilter: ve_ipt_permitted() helper introduced (Stanislav Kinsburskiy) [PSBM-58574]
  - ms/bridge: drop netfilter fake rtable unconditionally (Florian Westphal) [PSBM-64412]
  - ms/netfilter: x_tables: avoid warn and OOM killer on vmalloc call (Marcelo Ricardo Leitner) [PSBM-62203]
  - ms/netfilter: nfnetlink: correctly validate length of batch messages (Phil Turnbull) [PSBM-57511]
  - netfilter/x_tables: account entry offsets allocations (Andrey Ryabinin) [PSBM-54407]
  - ve/netfilter: rectify ebtlog inside CT (Dmitry Safonov) [PSBM-54183]
  - ve/netfilter: rectify nflog inside CT (Dmitry Safonov) [PSBM-54183]
  - ve/netfilter: use ve_printk for BUGPRINT in ebtables (Dmitry Safonov) [PSBM-56707]
  - ms/netfilter: nfnetlink: fix insufficient validation in nfnetlink_bind (Pablo Neira Ayuso) [PSBM-54189]
  - ms/netfilter: x_tables: check for bogus target offset (Cyrill Gorcunov) [PSBM-49001]
  - ms/netfilter: ipset: move registration message to init from net_init (Ilia Mirkin) [PSBM-45281]
  - ms/netfiler: ipset: Add net namespace for ipset (Vitaly Lavrov) [PSBM-45281]
  - ve/netfilter: get UID and GID from container user ns on rule match (Stanislav Kinsburskiy) [PSBM-43609]
  - ve/netfilter: allow adding matches from the container initial user namespace (Stanislav Kinsburskiy) [PSBM-43609]
  - ve/netfilter: ve_printk for "nf_conntrack: table full" (Vasily Averin)
  - ve/netfilter: Check for permittions while looking for target and match (Kirill Tkhai) [PSBM-28910]
  - ve/netfilter/cred: add ve_capable to check capabilities relative to the current VE (v2) (Konstantin Khorenko) [PSBM-39077]
  - ve/netfilter: Add autoloading of sockopt modules (Kirill Tkhai) [PSBM-28910]
  - ve/netfilter: Implement pernet net->ct.max / virtualize "nf_conntrack_max" sysctl (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Implement pernet expect_max / virtualize "net.netfilter.nf_conntrack_expect_max" sysctl (Konstantin Khorenko) [PSBM-18322]
  - ve/netfilter: Add pernet permission checks in ip_tables (Kirill Tkhai) [PSBM-18322 PSBM-27181 PSBM-34192 PSBM-34657]
  - ve/netfilter: Implement net_ipt_permitted() etc (Kirill Tkhai) [PSBM-18322 PSBM-31451]
  - ve/netfilter: Implement ip_conntrack_disable_ve0 module option (Stanislav Kinsburskiy) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "conntrack" match support (Kirill Tkhai) [PSBM-18322 PSBM-51365]
  - ve/netfilter: Restore revision 0 "owner" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: MARK -- drop off @table entity to support rhel5 containers, v2 (Kirill Tkhai) [PSBM-30390]
  - ve/netfilter: Restore revision 0 "connmark" match / "CONNMARK" target support (Kirill Tkhai) [PSBM-18322 PSBM-51365]
  - ve/netfilter: Restore revision 0 "TOS" target support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "tos" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "mark" match and "MARK" target support (Stanislav Kinsburskiy) [PSBM-18322 PSBM-51365]
  - ve/netfilter: Restore revision 0 "iprange" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Basic ve transformations (Stanislav Kinsburskiy) [PSBM-18322 PSBM-39077]
  - ms/netfilter: Add {ipt,ip6t}_osf aliases for xt_osf (Kirill Tkhai) [PSBM-33929]
  - ve/futex/timeout: adjust futex timeout to absolule (Kirill Tkhai) [PSBM-14471]
  - ve: Use @real_start_timespec in uptime_proc_show (Cyrill Gorcunov) [PSBM-41406]
  - ve: Add interface for @start_timespec and @real_start_timespec adjustmen (Cyrill Gorcunov) [PSBM-41311 PSBM-41406]
  - timers should not get negative argument (Vasily Averin) [PSBM-48475]
  - ve/posix-timers: reference ve monotonic clock from ve start (v2) (Kirill Tkhai) [PSBM-13860 PSBM-34017 PSBM-18284 PSBM-18284]
  - radix-tree/filemap: fix prev tag not set after deleting direct slot (Vladimir Davydov)
  - radix-tree/filemap: clear prev tag when deleting page from page cache (Vladimir Davydov)
  - radix-tree: hunks left from initial combined patch added (Konstantin Khorenko) [PSBM-18056 PSBM-27696]
  - VE/sysrq-trigger: make it VE-namespace aware (Stanislav Kinsbursky) [PSBM-20664]
  - config: enable BCACHE as a module" (Konstantin Khorenko) [PSBM-55594 PSBM-79461]
  - bcache: check correctly for bcache cgroup subsystem presence (Konstantin Khorenko)
  - config.OpenVZ: OpenVZ related config options are added (Stanislav Kinsburskiy) [PSBM-32460 PSBM-34741]
  - mpi: export arithmetic functions required for in-kernel DSA implementation (Konstantin Khorenko)
  - ms/mpi: revert "Revert "crypto: GnuPG based MPI lib - (Stanislav Kinsburskiy)
  - ms/mpi: revert "Remove unused code from MPI library" (Dmitry Kasatkin)
  - lockd: race of lockd inetaddr notifiers with nlmsvc_rqst change (Vasily Averin) [PSBM-76103]
  - ve/kthread: khelper kthread in a container introduced (Stanislav Kinsbursky)
  - ve/kthread: introduce kthread_run_ve() helper (Stanislav Kinsbursky)
  - ve/kthread: kthreads creation facility introduced (Stanislav Kinsbursky)
  - kthread: make of a new kthread's queuing code to a callback (Stanislav Kinsbursky)
  - block: suppress hard lockup warning in elv_drain_elevator (Vladimir Davydov) [PSBM-44480]
  - block: Export disk_type,block_class and disk_name (Kirill Tkhai)
  - ms/cfq-iosched: fix oom cfq_queue ref leak in cfq_set_request() (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: fix async oom queue handling (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: simplify control flow in cfq_get_queue() (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: remove @gfp_mask from cfq_find_alloc_queue() (Maxim Patlasov) [PSBM-39956]
  - ve sysfs: export sysfs_perms_set helper (Stanislav Kinsburskiy)
  - drivers/core/sysfs: respect ns when removing sys dev link (Vladimir Davydov) [PSBM-25801]
  - ve/sysfs: add new interface to control sysfs (Konstantin Khlebnikov)
  - VE/SYSFS: hide forbidden entries in container (Stanislav Kinsburskiy)
  - VE/SYSFS: implement ve-based permissions (Stanislav Kinsburskiy) [PSBM-20892 PSBM-34682]
  - KMAPSET: set of key-value mappings with build-in (Stanislav Kinsburskiy) [PSBM-34437]
  - ve: add one more SHUTDOWN hook chain (Stanislav Kinsburskiy)
  - Use ve init task's css instead of opening cgroup via vfs (Vladimir Davydov) [PSBM-48629 PSBM-74490 PSBM-48721]
  - signal: don't rearm a posix-timer if siginfo was queued from user-space (Author: Thomas Gleixner) [PSBM-67221]
  - ve/signal: Ignore signals from wrong ve (Stanislav Kinsburskiy) [PSBM-17903 PSBM-40896 PSBM-17903]
  - signal: make SIGKILL top priority signal (Konstantin Khorenko)
  - pidns: add proc mount option 'hidepidns=0|1' (Konstantin Khlebnikov)
  - pidns: Disable pid allocation if pid_ns_prepare_proc() is failed in alloc_pid() (Kirill Tkhai) [PSBM-56705]
  - pid: export symbol nex_pidmap (Dmitry Guryanov) [PSBM-20095]
  - ms/pidns: Make the pidns proc mount/umount logic (Konstantin Khlebnikov)
  - PIDNS: implement change_pid_ns() (Konstantin Khlebnikov)
  - pid_ns: Virtualize pid_max (Kirill Tkhai)
  - fs/ceph: honor kernel direct aio changes v2 (Dmitry Monakhov) [PSBM-54817]
  - ve/aio: Add a handle to checkpoint/restore AIO context (Stanislav Kinsburskiy) [PSBM-42488 PSBM-41425 PSBM-42488 PSBM-42488 PSBM-42488]
  - ms/aio: Multiply passed nr_events in io_setup() (Kirill Tkhai) [PSBM-47075 PSBM-47209]
  - ve/fs: Export fs.aio-max-nr via ve cgroup (Cyrill Gorcunov) [PSBM-45646]
  - ve/fs/aio: aio_nr & aio_max_nr variables virtualization (Stanislav Kinsburskiy) [PSBM-29017 PSBM-47209 PSBM-47209]
  - fs/aio: kernel direct aio (Stanislav Kinsburskiy) [PSBM-18169 PSBM-42312 PSBM-54817]
  - overlayfs: unmark overlayfs as tech preview (Konstantin Khorenko) [PSBM-52379]
  - ve/fs/overlay: allow overlayfs to be used inside a Container (Pavel Tikhomirov) [PSBM-47280]
  - ve/fs/writeback: filter per-container inodes earlier (Andrey Ryabinin) [PSBM-39583]
  - fs: ioctl_fiemap must check what filemap_write_and_wait_range returns (Maxim Patlasov) [PSBM-68454]
  - fs: FIEMAP should sync only required range with FIEMAP_FLAG_SYNC (Maxim Patlasov) [PSBM-68226]
  - ms/fs: Fix race when checking i_size on direct i/o read (Steven Whitehouse)
  - ms/fs/file.c:fdtable: avoid triggering OOMs from alloc_fdmem (Eric W. Biederman)
  - vfs: panic in guard_bio_eod() if truncated_bytes > bvec->bv_len (Pavel Tikhomirov) [PSBM-55105]
  - fs: use original vfsmount for touch_atime (Stanislav Kinsburskiy) [PSBM-51009 PSBM-52373 PSBM-52817]
  - fs/block_dev: fix NULL ptr deref in freeze_bdev() (Andrey Ryabinin) [PSBM-50858]
  - ms/fs/super.c: fix WARN on alloc_super() fail path (Pavel Tikhomirov) [PSBM-43294]
  - ve: remove sync_mutex (Andrey Ryabinin)
  - fs: avoid writeback busy-loop if redirty (Maxim Patlasov) [PSBM-55919]
  - fs: fix accounting pipe buffers to kmemcg (Vladimir Davydov)
  - ve: remove sysctl_fsync_enable and use ve_fsync_behavior instead (Pavel Tikhomirov) [PSBM-34286 PSBM-34285]
  - ve/fs: namespace -- Don't fail on permissions if @ve->devmnt_list is empty (Cyrill Gorcunov) [PSBM-48188 PSBM-58329]
  - ve/fs: namespace -- Ignore device permissions during restore (Cyrill Gorcunov) [PSBM-48188]
  - ms/mnt: Only change user settable mount flags in remount (Pavel Tikhomirov) [PSBM-43294]
  - ve/fs: add per-VE limit of mount points (Stanislav Kinsburskiy) [PSBM-34438 PSBM-42825 PSBM-42825 PSBM-69880 PSBM-69880 PSBM-69880]
  - ms/fsnotify: Make fdinfo to always success (Cyrill Gorcunov) [PSBM-40337]
  - ve/fs: Allow to mount ext4 and binfmt_misc under non-root ns (Kirill Tkhai) [PSBM-40100]
  - ve/fs/inotify: do not impose limit on the number of instances by default (Vladimir Davydov) [PSBM-39048]
  - ve/fs: Port diff-ve-fs-security-check-for-mount (Vladimir Davydov) [PSBM-33650]
  - mm/fs: Port diff-mm-debug-memallocation-caused-fs-reentrance (Vladimir Davydov) [PSBM-34112]
  - ve/fs/ioprio: confine ioprio_{set, get}(IOPRIO_WHO_USER) to current ve (Vladimir Davydov)
  - ve/fs/fadvise: introduce FADV_DEACTIVATE flag (Andrey Ryabinin) [PSBM-57915]
  - fs: add fadvise file_operation (Kirill Tkhai) [PSBM-54928 PSBM-54928]
  - tmpfs: shmem_fallocate must return ERESTARTSYS (Maxim Patlasov) [PSBM-43399]
  - fs/shmem: skip "relatime" in shmem_parse_options() (Kirill Tkhai)
  - vfs/nfs: add set_flags wrapper (Kirill Tkhai)
  - rh/fs: unwind changes on shift_arg_pages error path (Kirill Tkhai)
  - rh/fs: introduce "fs.relatime_interval" sysctl (Kirill Tkhai)
  - ve/fs: introduce "fs.fsync-enable" and "fs.odirect_enable" sysctls (Konstantin Khorenko) [PSBM-17903 PSBM-17157 PSBM-34286 PSBM-34285 PSBM-34286]
  - ve/binfmt_misc: destroy all nodes on ve stop (Vladimir Davydov) [PSBM-39154]
  - ve/fs/binfmt: virtualization (Stanislav Kinsburskiy) [PSBM-39154 PSBM-39154 PSBM-17903 PSBM-40100 PSBM-47737]
  - ve/fs/binfmt: move all internal data to structure (Stanislav Kinsbursky)
  - ve/devpts: Assign containers @devpts_sb on first mount (Cyrill Gorcunov) [PSBM-34931]
  - ve/fs/devpts: don't require newinstance (Konstantin Khlebnikov)
  - ve/fs: virtualize devtmpfs file system (Stanislav Kinsburskiy) [PSBM-35077 PSBM-35146 PSBM-39077]
  - nfsd: return file system superblock time granulaty on FSINFO request (Stanislav Kinsburskiy) [PSBM-66572]
  - ve/nfsd: do not print nfscld warning in a container (Stanislav Kinsburskiy) [PSBM-43468]
  - ve/nfsd: disable legacy recovery tracking for containers (Stanislav Kinsburskiy) [PSBM-43468]
  - ve/nfsd: enable UMH client tracker in a container (Stanislav Kinsbursky)
  - nfsd: race of nfsd inetaddr notifiers with nn->nfsd_serv change (Vasily Averin) [PSBM-76103]
  - ve/sunrpc: containerize kthreads (Stanislav Kinsbursky)
  - ve/fs/nfsd: NFSd containerization (Stanislav Kinsburskiy)
  - ms/NFS/CIFS/SUNRPC: don't allow to freeze execution (Stanislav Kinsburskiy) [PSBM-50671 PSBM-54822]
  - ms/NFS: Don't call COMMIT in ->releasepage() (Trond Myklebust) [PSBM-77949]
  - nfs: abort delegation in dying VE (Stanislav Kinsburskiy) [PSBM-77061]
  - nfs: protect callback execution against per-net callback thread shutdown (Stanislav Kinsburskiy) [PSBM-75751]
  - ve/fs/nfs: NFS containerization (Stanislav Kinsburskiy)
  - ve/fs: mark virtual filesystems as virtualized (Konstantin Khlebnikov)
  - VE/FS: containerize filesystems access (Konstantin Khorenko)
  - ms/autofs: show pipe inode in mount options (Stanislav Kinsburskiy) [PSBM-41217 PSBM-41961]
  - ve/fs/autofs: mark autofs as virtualized (Stanislav Kinsburskiy) [PSBM-26968]
  - ms/fs: Add a missing permission check to do_umount (Pavel Tikhomirov) [PSBM-43294]
  - ve/fs/locks: Make CAP_LEASE work in containers (Evgenii Shatokhin) [PSBM-46199]
  - ve/fanotify: Use ve-capable instead of plain capable test (Cyrill Gorcunov) [PSBM-41409]
  - ve/fs: allow to remount from ve user ns (Pavel Tikhomirov)
  - ve/fs/namei: fix capabilities check in sys_renameat2 () to support Containers (Stanislav Kinsburskiy)
  - ve/fs/namei: check containers capabilities in may_linkat() (Stanislav Kinsburskiy) [PSBM-40567]
  - ve/fs/cred: add ve_capable to check capabilities relative to the current VE (v2) (Andrew Vagin) [PSBM-39077]
  - VE/FS: allow to mknod inside ct (Vladimir Davydov)
  - ve/fs: Port diff-ve-fs-allow-to-remove-swapfile-hardlinks (Vladimir Davydov) [PSBM-25310 PSBM-33650]
  - fs: exec_mmap() arg corrected (Konstantin Khorenko)
  - fs: Mask appropriate filesystems FS_VIRTUALIZED (Kirill Tkhai)
  - fs: Restrict ve sync methods (Kirill Tkhai)
  - fs: Split statfs_by_dentry() (Kirill Tkhai)
  - fs: Show saved signal mask in /proc/[pid]/status (Kirill Tkhai)
  - fs: Lower ioprio in case of ioprio_set() called from CT (Kirill Tkhai)
  - ms/vfs: Allocate anon_inode_inode in anon_inode_init() (Jan Kara) [PSBM-75068]
  - ms/fs: remove now stale label in anon_inode_init() (Linus Torvalds) [PSBM-75068]
  - ms/fs: Avoid userspace mounting anon_inodefs filesystem (Jan Kara) [PSBM-75068]
  - ms/epoll: Make fdinfo to always success (Cyrill Gorcunov) [PSBM-41386]
  - ms/epoll: fix use-after-free in eventpoll_release_file (Konstantin Khlebnikov)
  - OpenVZ 7 config file (Stanislav Kinsburskiy)
  - sched: Count loadavg under rq::lock in calc_load_nohz_start() (Kirill Tkhai) [PSBM-68052]
  - ms/sched/numa: Fix use-after-free bug in the task_numa_compare (Gavin Guo) [PSBM-62208]
  - ve/sched: sched_show_task: call task_ve_name() under RCU lock (Andrey Ryabinin) [PSBM-60139]
  - ms/sched: Fix race on toggling cfs_bandwidth_used (Ben Segall) [PSBM-51056]
  - ve/sched: make load balancing more agressive (Vladimir Davydov)
  - sched: debug: show nr_failed_migrations_cpulimit (Vladimir Davydov)
  - sched: add WARN_ON's to debug task boosting (Vladimir Davydov) [PSBM-44475 PSBM-50077]
  - ms/sched/fair: Initialize throttle_count for new task-groups lazily (Konstantin Khlebnikov) [PSBM-50099]
  - sched: use topmost limited ancestor for cpulimit balancing (Vladimir Davydov) [PSBM-49203]
  - ve/fairsched: Resurrect proc fairsched files (Vladimir Davydov) [PSBM-48824]
  - ms/sched/core: Fix unserialized r-m-w scribbling stuff (Kirill Tkhai)
  - ve/sched: introduce cond_resched_may_throttle (Kirill Tkhai) [PSBM-18888 PSBM-42358]
  - sched: disable dumping cfs info on sysrq trigger (Vladimir Davydov) [PSBM-41140]
  - ve/sched: Hide steal time from inside CT (Kirill Tkhai) [PSBM-26588 PSBM-23431]
  - ms/sched/fair: Track cgroup depth (Kirill Tkhai)
  - sched/fair: only update current task boost (Vladimir Davydov)
  - ms/sched: Fix schedule_tail() to disable preemption (Kirill Tkhai)
  - sched: Port diff-sched-make-nr_cpus-limit-support-hierarchies (Stanislav Kinsburskiy) [PSBM-33642 PSBM-35082 PSBM-35251]
  - sched: Port cpustat related patches (Vladimir Davydov) [PSBM-26714 PSBM-28403 PSBM-28500 PSBM-26587 PSBM-23431 PSBM-28277 PSBM-33642 PSBM-48721 PSBM-69678 PSBM-69678 PSBM-69678 PSBM-69678 PSBM-79891]
  - sched: Port diff-sched-return-only-virtual-cpus-in-sched_getaffinity (Vladimir Davydov) [PSBM-25367 PSBM-27200 PSBM-33642]
  - sched: Port diff-sched-clear-prev-entity-if-curr-is-dequeued (Vladimir Davydov) [PSBM-33642]
  - ms/sched: Port diff-sched-increase-SCHED_LOAD_SCALE-resolution (Vladimir Davydov) [PSBM-33642]
  - sched: Port diff-sched-initialize-runtime-to-non-zero-on-cfs-bw-set (Vladimir Davydov) [PSBM-17658 PSBM-17658 PSBM-33642]
  - ve/sched: port boosting hacks against prio inversion (Stanislav Kinsburskiy) [PSBM-15441 PSBM-56984 PSBM-62208]
  - ve/sched: port vcpu hotslice (Stanislav Kinsburskiy) [PSBM-16913 PSBM-16913 PSBM-17399]
  - ve/sched: port nr cpus limit (Stanislav Kinsburskiy) [PSBM-16856 PSBM-69678 PSBM-69678]
  - sched/stat: account forks per task group (Vladimir Davydov) [PSBM-18113 PSBM-18113]
  - sched/stat: account ctxsw per task group (Vladimir Davydov) [PSBM-18113 PSBM-18113]
  - sched/stat: initial patch (Konstantin Khorenko) [PSBM-18113 PSBM-54928]
  - sched: other changes (Konstantin Khorenko)
  - sched: prohibit setting affinity from inside a CT (Konstantin Khorenko)
  - sched: put setting scheduller under CAP_SYS_ADMIN (instead of SYS_NICE) (Konstantin Khorenko)
  - sched: Add cpulimit base interfaces (Kirill Tkhai) [PSBM-69678 PSBM-69678]
  - sched: Export per task_group statistics_work (Kirill Tkhai) [PSBM-74490 PSBM-33642]
  - sched: Account ve_task_info::sleep_time (Kirill Tkhai)
  - sched: Change show_state() view (Kirill Tkhai)
  - sched: Account task_group::start_time (Kirill Tkhai)
  - sched: Add primitives to calculate nr running, sleeping, stopped and uninterruptible tasks (Kirill Tkhai)
  - sched: Account cfs_rq::nr_iowait (Kirill Tkhai)
  - sched: Count rq::nr_sleeping and cfs_rq::nr_unint (Kirill Tkhai)
  - kernel: Account nr_zombie and nr_dead (Kirill Tkhai)
  - delayacct: Add stats primitives (Kirill Tkhai)
  - ms/sched/numa: fix unsafe get_task_struct() in task_numa_assign() (Kirill Tkhai)
  - ms/sched: Fix race between task_group and sched_task_group (Kirill Tkhai)
  - ms/coredump: fix unfreezable coredumping task (Andrey Ryabinin) [PSBM-52793]
  - ve/coredump: virtualize kernel.core_pattern sysctl (Pavel Tikhomirov) [PSBM-43596]
  - ve/net: Allow sysctl::[ip_nonlocal_bind,icmp_echo_ignore_all] for VE's init_user_ns (Kirill Tkhai) [PSBM-60975]
  - ve/sysctl/net: allow net.ipv4.vs.* in CT init userns (Pavel Tikhomirov) [PSBM-63883 PSBM-63883]
  - ve/sysctl/net: allow "net.unix.max_dgram_qlen" sysctl in CT init userns (Pavel Tikhomirov) [PSBM-54530]
  - ve/sysctl: allow to write kernel/hostname and kernel/domainname entries in container (Stanislav Kinsburskiy) [PSBM-20102 PSBM-20102]
  - ve/sysctl/pidns: allow to change sysctl "ns_last_pid" from containers (Andrew Vagin)
  - sysctl: make may_detach_mounts immutable in CT (Pavel Tikhomirov) [PSBM-74521]
  - ve/sysctl/ipc: mark as virtualized (Konstantin Khorenko)
  - ve/sysctl: implement virtualized methods (Stanislav Kinsburskiy) [PSBM-18032 PSBM-18030 PSBM-29017 PSBM-43596]
  - ve/sysctl: write permission restriction (Konstantin Khlebnikov) [PSBM-18022 PSBM-56704 PSBM-18032 PSBM-18030]
  - sysctl: make "tcp_syncookies" sysctl available inside a CT (Konstantin Khorenko)
  - sysctl: make hotplug, printk and mmap_min_addr accessible inside a CT (Konstantin Khorenko)
  - sysctl: Change sysctl::show_unhandled_signals default (Kirill Tkhai)
  - module: export sysfs dentries in containers (Stanislav Kinsburskiy) [PSBM-63892]
  - ve/module: hide module refcounts from container (Andrey Ryabinin) [PSBM-57497]
  - ve/proc/net/nr_cpus: cut lines in /proc/net/softnet_stat to number of vcpus in CT (Pavel Tikhomirov) [PSBM-73238]
  - ve/proc/net: virtualize all the network proc entries (Stanislav Kinsburskiy) [PSBM-58574]
  - ve/proc/net: proc_net_create() helper introduced (Stanislav Kinsburskiy) [PSBM-58574]
  - ve/proc/cpuset: do not show cpuset in CT (Pavel Tikhomirov) [PSBM-47280]
  - ve/proc: fix mangling cgroup mount source path in container (Stanislav Kinsburskiy) [PSBM-34295 PSBM-52369]
  - ve/proc/time: Port diff-ve-proc-report-real_start_time-in-_proc_PID_stat-if-CONFIG_VE (Vladimir Davydov) [PSBM-22925 PSBM-22925 PSBM-33650]
  - ve/fs: drop useless d_root_check() (Konstantin Khorenko) [PSBM-41919]
  - ve/proc: use memcg limits for showing oom_score inside CT (Vladimir Davydov) [PSBM-33849]
  - ve/proc/block: Show CT allowed partitions in /proc/partitions (Stanislav Kinsburskiy) [PSBM-18889 PSBM-34805]
  - blkcg: Hide not allowed device from /proc/devices (Kirill Tkhai)
  - ve/proc: restricted proc-entries scope (Stanislav Kinsburskiy) [PSBM-18019 PSBM-18021 PSBM-40359 PSBM-58574 PSBM-55920 OVZ-6834]
  - fs/proc: print fairshed stat (Konstantin Khorenko)
  - fs/proc: enhance proc_fd_access_allowed() and provide appropriate error code to callers (Konstantin Khorenko)
  - proc: Show vcpu in do_task_stat() (Kirill Tkhai)
  - quota: missing lock in dqcache_shrink_scan() (Niu Yawei)
  - ve/quota: allow to manage quota in top CT user ns (Konstantin Khorenko) [PSBM-40281]
  - fs/quota: Compatibility with older quotactl interface (Stanislav Kinsburskiy) [PSBM-51366]
  - printk: Add touch_all_softlockup_watchdogs() to console_unlock() (Kirill Tkhai) [PSBM-49893]
  - ve/printk: per-CT printk helpers introduced (Stanislav Kinsburskiy) [PSBM-39077 PSBM-54183 PSBM-42313]
  - ve/printk: printk virtualization (Konstantin Khorenko) [PSBM-17899 PSBM-17980 PSBM-20669 PSBM-17899 PSBM-54820]
  - net/sched: restore "mpu xxx" handling (Kirill Tkhai) [PSBM-34874]
  - cpuset: initial patch (Konstantin Khorenko)
  - ve/net: introduce vz_security_*_check checks (Stanislav Kinsburskiy)
  - ve/kobj: Send events per VE instead of all net-namespaces broadcasting (Stanislav Kinsburskiy)
  - ve/uevent: Use own uevent_seqnum for every VE (Konstantin Khorenko) [PSBM-17903]
  - vzevent: initial patch (Konstantin Khorenko)
  - ve/veth: don't drop skb->mark if NETIF_F_VENET is set (Andrew Vagin) [PSBM-32277]
  - vzeth: initial patch (Stanislav Kinsburskiy) [PSBM-20668 PSBM-18176]
  - ve/net: introduce TAP accounting (Stanislav Kinsburskiy) [PSBM-27713 PSBM-40629]
  - ve/net/vxlan: enable support in a container (Pavel Tikhomirov) [PSBM-53629]
  - ve/net: ipip: enable in container (Stanislav Kinsburskiy) [PSBM-48608]
  - ve/net: ip_vti: skip per net init in ve (Vladimir Davydov) [PSBM-48698]
  - ve/net/ip_gre: containerize per-net devices (Kirill Tkhai) [PSBM-24331]
  - ve/net/dummy: enable support in a container (Vasily Averin) [PSBM-43329]
  - ve/net/ppp: introduce VE_FEATURE_PPP feature (Stanislav Kinsburskiy) [PSBM-29975]
  - ve/net: Fix vlan NETIF_F_VIRTUAL feature initialization (Kirill Tkhai) [PSBM-35266]
  - ve/tun: expose "owner", "group" and "tun_flags" attributes in container (Stanislav Kinsburskiy) [PSBM-39726]
  - ve/bridge: br_dev_init: check if "bridge" feature is enabled (Evgenii Shatokhin) [PSBM-50009]
  - ve/net: restrict ethtool to CT root userns and prohibit EEPROM change (Konstantin Khorenko) [PSBM-36290 PSBM-52504]
  - ve/net/cred: add ve_capable to check capabilities relative to the current VE (v2) (Konstantin Khorenko) [PSBM-39077]
  - ve/net/xfrm: ratelimit warning on bad policy detection (Konstantin Khorenko) [PSBM-57498]
  - ve/net: restrict number of net devices for CT (Pavel Tikhomirov) [PSBM-51354]
  - ve/net/packet: show tx-ring warning only for host (Pavel Tikhomirov) [PSBM-56711]
  - VE/NET: don't oops in net_generic() on disabled features (Konstantin Khlebnikov)
  - ve/net: sit: fix crash on newlink if VE_FEATURE_SIT is disabled (Vladimir Davydov)
  - ve/net: Exclude foreign CT sockets from /proc/net/tcp{,6} (Kirill Tkhai) [PSBM-34875]
  - ve/net: Add VE_NF_CONNTRACK check in resolve_normal_ct() (Kirill Tkhai) [PSBM-35154]
  - ve/net: Add ipt_mask checks into ip6table_nat (Kirill Tkhai) [PSBM-34748]
  - ve/net: allow to rename devices in non-ve namespaces (Kirill Tkhai) [PSBM-29810 PSBM-33645]
  - ve/net/sysfs: Porting diff-ve-net-sysfs-drop-redundant-net_ipv4_route_path and diff-ve-net-route-bring-back-route_src_check (Kirill Tkhai) [PSBM-31818]
  - fs/nfs: don't use delayed unmount for nfs. (Andrey Ryabinin) [PSBM-76086]
  - ve/net,netfilter: Adjust REDIRECT target on venet device (Cyrill Gorcunov) [PSBM-59983]
  - venet: ipX_forward headroom check (Vasily Averin) [PSBM-68362 PSBM-68362]
  - veip: Add commentary about veip_shutdown_hook (Kirill Tkhai) [PSBM-77750]
  - venet: delay skb_orphan() for venet CT->host path optimization (Konstantin Khorenko) [PSBM-79456]
  - drivers/net/ve: venet network device introduced (Konstantin Khorenko)
  - ve: export ve_subsys symbol (Stanislav Kinsburskiy)
  - veip: initial patch (Konstantin Khorenko)
  - net/teql: disable "True" (or "trivial") link equalizer inside a CT (Konstantin Khorenko)
  - net: fix cbq quantum calculation (Konstantin Khorenko)
  - net/ipv6: fix MIP6 compilation (Konstantin Khorenko)
  - net/udp: honor SK_FORCE_REUSE (Konstantin Khorenko)
  - net: shift rcv_nxt appropriately in case we received only part of data (Konstantin Khorenko)
  - net: force tcp maximum segment size (MSS) to 64K (Konstantin Khorenko)
  - net: don't push data in a socket in repair state (Konstantin Khorenko)
  - net/compilation: sysctl_tcp_adv_win_scale (Konstantin Khorenko)
  - net: honor TW_WSCALE_MASK/TW_WSCALE_SPEC (Konstantin Khorenko)
  - net: introduce ip_rt_src_check (Konstantin Khorenko)
  - net: move dev_name_hash/dev_index_hash to netdevice.h (Konstantin Khorenko)
  - tun: Create tun_flags file on for init_net only (Kirill Tkhai)
  - net: Allow ve several netdev ioctls (Kirill Tkhai)
  - net: Track leaked netdev (Kirill Tkhai)
  - net: Make neigh_alloc() return ENOMEM in kmalloc() failed (Kirill Tkhai)
  - net: Add NETIF_F_VIRTUAL feature to mask devices allowed in CT (Kirill Tkhai)
  - net: Add NETIF_F_VENET netdev feature and optimized skb forwarding (Kirill Tkhai)
  - net: Add sysctl_tcp_use_sg to disable NETIF_F_SG sk route capability (Kirill Tkhai)
  - net: Make ipip feature optional (Kirill Tkhai)
  - net: Make sit feature optional (Kirill Tkhai)
  - netns: export net_assign_generic() (Konstantin Khorenko)
  - net: Show all connections in init namespace (Tony Zelenoff)
  - ms/netlabel: fix the netlbl_catmap_setlong() dummy function (Paul Moore)
  - ms/ipmr,ip6mr: call ip6mr_free_table() on failure path (WANG Cong)
  - ms/ixgbe: on recv increment rx.ring->stats.yields (Pavel Tikhomirov)
  - ms/ixgbe: Refactor busy poll socket code to address multiple issues (Pavel Tikhomirov) [PSBM-40330]
  - ms/net/RDS: verify the underlying transport exists before creating a connection (Vasily Averin)
  - ve/cgroups: Introduce subgroups_limit control (Andrey Ryabinin) [PSBM-33401 PSBM-69678]
  - ve/cgroup: Allow to write to several safe cgroup files from CT (Pavel Tikhomirov) [PSBM-44981]
  - ve/cgroup: do not virtualize output of cgroup_path (Vladimir Davydov) [PSBM-34852]
  - ve/cgroup: Mangle cgroups root from inside of VE view (Cyrill Gorcunov) [PSBM-33757 PSBM-38634]
  - cgroup: Mark cgroup CGRP_VE_ROOT (Kirill Tkhai)
  - ve/cgroups: fake num_cgroups in /proc/cgroups output (Vasily Averin) [PSBM-33400]
  - VE: convert khelper_wq to kthread_worker (Konstantin Khlebnikov) [PSBM-28910]
  - ve/security: device_cgroup -- Allow manage devices in @pseudosuper state (Cyrill Gorcunov) [PSBM-48421]
  - ve/cgroup: Add pseudosuper state for restore sake (Cyrill Gorcunov) [PSBM-33664 PSBM-34291 PSBM-34299 PSBM-43169 PSBM-42573 PSBM-44981]
  - ve/kernel: allow to increase rlimit from inside container (Vladimir Davydov) [PSBM-43410]
  - ve/xattr: allow set/remove security.capability inside CT (Pavel Tikhomirov) [PSBM-43294 PSBM-43267 OVZ-6657]
  - ve/userns: don't TAINT kernel with 'tech preview' (Konstantin Khorenko)
  - ve/acct: Allow process accounting in containers (Evgenii Shatokhin) [PSBM-40587]
  - ve: introduce ve_init_user_ns() helper (Andrey Ryabinin) [PSBM-41075]
  - vecalls: fix VZCTL_GET_CPU_STAT uptime_jif scale (Vladimir Davydov) [PSBM-28811]
  - ve: Implement current_user_ns_initial() helper (Konstantin Khorenko) [PSBM-58574]
  - ve/itimer: add ve_name to warning for a NULL new_value (Dmitry Safonov) [PSBM-49818]
  - ve/cred: add ve_capable to check capabilities relative to the current VE (v2) (Konstantin Khorenko) [PSBM-39077]
  - ve: Add support of iptables mask (Konstantin Khorenko) [PSBM-32737 PSBM-34286 PSBM-34285]
  - ve: Add support of features mask (Cyrill Gorcunov) [PSBM-32737]
  - ve/lockdep: Port diff-lockdep-taint-kernel-on-circular-locking-complains (Vladimir Davydov) [PSBM-22010 PSBM-33650]
  - ve/taskstats: allow delivery of task attributes in CT context (Stanislav Kinsburskiy) [PSBM-56171]
  - ve: Port diff-ve-allow-taskstats-netlink-in-netns (Vladimir Davydov) [PSBM-33650]
  - ve/uts_ns: Implement cgroup interface to configure ve's os_release (Kirill Tkhai) [PSBM-32273]
  - uts: Add virt_utsname and /proc/sys/kernel/virt_osrelease entry (Kirill Tkhai)
  - ve/devmnt: Add a ability to show ve.mount_opts (Kirill Tkhai) [PSBM-34291 PSBM-34291]
  - ve/fs/devmnt: process mount options (Kirill Tkhai) [PSBM-32273 PSBM-40075]
  - ve/devmnt: Introduce ve::devmnt list (Kirill Tkhai) [PSBM-32273]
  - ptrace: prevent tracing "init" from inside a CT (Konstantin Khorenko)
  - ve/mm/trace: introduce vps_dumpable flag (Konstantin Khorenko) [PSBM-20666]
  - ve/mm: print OOM info to VE log (Vladimir Davydov)
  - ve: initial patch (Konstantin Khorenko) [PSBM-21953 PSBM-22882 PSBM-24622 PSBM-24622 PSBM-28031 PSBM-33480 PSBM-33555 PSBM-33561 PSBM-33833 PSBM-34030 PSBM-32284 PSBM-34450 PSBM-34497 PSBM-34286 PSBM-34285 PSBM-34422 PSBM-34286 PSBM-34285 PSBM-40280 PSBM-71414 PSBM-78078]
  - ve/userns: associate user_struct with the user_namespace (Andrey Ryabinin) [PSBM-60181]
  - ve: allow user ns in chroot (Konstantin Khlebnikov)
  - ve: Virtualize sysinfo (Kirill Tkhai)
  - ve: Replace 0 ppid with 1 (workaround for bad utils) (Kirill Tkhai)
  - ve: Customize VE uptime (Kirill Tkhai)
  - ve: Use ve_relative_clock in times() syscall and /proc/[pid]/stat (Kirill Tkhai)
  - ve: Prohibit module load and usermode_helper from inside CT (Kirill Tkhai)
  - ve: Add virtinfo subsys (Kirill Tkhai) [PSBM-20104]
  - ve: Virtualize devpts superblock (Kirill Tkhai)
  - ve: Virtualize /proc/cmdline (Kirill Tkhai)
  - ve: Virtualize /proc/swaps to watch from inside CT (Kirill Tkhai)
  - ve: Implement per ve randomize_va_space (Kirill Tkhai)
  - ve: Use ve_printk() for often kernel messages about user actions (Kirill Tkhai)
  - ve/ppc: wire OpenVZ-specific syscalls (Kir Kolyshkin)
  - ve: Add ve syscalls numbers (Kirill Tkhai)
  - ve: Prohibit containers add random entropy (Kirill Tkhai)
  - ve/sysinfo: don't clean uptime, procs and loads in containers (Pavel Tikhomirov) [PSBM-62094]
  - ve: Add VZVERSION suffix to kernel release (Kirill Tkhai)
  - Kconfig: disable SELinux (Konstantin Khorenko)
  - ms/cgroup: switch to new percpu_ref API (Vladimir Davydov)
  - ms/cgroup: use percpu refcnt for cgroup_subsys_states (Vladimir Davydov) [PSBM-34174]
  - ms/cgroup: remove now unused css_depth() (Tejun Heo)
  - ms/cgroup: split cgroup destruction into two steps (Vladimir Davydov) [PSBM-34174]
  - ms/cgroup: reorder the operations in cgroup_destroy_locked() (Vladimir Davydov) [PSBM-34174]
  - cgroup: initial patch (Konstantin Khorenko) [PSBM-17927 PSBM-17927 PSBM-16529 PSBM-34035 PSBM-34035]
  - Revert: rh/kmod: use system_unbound_wq instead of khelper (Konstantin Khorenko) [PSBM-61660]
  - vzdev: initial patch (Konstantin Khorenko)
  - vzwdog: initial patch (Konstantin Khorenko)
  - ve/device_cgroup: kill ACC_QUOTA permission (Konstantin Khorenko) [PSBM-48482]
  - ve/device_cgroup: allow to change device mount permission via cgroup (Andrey Ryabinin) [PSBM-48431]
  - ve/device_cgroup: fake allowing all devices for docker inside VZCT (Pavel Tikhomirov) [PSBM-34529 PSBM-38691]
  - capabilities: correct descriptions (Konstantin Khorenko)
  - ve/devcgroup/cred: add ve_capable to check capabilities relative to the current VE (v2) (Konstantin Khorenko) [PSBM-39077]
  - devcgroup: initial patch (Konstantin Khorenko) [PSBM-21979 PSBM-33555]
  - headers: inclusion (Konstantin Khorenko)
  - Initial patch commit + compilation fixes: commit messages history (Konstantin Khorenko) [PSBM-33584 PSBM-17651 PSBM-17886 PSBM-17909 PSBM-17918 PSBM-17915 PSBM-17917 PSBM-17914 PSBM-17902 PSBM-17924 PSBM-17926 PSBM-17924 PSBM-17918 PSBM-17930 PSBM-17931 PSBM-17945 PSBM-17960 PSBM-17971 PSBM-18875 PSBM-18876 PSBM-18877 PSBM-17908 PSBM-18878 PSBM-18879 PSBM-18056 PSBM-18882 PSBM-18884 PSBM-18899 PSBM-31125 PSBM-12955 PSBM-20089 PSBM-20089 PSBM-12523 PSBM-41530 OVZ-6600 OVZ-5192 PSBM-32912 PSBM-54816 PSBM-54819 PSBM-54928 PSBM-54928 PSBM-18113 PSBM-33760 PSBM-33755 PSBM-33926 PSBM-39077 PSBM-18531 PSBM-34089 PSBM-42087 PSBM-18113 PSBM-20541 PSBM-33642 PSBM-33841 PSBM-47061 PSBM-17904 PSBM-33650 PSBM-39077 PSBM-18885 PSBM-18885 PSBM-34494 PSBM-20810 PSBM-51255 OVZ-6409 PSBM-39167 PSBM-20100 PSBM-20100 PSBM-33239 PSBM-34777 PSBM-41804 PSBM-52390 PSBM-54408 PSBM-20663 PSBM-22149 PSBM-27695 PSBM-33849 PSBM-33849 PSBM-33849 PSBM-34066 PSBM-34007 PSBM-32284 PSBM-42313 PSBM-55365 PSBM-71414]
  - Kconfig: Kconfig.openvz includes in arch (Konstantin Khorenko)
  - Kconfig: introduce kernel/Kconfig.openvz (Konstantin Khorenko)
  - rh/locks: check for fl->fl_owner != filp in show_fd_locks (Stanislav Kinsburskiy) [PSBM-48727]
  - ms/locks: remove conditional lock release in middle of flock_lock_file (Jeff Layton) [PSBM-45393]
  - x86/SYSCALL: remove sys32 vm86 warning (Dmitry Guryanov)
  - ms/kcmp: fix standard comparison bug (Rasmus Villemoes)
  - ms/module: remove rmmod --wait option. (Rusty Russell) [PSBM-27580 PSBM-27580]
  - ms/idr: print a stack dump after ida_remove warning (Vasily Averin)
  - ms/idr: fix overflow bug during maximum ID calculation at maximum height (Lai Jiangshan)
  - MS/KBD: add file kbd_bind in sysfs, which allow unbind keyboard from tty (v2) (Andrey Vagin)
  - MS/DEVICE: input_mutex isn't static now (Andrey Vagin)
  - ms/cbq: now_rt removal (Vasily Averin)
  - ms/cbq: incorrectly low bandwidth setting blocks limited traffic (Vasily Averin)
  - MS/NET/IPV6: remove duplicate neigh_ifdown (Vladimir Davydov) [PSBM-13449]
  - MS/MM/SLAB: show slab_info core (Dmitry Guryanov)
  - MS/IDLE: add boot param to forcibly enable intel auto demotion (Vladimir Davydov) [PSBM-11477]
  - ms/tty: Fix potential use after free in release_one_tty (Cyrill Gorcunov)
  - ms/tty/ppc: define TIOSAK (fix tty_ioctl() compilation) (Kir Kolyshkin)
  - MS/TTY: TIOSAK Secure Attention Key ioctl (Konstantin Khlebnikov) [PSBM-11881]
  - MS/FS/PROC: Drop the MS_RDONLY bit in proc_get_sb() (Stanislav Kinsbursky)
  - KBUILD: build should fail on modpost errors for external modules (Konstantin Khlebnikov)


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-693.17.1.vz7.43.3]
changelog:
  * Mon Feb 05 2018 Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-693.17.1.vz7.43.2]
  - ms/dm crypt: replace RCU read-side section with rwsem (Konstantin Khorenko)


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-693.17.1.vz7.43.4]
changelog:
  - rh/ext4: release leaked posix acl in ext4_xattr_set_acl (Stanislav Kinsburskiy) [PSBM-81384]
  - rh/ext4: release leaked posix acl in ext4_acl_chmod (Stanislav Kinsburskiy) [PSBM-81384]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-693.17.1.vz7.43.5]
changelog:
  - ms/bnx2x: disable GSO where gso_size is too big for hardware (Daniel Axtens) [PSBM-81501]
  - ms/net: create skb_gso_validate_mac_len() (Daniel Axtens) [PSBM-81501]
  - ms/x86/kvm/vmx: do not use vm-exit instruction length for fast MMIO when running nested (Vitaly Kuznetsov) [PSBM-81462]
  - fs/pipe: Use kvmalloc for pipe buffers (Cyrill Gorcunov) [PSBM-69201]
  - ms/net: don't wait for order-3 page allocation (Shaohua Li) [PSBM-81488]
  - mm/memcontrol: Fix memcg swpin/swpout stats accounting (Andrey Ryabinin)
  - configs.OpenVZ: add minimal kernel config for a KVM VM (Konstantin Khorenko)
  - mm: fix memory cgroup leak in case mem cgroup gets offline before kmem counter is 0 (Konstantin Khorenko) [PSBM-81264]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-693.17.1.vz7.43.6]
changelog:
  - ploop: give aligned regions into fuse fallocate() (Andrei Vagin)
  - ploop: allow to set discard granularity and alignment attributes (Andrei Vagin)
  - ploop: handle discard requests via fallocate (Andrei Vagin)
  - fuse: add a new async operation to unmap regions (Andrei Vagin)
  - ms/target/sbc: Add LBPRZ attribute + control CDB emulation (Jamie Pocas)
  - ploop: don't forget to dec preq->io_count on a error path (Andrei Vagin)
  - configs.OpenVZ: more options to disable (Konstantin Khorenko)
  - ms/inotify: Extend ioctl to allow to request id of new watch descriptor (Kirill Tkhai) [PSBM-81411]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-693.17.1.vz7.43.7]
changelog:
  - ve/page_alloc, kstat: account allocation latencies per-task (Andrey Ryabinin) [PSBM-81395]
  - ve/vzstat.h: move some kstat definitions into new header (Andrey Ryabinin) [PSBM-81395]
  - ve/kstat/alloc_lat: Don't separate GFP_HIGHMEM and !GFP_HIGHMEM allocation latencies (Andrey Ryabinin) [PSBM-81395]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-693.17.1.vz7.43.9]
changelog:
  * Mon Feb 19 2018 Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-693.17.1.vz7.43.8]
  - ve/fs/proc: Make per-thread and per-process allocation latencies. (Andrey Ryabinin) [PSBM-81395]
  - ve/kstat/alloc_lat: Initialize alloc_lat to zero at start (Andrey Ryabinin) [PSBM-81395]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-693.17.1.vz7.43.10]
changelog:
  - mm/memcg: fix overcharging in cgroup try_charge() for !cache_charge (Andrey Ryabinin) [PSBM-81750]
  - mm/memcg: Don't charge anon pages as cache (Andrey Ryabinin) [PSBM-81750]


author: Denis Silakov <dsilakov@odin.com> 1.2
changelog:
  - Use git+https to build from Git
   - Added empty changelog to make vzbuild happy
   - Let's build from Git


author: Denis Silakov <dsilakov@odin.com> 1.3
changelog:
  - Use 'current_version' macro
   - Use git+https to build from Git
   - Added empty changelog to make vzbuild happy
   - Let's build from Git


author: Denis Silakov <dsilakov@odin.com> 1.5
changelog:
  * Mon Nov 30 2015 Denis Silakov <dsilakov@odin.com> 1.4
   - Use 'current_version' macro
   - Use git+https to build from Git
   - Added empty changelog to make vzbuild happy
   - Let's build from Git


author: Denis Silakov <dsilakov@odin.com> 1.8
changelog:
  - Fix requirements
   - Fix requirement on submodule
   - bump release (Alexandr Khryukin <akhryukin@parallels.com>)


author: Denis Silakov <dsilakov@odin.com> 1.9
changelog:
  - Swich to grub2-mkconfig
   - Package systemd service
   - Fix requirements
   - Fix requirement on submodule
   - bump release (Alexandr Khryukin <akhryukin@parallels.com>)


author: Denis Silakov <dsilakov@odin.com> 1.10
changelog:
  - Fix overlay mount
   - Package systemd service
   - Fix requirements
   - Fix requirement on submodule
   - bump release (Alexandr Khryukin <akhryukin@parallels.com>)


author: Denis Silakov <dsilakov@odin.com> 1.11
changelog:
  - Disable systemd service for now, it is not well tested yet.
   - Package systemd service
   - Fix requirements
   - Fix requirement on submodule
   - bump release (Alexandr Khryukin <akhryukin@parallels.com>)


author: Denis Silakov <dsilakov@odin.com> 1.12
changelog:
  - Fix grub.cfg parsing
   - Disable systemd service for now, it is not well tested yet.
   - Package systemd service
   - Fix requirements
   - Fix requirement on submodule
   - bump release (Alexandr Khryukin <akhryukin@parallels.com>)


author: Denis Silakov <dsilakov@odin.com> 1.13
changelog:
  - Fix vzlinux status detection
   - Fix grub.cfg parsing
   - Package systemd service
   - Fix requirements
   - Fix requirement on submodule
   - bump release (Alexandr Khryukin <akhryukin@parallels.com>)


author: Denis Silakov <dsilakov@virtuozzo.com> 70.0.18
changelog:
  - Updated to a newer logo
   - Updated syslinux-splash.png just in case
   - Change license for new logos


author: Andrey Bondrov <abondrov@virtuozzo.com> - 1:7-1.30
changelog:
  - Check if wget exists in do-upgrade-vzlin-vz7 and do-upgrade-vzlin-openvz7
  - Use yum instead of rpm in do-upgrade-vzlin-vz7 and do-upgrade-vzlin-openvz7


author: Andrey Bondrov <abondrov@virtuozzo.com> - 7-4
changelog:
  - Define vz_name, vz_longname_low, vz_shortname_low macros
  - Change vz_longname from VirtuozzoLinux to Virtuozzo Linux


author: Denis Silakov <dsilakov@virtuozzo.com> 2.0.5
changelog:
  - Use /sbin/vz-get-hwid instead of vzlicview
   - Add simple get_hwid.c tool to avoid vzlicutils requirement


author: Denis Silakov <dsilakov@virtuozzo.com> 2.0.13
changelog:
  - Drop debug commet
   - Support encrypt/decrypt for new get_rk_url algotrithm
   - USe shifting instead of XORing, otherwise we get unprintable chars
   - Adjust decryption test


author: Denis Silakov <dsilakov@virtuozzo.com> 2.0.14
changelog:
  - We use /usr/sbin in Vz6
   - Drop debug commet
   - Support encrypt/decrypt for new get_rk_url algotrithm
   - USe shifting instead of XORing, otherwise we get unprintable chars


author: Denis Silakov <dsilakov@virtuozzo.com> 2.0.16
changelog:
  - Make get_key a VZSM class method
   - Fix URL pushed to repo file, mark repo file with rk_repo flag, PSBM-95716


author: Denis Silakov <dsilakov@virtuozzo.com> 2.0.19
changelog:
  - Fix shift issue in crypto algorithm - 0 and z were coded into the same symbol
   - Make repo data configurable
   - Improve tests


author: Denis Silakov <dsilakov@virtuozzo.com> 2.0.22
changelog:
  - Roughly implement support for multiple HWIDs
   - Support RK on Vz7 activation using VZ7 key, PSBM-97586


author: Denis Silakov <dsilakov@virtuozzo.com> 2.0.30
changelog:
  - After key parameter became optional and now if some argument is passed it is
  treated as org, PSBM-100991
   - Check for /proc/vz/hwid before executing /usr/sbin/vz-get-hwid (Andrey
  Ponomarenko <aponomarenko@virtuozzo.com>)


author: Denis Silakov <dsilakov@virtuozzo.com> 2.0.31
changelog:
  - More clear error messages for ELS/RK cases
   - After key parameter became optional and now if some argument is passed it is
  treated as org, PSBM-100991
   - Check for /proc/vz/hwid before executing /usr/sbin/vz-get-hwid (Andrey
  Ponomarenko <aponomarenko@virtuozzo.com>)


author: Richard W.M. Jones <rjones@redhat.com> - 5.13-2
changelog:
  - Enable /etc/watchdog.d directory for storing test binaries
    (RHBZ#657750, RHBZ#831190).
  - Missing BR systemd-units.
  - Update .gitignore.
  - Drop Group line, not required by modern RPM.


author: Ales Ledvinka <aledvink@redhat.com> - 5.13-9
changelog:
  - SELinux: Add /usr/libexec/watchdog/scripts/ for test-bin and repair-bin to inherit from.
  - systemd: service with network available dependency
  - systemd: correct cgroup for realtime settings
  - Document SELinux and systemd.


author: Josef Ridky <jridky@redhat.com> - 5.13-12
changelog:
  - Resolves: #1092523 - add PIE and RELRO check 
  - Resolves: #1133135 - add ipmi.service dependency to watchdog.service file
  - Resolves: #1259816 - remove deprecated stanza in unit files


author: Peter Lemenkov <lemenkov@gmail.com> 4.60.1-1
changelog:
  - Version 4.60.1 (bugfix release)
  - Added man-pages
  - The only patch was rebased
  - Small cosmetic spec-file cleanups


author: TI_Eugene <ti.eugene@gmail.com> 0.20.0-4
changelog:
  - hicolor-icon-theme added as Requires
  - fixed source tarball name
  - post, postun and posttrans fixes
  - some unwanted files removed
  - generic man added


author: Tomas Popela <tpopela@redhat.com> - 2.4.9-2
changelog:
  - Compile with -fno-strict-aliasing
  - Resolves: rhbz#1174556
  - Update translations
  - Resolves: rhbz#1223643


author: Tomas Popela <tpopela@redhat.com> - 2.16.6-6
changelog:
  - Don't strip debug info from bundled icu libraries, otherwise there
    will be conflicts between webkitgtk4-debuginfo and icu-debuginfo packages
  - Resolves: rhbz#1486771


author: Tomas Popela <tpopela@redhat.com> - 2.20.4-1
changelog:
  - Update to 2.20.4
  - Resolves: rhbz#1576544
  - WebKitWebProcess crashes when a11y is active
  - Resolves: rhbz#1591638


author: Tomas Popela <tpopela@redhat.com> - 2.20.4-2
changelog:
  - webkitgtk4: Crash on Google login page when a11y is active
  - Resolves: rhbz#1503624
  - Revert patch causing rendering glitches


author: Tomas Popela <tpopela@redhat.com> - 2.20.5-1
changelog:
  - Update to 2.20.5 - technically it was not necessary as the only difference
    between 2.20.4 and .5 was the revert of one change, that we already reverted
    while building 2.20.4. But it's better to stay with upstream.
  - Update the labels patch with the version that was pushed upstream.
  - Resolves: rhbz#1576544


author: Tomas Hozza <thozza@redhat.com> - 1.14-12
changelog:
  - Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
  - Run internal test suite during build (#1295846)
  - Fix -nv being documented as synonym for two options (#1147572)


author: Tomas Hozza <thozza@redhat.com> - 1.14-15
changelog:
  - Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
  - Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)


author: Peter Hatina <phatina@redhat.com> - 1.10.14-7
changelog:
  - Rebase some tvbuff API from upstream to 1.10.14
  - Fixes crash when tvb_length_remaining() is used
  - Related: CVE-2015-6244


author: Martin Sehnoutka <msehnout@redhat.com> - 1.10.14-12
changelog:
  - Fix wrong snaplen in man pages and help
  - Make the capture buffer bigger to prevent dropping packages


author: Petr Pisar <ppisar@redhat.com> - 3.0-18
changelog:
  - wnb requires a font to start
  - Move Tk browser to sub-package wordnet-browser
  - Move alternative manual pages to wordnet-doc package
  - Do not package INSTALL instructions and correct URL
  - Modernize spec file


author: Karel Zak <kzak@redhat.com> - 3.0-13
changelog:
  - fix #428582 - linux.words contains misspelled word "flourescent"
  - fix #440146 - misspelled word in /usr/share/dict/words (architecure)


author: Karel Zak <kzak@redhat.com> - 3.0-14
changelog:
  - fix #457309 - contains both 'unnecessary' and 'unneccesary'
  - fix #470921 -"Barack" and "Obama" are not in /usr/share/dict/words
  - update spec file (#226542 - Merge Review)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-5
changelog:
  - macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
  - nl80211: Fix race condition in detecting MAC change (rh #1447073)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-7
changelog:
  - avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
    CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
    CVE-2017-13087, CVE-2017-13088)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-10
changelog:
  - Fix memory leak when macsec MKA/PSK is used (rh #1500442)
  - Fix authentication failure when the MAC is updated externally (rh #1490885)
  - Let the kernel discard EAPOL if packet type is PACKET_OTHERHOST (rh #1434434)
  - Don't restart wpa_supplicant.service on package upgrade (rh #1505404)
  - Don't own a directory in /run/ (rh #1507919)


author: Peng Wu <pwu@redhat.com> - 0.2.0-0.3.beta
changelog:
  - get rid of binding="same", fixes [rhbz#578050] (New: lang-specific overrides rule doesn't work as expected).


author: Peng Wu <pwu@redhat.com> - 0.2.0-0.4.beta
changelog:
  - Improves Simplified Chinese and Traditional Chinese fonts.
    In order to keep the WenQuanYi Zen Hei as default Simplified Chinese font,
    the fontconfig file of this WenQuanYi Micro Hei font is removed.


author: Roland Grunberg <rgrunber@redhat.com> 0:0.5.2-1
changelog:
  - Update to 0.5.2.
  - Remove xmldb-api due to deprecation.
  - Fix ws-jaxme-ant-scripts.patch to apply cleanly.


author: Gerard Ryan <galileo@fedoraproject.org> - 0:1.6.2-5
changelog:
  - Fix file encoding for wsdl4j-MANIFEST.MF
  - Update Bundle-Version in OSGi manifest
  - Fix installation of jars in specfile
  - Clean up specfile - remove javadoc dir version; remove clean section


author: Ondrej Vasik <ovasik@redhat.com> - 1.61-2
changelog:
  - Merge review cleanup (#226546), comment patches, license
    to LGPLv2+, specify names in files section...


author: Parag Nemade <paragn AT fedoraproject DOT org> - 3.3.12ga11-5
changelog:
  - Remove vendor tag from desktop file as per https://fedorahosted.org/fesco/ticket/1077
  - Cleanup spec as per recently changed packaging guidelines


author: Samantha N. Bueno <sbueno[at]redhat.com> - 3.3.12ga12-1
changelog:
  - updated to 3.3.12ga12
  - fixes CVE-2012-5662 (#889373, #924228)
  - add support for aarch64 to build system (#926737)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.7.1-15
changelog:
  - Add NOTICE.txt file to subpackages
  - Remove bundled sources of other packages used to build javadocs


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:2.7.1-17
changelog:
  - Remove classpaths from manifests, resolves: rhbz#575635
  - Remove jlex from classpath
  - Fix source URL to archive.apache.org
  - Don't mix spaces and tabs in spec file
  - Fix end-of-line encoding of some documentation files


author: Thomas Moschny <thomas.moschny@gmx.de> - 0.3.8-2
changelog:
  - Specfile cleanups as suggested in the review.
  - Remove unneeded BR on pkgconfig.
  - Remove unneeded chrpath call.


author: Debarshi Ray <rishi@fedoraproject.org> - 1:2.8.8-19
changelog:
  - Use XDG_CONFIG_HOME instead of home for config files
    (http://sourceforge.net/p/xchat/bugs/1506/)
  - Use name and generic name correctly in desktop file
    (http://sourceforge.net/p/xchat/bugs/1397/)


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.7-2
changelog:
  - really remove the gcc-warning patch & remove old Makefile from git
  - s/Url/URL/, for both fixes thanks to pshiffer


author: Kalev Lember <kalevlember@gmail.com> - 0.9-1
changelog:
  - Update to 0.9
  - Adjust BuildRequires to build with gtk3
  - Drop lxde patch, merged upstream
  - Validate the desktop file


author: Rex Dieter <rdieter@fedoraproject.org> 1.1.0-0.10.20110714git
changelog:
  - fix gnome-screensaver detection bogosity (#702540,#736159)
  - xdg-open: x-www-browser: command not found (#755553)
  - drop htmlview hackage


author: Kalev Lember <kalev@smartlink.ee> - 3.1.1-1
changelog:
  - Update to 3.1.1
  - Dropped CVE-2009-1885 patch.
  - Use dos2unix -k instead of unrecognized option -U
  - Removed the multilib conflict workaround as Xerces_autoconf_config.hpp
    no longer contains the conflicting XERCES_SIZEOF_LONG define.


author: Eric Sandeen <sandeen@redhat.com> 3.1.3-2
changelog:
  - Preserve xattrs on multi-part stream restores (#1034014)
  - Prevent segfault on multi-part stream restores (#1034015)


author: Eric Sandeen <sandeen@redhat.com> 3.1.7-1
changelog:
  - Rebase to build against current RHEL7 xfsprogs headers
  - Fix race condition between lseek() and read()/write() (#1086532)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-13
changelog:
  - mkfs.xfs: clarify ftype defaults in manpage (#1488124)
  - mkfs.xfs: allow specification of 0 data stripe width (#1444166)
  - mkfs.xfs: Don't stagger AG for a single disk (#1492552)
  - xfs_db: xfs_db-update-buffer-size-when-new-type-is-set (#1458670)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-16
changelog:
  - xfs_db: fix the source command when passed as -c option (#1510279)
  - xfs_metadump: allow much larger extent counts (#1502927)
  - xfs_db: fix crash when field list selector has garbage (#1532271)
  - mkfs.xfs, others: don't stat non-block devices on startup (#1573974)
  - Update project URLs throughout the pkg, code and docs (#1550798)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-20
changelog:
  - xfs_quota: fix errors if project flag is not set on regular files (#1663502)
  - xfs_repair: initialize non-leaf finobt blocks with correct magic (#1670154)


author: Ismael Olea <ismael@olea.org> 20051222-1
changelog:
  - updating to last version of sample-xsl-xhtml2fo.zip
  - fixing spec for contributing to Fedora and rpmlinting with 0.82


author: Jan Synáček <jsynacek@redhat.com> - 2:2.3.15-13
changelog:
  - modify the xinetd man page to make it more clear on what happens to services on xinetd reload (#1147538)


author: Peter Hutterer <peter.hutterer@redhat.com> 2.24-1
changelog:
  - xkeyboard-config 2.24 (#1564615)
  - Revert the high-keycode patches to avoid conflicts with xkbcomp < 1.4


author: Mat Booth <fedora@matbooth.co.uk> - 1.0-0.5.b3_xalan2.svn313293
changelog:
  - Link to local java API docs properly and fix requires on javadoc package.
  - Build with source and target levels of 1.5 so we don't have to require 1.6.


author: Alexander Kurtakov <akurtako@redhat.com> 1:3.1.3-5
changelog:
  - Remove javax.xml.bind from osgi imports - it's part of the JVM now.
  - Drop the ws-jaxme dependency for the same reason.


author: Simo Sorce <simo@redhat.com> - 1.2.20-1
changelog:
  - New upstrema version with memleaks, crl checks and other fixes
  - enable make check during build
  - drop ecdsa patch as it has been included upstream


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.24-1
changelog:
  - new release 0.0.24, basic support for docbook->epub
    conversion, use backend extensions by default
    (--noextensions) to disable it


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 1.5-1
changelog:
  - Address review commentary https://bugzilla.redhat.com/show_bug.cgi?id=226569
  - Update to 1.5, solving license issue.  This adds a few new files and requires
    a pkgconfig dependency.
  - Add dependency on xml-common to fix unowned directory issue. 
  - Remove some bits (buildroot tag and cleaning) no longer required in Fedora.


author: Peter Hutterer <peter.hutterer@redhat.com> 7.7-3
changelog:
  - luit 1.1.1
  - oclock 1.0.3
  - xclock 1.0.6
  - xbiff 1.0.3
  - xpr 1.0.4
  - xcursorgen 1.0.5
  - xclipboard 1.1.2
  - xfontsel 1.0.4
  - xfd 1.1.1
  - xlogo 1.0.4
  - xvidtune 1.0.3


author: Ben Crocker <bcrocker@redhat.com> - 7.7-7
changelog:
  - Resolves: #1401684
  - (Rebase for RHEL 7.4)
  - Update the following tarballs:
  - x11perf	1.5.4	=>	1.6.0
  - xclipboard	1.1.2	=>	1.1.3
  - xclock	1.0.6	=>	1.0.7
  - xconsole	1.0.5	=>	1.0.6
  - xcursorgen	1.0.5	=>	1.0.6
  - xfd		1.1.1	=>	1.1.2
  - xfontsel	1.0.4	=>	1.0.5
  - xload		1.1.1	=>	1.1.2
  - xmag		1.0.5	=>	1.0.6
  - xwd		1.0.4	=>	1.0.6
  - xwud		1.0.3	=>	1.0.4


author: Hans de Goede <hdegoede@redhat.com> 7.7.1-1
changelog:
  - Update to latest git, this is the equivalent of 7.7.1 + fixes for use
    with xserver-1.19 (rhbz#1325613)
  - Rebuild against xserver-1.19


author: Hans de Goede <hdegoede@redhat.com> - 2.99.917-22.20160119
changelog:
  - xorg-x11-drv-intel hardly has any accel on skylake and newer, so make
    Xorg fallback to modesetting + glamor by returning FALSE from probe
  - Using glamor also gives us proper Xvideo support on skylake (rhbz#1305369)


author: Hans de Goede <hdegoede@redhat.com> - 2.99.917-23.20160512
changelog:
  - Update to 20160512 snapshot
  - This fixes laptops with switchable graphics hanging after a dpms off of
    the lcd screen (rhbz#1334581)
  - Fix fd-leak when falling back to mode-setting on skylake, this fixes
    Xorg exiting with a "drmSetMaster failed" error when not using server
    managed fds (e.g. using a different login manager then gdm)
  - Fix duplicate binaries in -devel / intel-gpu-tools subpackages (rhbz#1323641)


author: Hans de Goede <hdegoede@redhat.com> - 2.99.917-24.20160712
changelog:
  - Git snapshot du jour, bringing in a bunch of bugfixes
  - Fix dpi issues on Surface 3 (also needs some kernel fixes)
  - Hopefully fix rhbz#1354124


author: Peter Hutterer <peter.hutterer@redhat.com> 0.22.0-3
changelog:
  - Provide xorg-x11-drv-synaptics. The actual content is now provided by
    xorg-x11-drv-synaptics-legacy (#1394836). For details, see
    https://fedoraproject.org/wiki/Changes/RetireSynapticsDriver


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-2
changelog:
  - Ignore LED updates for disabled devices, avoids a null-pointer dereference
    when an AccessX timeout is set


author: Peter Hutterer <peter.hutterer@redhat.com> 0.25.0-2
changelog:
  - Don't provide xorg-x11-drv-synaptics (#1413811)
  - Don't reassign libinput to wacom touchpads, that's left to the user
  - Don't assign to wacom tablets, tablets behave differently on RHEL7.4


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
  - Fix the crtc not being turned off, causing the dgpu to not suspend,
    after using a dgpu attached output


author: Lyude Paul <lyude@redhat.com> 1.0.13-2
changelog:
  - nouveau-1.0.13-fix-pageflipping-with-atomic.patch:
    Fix broken pageflipping with RHEL 7.4 DRM backport kernel (#1428214)


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.1.1-16
changelog:
  - Fix glitches when restarting X server
    Resolves: rhbz#1102175
  - Fix restarting X server
    Resolves: rhbz#1185807


author: Christophe Fergeau <cfergeau@redhat.com> 0.1.1-17
changelog:
  - Fix freeze in xfig when entering space character
    Resolves: rhbz#1221909
  - Fix memory leak
    Resolves: rhbz#1222038
  - Fix cursor leak causing a crash when running RHEL6 anaconda in a VM
    Resolves: rhbz#1222040


author: Victor Toso <victortoso@redhat.com> - 0.1.5-5
changelog:
  - Fix crash due uninitialized pointer
    Resolves: rhbz#1690453
  - Call LeaveVt on shutdown to avoid racy situations
    Resolves: rhbz#1640918


author: Peter Hutterer <peter.hutterer@redhat.com> 0.34.2-2
changelog:
  - Add Pressure2K option for backwards-compatibility with applications that
    hardcode the previous pressure range (#1457024)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.34.2-3
changelog:
  - Fix hang after unplugging a device (#1496650)
  - Correct device flags for some Cintiqs and Intuos pros (#1496659)


author: Peter Hutterer <peter.hutterer@redhat.com> 1:7.5-14
changelog:
  - mkfontscale 1.1.0
  - mkfontdir 1.0.7
  - bdftopcf 1.0.4
  - Document mkfontscale's -u/-U in the man page (#948841)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.2-11
changelog:
  - Require xorg-x11-font-utils >= 7.2-11 for font-utils 1.1.0
  - Fix bashism in spec file (&>)
  - Remove perl hack for DEFAULT_FONTS_DIR, fixed upstream 
  - Remove perl and autoconf requirement.
  - Create %ghost files {misc|705dpi|...}/fonts.scale.
  - Drop fontdir alias patches
  - Update a few fonts (well, all of them)
      - encodings-1.0.3
      - font-adobe-100dpi-1.0.1
      - font-adobe-75dpi-1.0.1
      - font-adobe-utopia-100dpi-1.0.2
      - font-adobe-utopia-75dpi-1.0.2
      - font-adobe-utopia-type1-1.0.2
      - font-alias-1.0.2
      - font-arabic-misc-1.0.1
      - font-bh-100dpi-1.0.1
      - font-bh-75dpi-1.0.1
      - font-bh-lucidatypewriter-100dpi-1.0.1
      - font-bh-lucidatypewriter-75dpi-1.0.1
      - font-bitstream-100dpi-1.0.1
      - font-bitstream-75dpi-1.0.1
      - font-bitstream-type1-1.0.1
      - font-cronyx-cyrillic-1.0.1
      - font-cursor-misc-1.0.1
      - font-daewoo-misc-1.0.1
      - font-dec-misc-1.0.1
      - font-isas-misc-1.0.1
      - font-jis-misc-1.0.1
      - font-micro-misc-1.0.1
      - font-misc-cyrillic-1.0.1
      - font-misc-ethiopic-1.0.1
      - font-misc-misc-1.1.0
      - font-mutt-misc-1.0.1
      - font-schumacher-misc-1.1.0
      - font-screen-cyrillic-1.0.2
      - font-sony-misc-1.0.1
      - font-sun-misc-1.0.1
      - font-winitzki-cyrillic-1.0.1
      - font-xfree86-type1-1.0.2


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-12
changelog:
  - Update sources for latest tarballs, some changes got lost before the commit
  - require gettext-devel for AM_ICONV (now required by xwininfo)


author: Adam Jackson <ajax@redhat.com> - 7.5-21
changelog:
  - Sync with F25: xdpyinfo 1.3.2, xev 1.2.2, xlsatoms 1.1.2, xlsclients 1.1.3,
    xlsfonts 1.0.5, xvinfo 1.1.3


author: Hans de Goede <hdegoede@redhat.com> - 1.3.2-14
changelog:
  - Xclients: only try to start gnome classic session if installed
  - Resolves: rhbz#1078948
  - startx: Only specify vt argument automatically when run from a vt
  - Resolves: rhbz#1083188


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-1
changelog:
  - xinit 1.3.4
  - Drop xorg-x11-xinit-1.3.2-systemd-logind.patch (included upstream in 1.3.4)
  - Add patches from Fedora to fix automatically finding a free display-number
  - Resolves: rhbz#1194894


author: Peter Hutterer <peter.hutterer@redhat.com> 7.7-4
changelog:
  - xkbcomp: Fix generation of XKB directory listing, missing reset on file
    handler caused parse errors and incomplete directory listings


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.1.3.8-4
changelog:
  - Fix pom filenames (Resolves rhbz#655829)
  - Changes according to new guidelines (versionless jars)
  - Fix few packaging problems (post/postun deps)


author: Kalev Lember <kalev@smartlink.ee> - 2.2.3-8
changelog:
  - Require fully versioned main package for -devel subpackage
  - Don't build static library
  - Removed library Requires which are automatically picked up by rpm
  - Removed spurious BR autoconf automake libtool
  - Build -doc subpackage as noarch
  - Install documentation with %doc macro
  - Use %{_prefix} instead of hardcoding /usr
  - Use parallel make
  - Various other spec file clean ups


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.2.4-2
changelog:
  - revive xqilla from deprecated
  - add man page from debian for xqilla command-line tool
  - do not install bundled xqc.h and Requires: xqc


author: Nils Philippsen <nils@redhat.com> - 0.998-21
changelog:
  - don't dereference NULL preview objects when quitting (#963696)
  - fix vendor tag logic in a prettier way


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.12.3-1
changelog:
  - update to 0.12.3
  - drop upstreamed immodule patch
  - rewrite Net/ThemeName handling: set it based on .gtkrc-2.0-kde4 (kcm-gtk)


author: Pavel Raiskup <praiskup@redhat.com> - 5.1.2-5alpha
changelog:
  - fix manual page inconsistencies with help output (private #948533)
  - enable/fix the 'xzgrep -h' (private #850898)


author: Mikolaj Izdebski <mizdebsk@redhat.com> 1.0-2
changelog:
  - Fix issues found during package review
  - Include missing COPYING files.
  - Add missing RPM group.
  - Comment on touching package-list.


author: Daniel P. Berrange <berrange@redhat.com> - 2.0.4-1
changelog:
  - Update to 2.0.4 release (rhbz #845777)
  - Fix License tag to reflect change in 2.0.0 series from BSD to ISC


author: Honza Horak <hhorak@redhat.com> - 3:1.37.1-5
changelog:
  - Remove SysV init conversion and systemd macros compatible code
  - Require systemd instead systemd-units
  - Remove systemd-sysv


author: Petr Kubat <pkubat@redhat.com> - 3:1.37.1-8
changelog:
  - Do not restart ypbind when domain is unchanged (#1301708)
  - Load ypbind.service before nss-user-lookup.target (#1217435)


author: Honza Horak <hhorak@redhat.com> - 2.31-4
changelog:
  - Remove systemd-units and systemd-sysv requirements
  - Clean-up SysV init conversion code
  - Clean-up systemd preset macros compatibility code
  - Remove fedora-releated stuff for maps upgrading


author: Matej Mužila <mmuzila@redhat.com> - 2.31-9
changelog:
  - Do not update NIS map when master's version is older
  - Open correct _temporary_ db with tokyocabinet
  - Resolves #1305137, #1331882


author: CentOS Sources <bugs@centos.org> - 3.4.3-158.el7.centos
changelog:
  - CentOS yum config
  -  use the CentOS bug tracker url
  -  retain installonly limit of 5
  -  ensure distrover is always from centos-release
  - Make yum require yum-plugin-fastestmirror


author: Michal Domonkos <mdomonko@redhat.com> - 3.4.3-159
changelog:
  - Retry on gpgkey timeout from MirrorManager
  - Resolves: bug#1520454
  - docs: baseurl: clarify multiple URLs
  - Resolves: bug#1509831
  - updateinfo: preload pkgSack
  - Resolves: bug#1528608
  - update(): honor multilib_policy for obsoletes
  - Resolves: bug#1477574
  - Print a disk usage summary on "yum clean all" and clarify docs
  - Resolves: bug#1481220
  - depsolve: filter out conflicting provider
  - Resolves: bug#1480065
  - Change 'size' option to 'maxsize' in yum.logrotate
  - Resolves: bug#1506890


author: Michal Domonkos <mdomonko@redhat.com> - 3.4.3-162
changelog:
  - downloadonly: unlink .tmp files on ctrl-c
  - Resolves: bug#1410234
  - Fix calculation of uncleaned disk space after "yum clean all"
  - Resolves: bug#1645173
  - Speed up depsolving in Anaconda for large transactions
  - Resolves: bug#1600383


author: Parag Nemade <pnemade AT redhat DOT com> - 0.4.2-5
changelog:
  - Resolves:rh#1192870 - Fix langlist when installed_langpacks not available
  - Resolves:rh#1263241 - Add parser for Release_Notes packages
  - Resolves:rh#1251388 - Add parser for libreoffice langpacks


author: Denis Silakov <dsilakov@virtuozzo.com> 0.5
changelog:
  - Skip kpatch-kmod installation on yum update (Konstantin Volkov
  <wolf@virtuozzo.com>)
   - Strip newline from stdout, also add/remove corresponding kpatch-kmod
  (Konstantin Volkov <wolf@virtuozzo.com>)
   - Correct error messages (Konstantin Volkov <wolf@virtuozzo.com>)
   - Implement automatic readykernel-patch installation/removal on yum operations,
  see #PSBM-54797 (Konstantin Volkov <wolf@virtuozzo.com>)


author: Denis Silakov <dsilakov@virtuozzo.com> 0.6
changelog:
  - Do additional check at close_hook for empty transaction case, see #PSBM-58032
  (Konstantin Volkov <wolf@virtuozzo.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 0.14
changelog:
  - Install readykernel-patch package when yum install is called (Evgenii
  Shatokhin <eugene.shatokhin@rosalab.ru>) (#PSBM-84191 #PSBM-84682)


author: Denis Silakov <dsilakov@virtuozzo.com> 0.16
changelog:
  - Send warnings to stdout, not stderr - VIP upgrade procedure parses yum stderr
  and gets confused...


author: Stephen Herr <sherr@redhat.com> 2.0.1-5
changelog:
  - Related: #1115516 - don't encode proxy url if not set (mzazrivec@redhat.com)
  - Related: #1115516 - encode proxy url when passing it to urlgrabber
    (mzazrivec@redhat.com)
  - Resolves: #1115516 - correctly initialize proxy settings for URLGrabber
    (mzazrivec@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.1-7
changelog:
  - Resolves: #1423007 - request failed: error reading the headers
    (CVE-2016-8743) (pstudeni@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 2.0.1-8
changelog:
  - Resolves: #1398406 - update repo options from rhnplugin.conf even in
    cacheonly mode (michael.mraka@redhat.com)
  - Resolves: #1391867 - pass retry_no_cache option to urlgrabber
    (michael.mraka@redhat.com)
  - Resolves: #1361185 - use yum's lock to prevent concurent yum & rhn_check
    actions (michael.mraka@redhat.com)


author: Andrey Bondrov <abondrov@virtuozzo.com> 0.2-1
changelog:
  - Use vzsubscribe python module and utility instead of bash script
  - Cron script moved to source tarball


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-43
changelog:
  - yumdownloader: fix crash on broken srpm metadata.
  - Resolves: bug#1458098
  - package-cleanup: don't remove required dupes.
  - Resolves: bug#1455318
  - fastestmirror: move the logic before MD retrieval.
  - Resolves: bug#1428210
  - yum-debug-dump: improve repo failure handling.
  - Resolves: bug#1445751


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-44
changelog:
  - Add pre-transaction-actions plugin.
  - Resolves: bug#1470647
  - yum-builddep: add --define option.
  - Resolves: bug#1437636
  - verifytree: handle no @core group gracefully.
  - Resolves: bug#1349433
  - verifytree: fix handling of missing comps.
  - Resolves: bug#1333353


author: Michal Domonkos <mdomonko@redhat.com> - 1.1.31-47
changelog:
  - repotrack: add --repofrompath option
  - Resolves: bug#1506205
  - reposync: check for .. in remote paths
  - Resolves: bug#1552328


author: Michal Domonkos <mdomonko@redhat.com> - 1.1.31-50
changelog:
  - yum-config-manager: additional fixes for --add-repo
  - Related: bug#1493489
  - repotrack: print error instead of traceback on unavailable --repofrompath
  - Related: bug#1506205
  - versionlock: note default value of show_hint in man page
  - Related: bug#1497351


author: Kamil Dudka <kdudka@redhat.com> - 5.0.2-30
changelog:
  - fix stack-based buffer overflow in utils.c:checkmailpath() (CVE-2018-1100)
  - fix stack-based buffer overflow in gen_matches_files() (CVE-2018-1083)
  - fix stack-based buffer overflow in exec.c:hashcmd() (CVE-2018-1071)
  - avoid crash when copying empty hash table (CVE-2018-7549)
  - fix buffer overrun in xsymlinks (CVE-2017-18206)
  - fix NULL dereference in cd (CVE-2017-18205)
  - fix buffer overflow when scanning very long path for symlinks (CVE-2014-10072)
  - fix buffer overflow for very long fds in >& fd syntax (CVE-2014-10071)


author: Jakub Martisko <jamartis@redhat.com> - 0.13.62-9
changelog:
  - Fix covscan warning
  - "Variable "file" going out of scope leaks the storage it points to."
    has been introduced by the original version of 0001-fix-CVE-2018-7725.patch
  - Related: 1558596


author: Jakub Martisko <jamartis@redhat.com> - 0.13.62-11
changelog:
  - Fix CVE-2018-6541
  - Part of the original patch has already been applied in the past (CVE-2018-7726),
    so the bug should not be reproducible in a way described in the github 
    issue, even without this commit. Applying the rest of the original patch anyway.
  - https://github.com/gdraheim/zziplib/issues/16
  - Related: CVE-2018-6541


author: Jakub Martisko <jamartis@redhat.com> - 0.13.62-12
changelog:
  - Fix a directory traversal bug
  - unzip-mem should now strip all "../" prefixes from the archived files
  - Resolves: CVE-2018-17828


