# changelog

author: Rafael Aquini <aquini@redhat.com> [3.10.0-320.el7]
changelog:
  - [md] raid1: Avoid raid1 resync getting stuck (Jes Sorensen) [1256954]
  - [fs] gfs2: fallocate: do not rely on file_update_time to mark the inode dirty (Andrew Price) [1264521]
  - [fs] gfs2: Update timestamps on fallocate (Andrew Price) [1264521]
  - [fs] gfs2: Update i_size properly on fallocate (Andrew Price) [1264521]
  - [fs] gfs2: Use inode_newsize_ok and get_write_access in fallocate (Andrew Price) [1264521]
  - [fs] revert "nfs: Make close(2) asynchronous when closing NFS O_DIRECT files" (Benjamin Coddington) [1263385]
  - [fs] gfs2: Average in only non-zero round-trip times for congestion stats (Robert S Peterson) [1162821]
  - [fs] lockd: fix rpcbind crash on lockd startup failure ("J. Bruce Fields") [1253782]
  - [fs] Failing to send a CLOSE if file is opened WRONLY and server reboots on a 4.x mount (Benjamin Coddington) [1263376]
  - [fs] fsnotify: fix oops in fsnotify_clear_marks_by_group_flags() (Lukas Czerner) [1247436]
  - [net] sctp: fix race on protocol/netns initialization (Marcelo Leitner) [1251807] {CVE-2015-5283}
  - [x86] Mark Broadwell-DE SoC Supported (Prarit Bhargava) [1131685]
  - [kernel] sched,numa: limit amount of virtual memory scanned in task_numa_work (Rik van Riel) [1261722]
  - [drivers] base: show nohz_full cpus in sysfs (Rik van Riel) [1212618]
  - [drivers] base: show isolated cpus in sysfs (Rik van Riel) [1212618]
  - [cpufreq] intel_pstate: add quirk to disable HWP on Skylake-S processors (Jerry Snitselaar) [1263069]
  - [drivers] core: Add symlink to device-tree from devices with an OF node (Gustavo Duarte) [1258828]
  - [powerpc] device: Add dev_of_node() accessor (Gustavo Duarte) [1258828]
  - [powerpc] iommu: Support "hybrid" iommu/direct DMA ops for coherent_mask < dma_mask (Gustavo Duarte) [1246880]
  - [powerpc] iommu: Cleanup setting of DMA base/offset (Gustavo Duarte) [1246880]
  - [powerpc] iommu: Remove dma_data union (Gustavo Duarte) [1246880]
  - [powerpc] kvm: book3s-hv: Fix handling of interrupted VCPUs (Thomas Huth) [1263568]
  - [powerpc] kvm: Take the kvm->srcu lock in kvmppc_h_logical_ci_load/store() (Thomas Huth) [1263577]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-321.el7]
changelog:
  - [netdrv] i40e/i40evf: check for stopped admin queue (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: refactor tx timeout logic (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: Bump i40e to 1.3.21 and i40evf to 1.3.13 (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: add get AQ result command to nvmupdate utility (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: add exec_aq command to nvmupdate utility (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: add wait states to NVM state machine (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: add GetStatus command for nvmupdate (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: add handling of writeback descriptor (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: save aq writeback for future inspection (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: Bump i40e to 1.3.9 and i40evf to 1.3.5 (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: Cache the CEE TLV status returned from firmware (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: add VIRTCHNL_VF_OFFLOAD flag (Stefan Assmann) [1267255]
  - [netdrv] i40evf: Remove PF specific register definitions from the VF (Stefan Assmann) [1267255]
  - [netdrv] i40evf: Use the correct defines to match the VF registers (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: Add capability to gather VEB per TC stats (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: Add TX/RX outer UDP checksum support for X722 (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: Add support for writeback on ITR feature for X722 (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: RSS changes for X722 (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: Update register.h file for X722 (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: Update FW API with X722 support (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: Add flags for X722 capabilities (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: Add device ids for X722 (Stefan Assmann) [1267255]
  - [netdrv] i40e: use BIT and BIT_ULL macros (Stefan Assmann) [1267255]
  - [netdrv] i40e: clean up error status messages (Stefan Assmann) [1267255]
  - [netdrv] i40evf: support virtual channel API version 1.1 (Stefan Assmann) [1267255]
  - [netdrv] i40evf: handle big resets (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: add macros for virtual channel API version and device capability (Stefan Assmann) [1267255]
  - [netdrv] i40e: add VF capabilities to virtual channel interface (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: Fix and refactor dynamic ITR code (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: Bump version to 1.3.6 for i40e and 1.3.2 for i40evf (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: Add support for pre-allocated pages for PD (Stefan Assmann) [1267255]
  - [netdrv] i40evf: add MAC address filter in open, not init (Stefan Assmann) [1267255]
  - [netdrv] i40evf: don't delete all the filters (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: Update the admin queue command header (Stefan Assmann) [1267255]
  - [netdrv] i40evf: Allow for an abundance of vectors (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: improve Tx performance with a small tweak (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: Update Flex-10 related device/function capabilities (Stefan Assmann) [1267255]
  - [netdrv] i40e/i40evf: Add stats to track FD ATR and SB dynamic enable state (Stefan Assmann) [1267255]
  - [netdrv] i40e: Fix for recursive RTNL lock during PROMISC change (Stefan Assmann) [1267254]
  - [netdrv] i40e: Fix RS bit update in Tx path and disable force WB workaround (Stefan Assmann) [1267254]
  - [netdrv] i40e: add GRE tunnel type to csum encoding (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: refactor tx timeout logic (Stefan Assmann) [1267254]
  - [netdrv] i40e: Move i40e_get_head into header file (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: check for stopped admin queue (Stefan Assmann) [1267254]
  - [netdrv] i40e: fix VLAN inside VXLAN (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Bump i40e to 1.3.21 and i40evf to 1.3.13 (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: add get AQ result command to nvmupdate utility (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: add exec_aq command to nvmupdate utility (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: add wait states to NVM state machine (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: add GetStatus command for nvmupdate (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: add handling of writeback descriptor (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: save aq writeback for future inspection (Stefan Assmann) [1267254]
  - [netdrv] i40e: rename variable to prevent clash of understanding (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Bump i40e to 1.3.9 and i40evf to 1.3.5 (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Cache the CEE TLV status returned from firmware (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: add VIRTCHNL_VF_OFFLOAD flag (Stefan Assmann) [1267254]
  - [netdrv] i40e: Remove redundant and unneeded messages (Stefan Assmann) [1267254]
  - [netdrv] i40e: correct spelling error (Stefan Assmann) [1267254]
  - [netdrv] i40e: Fix comment for ethtool diagnostic link test (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Add capability to gather VEB per TC stats (Stefan Assmann) [1267254]
  - [netdrv] i40e: Fix ethtool offline diagnostic with netqueues (Stefan Assmann) [1267254]
  - [netdrv] i40e: Fix legacy interrupt mode in the driver (Stefan Assmann) [1267254]
  - [netdrv] i40e: Move function calls to i40e_shutdown instead of i40e_suspend (Stefan Assmann) [1267254]
  - [netdrv] i40e: add RX to port CRC errors label (Stefan Assmann) [1267254]
  - [netdrv] i40e: don't degrade __le16 (Stefan Assmann) [1267254]
  - [netdrv] i40e: Add AQ commands for NVM Update for X722 (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Add ATR HW eviction support for X722 (Stefan Assmann) [1267254]
  - [netdrv] i40e: Add IWARP support for X722 (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Add TX/RX outer UDP checksum support for X722 (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Add support for writeback on ITR feature for X722 (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: RSS changes for X722 (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Update register.h file for X722 (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Update FW API with X722 support (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Add flags for X722 capabilities (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Add device ids for X722 (Stefan Assmann) [1267254]
  - [netdrv] i40e: use BIT and BIT_ULL macros (Stefan Assmann) [1267254]
  - [netdrv] i40e: provide correct API version to older VF drivers (Stefan Assmann) [1267254]
  - [netdrv] i40e: support virtual channel API 1.1 (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: add macros for virtual channel API version and device capability (Stefan Assmann) [1267254]
  - [netdrv] i40e: add VF capabilities to virtual channel interface (Stefan Assmann) [1267254]
  - [netdrv] i40e: clean up unneeded gotos (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Fix and refactor dynamic ITR code (Stefan Assmann) [1267254]
  - [netdrv] i40e: only report generic filters in get_ts_info (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Bump version to 1.3.6 for i40e and 1.3.2 for i40evf (Stefan Assmann) [1267254]
  - [netdrv] i40e: Refine an error message to avoid confusion (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Add support for pre-allocated pages for PD (Stefan Assmann) [1267254]
  - [netdrv] i40e: un-disable VF after reset (Stefan Assmann) [1267254]
  - [netdrv] i40e: do a proper reset when disabling a VF (Stefan Assmann) [1267254]
  - [netdrv] i40e: correctly program filters for VFs (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Update the admin queue command header (Stefan Assmann) [1267254]
  - [netdrv] i40e: Remove incorrect #ifdef's (Stefan Assmann) [1267254]
  - [netdrv] i40e: ignore duplicate port VLAN requests (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: improve Tx performance with a small tweak (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Update Flex-10 related device/function capabilities (Stefan Assmann) [1267254]
  - [netdrv] i40e/i40evf: Add stats to track FD ATR and SB dynamic enable state (Stefan Assmann) [1267254]
  - [netdrv] i40e: Implement ndo_features_check() (Stefan Assmann) [1267254]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-322.el7]
changelog:
  - [fs] nfs: fix v4.2 SEEK on files over 2 gigs ("J. Bruce Fields") [1262181]
  - [fs] nfs: verify open flags before allowing open (Benjamin Coddington) [1164431]
  - [fs] nfsv4.1: Fix pnfs_put_lseg races (Benjamin Coddington) [1263155]
  - [fs] nfsv4.1: pnfs_send_layoutreturn should use GFP_NOFS (Benjamin Coddington) [1263155]
  - [fs] nfsv4.1: Pin the inode and super block in asynchronous layoutreturns (Benjamin Coddington) [1263155]
  - [fs] nfsv4.1: Pin the inode and super block in asynchronous layoutcommit (Benjamin Coddington) [1263155]
  - [md] raid0: apply base queue limits *before* disk_stack_limits (Jes Sorensen) [1265182]
  - [net] revert "ipv6: Don't reduce hop limit for an interface" (Sabrina Dubroca) [1258324]
  - [x86] kvmclock: abolish PVCLOCK_COUNTS_FROM_ZERO (Radim Krcmar) [1263030]
  - [x86] revert "kvm: x86: zero kvmclock_offset when vcpu0 initializes kvmclock system MSR" (Radim Krcmar) [1263030]
  - [x86] kvm: svm: reset mmu on VCPU reset (Igor Mammedov) [1255217]
  - [edac] sb_edac: correctly fetch DIMM width on Ivy Bridge and Haswell (Aristeu Rozanski) [1112413]
  - [edac] sb_edac: look harder for DDRIO on Haswell systems (Aristeu Rozanski) [1112413]
  - [tools] perf-trace: Fix race condition at the end of started workloads (Jiri Olsa) [1250068]
  - [netdrv] cxgb4: Fix tx flit calculation (Sai Vemuri) [1266248]
  - [netdrv] igb: assume MSI-X interrupts during initialization (Stefan Assmann) [1263625]
  - [cpufreq] intel_pstate: disable Skylake processors (Prarit Bhargava) [1267343]
  - [infiniband] mlx4: Report checksum offload cap for RAW QP when query device (Doug Ledford) [1265795]
  - [infiniband] core: Add support of checksum capability reporting for RC and RAW (Doug Ledford) [1265795]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-323.el7]
changelog:
  - [scsi] report 'INQUIRY result too short' once (Vitaly Kuznetsov) [1254049]
  - [scsi] scsi_scan: don't dump trace when scsi_prep_async_scan() is called twice (Vitaly Kuznetsov) [1254049]
  - [fs] userfaultfd: add missing mmput() in error path (Andrea Arcangeli) [1263480]
  - [mm] check if section present during memory block registering (Jan Stancek) [1256723]
  - [mm] avoid setting up anonymous pages into file mapping (Larry Woodman) [1261582]
  - [mm] add p[te|md] revert "protnone helpers for use by NUMA balancing" (Thomas Huth) [1256718]
  - [powerpc] revert "mm: convert p[te|md]_numa users to p[te|md]_protnone_numa" (Thomas Huth) [1256718]
  - [powerpc] revert "mm: add paranoid warnings for unexpected DSISR_PROTFAULT" (Thomas Huth) [1256718]
  - [mm] revert "convert p[te|md]_mknonnuma and remaining page table manipulations" (Thomas Huth) [1256718]
  - [mm] revert "numa: Do not mark PTEs pte_numa when splitting huge pages" (Thomas Huth) [1256718]
  - [mm] revert "remove remaining references to NUMA hinting bits and helpers" (Thomas Huth) [1256718]
  - [mm] revert "numa: do not trap faults on the huge zero page" (Thomas Huth) [1256718]
  - [mm] revert "numa: add paranoid check around pte_protnone_numa" (Thomas Huth) [1256718]
  - [mm] revert "numa: avoid unnecessary TLB flushes when setting NUMA hinting entries" (Thomas Huth) [1256718]
  - [powerpc] mm: Change the swap encoding in pte (Thomas Huth) [1256718]
  - [x86] perf: Fix multi-segment problem of perf_event_intel_uncore (Jiri Olsa) [1257825]
  - [lib] partially revert "[lib] vsprintf: implement bitmap printing through '*pb[l]'" (Maurizio Lombardi) [1260118]
  - [drm] radeon: update no_64bit_msi flag for certain ASICs (Oded Gabbay) [1262429]
  - [drm] nouveau: fbcon: take runpm reference when userspace has an open fd (Ben Skeggs) [1176163]
  - [drm] qxl: validate monitors config modes (Dave Airlie) [1242847]
  - [drm] radeon: don't attempt WC mappings on powerpc (Dave Airlie) [1262429]
  - [drm] drm/qxl: recreate the primary surface when the bo is not primary (Dave Airlie) [1258301]
  - [drm] qxl: only report first monitor as connected if we have no state (Dave Airlie) [1258301]
  - [drm] dp_mst: drop cancel work sync in the mstb destroy path (Dave Airlie) [1251331]
  - [drm] dp_mst: split connector registration into two parts (Dave Airlie) [1251331]
  - [drm] dp_mst: update the link_address_sent before sending the link address (Dave Airlie) [1251331]
  - [drm] dp_mst: fixup handling hotplug on port removal (Dave Airlie) [1251331]
  - [drm] dp_mst: don't pass port into the path builder function (Dave Airlie) [1251331]
  - [drm] dp_mst: make functions that always return 0 return void (Dave Airlie) [1251331]
  - [kernel] uprobes: fix kABI broken by the exported return_instance (Oleg Nesterov) [1207373]
  - [kernel] uprobes: Make arch_uretprobe_is_alive(RP_CHECK_CALL) more clever (Oleg Nesterov) [1207373]
  - [kernel] uprobes: Add the "enum rp_check ctx" arg to arch_uretprobe_is_alive() (Oleg Nesterov) [1207373]
  - [kernel] uprobes: Change prepare_uretprobe() to (try to) flush the dead frames (Oleg Nesterov) [1207373]
  - [kernel] uprobes: Change handle_trampoline() to flush the frames invalidated by longjmp() (Oleg Nesterov) [1207373]
  - [kernel] uprobes: Reimplement arch_uretprobe_is_alive() (Oleg Nesterov) [1207373]
  - [kernel] uprobes: Export 'struct return_instance', introduce arch_uretprobe_is_alive() (Oleg Nesterov) [1207373]
  - [kernel] uprobes: Change handle_trampoline() to find the next chain beforehand (Oleg Nesterov) [1207373]
  - [kernel] uprobes: Change prepare_uretprobe() to use uprobe_warn() (Oleg Nesterov) [1207373]
  - [kernel] uprobes: Send SIGILL if handle_trampoline() fails (Oleg Nesterov) [1207373]
  - [kernel] uprobes: Introduce free_ret_instance() (Oleg Nesterov) [1207373]
  - [kernel] uprobes: Introduce get_uprobe() (Oleg Nesterov) [1207373]
  - [kernel] lockdep: Fix a race between /proc/lock_stat and module unload (Jerome Marchand) [1183891]
  - [kernel] lockdep: Fix the module unload key range freeing logic (Jerome Marchand) [1183891]
  - [kernel] module: Free lock-classes if parse_args failed (Jerome Marchand) [1183891]
  - [cpufreq] revert "intel_pstate: honor user space min_perf_pct override on resume" (Prarit Bhargava) [1269518]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-324.el7]
changelog:
  - [netdrv] i40e/i40evf: set AQ count after memory allocation (Neil Horman) [1267663]
  - [netdrv] i40e: fix offload of GRE tunnels (Neil Horman) [1267663]
  - [netdrv] i40evf: don't blow away MAC address (Neil Horman) [1267663]
  - [netdrv] i40e/i40evf: grab the AQ spinlocks before clearing registers (Neil Horman) [1267663]
  - [netdrv] i40e: Fix a memory leak in X722 rss config path (Neil Horman) [1267663]
  - [netdrv] i40evf: Use numa_mem_id() to better support memoryless node (Neil Horman) [1267663]
  - [netdrv] i40e: Use numa_mem_id() to better support memoryless node (Neil Horman) [1267663]
  - [netdrv] i40e: fix 32 bit build warnings (Neil Horman) [1267663]
  - [netdrv] i40e: fix kbuild warnings (Neil Horman) [1267663]
  - [netdrv] i40evf: tweak init timing (Neil Horman) [1267663]
  - [netdrv] i40e: warn on double free (Neil Horman) [1267663]
  - [netdrv] i40e: refactor interrupt enable (Neil Horman) [1267663]
  - [netdrv] i40e: Strip VEB stats if they are disabled in HW (Neil Horman) [1267663]
  - [netdrv] i40e/i40evf: add new device id 1588 (Neil Horman) [1267663]
  - [netdrv] i40e: Remove useless message (Neil Horman) [1267663]
  - [netdrv] i40e: limit debugfs io ops (Neil Horman) [1267663]
  - [netdrv] i40e: use QOS field consistently (Neil Horman) [1267663]
  - [netdrv] i40e: count drops in netstat interface (Neil Horman) [1267663]
  - [netdrv] i40e/i40evf: fix Tx hang workaround code (Neil Horman) [1267663]
  - [netdrv] i40e: fixup padding issue in get_cee_dcb_cfg_v1_resp (Neil Horman) [1267663]
  - [netdrv] i40e: Fix a port VLAN configuration bug (Neil Horman) [1267663]
  - [netdrv] i40e/i40evf: fix up type clash in i40e_aq_rc_to_posix conversion (Neil Horman) [1267663]
  - [netdrv] i40e: rtnl_lock called twice in i40e_pci_error_resume() (Neil Horman) [1267663]
  - [netdrv] i40evf: missing rtnl_unlock in i40evf_resume() (Neil Horman) [1267663]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-325.el7]
changelog:
  - [fs] nfsd: ensure that delegation stateid hash references are only put once ("J. Bruce Fields") [1233284]
  - [fs] nfsd: ensure that the ol stateid hash reference is only put once ("J. Bruce Fields") [1233284]
  - [fs] nfsv4: Fix a nograce recovery hang (Benjamin Coddington) [1264478]
  - [fs] vfs: Test for and handle paths that are unreachable from their mnt_root ("Eric W. Biederman") [1209371] {CVE-2015-2925}
  - [fs] dcache: Handle escaped paths in prepend_path ("Eric W. Biederman") [1209371] {CVE-2015-2925}
  - [fs] xfs: add an xfs_zero_eof() tracepoint (Brian Foster) [1260383]
  - [fs] xfs: always drain dio before extending aio write submission (Brian Foster) [1260383]
  - [md] dm-cache: fix NULL pointer when switching from cleaner policy (Mike Snitzer) [1269959]
  - [mm] Temporary fix for BUG_ON() triggered by THP vs. gup() race (David Gibson) [1268999]
  - [hid] usbhid: improve handling of Clear-Halt and reset (Don Zickus) [1260123]
  - [drm] qxl: fix framebuffer dirty rectangle tracking (Gerd Hoffmann) [1268293]
  - [s390] hmcdrv: fix interrupt registration (Hendrik Brueckner) [1262735]
  - [block] blk-mq: fix deadlock when reading cpu_list (Jeff Moyer) [1260615]
  - [block] blk-mq: avoid inserting requests before establishing new mapping (Jeff Moyer) [1260615]
  - [block] blk-mq: fix q->mq_usage_counter access race (Jeff Moyer) [1260615]
  - [block] blk-mq: Fix use after of free q->mq_map (Jeff Moyer) [1260615]
  - [block] blk-mq: fix sysfs registration/unregistration race (Jeff Moyer) [1260615]
  - [block] blk-mq: avoid setting hctx->tags->cpumask before allocation (Jeff Moyer) [1260615]
  - [netdrv] cxgb4: Enhance driver to update FW, when FW is too old (Sai Vemuri) [1077966]
  - [netdrv] cxgb4: Force uninitialized state if FW in adapter is unsupported (Sai Vemuri) [1077966]
  - [powerpc] revert "Use the POWER8 Micro Partition Prefetch Engine in KVM HV on POWER8" (Thomas Huth) [1269653]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-326.el7]
changelog:
  - [md] dm-cache: the CLEAN_SHUTDOWN flag was not being set (Mike Snitzer) [1274450]
  - [md] dm-btree: fix leak of bufio-backed block in btree_split_beneath error path (Mike Snitzer) [1274393]
  - [md] dm-btree-remove: fix a bug when rebalancing nodes after removal (Mike Snitzer) [1274396]
  - [fs] nfsd: fix duplicated destroy_delegation code introduced by backport ("J. Bruce Fields") [1273228]
  - [fs] xfs: validate transaction header length on log recovery (Brian Foster) [1164135]
  - [net] ipv6: don't use CHECKSUM_PARTIAL on MSG_MORE/UDP_CORK sockets (Hannes Frederic Sowa) [1271759]
  - [net] add length argument to skb_copy_and_csum_datagram_iovec (Sabrina Dubroca) [1269228]
  - [x86] kvm: fix edge EOI and IOAPIC reconfig race (Radim Krcmar) [1271333]
  - [x86] kvm: set KVM_REQ_EVENT when updating IRR (Radim Krcmar) [1271333]
  - [kernel] Initialize msg/shm IPC objects before doing ipc_addid() (Lennert Buytenhek) [1271507] {CVE-2015-7613}


author: Rafael Aquini <aquini@redhat.com> [3.10.0-327.el7]
changelog:
  - [mm] free compound page with correct order (Andrea Arcangeli) [1274867]
  - [netdrv] revert "ixgbe: Refactor busy poll socket code to address multiple issues" (John Greene) [1261275]
  - [powerpc] dma: dma_set_coherent_mask() should not be GPL only (Gustavo Duarte) [1275976]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.2.1.el7]
changelog:
  - [netdrv] macvtap: unbreak receiving of gro skb with frag list (Jason Wang) [1279794 1273737]
  - [net] ipv6: drop frames with attached skb->sk in forwarding (Hannes Frederic Sowa) [1281701 1243966]
  - [net] ipv6: ip6_forward: perform skb->pkt_type check at the beginning (Hannes Frederic Sowa) [1281701 1243966]
  - [net] sctp: Fix race between OOTB responce and route removal (Jamie Bainbridge) [1281426 1277309]
  - [x86] mm: fix VM_FAULT_RETRY handling (Andrea Arcangeli) [1281427 1277226]
  - [x86] mm: consolidate VM_FAULT_RETRY handling (Andrea Arcangeli) [1281427 1277226]
  - [x86] mm: move mmap_sem unlock from mm_fault_error() to caller (Andrea Arcangeli) [1281427 1277226]
  - [mm] let mm_find_pmd fix buggy race with THP fault (Larry Woodman) [1281424 1273993]
  - [mm] ksm: unstable_tree_search_insert error checking cleanup (Andrea Arcangeli) [1281422 1274871]
  - [mm] ksm: use find_mergeable_vma in try_to_merge_with_ksm_page (Andrea Arcangeli) [1281422 1274871]
  - [mm] ksm: use the helper method to do the hlist_empty check (Andrea Arcangeli) [1281422 1274871]
  - [mm] ksm: don't fail stable tree lookups if walking over stale stable_nodes (Andrea Arcangeli) [1281422 1274871]
  - [mm] ksm: add cond_resched() to the rmap_walks (Andrea Arcangeli) [1281422 1274871]
  - [powerpc] kvm: book3s_hv: Synthesize segment fault if SLB lookup fails (Thomas Huth) [1281423 1269467]
  - [powerpc] kvm: book3s_hv: Create debugfs file for each guest's HPT (David Gibson) [1281420 1273692]
  - [powerpc] kvm: book3s_hv: Add helpers for lock/unlock hpte (David Gibson) [1281420 1273692]
  - [powerpc] pci: initialize hybrid_dma_data before use (Laurent Vivier) [1279793 1270717]
  - [md] raid10: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1279796 1267652]
  - [md] raid1: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1279796 1267652]
  - [md] raid10: submit_bio_wait() returns 0 on success (Jes Sorensen) [1279796 1267652]
  - [md] raid1: submit_bio_wait() returns 0 on success (Jes Sorensen) [1279796 1267652]
  - [md] crash in md-raid1 and md-raid10 due to incorrect list manipulation (Jes Sorensen) [1279796 1267652]
  - [md] raid10: ensure device failure recorded before write request returns (Jes Sorensen) [1279796 1267652]
  - [md] raid1: ensure device failure recorded before write request returns (Jes Sorensen) [1279796 1267652]
  - [block] nvme: Fix memory leak on retried commands (David Milburn) [1279792 1271860]
  - [cpufreq] intel_pstate: fix rounding error in max_freq_pct (Prarit Bhargava) [1281491 1263866]
  - [cpufreq] intel_pstate: fix PCT_TO_HWP macro (Prarit Bhargava) [1273926 1264990]
  - [cpufreq] revert "intel_pstate: add quirk to disable HWP on Skylake-S processors" (Prarit Bhargava) [1273926 1264990]
  - [cpufreq] revert "intel_pstate: disable Skylake processors" (Prarit Bhargava) [1273926 1264990]
  - [x86] kvm: svm: unconditionally intercept #DB (Paolo Bonzini) [1279469 1279470] {CVE-2015-8104}
  - [x86] virt: guest to host DoS by triggering an infinite loop in microcode (Paolo Bonzini) [1277560 1277561] {CVE-2015-5307}


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.5.1.el7]
changelog:
  - [net] vsock: Fix lockdep issue (Dave Anderson) [1292372 1253971]
  - [net] vsock: sock_put wasn't safe to call in interrupt context (Dave Anderson) [1292372 1253971]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.7.1.el7]
changelog:
  - [scsi] scsi_sysfs: protect against double execution of __scsi_remove_device() (Vitaly Kuznetsov) [1292075 1273723]
  - [powerpc] mm: Recompute hash value after a failed update (Gustavo Duarte) [1289452 1264920]
  - [misc] genwqe: get rid of atomic allocations (Hendrik Brueckner) [1289450 1270244]
  - [mm] use only per-device readahead limit (Eric Sandeen) [1287550 1280355]
  - [net] ipv6: update ip6_rt_last_gc every time GC is run (Hannes Frederic Sowa) [1285370 1270092]
  - [kernel] tick: broadcast: Prevent livelock from event handler (Prarit Bhargava) [1284043 1265283]
  - [kernel] clockevents: Serialize calls to clockevents_update_freq() in the core (Prarit Bhargava) [1284043 1265283]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.8.1.el7]
changelog:
  - [md] dm: fix AB-BA deadlock in __dm_destroy() (Mike Snitzer) [1296566 1292481]
  - [md] revert "dm-mpath: fix stalls when handling invalid ioctls" (Mike Snitzer) [1287552 1277194]
  - [cpufreq] intel_pstate: Fix limits->max_perf rounding error (Prarit Bhargava) [1296276 1279617]
  - [cpufreq] intel_pstate: Fix limits->max_policy_pct rounding error (Prarit Bhargava) [1296276 1279617]
  - [cpufreq] revert "intel_pstate: fix rounding error in max_freq_pct" (Prarit Bhargava) [1296276 1279617]
  - [crypto] nx: 842 - Add CRC and validation support (Gustavo Duarte) [1289451 1264905]
  - [powerpc] eeh: More relaxed condition for enabled IO path (Steve Best) [1289101 1274731]
  - [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275929 1273465] {CVE-2015-7872}
  - [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275929 1273465] {CVE-2015-7872}
  - [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275929 1273465] {CVE-2015-7872}
  - [x86] paravirt: Replace the paravirt nop with a bona fide empty function (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Fix a paravirt stack-clobbering bug in the NMI code (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Use DF to avoid userspace RSP confusing nested NMI detection (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Reorder nested NMI checks (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Improve nested NMI comments (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Switch stacks on userspace NMI entry (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.9.1.el7]
changelog:
  - [security] keys: Fix keyring ref leak in join_session_keyring() (David Howells) [1298931 1298036] {CVE-2016-0728}


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.10.1.el7]
changelog:
  - [of] return NUMA_NO_NODE from fallback of_node_to_nid() (Thadeu Lima de Souza Cascardo) [1300614 1294398]
  - [net] openvswitch: do not allocate memory from offline numa node (Thadeu Lima de Souza Cascardo) [1300614 1294398]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.11.1.el7]
changelog:
  - [fs] namespaces: Use task_lock and not rcu to protect nsproxy (Hannes Frederic Sowa) [1300618 1297032]
  - [fs] proc_namespace: simplify testing nsp and nsp->mnt_ns (Hannes Frederic Sowa) [1300618 1297032]
  - [net] possible use after free in dst_release (Hannes Frederic Sowa) [1300610 1296299]
  - [net] fix a race in dst_release() (Hannes Frederic Sowa) [1300610 1296299]
  - [net] ratelimit warnings about dst entry refcount underflow or overflow (Hannes Frederic Sowa) [1300610 1296299]
  - [net] fix IP early demux races (Hannes Frederic Sowa) [1300610 1296299]
  - [usb] xhci: init command timeout timer earlier to avoid deleting it uninitialized (Don Zickus) [1300605 1290202]
  - [scsi] be2iscsi: Fix updating the next pointer during WRB posting (Maurizio Lombardi) [1298981 1229330]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.12.1.el7]
changelog:
  - [md] dm-thin-metadata: fix bug in dm_thin_remove_range() (Mike Snitzer) [1310531 1284833]
  - [md] dm-thin: fix regression in advertised discard limits (Mike Snitzer) [1310531 1284833]
  - [scsi] hpsa: Update driver revision to RH2 (Joseph Szczypek) [1308923 1268073]
  - [scsi] hpsa: fix issues with multilun devices (Joseph Szczypek) [1308923 1268073]
  - [net] tcp: honour SO_BINDTODEVICE for TW_RST case too (Florian Westphal) [1308917 1295557]
  - [net] tcp: send_reset: test for non-NULL sk first (Florian Westphal) [1308917 1295557]
  - [net] add inet_sk_transparent() helper (Florian Westphal) [1308917 1295557]
  - [net] add sk_fullsock() helper (Florian Westphal) [1308917 1295557]
  - [net] ipv6: Fix regression in udp_v6_mcast_next() (Hannes Frederic Sowa) [1308921 1298790]
  - [netdrv] mlx4_en: Remove BUG_ON assert when checking if ring is full (Kamal Heib) [1310132 1258136]
  - [netdrv] cxgb4: changes for new firmware 1.14.4.0 (Sai Vemuri) [1309541 1275825]
  - [netdrv] iwlwifi: pci: add a few more PCI subvendor IDs for the 7265 series (Stanislaw Gruszka) [1304336 1287564]
  - [netdrv] iwlwifi: edit the 3165 series and 8000 series PCI IDs (Stanislaw Gruszka) [1301885 1279780]
  - [netdrv] iwlwifi: Add new PCI IDs for the 8260 series (Stanislaw Gruszka) [1301885 1279780]
  - [mm] memcg: oom_notify use-after-free fix (Rafael Aquini) [1298212 1294114]
  - [powerpc] kvm: Increase memslots to 512 (Thomas Huth) [1297758 1276254]
  - [powerpc] kvm: Implement extension to report number of memslots (Thomas Huth) [1297758 1276254]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.13.1.el7]
changelog:
  - [net] veth: don't modify ip_summed; doing so treats packets with bad checksums as good (Sabrina Dubroca) [1312430 1307099]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.14.1.el7]
changelog:
  - [kernel] sched: Move cpu_active() tests from stop_two_cpus() into migrate_swap_stop() (Oleg Nesterov) [1299338 1252281]
  - [kernel] stop_machine: Change cpu_stop_queue_two_works() to rely on stopper->enabled (Oleg Nesterov) [1299338 1252281]
  - [kernel] stop_machine: Introduce __cpu_stop_queue_work() and cpu_stop_queue_two_works() (Oleg Nesterov) [1299338 1252281]
  - [kernel] stop_machine: Ensure that a queued callback will be called before cpu_stop_park() (Oleg Nesterov) [1299338 1252281]
  - [kernel] stop_machine: Remove cpu_stop_work's from list in cpu_stop_park() (Oleg Nesterov) [1299338 1252281]
  - [kernel] stop_machine: Don't do for_each_cpu() twice in queue_stop_cpus_work() (Oleg Nesterov) [1299338 1252281]
  - [kernel] stop_machine: Move 'cpu_stopper_task' and 'stop_cpus_work' into 'struct cpu_stopper' (Oleg Nesterov) [1299338 1252281]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.15.1.el7]
changelog:
  - [netdrv] sfc: push partner queue for skb->xmit_more (Jarod Wilson) [1318323 1267167]
  - [netdrv] sfc: replace spinlocks with bit ops for busy poll locking (Jarod Wilson) [1318323 1267167]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.16.1.el7]
changelog:
  - [tty] pty: make sure super_block is still valid in final /dev/tty close (Herton R. Krzesinski) [1320297 1291313]
  - [tty] pty: fix possible use after free of tty->driver_data (Herton R. Krzesinski) [1320297 1291313]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.17.1.el7]
changelog:
  - [fs] ceph: make fsync() wait unsafe requests that created/modified inode (Zheng Yan) [1320033 1291193]
  - [fs] ceph: add request to i_unsafe_dirops when getting unsafe reply (Zheng Yan) [1320033 1291193]
  - [fs] ceph: don't invalidate page cache when inode is no longer used (Zheng Yan) [1320033 1291193]
  - [fs] ceph: fix message length computation (Zheng Yan) [1320033 1291193]
  - [fs] ceph: improve readahead for file holes (Zheng Yan) [1320033 1291193]
  - [fs] ceph: get inode size for each append write (Zheng Yan) [1320033 1291193]
  - [fs] ceph: cleanup use of ceph_msg_get (Zheng Yan) [1320033 1291193]
  - [fs] ceph: no need to get parent inode in ceph_open (Zheng Yan) [1320033 1291193]
  - [fs] ceph: remove the useless judgement (Zheng Yan) [1320033 1291193]
  - [fs] ceph: remove redundant test of head->safe and silence static analysis warnings (Zheng Yan) [1320033 1291193]
  - [fs] ceph: fix queuing inode to mdsdir's snaprealm (Zheng Yan) [1320033 1291193]
  - [fs] ceph: invalidate dirty pages after forced umount (Zheng Yan) [1320033 1291193]
  - [fs] ceph: EIO all operations after forced umount (Zheng Yan) [1320033 1291193]
  - [fs] ceph: always re-send cap flushes when MDS recovers (Zheng Yan) [1320033 1291193]
  - [fs] ceph: fix ceph_writepages_start() (Zheng Yan) [1320033 1291193]
  - [fs] ceph: switch some GFP_NOFS memory allocation to GFP_KERNEL (Zheng Yan) [1320033 1291193]
  - [fs] ceph: pre-allocate data structure that tracks caps flushing (Zheng Yan) [1320033 1291193]
  - [fs] ceph: re-send flushing caps (which are revoked) in reconnect stage (Zheng Yan) [1320033 1291193]
  - [fs] ceph: send TID of the oldest pending caps flush to MDS (Zheng Yan) [1320033 1291193]
  - [fs] ceph: track pending caps flushing globally (Zheng Yan) [1320033 1291193]
  - [fs] ceph: track pending caps flushing accurately (Zheng Yan) [1320033 1291193]
  - [fs] ceph: fix directory fsync (Zheng Yan) [1320033 1291193]
  - [fs] ceph: fix flushing caps (Zheng Yan) [1320033 1291193]
  - [fs] ceph: don't include used caps in cap_wanted (Zheng Yan) [1320033 1291193]
  - [fs] ceph: ratelimit warn messages for MDS closes session (Zheng Yan) [1320033 1291193]
  - [fs] ceph: simplify two mount_timeout sites (Zheng Yan) [1320033 1291193]
  - [fs] libceph: store timeouts in jiffies, verify user input (Zheng Yan) [1320033 1291193]
  - [fs] ceph: exclude setfilelock requests when calculating oldest tid (Zheng Yan) [1320033 1291193]
  - [fs] ceph: don't pre-allocate space for cap release messages (Zheng Yan) [1320033 1291193]
  - [fs] ceph: make sure syncfs flushes all cap snaps (Zheng Yan) [1320033 1291193]
  - [fs] ceph: don't trim auth cap when there are cap snaps (Zheng Yan) [1320033 1291193]
  - [fs] ceph: take snap_rwsem when accessing snap realm's cached_context (Zheng Yan) [1320033 1291193]
  - [fs] ceph: avoid sending unnessesary FLUSHSNAP message (Zheng Yan) [1320033 1291193]
  - [fs] ceph: set i_head_snapc when getting CEPH_CAP_FILE_WR reference (Zheng Yan) [1320033 1291193]
  - [fs] ceph: use empty snap context for uninline_data and get_pool_perm (Zheng Yan) [1320033 1291193]
  - [fs] ceph: check OSD caps before read/write (Zheng Yan) [1320033 1291193]
  - [fs] libceph: allow setting osd_req_op's flags (Zheng Yan) [1320033 1291193]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.18.1.el7]
changelog:
  - [scsi] bnx2fc: Fix FCP RSP residual parsing (Maurizio Lombardi) [1322279 1306342]
  - [mm] madvise: fix MADV_WILLNEED on shmem swapouts (Mitsuhiro Tanino) [1319845 1312729]
  - [scsi] bnx2fc: Remove explicit logouts (Maurizio Lombardi) [1317591 1303027]
  - [cpufreq] intel_pstate: decrease number of "HWP enabled" messages (David Arcari) [1316821 1310927]
  - [cpufreq] intel_pstate: enable HWP per CPU (David Arcari) [1316821 1310927]
  - [scsi] mpt3sas: Fix for Asynchronous completion of timedout IO and task abort of timedout IO (Tomas Henzl) [1316820 1259907]
  - [scsi] scsi_error: should not get sense for timeout IO in scsi error handler (Tomas Henzl) [1316820 1259907]
  - [scsi] Revert libiscsi: Reduce locking contention in fast path (Chris Leech) [1316812 1297876]
  - [powerpc] kvm: book3s_hv: Sanitize special-purpose register values on guest exit (Thomas Huth) [1316636 1313725]
  - [kernel] sched: Robustify topology setup (Gustavo Duarte) [1316158 1278875]
  - [kernel] sched: Don't set sd->child to NULL when it is already NULL (Gustavo Duarte) [1316158 1278875]
  - [ib] mlx5: Fix RC transport send queue overhead computation (Don Dutile) [1313814 1293336]
  - [block] nvme: default to 4k device page size (David Milburn) [1312399 1245140]
  - [powerpc] cxl: Fix unbalanced pci_dev_get in cxl_probe (Gustavo Duarte) [1312396 1288112]
  - [powerpc] eeh: Probe after unbalanced kref check (Gustavo Duarte) [1312396 1288112]
  - [fs] nfsd: fix clp->cl_revoked list deletion causing softlock in nfsd (J. Bruce Fields) [1311582 1300023]
  - [kernel] sched/fair: Disable tg load_avg/runnable_avg update for root_task_group (Jiri Olsa) [1306317 1289261]
  - [kernel] sched/fair: Move hot load_avg/runnable_avg into separate cacheline (Jiri Olsa) [1306317 1289261]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.18.2.el7]
changelog:
  - [lib] keys: Fix ASN.1 indefinite length object parsing (David Howells) [1308814 1308815] {CVE-2016-0758}


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.1]
changelog:
  - ve/prctl_set_mm: allow to change mm content in ve (Stanislav Kinsburskiy) [PSBM-26967]
  - ploop: push_backup: show uuid (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: fix ploop_push_backup_io_read() (Maxim Patlasov) [PSBM-45000]
  - ms/memcg: make mem_cgroup_read_{stat|event}() iterate possible cpus instead of online (Tejun Heo)
  - ub: make cached and shmem meminfo output more accurate (Vladimir Davydov)
  - mm: memcontrol: account shmem pages (Vladimir Davydov)
  - ve/aio: Wait for all inflight AIO reqs of a task (Kirill Tkhai) [PSBM-42488]
  - ve/aio: Kill ve_aio_set_tail() (Kirill Tkhai) [PSBM-42488]
  - ploop: force journal commit after dio_post_submit() (Dmitry Monakhov) [PSBM-45730]
  - ploop: push_backup must pass READs intact (Maxim Patlasov) [PSBM-46775]
  - cbt: fix cbt->block_max calculation (Maxim Patlasov)
  - ploop: push_backup: fix reentrance in ploop_pb_get_pending() (Dmitry Monakhov) [PSBM-45000]
  - ve/kmod: Add modules to whitelist for c/r sake (Cyrill Gorcunov) [PSBM-46789]
  - pfcache: do not account peer files to memcg (Vladimir Davydov)
  - ploop: push_backup cleanup (Maxim Patlasov)
  - ploop: wire push_backup into state-machine (Maxim Patlasov)
  - ploop: implement PLOOP_IOC_PUSH_BACKUP_IO (Maxim Patlasov)
  - ploop: introduce pbd (Maxim Patlasov) [PSBM-45000]
  - fs: fix accounting pipe buffers to kmemcg (Vladimir Davydov)
  - arch: x86: fix accounting page tables to kmemcg (Vladimir Davydov)
  - memcg: charge kmem allocations accounted to UBC in PCS6 to memcg (Vladimir Davydov)
  - vmalloc: add v[mz]alloc_account helpers (Vladimir Davydov)
  - ms/kmemcg: account certain kmem allocations to memcg (Vladimir Davydov)
  - ms/slab: add SLAB_ACCOUNT flag (Vladimir Davydov)
  - ms/memcg: only account kmem allocations marked as __GFP_ACCOUNT (Vladimir Davydov)
  - Revert "ms/gfp: add __GFP_NOACCOUNT" (Vladimir Davydov)
  - Revert "ms/sysfs: do not account sysfs_ino_ida allocations to memcg" (Vladimir Davydov)
  - Partially revert "tcp: Charge socket buffers into cg memory" (Vladimir Davydov)
  - Revert "mm/vmalloc: do not account vmap_area to memcg" (Vladimir Davydov)
  - Revert "ve/radix-tree: do not account radix_tree_nodes to memcg" (Vladimir Davydov) [PSBM-45975]
  - config.OpenVZ.debug: enable panic-on-oops in debug kernel (Konstantin Khorenko)
  - oom: fix NULL ptr deref on oom if memory cgroup is disabled (Vladimir Davydov) [PSBM-43328]
  - oom: make berserker more aggressive (Vladimir Davydov)
  - oom: zap unused oom_scan_process_thread arguments (Vladimir Davydov)
  - oom: do not ignore score of exiting tasks (Vladimir Davydov)
  - mm: memcontrol: check more carefully if current is oom killed (Vladimir Davydov)
  - oom: do not select child that has already been killed (Vladimir Davydov) [PSBM-40842]
  - fuse: never skip writeback if there are too many background requests (Vladimir Davydov) [PSBM-45497]
  - fuse: increase min/max_dirty_pages up to 256/512 MB (Vladimir Davydov)
  - cbt: add uuid arg to blk_cbt_map_copy_once() (Maxim Patlasov) [PSBM-45000]
  - ve/fs/locks: Make CAP_LEASE work in containers (Evgenii Shatokhin) [PSBM-46199]
  - ub: show swapin/out in /proc/bc/<bc>/vmaux (Vladimir Davydov) [PSBM-46104]
  - mm: memcontrol: add swapin/out stats (Vladimir Davydov) [PSBM-46104]
  - meminfo: show size of tcache and tswap (Vladimir Davydov)
  - ms/kvm: cap halt polling at exactly halt_poll_ns (David Matlack)
  - ms/kvm: halt_polling: improve grow/shrink settings (Christian Borntraeger)
  - ms/kvm: disable halt_poll_ns as default for s390x (David Hildenbrand)
  - ms/kvm: add halt_attempted_poll to VCPU stats (Paolo Bonzini)
  - ms/kvm: fix polling for guest halt continued even if disable it (Wanpeng Li)
  - ms/kvm: trace kvm_halt_poll_ns grow/shrink (Wanpeng Li)
  - ms/kvm: dynamic halt-polling (Wanpeng Li) [PSBM-43100 PSBM-43100]
  - ms/kvm: make halt_poll_ns per-vCPU (Wanpeng Li) [PSBM-43100]
  - fs/mm: writeback: fix div/0 (Vladimir Davydov) [PSBM-46146]
  - fence-watchdog: fix wdog_tmo_mt_check return (Pavel Tikhomirov)
  - ms/mei: me: release hw from reset only during the reset flow (Alexander Usyskin) [PSBM-46132]
  - ms/mei: me: fix hw ready reset flow (Tomas Winkler) [PSBM-46132]
  - ms/netfilter: ipset: move registration message to init from net_init (Ilia Mirkin) [PSBM-45281]
  - ms/netfiler: ipset: Add net namespace for ipset (Vitaly Lavrov) [PSBM-45281]
  - Revert "ve/ipset: prohibit ipset from the inside CT" (Konstantin Khorenko) [PSBM-45281]
  - cbt: add blk_cbt_map_copy_once() helper (Maxim Patlasov) [PSBM-45000]
  - cbt: fix page allocation (Maxim Patlasov)
  - cbt: make __blk_cbt_set() smarter (Maxim Patlasov)
  - cbt: introduce CBT_PAGE_MISSED (Maxim Patlasov)
  - cbt: factor out alloc_page (Maxim Patlasov) [PSBM-45000]
  - ve/fs: Export fs.aio-max-nr via ve cgroup (Cyrill Gorcunov) [PSBM-45646]
  - fs/mm: writeback: fix per bdi dirty background threshold calculation (Vladimir Davydov) [PSBM-45497]
  - ploop: io_direct must fsync after fallocate (Maxim Patlasov) [PSBM-45326]
  - cbt: remove useless rcu_dereference() -v2 (Maxim Patlasov)
  - ms/netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failure (Nikolay Borisov) [PSBM-45783]
  - ms/netfilter: nfnetlink_{log,queue}: Register pernet in first place (Francesco Ruggeri) [PSBM-45783]
  - fuse: resend interrupted release (Maxim Patlasov) [PSBM-45428]
  - ms/locks: remove conditional lock release in middle of flock_lock_file (Jeff Layton) [PSBM-45393]
  - ve/cgroup: Allow to write to several safe cgroup files from CT (Pavel Tikhomirov) [PSBM-44981]
  - ve/cgroup: Prohibit access to toplevel cgroups in CT (Pavel Tikhomirov) [PSBM-44981]
  - vzprivnet: Enable module in configs (Pavel Tikhomirov) [PSBM-43685]
  - vzprivnet: Do not execute vzprivnet_hook inside CT (Pavel Tikhomirov) [PSBM-35111]
  - vzprivnet: Set GPL license (Pavel Tikhomirov)
  - vzprivnet: rt cache drop on vzprivnet update (Pavel Tikhomirov) [PSBM-28881]
  - vzprivnet: Incorrect return value in vzprivnet_hook() (Pavel Tikhomirov) [PSBM-28845]
  - vzprivnet: Check that vzprivnet6_lookup() returns not NULL (Pavel Tikhomirov) [PSBM-8734]
  - vzprivnet6: Interpret zero address as internet (Pavel Tikhomirov) [PSBM-8734]
  - vzprivnet6: Legacy mode support (Pavel Tikhomirov)
  - vzprivnet6: Switch to radix tree (Pavel Tikhomirov)
  - vzprivnet6: Remove hash references (Pavel Tikhomirov)
  - vzprivnet: Allow internet access for weak private networks (Pavel Tikhomirov)
  - vzprivnet: Introduce constants for weakness (Pavel Tikhomirov)
  - vzprivnet: Catch v4 conflict on add (Pavel Tikhomirov) [PSBM-6404 PSBM-7345]
  - vzprivnet6: Don't handle neighbor solicit packets in bridge (Pavel Tikhomirov) [PSBM-7078]
  - vzprivnet: Filter VM/CT to Host traffic (Pavel Tikhomirov) [PSBM-6404]
  - vzprivnet6: Mask the jhash value to fit the chain into one page - fix hash access (Pavel Tikhomirov)
  - vzprivnet: Check for bridged skbs in privnet properly (Pavel Tikhomirov) [PSBM-6635]
  - vzprivnet: Handle bridged skbs in ipv4 privnet (Pavel Tikhomirov) [PSBM-6459 PSBM-6448 PSBM-6444]
  - vzprivnet6: Use rh6 kapi (Pavel Tikhomirov)
  - vzprivnet: Hash sets for ipv6 privnet (Pavel Tikhomirov)
  - vzprivnet: Initial implementation of v6 privnets (Pavel Tikhomirov)
  - vzprivnet: Add stuff required for ipv6 support (Pavel Tikhomirov)
  - vzprivnet: Bad retcode on IP add conflict (Pavel Tikhomirov)
  - vzprivnet: Fix privnet object leak (Pavel Tikhomirov)
  - vzprivnet: Weak sparse networks (Pavel Tikhomirov)
  - vzprivnet: Flush rt cache each time rules change (Pavel Tikhomirov)
  - vzprivnet: Add the classifier proc file (Pavel Tikhomirov)
  - vzprivnet: Introduce basic statistics (Pavel Tikhomirov)
  - vzprivnet: Sparse privnets support (Pavel Tikhomirov)
  - vzprivnet: Netmask byte order toss (Pavel Tikhomirov)
  - vzprivnet: Legacy tree core isolation (Pavel Tikhomirov)
  - vzprivnet: Rework proc structure (Pavel Tikhomirov)
  - vzprivnet: Cache filtering result on dst (Pavel Tikhomirov)
  - vzprivnet: Split privnet descriptor into 2 parts (Pavel Tikhomirov)
  - vzprivnet: Include the last IP of the range into checks (Pavel Tikhomirov)
  - vznetfilter/vzprivnet: Combined patch (Pavel Tikhomirov) [PSBM-43685]
  - dcache: zap dentry_lru_del() (Vladimir Davydov)
  - ms/dcache: don't remove from shrink list in select_collect() (Al Viro) [PSBM-44210]
  - ms/dcache: dentry_kill(): don't try to remove from shrink list (Vladimir Davydov) [PSBM-44210]
  - ve/tty: vtty -- Drop TTY_PINNED_BY_OTHER bit (Cyrill Gorcunov)
  - block: suppress hard lockup warning in elv_drain_elevator (Vladimir Davydov) [PSBM-44480]
  - ms/kernel/watchdog.c: touch_nmi_watchdog should only touch local cpu not every one (Ben Zhang)
  - tmpfs: shmem_fallocate must return ERESTARTSYS (Maxim Patlasov) [PSBM-43399]
  - ploop: must acquire write access on space allocation (Maxim Patlasov) [PSBM-20150]
  - exit: clear TIF_MEMDIE after exit_task_work (Vladimir Davydov) [PSBM-44683]
  - ve/memcg: do not ignore oom_guarantee for unlimited cgroups (Vladimir Davydov) [PSBM-44683]
  - debug/scsi: debug Scsi_Host recovery (Maxim Patlasov) [PSBM-44228]
  - ploop: use FALLOC_FL_CONVERT_UNWRITTEN in io_direct (Maxim Patlasov) [PSBM-22381]
  - ploop: replace BLOCK_UNINIT (Maxim Patlasov) [PSBM-22381]
  - ploop: fix direct_io prealloc checks (Maxim Patlasov) [PSBM-22381]
  - ploop: update gendisk disk_stats (Maxim Patlasov) [PSBM-41247]
  - ms/af_unix: Guard against other == sk in unix_dgram_sendmsg (Rainer Weikusat) [PSBM-43080]
  - ms/mm: slab: free kmem_cache_node after destroy sysfs file (Dmitry Safonov) [PSBM-43010]
  - ms/slub: do not assert not having lock in removing freed partial (Steven Rostedt) [PSBM-43010]
  - ms/slub: use lockdep_assert_held (Peter Zijlstra) [PSBM-43010]
  - ext4: rename fallocate(FALLOC_FL_CONVERT_AND_EXTEND) (Maxim Patlasov) [PSBM-22381]
  - ext4: rework fallocate(FALLOC_FL_CONVERT_AND_EXTEND) (Maxim Patlasov) [PSBM-22381]
  - vfs: fix fallocate(FALLOC_FL_CONVERT_AND_EXTEND) (Maxim Patlasov) [PSBM-22381]
  - ms/fs: Add a missing permission check to do_umount (Pavel Tikhomirov) [PSBM-43294]
  - ms/mnt: Only change user settable mount flags in remount (Pavel Tikhomirov) [PSBM-43294]
  - ms/fs/super.c: fix WARN on alloc_super() fail path (Pavel Tikhomirov) [PSBM-43294]
  - ms/ipv4: Don't do expensive useless work during inetdev destroy. (David Miller) [PSBM-42414]
  - Revert "config.OpenVZ: show Odin's logo on boot" (Konstantin Khorenko) [PSBM-44739]
  - Revert "ve/video/logo: show Odin's logo on boot" (Konstantin Khorenko) [PSBM-44739]
  - ve/fs/sync: fix CT's mountpoints traversal (Andrey Ryabinin) [PSBM-44125 PSBM-44684]
  - ve: remove sync_mutex (Andrey Ryabinin)
  - memcg: ignore memory.low for cgroups w/o tasks (Vladimir Davydov) [PSBM-44192]
  - ms/userns, pidns: Force thread group sharing, not signal handler sharing. (Eric W. Biederman) [PSBM-44152]
  - ms/kvm/x86: Pass return code of kvm_emulate_hypercall (Andrey Smetanin) [PSBM-44419]
  - ms/kvm/x86: Hyper-V VMBus hypercall userspace exit (Andrey Smetanin) [PSBM-44419]
  - ms/kvm/x86: Reject Hyper-V hypercall continuation (Andrey Smetanin) [PSBM-44419]
  - ms/drivers/hv: Move VMBus hypercall codes into Hyper-V UAPI header (Andrey Smetanin) [PSBM-44419]
  - ms/kvm/x86: Rename Hyper-V long spin wait hypercall (Andrey Smetanin) [PSBM-44419]
  - tcache/proc/meminfo: add tcache pages to MemAvailable (Vladimir Davydov)
  - ve: move ve-related checks to separated function from ve_can_attach() (Stanislav Kinsburskiy) [PSBM-44143]
  - ve: move task-related checks to separated function from ve_can_attach() (Stanislav Kinsburskiy) [PSBM-44143]
  - ve: remove is_locked check from ve_can_attach() (Stanislav Kinsburskiy)
  - tcache: improve reclaim fairness (Vladimir Davydov) [PSBM-41239]
  - tcache: store tcache_node in page->mapping instead of page->private (Vladimir Davydov) [PSBM-41239]
  - ms/mm/balloon_compaction: redesign ballooned pages management (Konstantin Khlebnikov) [PSBM-41239]
  - mm: vmscan: don't drop global slab caches at once if root cgroup is empty (Vladimir Davydov) [PSBM-41239]
  - ve/aio: Enumerate ioctl numbers right (Kirill Tkhai) [PSBM-42488]
  - ms/KVM: x86: set TMR when the interrupt is accepted (Paolo Bonzini) [PSBM-41387]
  - ve/fs/sync: don't skip dirty metadata on filtered sync (Andrey Ryabinin) [PSBM-39583 PSBM-44125]
  - ve: Add a handle to checkpoint/restore AIO context (Kirill Tkhai) [PSBM-42488 PSBM-41425]
  - tcache/tswap: enable by default (Vladimir Davydov)
  - ms/fs/pnode.c: treat zero mnt_group_id-s as unequal (Maxim Patlasov) [PSBM-43834]
  - kvm: do not SetPageDirty for file mappings (Maxim Patlasov) [PSBM-43243]
  - ms/kvm/x86: Hyper-V SynIC timers tracepoints (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V SynIC tracepoints (Andrey Smetanin)
  - ms/kvm/x86: Update SynIC timers on guest entry only (Andrey Smetanin)
  - ms/kvm/x86: Skip SynIC vector check for QEMU side (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V fix SynIC timer disabling condition (Andrey Smetanin)
  - ms/kvm/x86: Reorg stimer_expiration() to better control timer restart (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Andrey Smetanin)
  - ms/kvm/x86: Drop stimer_stop() function (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V timers fix incorrect logical operation (Andrey Smetanin)
  - ms/kvm/x86: Remove Hyper-V SynIC timer stopping (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V SynIC timers (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V internal helper to read MSR HV_X64_MSR_TIME_REF_COUNT (Andrey Smetanin)
  - ms/kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Andrey Smetanin)
  - ms/kvm/x86: Rearrange func's declarations inside Hyper-V header (Andrey Smetanin)
  - ms/drivers/hv: Move struct hv_timer_message_payload into UAPI Hyper-V x86 header (Andrey Smetanin)
  - ms/drivers/hv: Move struct hv_message into UAPI Hyper-V x86 header (Andrey Smetanin)
  - ms/drivers/hv: Move HV_SYNIC_STIMER_COUNT into Hyper-V UAPI x86 header (Andrey Smetanin)
  - ms/drivers/hv: replace enum hv_message_type by u32 (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V kvm exit (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V synthetic interrupt controller (Andrey Smetanin)
  - ms/kvm/x86: per-vcpu apicv deactivation support (Andrey Smetanin)
  - ms/kvm/irqchip: kvm_arch_irq_routing_update renaming split (Andrey Smetanin)
  - ms/drivers/hv: share Hyper-V SynIC constants with userspace (Andrey Smetanin)
  - ms/kvm/irqchip: allow only multiple irqchip routes per GSI (Andrey Smetanin)
  - ms/kvm/eventfd: add arch-specific set_irq (Andrey Smetanin)
  - ms/kvm/eventfd: factor out kvm_notify_acked_gsi() (Andrey Smetanin)
  - ms/kvm/eventfd: avoid loop inside irqfd_update() (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V HV_X64_MSR_VP_RUNTIME support (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V HV_X64_MSR_VP_INDEX export for QEMU. (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V HV_X64_MSR_RESET msr (Andrey Smetanin)
  - kvm/x86: Align logging messages to MS one (Andrey Smetanin)
  - kvm/x86: get(set)_msr_hyperv() -> kvm_hv_get(set)_msr() rename (Andrey Smetanin)
  - kvm/x86: Coding style fixes (Andrey Smetanin) [PSBM-32435]
  - ve/ext4: treat panic_on_errors as remount-ro_on_errors in CTs (Dmitry Monakhov)
  - vziolimit/fs/ext4: allow to throttle due to iolimit while reading directory blocks (Vladimir Davydov)
  - cbt: fix blk_cbt_set endless loop (Dmitry Monakhov) [PSBM-43936]
  - ub: zap unused task_beancounter fields (Vladimir Davydov)
  - ve: Use @real_start_timespec in uptime_proc_show (Cyrill Gorcunov) [PSBM-41406]
  - ve: Add interface for @start_timespec and @real_start_timespec adjustmen (Cyrill Gorcunov) [PSBM-41311 PSBM-41406]
  - ms/ipv6: don't disable interface if last ipv6 address is removed (Kirill Tkhai) [PSBM-43870]
  - ve/fs/sync: per containter sync and syncfs (Andrey Ryabinin) [PSBM-39583]
  - ve/fs/writeback: filter per-container inodes earlier (Andrey Ryabinin) [PSBM-39583]
  - ms/KVM: x86: Reload pit counters for all channels when restoring state (Andrew Honig)
  - ms/KVM: x86: removing unused variable (Saurabh Sengar)
  - ms/keys: Fix race between read and revoke (Vasily Averin) [PSBM-43800]
  - ve/coredump: virtualize kernel.core_pattern sysctl (Pavel Tikhomirov) [PSBM-43596]
  - ve/sysctl: add macro sysctl_virtual to unify sysctl's virtualization (Pavel Tikhomirov) [PSBM-43596]
  - config.OpenVZ: disable RH_KABI_SIZE_ALIGN_CHECKS (Andrey Ryabinin)
  - ve/cpuset: revert changes allowing to attach to empty cpusets (Vladimir Davydov) [PSBM-34089 PSBM-42087]
  - ms/tty: Invert tty_lock/ldisc_sem lock order (Cyrill Gorcunov) [PSBM-43454]
  - tty: Fix task hang if one of peers is sitting in read (Cyrill Gorcunov) [PSBM-43454]
  - oom: resurrect berserker mode (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-17930]
  - oom: pass points and overdraft to oom_kill_process (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: rework logic behind memory.oom_guarantee (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-37915]
  - oom: drop OOM_SCAN_ABORT (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: introduce oom timeout (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-38581]
  - oom: rework locking design (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - ve/nfsd: do not print nfscld warning in a container (Stanislav Kinsburskiy) [PSBM-43468]
  - ve/nfsd: disable legacy recovery tracking for containers (Stanislav Kinsburskiy) [PSBM-43468]
  - ve/tty: Revert custom virtualization (Cyrill Gorcunov) [PSBM-41804]
  - ve/kernel: allow to increase rlimit from inside container (Vladimir Davydov) [PSBM-43410]
  - ve/fs/writeback: use redirty_tail to skip inodes (Andrey Ryabinin) [PSBM-43375]
  - ve/net/dummy: enable support in a container (Vasily Averin) [PSBM-43329]
  - ms/unix: avoid use-after-free in ep_remove_wait_queue (Rainer Weikusat)
  - ve/net_core: fix build error with owner_ve->ve_netns (Dmitry Safonov)
  - ve/binfmt_misc: fix compilation outside CONFIG_BINFMT_MISC (Dmitry Safonov)
  - rh/sysfs/blk-sysfs: fix uninitialized var usage (Dmitry Safonov)
  - ve/kmod: fix build without CONFIG_VE_IPTABLES (Dmitry Safonov)
  - ve/fs: Print a message if a VE reaches its limit on mounts (Evgenii Shatokhin) [PSBM-42825]
  - Revert "mm: vmscan: do not scan lruvec if it seems to be unreclaimable" (Vladimir Davydov) [PSBM-35155]
  - memcg: never fail kmem allocations (Vladimir Davydov)
  - ms/autofs: show pipe inode in mount options (Stanislav Kinsburskiy) [PSBM-41217 PSBM-41961]
  - ub: drop unused UB_DIRTY_EXCEEDED (Andrey Ryabinin)
  - ve/mm/page-writeback: Introduce per-CT dirty memory limit (Andrey Ryabinin) [PSBM-33841]
  - ve/fs/writeback: per-CT fs writeback (Andrey Ryabinin) [PSBM-33841]
  - ve/xattr: allow set/remove security.capability inside CT (Pavel Tikhomirov) [PSBM-43294 PSBM-43267 OVZ-6657]
  - ms/ixgbe: on recv increment rx.ring->stats.yields (Pavel Tikhomirov)
  - Revert "ve/cgroup: add VE mark to each user cgroup name on mount" (Konstantin Khorenko) [PSBM-43169]
  - ve/lib/nlattr: use ve_pr_warn_ratelimited instead pr_warn_ratelimited (Dmitry Safonov) [PSBM-42313]
  - ve_prink: introduce ve_pr_<level>_ratelimited (Dmitry Safonov) [PSBM-42313]
  - ve/fs: Use comparison of signed integers in ve_mount_allowed() (Evgenii Shatokhin) [PSBM-42825]
  - ms/sched/core: Fix unserialized r-m-w scribbling stuff (Kirill Tkhai)
  - ve/sched/core: Set task_struct::woken_while_running under rq lock (Kirill Tkhai)
  - ve/cgroup: Add pseudosuper state for restore sake (Cyrill Gorcunov) [PSBM-34299 PSBM-43169 PSBM-42573]
  - ve/kvm: Allow scheduler throttling in __vcpu_run() (Kirill Tkhai) [PSBM-42358]
  - ve/sched: introduce cond_resched_may_throttle (Kirill Tkhai) [PSBM-18888 PSBM-42358]
  - ve/kmod: list of allowed to autoload in CT modules (Dmitry Safonov) [PSBM-41216]
  - ve/cgroup: add VE mark to each user cgroup name on mount (Stanislav Kinsburskiy) [PSBM-42573]
  - rh/mm: PTE isn't dirty when _PAGE_SOFT_DIRTY bit set (Dmitry Safonov) [PSBM-42094]
  - ms/ovl: fix permission checking for setattr (Cyrill Gorcunov)
  - ploop: rename extent maps management funtions (Alexey V. Vissarionov)
  - ve/userns: allow unprivileged creation of the mount namespace. (Andrey Ryabinin) [OVZ-6646 PSBM-42760]
  - ve/userns: don't TAINT kernel with 'tech preview' (Andrey Ryabinin)
  - ve/fs: drop useless d_root_check() (Andrey Ryabinin) [PSBM-41919]
  - ms/ixgbe: Refactor busy poll socket code to address multiple issues (Pavel Tikhomirov) [PSBM-40330]
  - tcache: fix use-after-free in tcache_invalidate_node_pages() (Andrey Ryabinin) [PSBM-42104]
  - ms/ipv6/addrlabel: fix ip6addrlbl_get() (Andrey Ryabinin) [PSBM-42457]
  - ve/vtty: Don't close unread master peer if slave is nonzero (Cyrill Gorcunov) [PSBM-41985 PSBM-41672]
  - ve/ptrace: don't change the upstream logic which affects criu (Andrew Vagin) [PSBM-42216]
  - ms/ses: fix additional element traversal bug (James Bottomley) [PSBM-40330]
  - ve/vmscan: do not throttle kthreads due to too_many_isolated (Vladimir Davydov) [PSBM-41410]
  - ploop: disable WRITE SAME for io_kaio (Maxim Patlasov) [PSBM-41965]
  - ve/fs: add per-VE limit of mount points (Evgenii Shatokhin) [PSBM-34438]
  - kernel: check the JOBCTL_TRAPPING_BIT bit correctly (Andrew Vagin) [PSBM-42052]
  - ms/xfs_qm: lost hunk from "ms/list_lru: add helpers to isolate items" (Vladimir Davydov) [PSBM-42319]
  - ms/xfs_qm: lost hunk from "ms/list_lru: introduce list_lru_shrink_{count,walk}" (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: fix dquot isolation hang (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: convert dquot cache lru to list_lru fix (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: convert dquot cache lru to list_lru (Vladimir Davydov) [PSBM-42319]
  - ext4: ext4_split_extent_at should not cache tail extent (Dmitry Monakhov) [PSBM-40580]
  - ms/vhost/net: extend device allocation to vmalloc (Michael S. Tsirkin) [PSBM-42199]
  - ms/rmap: rmap_walk: move VM_BUG_ON to rmap_walk_file (Vladimir Davydov) [PSBM-42214]
  - mm: page_idle: look up page anon_vma carefully when checking references (Vladimir Davydov) [PSBM-42015 PSBM-42015]
  - ms/mm/rmap: extend rmap_walk_xxx() to cope with different cases (Vladimir Davydov) [PSBM-42015]
  - ms/mm/rmap: make rmap_walk to get the rmap_walk_control argument (Vladimir Davydov) [PSBM-42015]
  - ms/mm/rmap: factor lock function out of rmap_walk_anon() (Vladimir Davydov) [PSBM-42015]
  - ext4: fix race aio-dio vs freeze_fs (Dmitry Monakhov) [PSBM-39352]
  - ve/l2tp: Drop VE_FEATURE_PPP feature test (Cyrill Gorcunov)
  - ve/vtty: Register devices in sysfs (Cyrill Gorcunov) [PSBM-41628 PSBM-41804]
  - bc/mm: mmap_region: uncharge UB_LOCKEDPAGES if vma cannot be locked (Vladimir Davydov) [PSBM-39435]
  - ve/fanotify: Use ve-capable instead of plain capable test (Cyrill Gorcunov) [PSBM-41409]
  - tswap: exert equal pressure on tmem and lru pages (Vladimir Davydov)
  - tcache: exert equal pressure on tmem and lru pages (Vladimir Davydov)
  - vmscan: fix slab vs lru balance (Vladimir Davydov)
  - rh7/user_ns: enable user namespaces by default (Konstantin Khorenko)
  - ve/tun: expose "owner", "group" and "tun_flags" attributes in container (Stanislav Kinsburskiy) [PSBM-39726]
  - x86: "pages zeroing on free" option introduced (Stanislav Kinsburskiy) [PSBM-33071]
  - ms/net: avoid reference counter overflows on fib_rules in multicast forwarding (Hannes Frederic Sowa) [PSBM-41453]
  - kernel/freezer: don't freeze stopped & about to be ptraced task (Andrey Ryabinin) [PSBM-40683]
  - ms/ipmr,ip6mr: call ip6mr_free_table() on failure path (WANG Cong)
  - ve/memcg: enable kmem accounting for all cgroups (Vladimir Davydov)
  - ms/netfilter: Restore xt_connlimit version 0 (Kirill Tkhai) [PSBM-40186]
  - ms/cfq-iosched: fix oom cfq_queue ref leak in cfq_set_request() (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: fix async oom queue handling (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: simplify control flow in cfq_get_queue() (Tejun Heo) [PSBM-41334]
  - ms/fsnotify: fix check in inotify fdinfo printing (Cyrill Gorcunov)
  - ms/vmscan: do not force-scan file lru if its absolute size is small (Vladimir Davydov)
  - ve/mm: allow container's root to ignore mlock limit (Andrey Ryabinin) [PSBM-41405]
  - ve/vtty: n_tty -- Allow write on sole slave vtty peer (Cyrill Gorcunov) [PSBM-40740]
  - config.OpenVZ: enable netfilter module xt_match_wdog_tmo (Konstantin Khorenko) [PSBM-40736]
  - ms/kasan: fix kmemleak false-positive in kasan_module_alloc() (Andrey Ryabinin) [PSBM-41328]
  - ms/include/linux/kmemleak.h: needs slab.h (Andrew Morton)
  - ms/epoll: Make fdinfo to always success (Cyrill Gorcunov) [PSBM-41386]
  - tcache: account reclaimed pages to scan_control->nr_reclaimed (Vladimir Davydov)
  - signal/ve: allow to send signal from another ve namespace (Andrey Ryabinin) [PSBM-40896 PSBM-17903]
  - config.OpenVZ: enable fencing watchdog for HA cluster support (Konstantin Khorenko) [PSBM-40736]
  - fence-watchdog: Port: diff-fence-watchdog-netfilter-add-aliases-for-module-wdog_tmo (Pavel Tikhomirov)
  - fence-watchdog: Port: diff-fence-watchdog-arptables-add-ability-to-filter-by-watchdog-timeout-v5 (Pavel Tikhomirov) [PSBM-23253]
  - fence-watchdog: Port: diff-fence-watchdog-add-wdog_tmo-match (Pavel Tikhomirov) [PSBM-23253]
  - fence-watchdog: Port: diff-fence-watchdog-add-netfilter-action (Pavel Tikhomirov) [PSBM-23253 PSBM-23253]
  - fence-watchdog: Port: diff-fence-watchdog-schedule-work-in-case-of-halt-action (Pavel Tikhomirov) [PSBM-20034]
  - fence-watchdog: Port: diff-fence-watchdog-rename-action-to-halt (Pavel Tikhomirov) [PSBM-18395]
  - fence-watchdog: Port: diff-fence-watchdog-write-log-message-when-timer-elapses (Pavel Tikhomirov) [PSBM-18312 PSBM-18312]
  - fence-watchdog: Port: diff-fence-watchdog-add-support-of-crash (Pavel Tikhomirov) [PSBM-13631 PSBM-13631]
  - fence-watchdog: Port: diff-fence-watchdog-introduce-fencing-watchdog-for-HA-cluster-3 (Pavel Tikhomirov) [PSBM-40736 PSBM-13631 PSBM-13631]
  - ms/x86/mm, kasan: Silence KASAN warnings in get_wchan() (Andrey Ryabinin)
  - ms/compiler, atomics, kasan: Provide READ_ONCE_NOCHECK() (Andrey Ryabinin)
  - ms/x86/process: Unify 32bit and 64bit implementations of get_wchan() (Thomas Gleixner)
  - ms/x86/process: Add proper bound checks in 64bit get_wchan() (Thomas Gleixner)
  - ms/x86/asm/entry: Create and use a 'TOP_OF_KERNEL_STACK_PADDING' macro (Andrey Ryabinin)
  - Makefile: properly generate KERNELRELEASE value (Konstantin Khorenko) [PSBM-34957]
  - config.OpenVZ: enable CONFIG_LOCALVERSION_AUTO (Konstantin Khorenko) [PSBM-34957]
  - ve/vznetstat: fix RCU-protected "info_V{4, 6}" pointers initialization (Stanislav Kinsburskiy)
  - ve/vtty: Don't zap termios fields on slave peer (Cyrill Gorcunov) [PSBM-41057]
  - ms/pvpanic: Set high notifier priority (Takashi Iwai) [PSBM-41189]
  - fuse: allow to mount fuse filesystems inside CT (Andrey Ryabinin) [PSBM-41075]
  - ve: introduce ve_init_user_ns() helper (Andrey Ryabinin) [PSBM-41075]
  - ve/net: fix userspace if_tun.h compilation (Vladimir Sementsov-Ogievskiy) [PSBM-40629]
  - ve/autofs: allow /dev/autofs ioctl's in a Container (Stanislav Kinsburskiy) [PSBM-26968]
  - ve/acct: Allow process accounting in containers (Evgenii Shatokhin) [PSBM-40587]
  - sched: disable dumping cfs info on sysrq trigger (Vladimir Davydov) [PSBM-41140]
  - ve/net: fix tap ve shaping (Vladimir Sementsov-Ogievskiy) [PSBM-40888 PSBM-40888]
  - ve/mm,oom: print information about ve of killed task (Andrey Ryabinin) [PSBM-40610]
  - ms/mm: introduce idle page tracking (Vladimir Davydov) [PSBM-32460]
  - ms/mm/mm_init.c: make creation of the mm_kobj happen earlier than device_initcall (Vladimir Davydov) [PSBM-32460]
  - ms/sysfs: create bin_attributes under the requested group (Vladimir Davydov) [PSBM-32460]
  - ms/mmu-notifier: add clear_young callback (Vladimir Davydov) [PSBM-32460]
  - ms/proc: add kpagecgroup file (Vladimir Davydov) [PSBM-32460]
  - ms/memcg: add page_cgroup_ino helper (Vladimir Davydov) [PSBM-32460]
  - ve/cgroups: Allow to attach a single threaded task only into a container (Cyrill Gorcunov)
  - ms/seccomp: add ptrace options for suspend/resume (Andrew Vagin) [PSBM-39517]
  - x86/vdso: Fix build failure with GCC5 (Andrey Ryabinin)
  - ve/fs/namei: fix capabilities check in sys_renameat2 () to support Containers (Stanislav Kinsburskiy)
  - ve/fs/namei: check containers capabilities in may_linkat() (Stanislav Kinsburskiy) [PSBM-40567]
  - ve/nf_conntrack: expose "nf_conntrack_events*" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_acct" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: export nf_conntrack_hide_sysctl() helper (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_max" in containers (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: allow expose of priviledged sysctl inside containers (Stanislav Kinsburskiy) [PSBM-40044]
  - cbt/blkdev.h: fix compilation in case CONFIG_BLK_DEV_CBT is not set (Stanislav Kinsburskiy)
  - ms/veth: add netpoll support (Andrew Vagin) [PSBM-34959]
  - ms/fsnotify: Make fdinfo to always success (Cyrill Gorcunov) [PSBM-40337]
  - ve/xfs: add missing ub_io_account_dirty in set_page_dirty (Vladimir Davydov)
  - arch: mask cpuid 0x00000007 features in /proc/cpuinfo (Vladimir Davydov) [PSBM-30880 PSBM-33638]
  - arch/x86: assure cpuinfo inside ct is subset of host's one (Vladimir Davydov) [PSBM-30688 PSBM-33638]
  - arch/x86: disable cpuid faulting on reboot and cpu offline (Vladimir Davydov) [PSBM-30548 PSBM-33638]
  - arch/x86: only enable cpuid faulting for containers (Vladimir Davydov) [PSBM-30516 PSBM-33638]
  - arch/x86: report cpuid:0000000d_1 in cpuinfo (Vladimir Davydov) [PSBM-30577 PSBM-33638]
  - arch/x86: check if cpuid level exists while reporting cpuinfo (Vladimir Davydov) [PSBM-33638]
  - arch/x86: take into account cpuid override while reporting cpuinfo (Vladimir Davydov) [PSBM-28682 PSBM-33638]
  - arch/x86: introduce cpuid override (Vladimir Davydov) [PSBM-28682 PSBM-33638]
  - cpuinfo: obtain cpuflags for the current cpu too (Vladimir Davydov) [PSBM-33638]
  - cpuinfo: zero all bits in cap mask (Vladimir Davydov) [PSBM-33638]
  - ubc: proc show stats in ve user ns (Pavel Tikhomirov) [PSBM-40433]
  - ve/proc: Use ve_capable() in oom_score_adj_write() (Kirill Tkhai) [PSBM-40359]
  - venet: remove per-net hooks and related code (Stanislav Kinsburskiy) [PSBM-23441 PSBM-23441]
  - venet: add newlink and dellink callbacks to rtnetlink operations (Stanislav Kinsburskiy) [PSBM-23441 PSBM-23441]
  - venet: fix false positive return code in case of error in venet_init() (Stanislav Kinsburskiy) [PSBM-23441]
  - memcg: allow to disable cleancache per memcg (Vladimir Davydov) [PSBM-34163]
  - ve/device_cgroup: fake allowing all devices for docker inside VZCT (Pavel Tikhomirov) [PSBM-34529 PSBM-38691]
  - ms/prctl: avoid using mmap_sem for exe_file serialization (Davidlohr Bueso) [PSBM-39834]
  - ms/prctl: more prctl(PR_SET_MM_*) checks (Alexey Dobriyan) [PSBM-39834]
  - ms/mm: use may_adjust_brk helper (Cyrill Gorcunov) [PSBM-39834]
  - ve/fs: allow to remount from ve user ns (Pavel Tikhomirov)
  - ve/quota: allow to manage quota in top CT user ns (Konstantin Khorenko) [PSBM-40281]
  - ve/tun: Make config to dep on TUN (Cyrill Gorcunov)
  - ve/vtty: Make indices to match pcs6 scheme (Cyrill Gorcunov) [PSBM-40088]
  - config.OpenVZ: enable TAP accounting (Konstantin Khorenko) [PSBM-27713]
  - ve/net: introduce TAP accounting (Vladimir Sementsov-Ogievskiy) [PSBM-27713]
  - memcg: add lock for protecting memcg->oom_notify list (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - memcg: add mem_cgroup_get/put helpers (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - ms/mm: oom_kill: clean up victim marking and exiting interfaces (Vladimir Davydov) [PSBM-26973]
  - ms/oom: thaw the OOM victim if it is frozen (Vladimir Davydov) [PSBM-26973]
  - ms/oom: add helpers for setting and clearing TIF_MEMDIE (Vladimir Davydov) [PSBM-26973]
  - ms/oom: make sure that TIF_MEMDIE is set under task_lock (Vladimir Davydov) [PSBM-26973]
  - ms/oom: don't count on mm-less current process (Vladimir Davydov) [PSBM-26973]
  - ms/mm, oom: remove unnecessary exit_state check (Vladimir Davydov) [PSBM-26973]
  - ms/make default ->i_fop have ->open() fail with ENXIO (Andrew Vagin) [PSBM-39834]
  - ms/shm: wait for pins to be released when sealing (Andrew Vagin) [PSBM-39834]
  - ms/selftests: add memfd/sealing page-pinning tests (Andrew Vagin) [PSBM-39834]
  - ms/selftests: add memfd_create() + sealing tests (Andrew Vagin) [PSBM-39834]
  - ms/shm: add memfd_create() syscall (Andrew Vagin) [PSBM-39834]
  - ms/shm: add sealing API (Andrew Vagin) [PSBM-39834]
  - ms/mm: allow drivers to prevent new writable mappings (Andrew Vagin) [PSBM-39834]
  - ms/mm: mmap_region: kill correct_wcount/inode, use allow_write_access() (Andrew Vagin) [PSBM-39834]
  - ms/sched: add cond_resched_rcu() helper (Andrew Vagin) [PSBM-39834]
  - ve: Strip unset options in ve.mount_opts (Kirill Tkhai)
  - ms/fuse: break infinite loop in fuse_fill_write_pages() (Maxim Patlasov)
  - ploop: release io_context on ploop_thread() exit (Maxim Patlasov) [PSBM-39956]
  - ms/cfq-iosched: remove @gfp_mask from cfq_find_alloc_queue() (Maxim Patlasov) [PSBM-39956]
  - ve: mark SYSFS and IPGRE features deprecated (Konstantin Khorenko) [PSBM-33687]
  - ms/lockd: create NSM handles per net namespace (Andrey Ryabinin) [PSBM-39721]
  - ploop: do not use fiemap beyond eof (Maxim Patlasov) [PSBM-26762 PSBM-39251]
  - vecalls: fix VZCTL_GET_CPU_STAT uptime_jif scale (Vladimir Davydov) [PSBM-28811]
  - tcache: do not try to create node if we are not going to store page (Vladimir Davydov)
  - ub stat: sync memcg contents with beancounter if required (Stanislav Kinsburskiy)
  - ub stat: commnad check helper introduced (Stanislav Kinsburskiy)
  - ub statd: move header file from include/ to uapi/ (Stanislav Kinsburskiy)
  - ub statd: move struct ub_stat_notify declaration to source (Stanislav Kinsburskiy)
  - ub statd: small optimisations and clean ups (Stanislav Kinsburskiy)
  - ub statd: fix new_notify structure allocation (Stanislav Kinsburskiy)
  - ve/nfsd: Add VE_FEATURE_NFS check during nfsd mount (Kirill Tkhai) [PSBM-33687]
  - ve/nfs,nfsd: Allow to mount fs from initial VE's user_ns (Kirill Tkhai) [PSBM-40047]
  - ve/proc: fix mangling cgroup mount source path in container (Pavel Tikhomirov) [PSBM-34295]
  - ve/tty: Use ve_capable in vhangup syscall (Cyrill Gorcunov) [PSBM-40053]
  - ve: vznetstat and dummy Makefiles altered for Kpatch build (Evgenii Shatokhin) [PSBM-40069]
  - ms/mm/page-writeback.c: fix divide by zero in bdi_dirty_limits() (Maxim Patlasov) [PSBM-40116]
  - ve/sched: Hide steal time from inside CT (Kirill Tkhai) [PSBM-26588 PSBM-23431]
  - ve/fs: don't add MNT_NODEV for ve mounts (Andrew Vagin) [PSBM-40096]
  - ve/devmptfs: Use current_user_ns_initial() in dev_mount() (Kirill Tkhai)
  - ve/fs: Allow to mount ext4 and binfmt_misc under non-root ns (Kirill Tkhai) [PSBM-40100]
  - ve: Implement current_user_ns_initial() helper (Kirill Tkhai)
  - config.OpenVZ.debug: Enable audit subsystem in config" (Konstantin Khorenko) [PSBM-38898]
  - Revert "config.OpenVZ/audit: Disable audit subsystem in config" (Konstantin Khorenko) [PSBM-38898]
  - config.OpenVZ: enable NBD module (Konstantin Khorenko) [PSBM-31858]
  - ms/kvm/x86: add sending hyper-v crash notification to user space (Andrey Smetanin)
  - ms/KVM: Add KVM_EXIT_SYSTEM_EVENT to user space API header (Anup Patel)
  - ms/kvm/x86: added hyper-v crash msrs into kvm hyperv context (Andrey Smetanin)
  - ms/kvm/x86: Move Hyper-V specific fields into new per vm/vcpu Hyper-V structures (Andrey Smetanin)
  - ms/kvm: introduce vcpu_debug = kvm_debug + vcpu context (Andrey Smetanin)
  - ms/kvm/x86: move Hyper-V MSR's/hypercall code into hyperv.c file (Andrey Smetanin)
  - ms/kvm: add hyper-v crash msrs values (Andrey Smetanin)
  - pfcache/ext4: drop pfcache csum on fallocate (Dmitry Monakhov) [PSBM-33644]
  - config.OpenVZ: enable cbt - changed block tracking (Konstantin Khorenko) [PSBM-34156]
  - cbt: introduce changed block tracking (Dmitry Monakhov) [PSBM-34156]
  - ve: rework veid handling (Vladimir Davydov) [PSBM-39338]
  - sched/fair: Optimize is_top_cfs_rq() (Kirill Tkhai) [PSBM-35251]
  - ms/sched/fair: Track cgroup depth (Kirill Tkhai)
  - fuse: virtualize file system (Stanislav Kinsburskiy) [OVZ-6498]
  - RDS: verify the underlying transport exists before creating a connection (Vasily Averin)
  - memcg: do not allow to disable oom from inside a container (Vladimir Davydov)
  - ms/memcg: change oom_info_lock to mutex (Michal Hocko)
  - ms/memcg, oom: lock mem_cgroup_print_oom_info (Michal Hocko)
  - memcg: do not loop in mem_cgroup_reclaim if killed (Vladimir Davydov)
  - kexec, kasan: increase KEXEC_AUTO_RESERVED_SIZE under CONFIG_KASAN=y (Andrey Ryabinin) [PSBM-39339]
  - kasan: introduce single-shot mode and enable it by default (Andrey Ryabinin) [PSBM-39339]
  - kasan: always taint kernel on report. (Andrey Ryabinin) [PSBM-39339]
  - mm, slub, kasan: enable user tracking by default. (Andrey Ryabinin) [PSBM-39339]
  - kasan: update reported bug types for not user nor kernel memory accesses (Andrey Konovalov) [PSBM-39339]
  - ms/freezer: Do not freeze tasks killed by OOM killer (Cong Wang) [PSBM-38758]
  - Revert "ve: caps: ignore setting wrong caps with CAP_SETPCAP" (Konstantin Khorenko) [PSBM-39077]
  - Remove CAP_VE_* from "ve/ns: Port diff-ve-ns-allow-create-new-pid-ipc-and-utc-namespaces" (Andrew Vagin) [PSBM-39077]
  - Revert "ve/proc/ipc: allow mount proc and mqueue inside container" (Andrew Vagin) [PSBM-39077]
  - Remove CAP_VE_* from "Initial patch commit + compilation fixes" (Andrew Vagin) [PSBM-39077]
  - net: remove CAP_VE_NET_ADMIN from "ve/netfilter: Basic ve transformations" (Andrew Vagin) [PSBM-39077]
  - Revert "ve/rtnl: allow move network devices into network namespace in CT" (Andrew Vagin) [PSBM-39077]
  - Revert "ve/net/ioctl: allow change net-device name with CAP_VE_NET_ADMIN" (Andrew Vagin) [PSBM-39077]
  - Revert "ve/net: allow containers create bridges with CAP_VE_NET_ADMIN" (Andrew Vagin) [PSBM-39077]
  - ve: revise permissions to allow mount smth (Andrew Vagin) [PSBM-39077]
  - cred: add ve_capable to check capabilities relative to the current VE (v2) (Andrew Vagin) [PSBM-39077]
  - quota: missing lock in dqcache_shrink_scan() (Niu Yawei)
  - ve/tty: vt -- Implement per VE support for console and terminals (Cyrill Gorcunov) [PSBM-34533 PSBM-34532 PSBM-34107 PSBM-32686 PSBM-32685]
  - arch: x86: charge page tables to memcg/kmem (Vladimir Davydov) [PSBM-33840]
  - gfp: add __get_free_kmem_pages helper (Vladimir Davydov)
  - Revert "mm: account all page tables for mm" (Vladimir Davydov)
  - fs: account anon pipe buffers to memcg/kmem (Vladimir Davydov) [PSBM-39052]
  - vmalloc: account to memcg/kmem (Vladimir Davydov) [PSBM-33839]
  - sched/fair: only update current task boost (Vladimir Davydov)
  - mm: vmscan: do not scan lruvec if it seems to be unreclaimable (Vladimir Davydov) [PSBM-35155]
  - mm: vmscan: fix do_try_to_free_pages() livelock (Lisa Du) [PSBM-35155]
  - mm: vmscan: fix the page state calculation in too_many_isolated (Vinayak Menon) [PSBM-35155]
  - oom: do not dump all tasks info on each oom kill (Vladimir Davydov)
  - oom: zap oom_report_invocation proto (Vladimir Davydov)
  - Revert "ve/mm: ignore oom_score_adj of containerized tasks on global OOM" (Vladimir Davydov)
  - memcg: count all oom kills (Vladimir Davydov)
  - config.OpenVZ: add KASan support for debug kernels (Konstantin Khorenko) [PSBM-39339]
  - ms/x86/kasan: Add message about KASAN being initialized (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Fix boot crash on AMD processors (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Flush TLBs after switching CR3 (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Fix KASAN shadow region page tables (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/init: Clear 'init_level4_pgt' earlier (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: Makefile: shut up warnings if CONFIG_COMPILE_TEST=y (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/mempool.c: kasan: poison mempool elements (Andrey Ryabinin) [PSBM-26429]
  - ms/mm, mempool: poison elements backed by slab allocator (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan, module: move MODULE_ALIGN macro into <linux/moduleloader.h> (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan, module, vmalloc: rework shadow allocation for modules (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: enable instrumentation of global variables (Andrey Ryabinin) [PSBM-26429]
  - ms/module: fix types of device tables aliases (Andrey Ryabinin) [PSBM-26429]
  - ms/kernel: add support for .init_array.* constructors (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: vmalloc: pass additional vm_flags to __vmalloc_node_range() (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: vmalloc: add flag preventing guard hole allocation (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: enable stack instrumentation (Andrey Ryabinin) [PSBM-26429]
  - ms/x86_64: kasan: add interceptors for memset/memmove/memcpy functions (Andrey Ryabinin) [PSBM-26429]
  - ms/lib: add kasan test module (Andrey Ryabinin) [PSBM-26429]
  - ms/kmemleak: disable kasan instrumentation for kmemleak (Andrey Ryabinin) [PSBM-26429]
  - ms/fs: dcache: manually unpoison dname after allocation to shut up kasan's reports (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: add kernel address sanitizer support for slub allocator (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: introduce metadata_access_enable()/metadata_access_disable() (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: share object_err function (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: introduce virt_to_obj function (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: page_alloc: add kasan hooks on alloc and free paths (Andrey Ryabinin) [PSBM-26429]
  - ms/x86_64: add KASan support (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: disable memory hotplug (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: add kernel address sanitizer infrastructure (Andrey Ryabinin) [PSBM-26429]
  - ms/compiler: introduce __alias(symbol) shortcut (Andrey Ryabinin) [PSBM-26429]
  - ms/MODULE_DEVICE_TABLE: fix some callsites (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: SLUB_DEBUG=n: use the same alloc/free hooks as for SLUB_DEBUG=y (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: move slab related stuff from util.c to slab_common.c (Andrey Ryabinin) [PSBM-26429]
  - ms/MIPS: Use NUMA_NO_NODE instead of -1 for node ID. (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/arch: use NUMA_NO_NODE (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/vmalloc: use wrapper function get_vm_area_size to caculate size of vm area (Andrey Ryabinin) [PSBM-26429]
  - ms/lib/idr.c: fix out-of-bounds pointer dereference (Andrey Ryabinin) [PSBM-26429]
  - ms/sched/numa: Fix initialization of sched_domain_topology for NUMA (Andrey Ryabinin) [PSBM-26429]
  - ms/compiler-gcc: integrate the various compiler-gcc[345].h files (Andrey Ryabinin) [PSBM-26429]
  - ms/kernel: use the gnu89 standard explicitly (Andrey Ryabinin) [PSBM-26429]
  - ploop: use GFP_NOIO in ploop_make_request (Vladimir Davydov) [PSBM-38842]
  - ub: rename private_data2 to iolimit (Vladimir Davydov)
  - ub: zap ub_dirty_pages (Vladimir Davydov)
  - ub: fix typo: s/ub_dirty_radio/ub_dirty_ratio (Vladimir Davydov)
  - ub: zap ub_tmpfs_respages (Vladimir Davydov)
  - ub: drop swapin/swapout stats (Vladimir Davydov) [PSBM-39327]
  - ub: zap unused socket accounting bits (Vladimir Davydov)
  - ve/writeback: revert ub dirty limit related stuff (Vladimir Davydov) [PSBM-33841]
  - Revert diff-writeback-throttle-writer-when-local-BDI-threshold-is-hit bits (Vladimir Davydov) [PSBM-39167]
  - ms/crypto/ghash-intel: specify context size for ghash async algorithm (Andrey Ryabinin) [PSBM-38669]
  - net: udpv6: release memcg on destroy (Vladimir Davydov) [PSBM-39084]
  - ve/fs: allow to mount devtmpfs in a non-root userns (Andrew Vagin) [PSBM-39077]
  - ve/sysfs: propagate access to all sub-directories hierarchically (Pavel Tikhomirov) [PSBM-34523]
  - ve/fs/inotify: do not impose limit on the number of instances by default (Vladimir Davydov) [PSBM-39048]
  - ve/cgroup: do not virtualize output of cgroup_path (Vladimir Davydov) [PSBM-34852]
  - ve/kmod: allow to autoload nf_log_ipv[46] (Vladimir Davydov) [PSBM-38573]
  - ve/bridge: Revert diff-ve-net-bridge-fix-deliver-vs-close-seq (Vladimir Davydov) [PSBM-12955 PSBM-38924]
  - ve/sched: Fix double put_prev_task_fair() because of trigger_cpulimit_balance() (Kirill Tkhai) [PSBM-35082]
  - ms/sched: Fix schedule_tail() to disable preemption (Kirill Tkhai)
  - mmap: call mmap prep only for regular files (Vladimir Davydov) [PSBM-23133 PSBM-25031]
  - ve/cgroup: fix mangle root in CT (Pavel Tikhomirov) [PSBM-38634]
  - pfcache/ext4: fix automatic csum calculation (Dmitry Monakhov) [PSBM-23774 PSBM-39233]
  - ve/fs/aio: aio_nr & aio_max_nr variables virtualization (Andrey Ryabinin) [PSBM-29017]
  - ve/sysctl: Introduce proc_doulongvec_minmax_virtual() (Andrey Ryabinin) [PSBM-29017]
  - ms/mm/vmscan: Do not wait for page writeback for GFP_NOFS allocations (Michal Hocko)
  - config.OpenVZ: show Odin's logo on boot (Konstantin Khorenko) [PSBM-34430]
  - ve/video/logo: show Odin's logo on boot (Andrey Ryabinin) [PSBM-34430]
  - ve/kmod: fix out-of-bounds access in call_modprobe() (Andrey Ryabinin) [PSBM-38666]
  - ms/mm: memcontrol: reclaim at least once for __GFP_NORETRY (Johannes Weiner)
  - ve/tty: vt -- Fix nil dereference due to race (Cyrill Gorcunov) [PSBM-37929]
  - cgroup: remove now unused css_depth() (Tejun Heo)
  - ploop: fix race on prealloc request (Maxim Patlasov) [PSBM-35095]
  - ve/net: Fix vlan NETIF_F_VIRTUAL feature initialization (Kirill Tkhai) [PSBM-35266]
  - ms/mm/vmscan: never isolate more pages than necessary (Vladimir Davydov) [PSBM-35275]
  - ve/radix-tree: do not account radix_tree_nodes to memcg (Vladimir Davydov) [PSBM-35205]
  - memcg: fix swap_max calculation for nested cgroups (Vladimir Davydov)
  - ve/pty: create ptmx device per ve namespace (Vladimir Davydov)
  - Revert "pty: split Unix98 init routines" (Vladimir Davydov)
  - Revert "ve/pty: containerize Unix98 driver" (Vladimir Davydov)
  - Revert "ve/pty: containerize Unix98 pty drivers" (Vladimir Davydov)
  - ve/binfmt_misc: destroy all nodes on ve stop (Vladimir Davydov) [PSBM-39154]
  - ve/binfmt_misc: do not use s_ns (Vladimir Davydov) [PSBM-39154]
  - ve/binfmt_misc: do not use sb->s_fs_info (Vladimir Davydov) [PSBM-39154]
  - Revert "nfsd/sunrpc/mqueue: use sb->s_ns instead of data in fill_super" (Vladimir Davydov) [PSBM-39154]
  - Revert "ve/sunrpc: use correct pointer to net_namespace in auth_gss.c" (Vladimir Davydov) [PSBM-39154]
  - Revert "VE/VFS: use sb->s_ns member to store namespace for mount_ns() calls" (Vladimir Davydov) [PSBM-39154]
  - ve/devtmpfs: lightweight virtualization (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "devtmpfs: per-VE mounts introduced" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "fs: add data pointer to mount_ns()" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "devtmpfs: containerize it with new obj ns operation" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "ve/devtmpfs: pass proper options string" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "ve/devtmpfs: Create required devices on container startup" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - ms/cgroup: switch to new percpu_ref API (Vladimir Davydov)
  - ms/cgroup: use percpu refcnt for cgroup_subsys_states (Vladimir Davydov) [PSBM-34174]
  - ms/cgroup: split cgroup destruction into two steps (Vladimir Davydov) [PSBM-34174]
  - ms/cgroup: reorder the operations in cgroup_destroy_locked() (Vladimir Davydov) [PSBM-34174]
  - ve/vznetstat: Fix potential exit race (Cyrill Gorcunov) [PSBM-35178]
  - ms/memcg: issue memory.high reclaim after refilling percpu stock (Vladimir Davydov)
  - ploop: dio_fastmap() must refresh bvec_merge_data (Maxim Patlasov)
  - ve/devpts: Assign containers @devpts_sb on first mount (Cyrill Gorcunov) [PSBM-34931]
  - ve/devpts: Revert 2c27d20125f5 (Cyrill Gorcunov) [PSBM-34931]
  - ve/net: Add VE_NF_CONNTRACK check in resolve_normal_ct() (Kirill Tkhai) [PSBM-35154]
  - ve: Add a ability to show ve.mount_opts (Kirill Tkhai) [PSBM-34291 PSBM-34291]
  - net/sched: restore "mpu xxx" handling (Kirill Tkhai) [PSBM-34874]
  - ve/vznetstat: Don't destroy statistics until explicitly asked (Cyrill Gorcunov) [PSBM-35178]
  - ve/vznetstat: Move VE networks statistics allocation into a common place (Cyrill Gorcunov) [PSBM-35011]
  - config.OpenVZ: limit number of legacy ptys (Konstantin Khorenko) [PSBM-34741]
  - ms/net/drivers: missing rtnl_unlock in igb_sriov_reinit() (Vasily Averin)
  - ve/drivers: Do not forget to release mismatched device found (Cyrill Gorcunov) [PSBM-34777]
  - vznetstat: Make sure the statistics is allocated for VE (Cyrill Gorcunov) [PSBM-34837]
  - tcache: allow to allocate highmem pages (Vladimir Davydov)
  - tcache: do not populate on global reclaim (Vladimir Davydov)
  - tcache: invalidate page on unsuccessful put (Vladimir Davydov)
  - tswap: do not populate on global reclaim (Vladimir Davydov) [PSBM-34876]
  - ve/net: Exclude foreign CT sockets from /proc/net/tcp{,6} (Kirill Tkhai) [PSBM-34875]
  - ve/block: Show CT allowed partitions in /proc/partitions (Kirill Tkhai) [PSBM-34805]
  - ve/net: Add ipt_mask checks into ip6table_nat (Kirill Tkhai) [PSBM-34748]
  - ms/netlabel: fix the netlbl_catmap_setlong() dummy function (Paul Moore)
  - ve/ipset: prohibit ipset from the inside CT (Kirill Tkhai) [PSBM-27793 PSBM-27792]
  - ve/net: netfilter: clear xt_table on net exit (Vladimir Davydov) [PSBM-34657]
  - ext4: ext4_ext_drop_refs ignode null path (Dmitry Monakhov)
  - ve/sysfs: do not inherit ve permissions from parent (Vladimir Davydov) [PSBM-34682]
  - tcache: teach tcache_get_node() to handle cleancache_get_page/cleancache_invalidate_inode races (Vladimir Davydov) [PSBM-34620]
  - ve/tty: call device_destroy_namespace only for containerized drivers (Andrew Vagin) [PSBM-33971]
  - ve/proc/ipc: allow mount proc and mqueue inside container (Pavel Tikhomirov) [PSBM-33304 PSBM-34523]
  - ve/rtnl: allow move network devices into network namespace in CT (Pavel Tikhomirov) [PSBM-33304 PSBM-34523]
  - ve/vfs: allow mount/umount, pivot_root with CAP_VE_SYS_ADMIN (Pavel Tikhomirov) [PSBM-33304 PSBM-34523]
  - ve/veth: fix skb leak in veth_xmit (Vladimir Davydov)
  - ve: cgroup: initialize odirect_enable, features and _randomize_va_space (Pavel Tikhomirov) [PSBM-34286 PSBM-34285]
  - ve/iptables: fix mask initialization and changing (Pavel Tikhomirov) [PSBM-34286 PSBM-34285]
  - ve: initialize fsync_enable also for non ve0 environment (Pavel Tikhomirov) [PSBM-34286 PSBM-34285 PSBM-34286]
  - ve: remove sysctl_fsync_enable and use ve_fsync_behavior instead (Pavel Tikhomirov) [PSBM-34286 PSBM-34285]
  - ve: zap ve_allow_kthreads (Vladimir Davydov)
  - ve: zap ve_glob_meminfo (Vladimir Davydov)
  - ms/netfilter: ipt_CLUSTERIP: use proper net namespace to operate CLUSTERIP (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: create proc entry under proper ipt_CLUSTERIP directory (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: add parameter net in clusterip_config_find_get (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: make clusterip_lock per net namespace (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: make clusterip_list per net namespace (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: make proc directory per net namespace (Gao feng)
  - ub: remove sock acct related resources from cgroup params (Vladimir Davydov)
  - ve/kernel: drop broken audit virtualization (Vladimir Davydov)
  - ve: Use ve_name() in devperms ioctl (Kirill Tkhai) [PSBM-34497]
  - memcg/ub: fix limit > RESOURCE_MAX case (Vladimir Davydov)
  - net/packet: cleanup packet_sk_charge (Vladimir Davydov)
  - memcg: disarm memcg_socket_limit_enabled key per each active udp proto (Vladimir Davydov)
  - memcg: fix a type in memcg_charge_kmem_nofail (Vladimir Davydov)
  - ve/caps/compilation: typo fix (Konstantin Khorenko)
  - ve/vt: Drop debug vars from console code (Cyrill Gorcunov)
  - ve/tty: vt -- Add dummy stubs (Cyrill Gorcunov) [PSBM-34324]
  - ve: caps: ignore setting wrong caps with CAP_SETPCAP (Pavel Tikhomirov) [PSBM-33693]
  - ploop: fix processing sync bios (Maxim Patlasov) [PSBM-33630]
  - ms/ext4: fix lazytime optimization (Dmitry Monakhov)
  - ms/fs: add dirtytime_expire_seconds sysctl (Dmitry Monakhov)
  - ms/fs: make sure the timestamps for lazytime inodes eventually get written (Dmitry Monakhov)
  - ms/ext4: add optimization for the lazytime mount option (Dmitry Monakhov)
  - ms/vfs: add find_inode_nowait() function (Dmitry Monakhov)
  - ms/vfs: add support for a lazytime mount option (Dmitry Monakhov) [PSBM-20411]
  - jbd2: raid amnesia protection for the journal (Dmitry Monakhov) [PSBM-15484]
  - ve/fs: check container odirect and fsync settings in __dentry_open (Dmitry Monakhov) [PSBM-17157]
  - venet: forbid assigning veip to ve w/o id (Vladimir Davydov) [PSBM-34450]
  - ve: forbid to attach to a ve cgroup w/o id (Vladimir Davydov) [PSBM-34450]
  - vznetstat: Use kzalloc instead of kmalloc plus memset (Cyrill Gorcunov)
  - ve/vdso: x86 -- Disable virtualization in native x86-32 mode (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86 -- Eliminate race in vdso allocation, v2 (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86-32 -- Implement kernel version virtualization (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86-64 -- Implement kernel version virtualization (Cyrill Gorcunov) [PSBM-30093]
  - ve/fs: Port diff-ve-fs-security-check-for-mount (Vladimir Davydov) [PSBM-33650]
  - ve/fs: Port diff-ve-fs-allow-to-remove-swapfile-hardlinks (Vladimir Davydov) [PSBM-25310 PSBM-33650]
  - ms/futex: Add another early deadlock detection check (Thomas Gleixner) [PSBM-33650]
  - ms/futex: Prevent attaching to kernel threads (Thomas Gleixner) [PSBM-33650]
  - ve/lockdep: Port diff-lockdep-taint-kernel-on-circular-locking-complains (Vladimir Davydov) [PSBM-22010 PSBM-33650]
  - ve/kernel/taint: Port diff-taint-message-enhanced-with-dump (Vladimir Davydov) [PSBM-25867 PSBM-33650]
  - ve/proc/time: Port diff-ve-proc-report-real_start_time-in-_proc_PID_stat-if-CONFIG_VE (Vladimir Davydov) [PSBM-22925 PSBM-22925 PSBM-33650]
  - ve/mm/kstat: Port diff-ve-kstat-disable-interrupts-around-seqcount-write-lock (Vladimir Davydov) [PSBM-33650]
  - ve/proc: Port diff-ve-proc-add-buffers-field-to-meminfo (Vladimir Davydov) [PSBM-19448 PSBM-34444 PSBM-33650]
  - ve: Port diff-ve-allow-taskstats-netlink-in-netns (Vladimir Davydov) [PSBM-33650]
  - vznetstat: Port diff-vznetstat-support-of-resetting-of-traffic-statistics-on-running-CTs (Vladimir Davydov) [PSBM-21243 PSBM-21243 PSBM-33650]
  - vznetstat: Port diff-vznetstat-fix-ip_vznetstat-module-load (Vladimir Davydov) [PSBM-33650]
  - vzstat: Port diff-vzstat-mem_free_areas_show-fix-nr_free-per-order-computation (Vladimir Davydov) [PSBM-26984 PSBM-33650]
  - ve/ns: Port diff-ve-ns-allow-create-new-pid-ipc-and-utc-namespaces (Vladimir Davydov) [PSBM-33650]
  - ext4: fallocate mode - convert and extend (Dmitry Monakhov) [PSBM-22381]
  - kmapset: Fix NULL pointer derefference in kmapset_set_value() (Kirill Tkhai) [PSBM-34437]
  - dummy: remove redundant dummy modules (Konstantin Khorenko) [PSBM-31333]
  - ve/net: Delete nf_frags_hdr and ct_frags (Kirill Tkhai)
  - config.OpenVZ: remove DSA option (Konstantin Khorenko)
  - ve: introduce ve.veid for setting id from userspace (Vladimir Davydov) [PSBM-34422]
  - mm/fs: Port diff-mm-debug-memallocation-caused-fs-reentrance (Vladimir Davydov) [PSBM-34112]
  - ve: Print ve_name instead of veid to the kernel log (Vladimir Davydov)
  - ve/fs: drop LOOKUP_STRICT (Vladimir Davydov)
  - ve/net: drop net->uevent_sock (Vladimir Davydov)
  - ve/printk: allow to access syslog with CAP_VE_ADMIN (Vladimir Davydov)
  - ve/ioprio: confine ioprio_{set, get}(IOPRIO_WHO_USER) to current ve (Vladimir Davydov)
  - ve/nsproxy: drop INIT_NSPROXY_COUNT (Vladimir Davydov)
  - ms/ext4: use ext4_ext_next_allocated_block instead of mext_next_extent (Dmitry Monakhov)
  - ext4: update defragmentation codebase (Dmitry Monakhov)
  - backport jbd2: jbd2_cleanup_journal_tail fix gfp allocation context (Dmitry Monakhov)
  - ms ext4: fix online resize with very large inode tables (Theodore Ts'o) [PSBM-24924]
  - ext4: Add ioctl EXT4_IOC_SET_RSV_BLOCKS V2 (Dmitry Monakhov) [PSBM-25929]
  - ext4: add mfsync support (Dmitry Monakhov) [PSBM-18567 PSBM-34909 PSBM-34910]
  - ext4: Fix error handling after filesystem abort (Dmitry Monakhov)
  - jbd2: make shure that we do not miss aborted state (Dmitry Monakhov)
  - ext4: add prepare_mmap API (Dmitry Monakhov) [PSBM-23133 PSBM-34112]
  - tswap: do not writeback pages on reclaim (Vladimir Davydov) [PSBM-34269]
  - tswap: use global lock to protect lru lists (Vladimir Davydov) [PSBM-34269]
  - tswap: shrink tswap page if swapcache page is uptodate (Vladimir Davydov) [PSBM-34269]
  - tswap: introduce tswap_delete_page helper (Vladimir Davydov) [PSBM-34269]
  - tswap: do not allocate a page on store if there is already one (Vladimir Davydov) [PSBM-34269]
  - tswap: enable exclusive gets (Vladimir Davydov) [PSBM-34269 PSBM-34269]
  - mm/frontswap: invalidate expired data on a dup-store failure (Vladimir Davydov) [PSBM-34269 PSBM-34269]
  - ve/tty: console -- Enhance container console to support per VE ops (Cyrill Gorcunov) [PSBM-34357]
  - Revert "x86/NMI: introduce dumps via nmi" (Vladimir Davydov) [PSBM-17989]
  - Revert "ms/nmi: do not call unblank_screen() from nmi_show_regs()" (Vladimir Davydov)
  - ve/net: allow to rename devices in non-ve namespaces (Kirill Tkhai) [PSBM-29810 PSBM-33645]
  - ve/net: allow containers create bridges with CAP_VE_NET_ADMIN (Kirill Tkhai) [PSBM-29808]
  - ve/net/ioctl: allow change net-device name with CAP_VE_NET_ADMIN (Kirill Tkhai) [PSBM-29808 PSBM-31819 PSBM-29808]
  - ve/net/sysfs: Porting diff-ve-net-sysfs-drop-redundant-net_ipv4_route_path and diff-ve-net-route-bring-back-route_src_check (Kirill Tkhai) [PSBM-31818]
  - ve/tty: vzcon -- Add container dummy console support (Cyrill Gorcunov) [PSBM-32686]
  - ms/vfs: Remove second variable named error in __dentry_path (Pavel Tikhomirov) [PSBM-34245]
  - ms/vfs: reinitialize error for resetart in prepend_path as in ms (Pavel Tikhomirov) [PSBM-34245]
  - net/packet: use try_get_mem_cgroup_from_mm (Vladimir Davydov)
  - ve/net/packet: do not account sock buffer to cg if kmem acct is off (Vladimir Davydov)
  - ve/net/tcp: add missing tcp_orphan_count destruction (Vladimir Davydov) [PSBM-34215]
  - ve/cgroup: Temporarily allow to mount cgroups from VE (Cyrill Gorcunov) [PSBM-34291]
  - ve/net: drop sk_buff->accounted (Vladimir Davydov)
  - ub: sync exec_ub on fork (Vladimir Davydov)
  - tswap: fix panic on store if page exists (Vladimir Davydov)
  - ve/net: Delete get_exec_env() from venet_init_net() (Kirill Tkhai)
  - Revert "mm/fs: Port diff-mm-debug-memallocation-caused-fs-reentrance" (Konstantin Khorenko) [PSBM-34112]
  - ub/fs: resurrect sync accounting (Vladimir Davydov) [PSBM-34007]
  - ub/fs: access dirtied_ub under rcu lock in __writeback_single_inode (Vladimir Davydov) [PSBM-34007]
  - ub: do not include block/blk-cgroup.h from io_prio.c (Vladimir Davydov) [PSBM-34007]
  - ub/fs: account writeback io (Vladimir Davydov) [PSBM-34007]
  - ub: ressurrect iostat and ioprio reporting (Vladimir Davydov) [PSBM-34007]
  - ub: ressurrect ioprio_set IOPRIO_WHO_UBC (Vladimir Davydov) [PSBM-34007]
  - ub: export ub_get_{mem,blkio}_css (Vladimir Davydov) [PSBM-34007]
  - ub: zap ub_{init,fini}_ioprio (Vladimir Davydov) [PSBM-34007]
  - fs/ioprio: move IOPRIO_WHO_UBC handling out of rcu section (Vladimir Davydov) [PSBM-34007]
  - ve/iptable_raw: Don't reuse VE_IP_IPTABLES bit (Kirill Tkhai) [PSBM-34192]
  - ve/net/tun: don't loose NETIF_F_VIRTUAL device feature (Pavel Tikhomirov) [PSBM-34066]
  - config.OpenVZ.debug: OpenVZ related config options are added (Konstantin Khorenko)
  - debugfs: drop set_exec_ub in file create (Vladimir Davydov)
  - ub: drop ub_cachep (Vladimir Davydov)
  - ub: hide dcachesize and oomguarpages in ub cgroup (Vladimir Davydov)
  - ve/net: Track netfilter modules per net-namespace-v3 (Kirill Tkhai) [PSBM-31451]
  - ms/bridge: superfluous skb->nfct check in br_nf_dev_queue_xmit (Kirill Tkhai)
  - ve/ip_gre: containerize per-net devices (Kirill Tkhai) [PSBM-24331]
  - venet: prevent to change network namespaces (Kirill Tkhai)
  - ve/netfilter: Add permittion check in iptable_raw pernet (Kirill Tkhai) [PSBM-27181]
  - ve/net/iptables: Add ipv6 bits into VE_IP_DEFAULT (Kirill Tkhai)
  - ve/net: CAP_VE_NET_ADMIN must be a subset of CAP_NET_ADMIN (Kirill Tkhai) [PSBM-23514]
  - netfilter: MARK -- drop off @table entity to support rhel5 containers, v2 (Kirill Tkhai) [PSBM-30390]
  - ub: Makefile: drop net.o (Vladimir Davydov)
  - cgroup: unexport css_refcnt (Vladimir Davydov)
  - ub: drop ub_debug* macros (Vladimir Davydov)
  - ub: drop CONFIG_BC_DEBUG_ITEMS (Vladimir Davydov)
  - ub: drop /proc/bc/BCID/debug (Vladimir Davydov)
  - timers: Port diff-ve-timers-convert-ve-monotonic-to-abs-time-when-setting-timerfd-2 (Pavel Tikhomirov) [PSBM-34017 PSBM-18284 PSBM-18284]
  - fs: unexport filp_cachep (Vladimir Davydov)
  - ub: introduce ub_total_pages (Vladimir Davydov) [PSBM-34035]
  - ve/memcg: pass struct mem_cgroup instead of cgroup to ub-related methods (Vladimir Davydov) [PSBM-34035]
  - ub: rework connection between ub and mem/blkio cgroups (Vladimir Davydov) [PSBM-34035]
  - ub: rename functions for reading/writing cgroup resources (Vladimir Davydov) [PSBM-34035]
  - cgroup: make cgroup_kernel_attach safe against cgroup removal (Vladimir Davydov) [PSBM-34035]
  - cgroup: add function to lookup a cgroup by pathname (Vladimir Davydov) [PSBM-34035]
  - ve/kobj: Send events per VE instead of all net-namespaces broadcasting (Cyrill Gorcunov)
  - pfcache: fix path refcounting hazzard (Dmitry Monakhov)
  - ve/veth: don't drop skb->mark if NETIF_F_VENET is set (Andrew Vagin) [PSBM-32277]
  - ve/veth: filter packages accoding with mac addresses (Andrew Vagin) [PSBM-32276]
  - ve/veth: add ability to prevent changing of a mac address from a container (Andrew Vagin) [PSBM-32276]
  - ve/veth: add ability to enable vz-specific features (Andrew Vagin) [PSBM-32276]
  - vz/veth: remove vzethdev (Andrew Vagin)
  - ve/mm: enable oom grouping rules on OOM (Vladimir Davydov) [PSBM-33849]
  - ve/oom: do not impose grouping rules if process score is adjusted (Vladimir Davydov) [PSBM-33849]
  - ve/proc: allow to set oom_score_adj from inside a container (Vladimir Davydov) [PSBM-33849]
  - ve/mm: ignore oom_score_adj of containerized tasks on global OOM (Vladimir Davydov) [PSBM-33849]
  - ve/proc: use memcg limits for showing oom_score inside CT (Vladimir Davydov) [PSBM-33849]
  - ve/memcg: add function to get max mem+swap (Vladimir Davydov) [PSBM-33849]
  - ve/net/packet: fix possible return of uninitialized var (Konstantin Khorenko)
  - net/packet: Pre-account maximum socket buffer into cg memory (v3) (Pavel Emelyanov) [PSBM-33584]
  - netlink: Make all in-cg memory be kmem accounted (Pavel Emelyanov) [PSBM-33584]
  - udp: Charge ingress buffers into cg memory (Pavel Emelyanov) [PSBM-33584]
  - tcp: Limit orphan sockets per-cg (Pavel Emelyanov) [PSBM-33584]
  - tcp: Charge socket buffers into cg memory (v3) (Pavel Emelyanov) [PSBM-33584]
  - proc: drop proc_dentry_of_dead_task (Vladimir Davydov)
  - ve/mm: print OOM info to VE log (Vladimir Davydov)
  - ub: account shmem in cached in meminfo (Vladimir Davydov) [PSBM-28682 PSBM-31006 PSBM-33637]
  - mm/bc: Port diff-bc-shmem-fix-accounting-on-error-path (Vladimir Davydov) [PSBM-22198 PSBM-33637]
  - mm: Port diff-mm-add-sysctl-vm.force_scan_thresh (Vladimir Davydov) [PSBM-29968 PSBM-33640]
  - mm: Port diff-mm-vmscan-disable-fs-related-activity-for-direct-direct-reclaim (Vladimir Davydov) [PSBM-20210 PSBM-33640]
  - ms/pagemap: Port diff-ms-pagemap-do-not-leak-physical-addresses-to-non-privileged-userspace (Vladimir Davydov) [PSBM-32308 PSBM-33640]
  - mm/fs: Port diff-mm-debug-memallocation-caused-fs-reentrance (Vladimir Davydov) [PSBM-33640]
  - ploop: added into pvd header new close signatures (Andrey Smetanin) [PSBM-33882]
  - ve/headers: Do not include uapi in exported header (Cyrill Gorcunov) [PSBM-34030]
  - ms/headers: Support GCC 5 (Cyrill Gorcunov)
  - ms/netfilter: Add {ipt,ip6t}_osf aliases for xt_osf (Kirill Tkhai) [PSBM-33929]
  - ve/net/tcp: Kill tcp_v4_kill_ve_sockets() (Kirill Tkhai) [PSBM-33755 PSBM-33926]
  - sched: Port diff-sched-make-nr_cpus-limit-support-hierarchies (Vladimir Davydov) [PSBM-33642]
  - sched: Port diff-fairsched-cpuset-add-fake-cpuset-for-containers (Vladimir Davydov) [PSBM-30878 PSBM-33642]
  - ve: zap legacy_veid_to_name (Vladimir Davydov)
  - ve: do_env_create: zap unused ve_name variable (Vladimir Davydov)
  - ve: zap legacy_name_to_veid (Vladimir Davydov)
  - ve: zap __find_ve_by_id (Vladimir Davydov)
  - sched: Port cpustat related patches (Vladimir Davydov) [PSBM-26714 PSBM-28403 PSBM-28500 PSBM-26587 PSBM-23431 PSBM-28277 PSBM-33642]
  - sched: use cpuacct->cpustat for showing cpu stats (Vladimir Davydov) [PSBM-33642]
  - sched: Revert "SCHED: rework cputime accounting (v2)" (Vladimir Davydov) [PSBM-33642]
  - sched: Port diff-sched-return-only-virtual-cpus-in-sched_getaffinity (Vladimir Davydov) [PSBM-25367 PSBM-27200 PSBM-33642]
  - sched: Port diff-sched-clear-prev-entity-if-curr-is-dequeued (Vladimir Davydov) [PSBM-33642]
  - ms/sched: Port diff-sched-increase-SCHED_LOAD_SCALE-resolution (Vladimir Davydov) [PSBM-33642]
  - sched: Port diff-sched-initialize-runtime-to-non-zero-on-cfs-bw-set (Vladimir Davydov) [PSBM-17658 PSBM-17658 PSBM-33642]
  - sched/vziolimit: Port diff-fairsched-do-not-account-iothrottled-tasks-in-loadavg-core (Vladimir Davydov) [PSBM-33642]
  - ub/netfilter: account x_tables to ub (Vladimir Davydov) [PSBM-20089]
  - cgroup: Mangle cgroups root from inside of VE view (Cyrill Gorcunov) [PSBM-33757]
  - cgroup: mount -- Disable mounting from inside of VE context (Cyrill Gorcunov) [PSBM-33664]
  - fairsched: Port diff-fairsched-optimize-sys_fairsched_mvpr (Vladimir Davydov) [PSBM-33642]
  - ve: remove fairsched node only in the legacy mode (Vladimir Davydov) [PSBM-33833]
  - ms/memcg: do not call high reclaim if !__GFP_WAIT (Vladimir Davydov)
  - fairsched: fix output of /proc/fairsched[2] (Vladimir Davydov) [PSBM-33806]
  - ub: ub_dirty_limits: obtain ram size from memcg (Vladimir Davydov)
  - shmem: fix tmpfs_ram_pages (Vladimir Davydov)
  - memcg: add function to get container's ram size (Vladimir Davydov)
  - ve/kmod: Add rules for new {ip, ip6, x}table modules (Kirill Tkhai) [PSBM-33631]
  - ve/kmod: Add rules for autoloading (new) nf_tables (Kirill Tkhai) [PSBM-33631]
  - ms/memcg: port memory.high (Vladimir Davydov)
  - ms/memcg: use CFTYPE_NOT_ON_ROOT for memory.low and memory.oom_guarantee (Vladimir Davydov)
  - ms/memcg: rename memory.low_limit_in_bytes to memory.low (Vladimir Davydov)
  - ub: reset UB_OOMGUARPAGES.held on css free (Vladimir Davydov) [PSBM-20089]
  - memcg/bc: sync UB_OOMGUARPAGES (Vladimir Davydov) [PSBM-20089]
  - memcg: count oom kills (Vladimir Davydov) [PSBM-20089]
  - memcg: add oom_guarantee (Vladimir Davydov) [PSBM-20089]
  - ub: cleanup cgroup attaching code (Vladimir Davydov)
  - fairsched: add cpu.proc.loadavg to the cpu cgroup (Vladimir Davydov) [PSBM-32284]
  - fairsched: switch methods showing stats from numeric id to name (Vladimir Davydov) [PSBM-32284]
  - venet: Cleanup ip address on ve exit (Cyrill Gorcunov)
  - bc: initialize all beancounters as unlimited (Vladimir Davydov)
  - ms/idr: print a stack dump after ida_remove warning (Vasily Averin)
  - ve/cgroup: Guard @features and @iptables with test if VE is inactive (Cyrill Gorcunov)
  - memcg/bc: sync UB_DCACHESIZE (Vladimir Davydov) [PSBM-20089]
  - memcg/bc: account dcache size (Vladimir Davydov) [PSBM-20089]
  - bc/mm: zap pte_ptrs and same_ub macros (Vladimir Davydov)
  - ub: zap ub_reclaim_rate_limit (Vladimir Davydov)
  - mm/shmem: unexport shmem_file_operations (Vladimir Davydov)
  - bc/mm: zap page->{slab_ubs,kmem_ub} (Vladimir Davydov)
  - ub: zap /proc/bc/ID/dcacheinfo (Vladimir Davydov) [PSBM-33760]
  - ub: zap /proc/bc/ID/slabinfo (Vladimir Davydov)
  - ub: get rid of pincount (Vladimir Davydov)
  - ub: do not show dead beancounters under /proc/bc (Vladimir Davydov)
  - ub: kill ub_dcache_threshold sysctl knob (Vladimir Davydov)
  - ub: drop ubc_ioprio knob (Vladimir Davydov)
  - ub: sync memcg before setting limit via sys_setublimit (Vladimir Davydov)
  - ub: do not apply memcg limits on attaching via sys_setluid (Vladimir Davydov)
  - ub: simplify memcg synchronization (Vladimir Davydov)
  - ub: zap show_ub_mem in Alt+SysRQ+m (Vladimir Davydov)
  - ub: remove some dead code (Vladimir Davydov)
  - bc: deprecate kmemsize limit (Vladimir Davydov) [PSBM-20089]
  - bc/memcg: assure swap->held/maxheld < swap->limit for beancounters (Vladimir Davydov) [PSBM-20089]
  - bc/memcg: show correct mem/swap failcnt for beancounters (Vladimir Davydov) [PSBM-20089]
  - bc/memcg: show correct swap max for beancounters (Vladimir Davydov) [PSBM-20089]
  - ploop: fix busyloop on secondary discard bio (Andrey Smetanin) [PSBM-30451]
  - ploop: add a separate queue for discard bio-s (v2) (Andrey Smetanin) [PSBM-27676]
  - bc/oom: zap oom kill related stuff (Vladimir Davydov) [PSBM-33732]
  - proc/oom: fix oom_score output (Vladimir Davydov)
  - bc/sysinfo: remove dead code (Vladimir Davydov)
  - ub/dcache: get rid of dcache accounting related stuff (Vladimir Davydov) [PSBM-33729]
  - ub: remove CONFIG_BC_RSS_ACCOUNTING (Vladimir Davydov)
  - ve/cgroups: Align ve_cftypes assignments (Cyrill Gorcunov)
  - ve/cgroup: Temporary allow writting cgroups files inside container (Cyrill Gorcunov) [PSBM-33664]
  - ve/cgroup: Allow mounting existing cgroups inside container (Cyrill Gorcunov) [PSBM-33664]
  - Revert "ploop: add a separate queue for discard bio-s (v2)" (Konstantin Khorenko) [PSBM-33633]
  - Revert "ploop: fix busyloop on secondary discard bio" (Konstantin Khorenko) [PSBM-33633]
  - ve/net: Fix unbalanced double spin_unlock() in tcp_v4_kill_ve_sockets() (Kirill Tkhai) [PSBM-33585]
  - ub: properly charge and uncharge shmem (Andrew Perepechko)
  - ve/net_ns: Don't forget to put_ve on error path (Cyrill Gorcunov)
  - ve: Add support of iptables mask (Cyrill Gorcunov) [PSBM-32737]
  - ve: Add support of features mask (Cyrill Gorcunov) [PSBM-32737]
  - config.OpenVZ: enable idle memory tracking (Konstantin Khorenko) [PSBM-32460]
  - ploop: added printk of function, line, backtrace before ploop_set_error (Andrey Smetanin)
  - ploop: force FUA of nullified blocks for BAT grow (Andrey Smetanin) [PSBM-31969]
  - ploop: mark reloc reqs to force FUA/fsync(kaio) for index update I/O (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: mark reloc reqs to force FUA before write of relocated data (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: make image fsync at I/O complete if it's required by FUA/fsync force flag or by req->req_rw (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: do preflush or postfua according force FUA/flush flags, and delay FUA if possible but add force FLUSH to req if so (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: direct: to support truly FLUSH/FUA of req we need mark first bio FLUSH, write all bios and mark last bio as FLUSH/FUA (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: define struct ploop_request->state flags to force pre FLUSH before write IO and FUA/fsync at I/O complete (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: added ploop_req_delay_fua_possible() func that detects possible delaying of upcoming FUA to index update stage (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: fix busyloop on secondary discard bio (Andrey Smetanin) [PSBM-30451]
  - ploop: notify blktrace about bio completions (Andrey Smetanin)
  - ploop: add a separate queue for discard bio-s (v2) (Andrey Smetanin) [PSBM-27676]
  - ploop: warning on "disk full" condition (Andrey Smetanin)
  - ploop: make manual abort transition verbose (Andrey Smetanin)
  - ploop: zero blocks on reuse (Andrey Smetanin) [PSBM-25391]
  - ploop: roll back alloc_head on ENOSPC (Andrey Smetanin) [PSBM-24694]
  - ploop: put top-delta back if merge failed (Andrey Smetanin) [PSBM-25252]
  - ploop: fix spurious hole complains (Andrey Smetanin)
  - ploop: expose open_count to sysfs (Andrey Smetanin) [PSBM-24754]
  - ploop: ensure non-empty delta list on running ploop (Andrey Smetanin) [PSBM-25102]
  - ploop: bug on bad fiemap (v2) (Andrey Smetanin) [PSBM-26762]
  - ploop: add ioctl to limit size of top delta (v2) (Andrey Smetanin) [PSBM-22002]
  - ploop: prioritize BAT operations (Andrey Smetanin)
  - ploop: fix race in ploop_tracker_init() (Andrey Smetanin) [PSBM-22993]
  - ploop: fix check_zero optimization v2 (Andrey Smetanin) [PSBM-23452]
  - ploop: fix a race condition on relocation of blocks (Andrey Smetanin) [PSBM-23905]
  - ploop: support 4K block-size of host block-device (Andrey Smetanin) [PSBM-21989]
  - ploop: skip writes of zeroes to unallocated blocks by default (Andrey Smetanin) [PSBM-22506 PSBM-22381]
  - ploop: reverse order of fdatawait and fsync fop (Andrey Smetanin)
  - ploop: fix sync delay for sync requests (Andrey Smetanin) [PSBM-22381]
  - ploop: fix iblk-to-sector calculations (Andrey Smetanin) [PSBM-22961]
  - ploop: rework accounting images_size (Andrey Smetanin) [PSBM-20432]
  - ploop: report holes in pio_direct (v2) (Andrey Smetanin) [PSBM-20770]
  - ploop: prevent disclosure 4 bytes of the stack kernel (Andrey Smetanin)
  - ploop: prevent dangerous ploop-umount (Andrey Smetanin) [PSBM-21474]
  - ploop: check new size of block device on ioctl(GROW) (Andrey Smetanin) [PSBM-21027]
  - ploop: fix dio_fsync wait (Andrey Smetanin) [PSBM-18049]
  - ploop: fix accounting ploop_io_images_size (Andrey Smetanin) [PSBM-19906]
  - ve/cgroups: Allow to attach non-self into ve cgroups, v3 (Cyrill Gorcunov) [PSBM-33561]
  - ve: device cgroup -- Implement devcgroup_seq_show_ve (Cyrill Gorcunov) [PSBM-33555]
  - mm/vmalloc: do not account vmap_area to memcg (Vladimir Davydov)
  - mm/tswap/tcache: enable tcache and tswap by default (Vladimir Davydov) [PSBM-31757 PSBM-32063]
  - ve/cgroups: fake num_cgroups in /proc/cgroups output (Vasily Averin) [PSBM-33400]
  - ve/uts_ns: Implement cgroup interface to configure ve's os_release (Kirill Tkhai) [PSBM-32273]
  - ve/fs/devmnt: process mount options (Kirill Tkhai) [PSBM-32273]
  - ve/devmnt: Introduce ve::devmnt list (Kirill Tkhai) [PSBM-32273]
  - ve/netns: Set null only for nets ve is a keeper of (Cyrill Gorcunov) [PSBM-33480]
  - ve/netfilter: ve_printk for "nf_conntrack: table full" (Vasily Averin)
  - ve/net/printk: net_veboth_ratelimited introduced (Vasily Averin)
  - ub: drop host node (Vladimir Davydov) [PSBM-33487]
  - ve/fairsched: drop host node (Vladimir Davydov) [PSBM-33487]
  - ve/cgroups: Drop virtualization code, v5 (Cyrill Gorcunov)
  - bc/ioprio: ub_set_ioprio() declaration if !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - vzstat: KSTAT_PERF_ENTER redefinition fixed when !CONFIG_VE (Kir Kolyshkin)
  - ve/ppc: remove vdso32_pages declaration from ppc elf.h (Kir Kolyshkin)
  - ub/kernel: use get_task_ub() - fix compile for !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - ve/proc/meminfo.c: use mm_ub() macro (Kir Kolyshkin)
  - ve/printk/ppc: fix asm modifier in DEFINE_STRUCT_MEMBER_ALIAS (Vladimir Davydov)
  - ve/ppc: wire OpenVZ-specific syscalls (Kir Kolyshkin)
  - ve/ppc: include OpenVZ-specific Kconfigs for ppc (Kir Kolyshkin)
  - ms/ppc: define TIOSAK (fix tty_ioctl() compilation) (Kir Kolyshkin)
  - ve/ppc: include ve.h in process.c (Kir Kolyshkin)
  - ve/netfilter: put appropriate part under CONFIG_VE_IPTABLES (Kir Kolyshkin)
  - bc/mm/shmem.c: use mm_ub() macro to avoid compilation errors if !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - bc/mm/oom: put UB_OOM_MANUAL_SCORE_ADJ bit check under CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - bc/mm/{memory.c,mprotect.c}: use mm_ub() macro (Kir Kolyshkin)
  - ve/mm/filemap.c: include virtinfo.h for !CONFIG_BC_IO_ACCOUNTING case (Kir Kolyshkin)
  - ve/mm: include virtinfo.h for !CONFIG_BC_IO_ACCOUNTING case (Kir Kolyshkin)
  - ve/sched: put move_task_groups() under CONFIG_CFS_CPULIMIT (Kir Kolyshkin)
  - ve/kernel: fix kernel_thread() compilation for !CONFIG_VE (Kir Kolyshkin)
  - bc/dcache: add parameter names to ub_dcache_reclaim() declaration for !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - fs/nfs/direct.c: include virtinfo.h (Kir Kolyshkin)
  - bc/io_acct: define get_io_ub() for !CONFIG_BC_IO_ACCOUNTING case (Kir Kolyshkin)
  - ve/sched: cpu_cgroup_get_stat() declaration in !CONFIG_VZ_FAIRSCHED case (Kir Kolyshkin)
  - bc: add struct seq_file declaration - fix virtinfo.h compile warning (Kir Kolyshkin)
  - bc: add {,un}charge_beancounter_fast define for !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - bc: for_each_beancounter() definition for !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - ms/sysfs: do not account sysfs_ino_ida allocations to memcg (Vladimir Davydov)
  - ms/gfp: add __GFP_NOACCOUNT (Vladimir Davydov)
  - ve/cgroup: devices -- Modify exception list for docker sake (Cyrill Gorcunov)
  - ve/tty: Prevent iteration with NULL dev in device_destroy_namespace() (Kirill Tkhai) [PSBM-33239]
  - venet: Don't kill venet0 on the node (Cyrill Gorcunov) [PSBM-33281]
  - vziolimit: add bc cgroup control (Dmitry Monakhov) [PSBM-32281]
  - ms/exit: pidns: alloc_pid() leaks pid_namespace if child_reaper is exiting (Oleg Nesterov)
  - config.OpenVZ: add "vziolimit" module (Konstantin Khorenko) [PSBM-20104]
  - vziolimit: correct copyright info (Konstantin Khorenko)
  - vziolimit: add blktrace hooks (Dmitry Monakhov) [PSBM-20104]
  - cfq: add virtinfo hook for vziolimits (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: compilation fix (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-iostat-wire-vziolimit-into-deadline-io_scheduler (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-introduce-atomic-flags-bit-field-shadow (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-vziolimit-charge-fuse-requests-into-iops-throttler (Dmitry Monakhov) [PSBM-10626 PSBM-20104]
  - vziolimit: port diff-vziolimit-dont-change-state-at-speed-change (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-vziolimit-fix-rounding-error-in-throttler (Dmitry Monakhov) [PSBM-13302 PSBM-20104]
  - vziolimit: port diff-ubc-iolimit-rework-async-iops-limit (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-iolimit-precharge-dirty-pages-opensource (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-iolimit-keep-charge-in-throttler (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-implement-the-iops-limiting (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-vziolimit-set-GPL-license (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-vziolimit-no-top-bc (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-wakup-at-kill-and-limit-change (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-dont-throttle-flushers (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-vzctl-api (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-handle-virtinfo-events (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-plain-throttler (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-initial-skeleton-opensource (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: remove dummy module (Dmitry Monakhov) [PSBM-20104]
  - ve: add config options for vzlist and vznetstat modules (Kirill Tkhai) [PSBM-19217]
  - ms/mm/memcg: do not use vmalloc for mem_cgroup allocations (Vladimir Davydov)
  - ms/mm/memcg: fix memcg_size() calculation (Vladimir Davydov)
  - ve: Make get_ve_by_id() lockless (Kirill Tkhai)
  - mm/memcg: remove memcg from kmemcg_sharers list on css free (Vladimir Davydov)
  - ve: Revert "ve/pid_ns: reap zombies with external parent on container's init exit" (Kirill Tkhai) [PSBM-33254]
  - venet: Dont create venet-s in sub net namespaces (v2) (Cyrill Gorcunov) [PSBM-29811]
  - bc: Drop redundant put_beancounter in ubstat_get_list (Cyrill Gorcunov)
  - bc: Add missing put_beancounter call (Cyrill Gorcunov) [PSBM-29895]
  - ms/mm/vmscan.c: don't forget to free shrinker->nr_deferred (Vladimir Davydov)
  - mm: transcendent swap cache (Vladimir Davydov) [PSBM-32063]
  - mm/tcache: change API to conform to tswap (Vladimir Davydov) [PSBM-31915]
  - ve/net/ppp: oops in oops in ppp_register_net_channel() (Vasily Averin) [PSBM-29975]
  - ve/netfilter: Check for permittions while looking for target and match (Kirill Tkhai) [PSBM-28910]
  - ve/netfilter: Add autoloading of sockopt modules (Kirill Tkhai) [PSBM-28910]
  - ve/kmod: Port autoloading from CT (Kirill Tkhai) [PSBM-28910]
  - ve/kmod: Move check of VE permitions from __call_usermodehelper_exec() to upper functions (Kirill Tkhai) [PSBM-28910]
  - ms/sched: Remove lockdep check in sched_move_task() (Kirill Tkhai)
  - iolimits: fix double I/O accounting for iolimits (Andrew Perepechko)
  - ve/tty: Don't WARN_ONCE on /dev/console disabling (Cyrill Gorcunov) [PSBM-32728]
  - ve/tty: Disable /dev/console in VE environment (Cyrill Gorcunov) [PSBM-32686]
  - mm/tcache: update to use new cleancache API (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: remove limit on the number of cleancache enabled filesystems (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: forbid overriding cleancache_ops (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: zap uuid arg of cleancache_init_shared_fs (Vladimir Davydov) [PSBM-31915]
  - ms/fs/ocfs2: copy fs uuid to superblock (Vladimir Davydov) [PSBM-31915]
  - mm: introduce transcendent file cache (Vladimir Davydov) [PSBM-31757]
  - ms/memcg: port low limit (Vladimir Davydov) [PSBM-31752]
  - ve/headers: Export VE headers (Cyrill Gorcunov) [PSBM-31973]
  - ms/slub: make dead caches discard free slabs immediately (Vladimir Davydov) [PSBM-25018]
  - ms/slub: never fail to shrink cache (Vladimir Davydov) [PSBM-25018]
  - ms/slub: fix off by one in number of slab tests (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: reparent list_lrus and free kmemcg_id on css offline (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: add helpers to isolate items (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: free memcg_caches slot on css offline (Vladimir Davydov) [PSBM-25018]
  - ms/slab: use css id for naming per memcg caches (Vladimir Davydov) [PSBM-25018]
  - ms/slab: link memcg caches of the same kind into a list (Vladimir Davydov) [PSBM-25018]
  - ms/slab: embed memcg_cache_params to kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab_common: move kmem_cache definition to internal header (Vladimir Davydov) [PSBM-25018]
  - ms/fs: make shrinker memcg aware (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: introduce per-memcg lists (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: organize all list_lrus to list (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: get rid of ->active_nodes (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: add rwsem to synchronize against memcg_caches arrays relocation (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: rename some cache id related variables (Vladimir Davydov) [PSBM-25018]
  - ms/vmscan: per memory cgroup slab shrinkers (Vladimir Davydov) [PSBM-25018]
  - ms/fs: consolidate {nr,free}_cached_objects args in shrink_control (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: introduce list_lru_shrink_{count,walk} (Vladimir Davydov) [PSBM-25018]
  - ms/mm: vmscan: invoke slab shrinkers from shrink_zone() (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_slab_caches and memcg_slab_mutex (Vladimir Davydov) [PSBM-25018]
  - ms/slub: use sysfs'es release mechanism for kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/slub: fix memcg_propagate_slab_attrs (Vladimir Davydov) [PSBM-25018]
  - ms/slub: do not drop slab_mutex for sysfs_slab_add (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_name argument of memcg_create_kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap __memcg_{charge,uncharge}_slab (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: fix possible use-after-free in memcg_kmem_get_cache() (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: use generic slab iterators for showing slabinfo (Vladimir Davydov) [PSBM-25018]
  - ms/slab: print slabinfo header in seq show (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab: Give s_next and s_stop slab-specific names (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab: Sharing s_next and s_stop between slab and slub (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_can_account_kmem (Vladimir Davydov) [PSBM-25018]
  - ploop: fixed deadlock by interrupts off inside lookup_extent_mapping (Andrey Smetanin) [PSBM-32614]
  - config.OpenVZ/audit: Disable audit subsystem in config (Cyrill Gorcunov) [PSBM-32261]
  - ploop: fix deadlock inside dio_alloc_sync - lock inside while() but unlock outside (Andrey Smetanin)
  - net/vznetstat: remove redirection remains (Konstantin Khorenko) [PSBM-32912]
  - vznetstat: alloc ve->stat if necessary (Kirill Tkhai) [PSBM-32072]
  - Revert "VE: export more headers to userspace" (Konstantin Khorenko) [PSBM-31973]
  - VE: export more headers to userspace (Konstantin Khorenko)
  - Makefile: make VZVERSION evaluated dynamically (Konstantin Khorenko)
  - dummy: add dummy modules for service vz init script (Konstantin Khorenko) [PSBM-31333]
  - vzstat: port vzstat module from rh6 (Vladimir Davydov)
  - vzlist: return second pid in container's namespace (Dmitry Guryanov) [PSBM-20095]
  - vzlist: fix get_vepids function (Dmitry Guryanov) [PSBM-20095]
  - vzlist: fix obvious compilation errors (Dmitry Guryanov) [PSBM-20095]
  - vzlist: add vzlist from 2.6.32-x as is (Dmitry Guryanov) [PSBM-20095]
  - vznetstat: don't use vehooks (Dmitry Guryanov) [PSBM-20094]
  - vznetstat: fix compilation (Konstantin Khorenko) [PSBM-20094]
  - vznetstat: apply vznetstat patches from 2.6.32 as is (Dmitry Guryanov) [PSBM-20094]
  - ms/memcg: move memcg_update_cache_size to slab_common.c (Vladimir Davydov)
  - ms/memcg: don't call memcg_update_all_caches if new cache id fits (Vladimir Davydov)
  - ms/memcg: move memcg_{alloc,free}_cache_params to slab_common.c (Vladimir Davydov)
  - ms/mm: vmscan: remove shrink_control arg from do_try_to_free_pages() (Vladimir Davydov)
  - ms/mm: vmscan: move call to shrink_slab() to shrink_zones() (Vladimir Davydov)
  - ms/mm: vmscan: respect NUMA policy mask when shrinking slab on direct reclaim (Vladimir Davydov)
  - ms/mm: vmscan: call NUMA-unaware shrinkers irrespective of nodemask (Vladimir Davydov)
  - ms/slab: delete cache from list after __kmem_cache_shutdown succeeds (Vladimir Davydov)
  - ms/memcg: cleanup kmem cache creation/destruction functions naming (Vladimir Davydov)
  - ms/memcg: memcg_kmem_create_cache: make memcg_name_buf statically allocated (Vladimir Davydov)
  - ms/memcg: get rid of memcg_create_cache_name (Vladimir Davydov)
  - ms/memcg, slab: simplify synchronization scheme (Vladimir Davydov)
  - ms/memcg, slab: merge memcg_{bind,release}_pages to memcg_{un}charge_slab (Vladimir Davydov)
  - ms/memcg, slab: do not schedule cache destruction when last page goes away (Vladimir Davydov)
  - ms/mm: get rid of __GFP_KMEMCG (Vladimir Davydov)
  - ms/mm/sl[aou]b: Move kmallocXXX functions to common code (Christoph Lameter)
  - ms/slob: Rework #ifdeffery in slab.h (Christoph Lameter)
  - ms/sl[au]b: charge slabs to kmemcg explicitly (Vladimir Davydov)
  - ms/slub: rework sysfs layout for memcg caches (Vladimir Davydov)
  - ms/slub: adjust memcg caches when creating cache alias (Vladimir Davydov)
  - ms/memcg, slab: do not destroy children caches if parent has aliases (Vladimir Davydov)
  - ms/memcg, slab: unregister cache from memcg before starting to destroy it (Vladimir Davydov)
  - ms/memcg, slab: separate memcg vs root cache creation paths (Vladimir Davydov)
  - ms/memcg, slab: never try to merge memcg caches (Vladimir Davydov)
  - ms/memcg, slab: cleanup memcg cache creation (Vladimir Davydov)
  - ms/memcg: fix mutex not unlocked on memcg_create_kmem_cache fail path (Vladimir Davydov)
  - ms/memcg: remove unused code from kmem_cache_destroy_work_func (Vladimir Davydov)
  - ms/memcg: rework memcg_update_kmem_limit synchronization (Vladimir Davydov)
  - ms/memcg: do not account memory used for cache creation (Glauber Costa)
  - ms/memcg: also test for skip accounting at the page allocation level (Glauber Costa)
  - ms/memcg: remove KMEM_ACCOUNTED_ACTIVATED flag (Vladimir Davydov)
  - ms/memcg, slab: RCU protect memcg_params for root caches (Vladimir Davydov)
  - ms/memcg: get rid of kmem_cache_dup() (Vladimir Davydov)
  - ms/memcg, slab: fix races in per-memcg cache creation/destruction (Vladimir Davydov)
  - ms/memcg: fix possible NULL deref while traversing memcg_slab_caches list (Vladimir Davydov)
  - ms/memcg, slab: fix barrier usage when accessing memcg_caches (Vladimir Davydov)
  - ms/memcg, slab: clean up memcg cache initialization/destruction (Vladimir Davydov)
  - ms/memcg, kmem: use cache_from_memcg_idx instead of hard code (Qiang Huang)
  - ms/memcg, kmem: rename cache_from_memcg to cache_from_memcg_idx (Qiang Huang)
  - ms/memcg, kmem: use is_root_cache instead of hard code (Qiang Huang)
  - ms/memcg, slab: kmem_cache_create_memcg(): fix memleak on fail path (Vladimir Davydov)
  - ms/slab: clean up kmem_cache_create_memcg() error handling (Vladimir Davydov)
  - ms/memcg: don't need to free memcg via RCU or workqueue (Li Zefan)
  - ms/memcg: kill memcg refcnt (Li Zefan)
  - ms/memcg: don't need to get a reference to the parent (Li Zefan)
  - ms/memcg: use css_get/put for swap memcg (Li Zefan)
  - ms/memcg: use css_get/put when charging/uncharging kmem (Li Zefan)
  - ms/memcg: don't use mem_cgroup_get() when creating a kmemcg cache (Li Zefan)
  - ms/memcg: use css_get() in sock_update_memcg() (Li Zefan)
  - ms/vfs: fix dentry LRU list handling and nr_dentry_unused accounting (Linus Torvalds)
  - vmscan: don't retry shrink_slab if current is dying (Vladimir Davydov)
  - ms/fs/super.c: fix lru_list leak for real (Al Viro)
  - ms/super: fix for destroy lrus (Glauber Costa)
  - ms/list_lru: dynamically adjust node arrays (Glauber Costa) [PSBM-42319]
  - mm: workingset: convert shrinker to count/scan API (Vladimir Davydov)
  - ms/fs: convert inode and dentry shrinking to be node aware (Dave Chinner)
  - ms/list_lru: remove special case function list_lru_dispose_all. (Glauber Costa)
  - ms/dcache: convert to use new lru list infrastructure (Dave Chinner)
  - ms/shrinker: Kill old ->shrink API. (Dave Chinner)
  - ms/shrinker: convert remaining shrinkers to count/scan API (Dave Chinner)
  - ms/hugepage: convert huge zero page shrinker to new shrinker API (Glauber Costa)
  - ms/drivers: convert shrinkers to new count/scan API (Vladimir Davydov) [PSBM-34838 PSBM-42317]
  - ms/fs: convert fs shrinkers to new scan/count API (Vladimir Davydov) [PSBM-34838]
  - ms/xfs: rework buffer dispose list tracking (Dave Chinner)
  - ms/xfs-convert-buftarg-lru-to-generic-code-fix (Andrew Morton)
  - ms/xfs: convert buftarg LRU to generic code (Dave Chinner)
  - ms/vmscan: per-node deferred work (Glauber Costa)
  - ms/shrinker: add node awareness (Dave Chinner)
  - ms/inode: move inode to a different list inside lock (Glauber Costa)
  - ms/inode: convert inode lru list to generic lru list code. (Dave Chinner)
  - ms/shrinker: convert superblock shrinkers to new API (Dave Chinner) [OVZ-6646 PSBM-42760]
  - ms/mm: new shrinker API (Dave Chinner)
  - ms/dcache: remove dentries from LRU before putting on dispose list (Dave Chinner)
  - ms/dentry: move to per-sb LRU locks (Dave Chinner)
  - ms/dcache: convert dentry_stat.nr_unused to per-cpu counters (Dave Chinner)
  - ms/super: fix calculation of shrinkable objects for small numbers (Glauber Costa)
  - ms/fs: bump inode and dentry counters to long (Glauber Costa)
  - bc: Allocate beancounters without limits when cgroup interface is used (Cyrill Gorcunov)
  - ve/nsproxy: Allow to unshare network namespace (Cyrill Gorcunov)
  - ve/cgroup: Fix missing cgroup::cgroup_ve assignment (Cyrill Gorcunov)
  - ve/cgroup: devices -- Fix memory leaking in sysfs_perms_open (Cyrill Gorcunov)
  - ve/signal: Fix NULL dereference in sig_ve_ignored (Cyrill Gorcunov)
  - ve/dcache: Allow to read proc links if new mount namespace is used (Cyrill Gorcunov)
  - ve/cgroup: Fix systemd virtualization (Cyrill Gorcunov)
  - ve/cgroup: Allow non-virtualized hierarchies in containers (Cyrill Gorcunov) [PSBM-30052]
  - ms/sched/fair: Fix division by zero sysctl_numa_balancing_scan_size (Kirill Tkhai)
  - ms/sched/numa: fix unsafe get_task_struct() in task_numa_assign() (Kirill Tkhai)
  - ms/sched: Fix race between task_group and sched_task_group (Kirill Tkhai)
  - Revert "ve: Port task_struct:vetask_list and while_each_thread_ve() etc" compilation fix (Konstantin Khorenko)
  - ve/proc: vestat_seq_show: Fix kernel OOPs (Cyrill Gorcunov)
  - ms/mm: softdirty: keep bit when zapping file pte (Peter Feiner)
  - rh/mm: Drop off Live Kernel Self Migration (TRACK_DIRTY_PAGES) (Cyrill Gorcunov)
  - ve/devtmpfs: Create required devices on container startup (Cyrill Gorcunov) [PSBM-29214]
  - ve: Use own uevent_seqnum for every VE (Kirill Tkhai) [PSBM-17903]
  - bc/proc: fix sleep in atomic bug in ub_{start,next,stop} (Vladimir Davydov)
  - ve/fs: Use ve_printk in fs/binfmt_aout.c (Kirill Tkhai) [PSBM-17903]
  - ve: Ignore signals from wrong ve (Kirill Tkhai) [PSBM-17903]
  - ve/fs: Port fs.fsync-enable and fs.odirect_enable sysctls (Kirill Tkhai) [PSBM-17903]
  - ve/mm/swap: do not uncharge on reuse_swap_page (Vladimir Davydov)
  - ms/fs/notify: don't show f_handle if exportfs_encode_inode_fh failed (Andrey Vagin)
  - ms/fsnotify/fdinfo: use named constants instead of hardcoded values (Andrey Vagin)
  - ms/kcmp: fix standard comparison bug (Rasmus Villemoes)
  - ms/cbq: now_rt removal (Vasily Averin)
  - ms/cbq: incorrectly low bandwidth setting blocks limited traffic (Vasily Averin)
  - ms/tty: Fix potential use after free in release_one_tty (Cyrill Gorcunov)
  - ploop: purge plo->map on merge (Maxim Patlasov) [PSBM-27891]
  - ploop: set PLOOP_MAP_IDENTICAL bit on merge (Maxim Patlasov) [PSBM-24408]
  - ploop: update i_size on preallocation (Maxim Patlasov)
  - ploop: support of explicit unplug: unplug callback (Maxim Patlasov) [PSBM-18168]
  - ploop: support of explicit unplug: start and stop plugging (Maxim Patlasov) [PSBM-18168]
  - ploop: check ENOSPC callback (Maxim Patlasov) [PSBM-18168]
  - ploop: port io_kaio module (Maxim Patlasov) [PSBM-18168]
  - ploop: congestion detection (Maxim Patlasov) [PSBM-18168 PSBM-11585]
  - ploop: generic support of writeback control (Maxim Patlasov) [PSBM-18168 PSBM-11585]
  - ploop: check error from freeze_bdev (Maxim Patlasov) [PSBM-28460]
  - ploop: fix file->f_count leak in raw_complete_snapshot() (Kirill Tkhai)
  - ub: show dead beancounters in procfs v3 (Vladimir Davydov)
  - ub: convert to cgroup (Vladimir Davydov)
  - ub: decouple from alien cgroups (Vladimir Davydov)
  - ub: (partial) fix for meminfo (Vladimir Davydov)
  - ub: introduce ub_page_stat (Vladimir Davydov)
  - ub: do not sync ubparms with memory cgroup (Vladimir Davydov)
  - ub: add ub_name to safely store CT name (Vladimir Davydov)
  - ub: drop CONFIG_BC_KEEP_UNUSED (Vladimir Davydov)
  - ub: get rid of get/put_beancounter_longterm (Vladimir Davydov) [PSBM-20089]
  - ub: rm include/bc/kmem.h (Vladimir Davydov) [PSBM-20089]
  - ve/bc/mm: port UB_PRIVVMPAGES, UB_SHMPAGES, and UB_LOCKEDPAGES accounting (Vladimir Davydov) [PSBM-20089]
  - ve/netfilter: Implement pernet net->ct.max / virtualize "nf_conntrack_max" sysctl (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Implement pernet expect_max / virtualize "net.netfilter.nf_conntrack_expect_max" sysctl (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Add pernet permission checks in ip_tables (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Implement net_ipt_permitted() etc (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Implement ip_conntrack_disable_ve0 module option (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "conntrack" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "owner" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "connmark" match / "CONNMARK" target support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "TOS" target support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "tos" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "mark" match and "MARK" target support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "iprange" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Basic ve transformations (Kirill Tkhai) [PSBM-18322]
  - ms/hrtimer: Set expiry time before switch_hrtimer_base() (Viresh Kumar)
  - ms/hrtimer: Prevent remote enqueue of leftmost timers (Leon Ma)
  - ms/module: remove rmmod --wait option. (Rusty Russell) [PSBM-27580 PSBM-27580]
  - ms/bluetooth: never linger on process exit (Vladimir Davydov)
  - bc/io: put beancounter before free (Maxim Patlasov)
  - ve/net/pppoe: fix nil dereference if no VE_FEATURE_PPP present (Cyrill Gorcunov)
  - ve/cgroups: hide toplevel cgroup entry from in /proc/pid/cgroup output (Cyrill Gorcunov) [PSBM-28377]
  - ve/cgroups: don't explicitly remove self destructable ve cgroups (Cyrill Gorcunov)
  - mm: make task with TIF_MEMDIE die faster (Kirill Tkhai)
  - ms/nmi: do not call unblank_screen() from nmi_show_regs() (Kirill Tkhai)
  - mm: add independed bio pool for swapout (Kirill Tkhai) [PSBM-14619]
  - vfs: call statfs on mnt's sb (Kirill Tkhai)
  - fs: add fadvise file_operation (Kirill Tkhai)
  - vfs: take stat's dev from mnt->sb (Kirill Tkhai)
  - vfs: add set_flags wrapper (Kirill Tkhai)
  - ms: unwind changes on shift_arg_pages error path (Kirill Tkhai)
  - ms: skip "relatime" in shmem_parse_options() (Kirill Tkhai)
  - ms: FIGETBSZ ioctl safety checks (Kirill Tkhai)
  - ext4: make data=writeback mode safe (Kirill Tkhai)
  - ext4: quarantee rename atomic behavior (Kirill Tkhai)
  - ms/fs: introduce "fs.relatime_interval" sysctl (Kirill Tkhai)
  - ve/vfs: introduce "odirect_enable" sysctl and disable it by default (Kirill Tkhai)
  - ext4: resplit block_page_mkwrite: fix get-host convention (Kirill Tkhai) [PSBM-16485]
  - blk/ploop: Add BLKPG_GET_PARTITION operation (Kirill Tkhai)
  - ext4/ploop: ask ploop about ENOSPC condition (Kirill Tkhai)
  - Subject: ve/futex/timeout: adjust futex timeout to absolule (Kirill Tkhai) [PSBM-14471]
  - ve/posix-timers: reference ve monotonic clock from ve start (v2) (Kirill Tkhai) [PSBM-13860]
  - x86: vdso: add sysctl to disable vdso for gettime monotonic (Kirill Tkhai) [PSBM-13860]
  - ve/posix-timers: reference ve monotonic clock from start in clock_nanosleep (Kirill Tkhai)
  - bc/io: set and release ioc->ioc_ub (Maxim Patlasov) [PSBM-15568]
  - oom: Show writeback_temp stats in oom message (Maxim Patlasov)
  - fuse: fix erroneous unlock_page() in fuse_send_writepages() (Maxim Patlasov)
  - fuse: release cleanup (Maxim Patlasov)
  - fuse: fix deadlock in fuse_flush() (Maxim Patlasov) [PSBM-29381]
  - fuse: invalidate_files backward compatibility mode (Maxim Patlasov)
  - fuse: fix writeback/release race (Maxim Patlasov) [PSBM-26148]
  - fuse: report details of aio failure (Maxim Patlasov) [PSBM-23696]
  - fuse: fail lost-lease notification if async_read (Maxim Patlasov)
  - fuse: skip waiting for fuse writeback (Maxim Patlasov)
  - fuse: prevent queueing new requests after (Maxim Patlasov)
  - fuse: kill requests on "lost-lease" event (Maxim Patlasov)
  - fuse: pass "fc" to fuse_invalidate_files() (Maxim Patlasov)
  - fuse: add "killed" bit to fuse request (Maxim Patlasov)
  - fuse: add page_cache bit to fuse request (Maxim Patlasov)
  - fuse: the list of all opened files (Maxim Patlasov)
  - fuse: do not flush files opened ro (Maxim Patlasov) [PSBM-20562]
  - fuse: add mount option to disable close_wait (Maxim Patlasov)
  - fuse: make umount synchronous (Maxim Patlasov) [PSBM-19305]
  - fuse: print initialized flag in conn info (Maxim Patlasov)
  - fuse: extend report on pstorage errors (Maxim Patlasov)
  - fuse: do not use RELEASE on directory (Maxim Patlasov) [PSBM-17195]
  - fuse: add missed fuse_file_put() (Maxim Patlasov)
  - fuse: cleanups in fuse writeback (Maxim Patlasov) [PSBM-16442 PSBM-16442]
  - fuse: implement invalidate_files notification (Maxim Patlasov) [PSBM-16105]
  - fuse: report size from server if no openers exist (Maxim Patlasov) [PSBM-15941]
  - fuse: write_begin() should wait for writeback (Maxim Patlasov)
  - fuse: account read/write requests into iopslimit (Maxim Patlasov)
  - fuse: improve bdi dirty memory limits for fuse (Maxim Patlasov) [PSBM-13700]
  - fuse: enable async_dio for pcs (Maxim Patlasov)
  - fuse: optimize fuse_vma_close() (Maxim Patlasov)
  - fuse: do not oops in fuse writepage (Maxim Patlasov) [PSBM-10752]
  - fuse: increment BDI_WRITEOUT for each page (Maxim Patlasov)
  - fuse: remove extra write_update (Maxim Patlasov) [PSBM-18167]
  - fuse: account directio requests into ioacct (Maxim Patlasov)
  - fuse: wire iolimit sleep-hook into directio path. (Maxim Patlasov)
  - fuse: account read/write requests into iostat (Maxim Patlasov)
  - fuse: set num_openers on create (Maxim Patlasov) [PSBM-13820]
  - fuse: i_size to be updated on first open (Maxim Patlasov) [PSBM-13636]
  - fuse: reimplement synchronous close (Maxim Patlasov)
  - fuse: Wait for real writeback to finish on file (Maxim Patlasov)
  - fuse: Dcache is always invalid (Maxim Patlasov)
  - fuse: virtualize context pid (Maxim Patlasov)
  - fuse: some fairness in handling writeback (Maxim Patlasov)
  - fuse: Fuse ctl file with connection info (Maxim Patlasov)
  - fuse: Show open files in fusectl (Maxim Patlasov)
  - fuse: Show active requests in fusectl files (Maxim Patlasov)
  - fuse: fuse-ve-odirect sysctl (Maxim Patlasov) [PSBM-18167]
  - fuse: direct_enable mount option (Maxim Patlasov) [PSBM-18167]
  - fuse: set req->background flag for fuse_writepages (Maxim Patlasov) [PSBM-18167]
  - fuse: kaio support (Maxim Patlasov) [PSBM-18167]
  - fuse: fix compilation for __fuse_readpage() (Maxim Patlasov)
  - fuse: Turn writeback cache on (Maxim V. Patlasov)
  - fuse: Fix O_DIRECT operations vs cached writeback misorder - v2 (Maxim V. Patlasov)
  - fuse: fuse_flush() should wait on writeback (Maxim V. Patlasov)
  - fuse: fuse_writepage_locked() should wait on writeback (Maxim V. Patlasov)
  - fuse: Implement writepages and write_begin/write_end callbacks (Maxim V. Patlasov)
  - fuse: Flush files on wb close (Maxim V. Patlasov)
  - fuse: Trust kernel i_mtime only (Maxim V. Patlasov)
  - fuse: Trust kernel i_size only (Maxim V. Patlasov)
  - fuse: Connection bit for enabling writeback (Maxim V. Patlasov)
  - fuse: Prepare to handle multiple pages in writeback (Maxim V. Patlasov)
  - fuse: Prepare to handle short reads (Maxim V. Patlasov)
  - fuse: Getting file for writeback helper (Maxim V. Patlasov)
  - fuse: Linking file to inode helper (Maxim V. Patlasov)
  - ms/sched: fix_small_imbalance: Fix local->avg_load > busiest->avg_load case (Vladimir Davydov) [PSBM-27697]
  - ms/sched: calculate_imbalance: Fix local->avg_load > sds->avg_load case (Vladimir Davydov) [PSBM-27697]
  - nfs/ioacounting: ported skipped code for read/write io accounting (Andrey Smetanin) [PSBM-27695]
  - ve/printk: define some log_* symbols for kdump (Vladimir Davydov)
  - mm: don't forget to set softdirty on file mapped fault (Cyrill Gorcunov)
  - mm: softdirty: clear VM_SOFTDIRTY flag inside clear_refs_write() instead of clear_soft_dirty() (Cyrill Gorcunov)
  - mm: softdirty: don't forget to save file map softdiry bit on unmap (Cyrill Gorcunov)
  - mm: softdirty: make freshly remapped file pages being softdirty unconditionally (Cyrill Gorcunov)
  - idr: fix overflow bug during maximum ID calculation at maximum height (Lai Jiangshan)
  - ve/idr: correctly alloc/release ve->veid from ve_idr (Andrey Smetanin) [PSBM-28031]
  - ub: use d_set_d_op to init ub ops (Vladimir Davydov)
  - ve/devtmpfs: pass proper options string (Cyrill Gorcunov)
  - ve/idr: fix WARN_ON(1) at ve_list_del: move idr_remove(&ve_idr, ve->veid) from ve_offline to ve_destroy (Andrey Smetanin)
  - mm/vps_dumpable: naming and description for task->mm->vps_dumpable values (Andrey Smetanin) [PSBM-20666]
  - vzstat: export symbols KSTAT_LAT_*_UPDATE funcs to be usable by our private vzmodules (Andrey Smetanin)
  - ubc/net: remove unused variable from neigh_periodic_work() (Konstantin Khorenko)
  - epoll: fix use-after-free in eventpoll_release_file (Konstantin Khlebnikov)
  - radix-tree/filemap: fix prev tag not set after deleting direct slot (Vladimir Davydov)
  - radix-tree/filemap: clear prev tag when deleting page from page cache (Vladimir Davydov)
  - fs/ceph: add BUG_ON to iov_iter access (Maxim Patlasov) [PSBM-34911]
  - fs/ceph: honor kernel direct aio changes (Konstantin Khorenko)
  - fs: kernel direct aio (Dmitry Monakhov) [PSBM-18169 PSBM-42312]
  - ploop/fairsched/io_prio: compilation fixes (Cyrill Gorcunov)
  - all: compilation fixes (Konstantin Khorenko)
  - VE/VFS: use sb->s_ns member to store namespace for mount_ns() calls (Konstantin Khorenko)
  - radix-tree: hunks left from initial combined patch added (Vladimir Davydov) [PSBM-18056 PSBM-27696]
  - quota/compat: move compat stuff from quota.h to compat.h (Konstantin Khorenko)
  - ubc/net: recharge skb in tcp_fragment() only (Konstantin Khorenko)
  - config.OpenVZ: OpenVZ related config options are added (Konstantin Khorenko)
  - config.OpenVZ: added symlinks to kernel config and debug config (Konstantin Khorenko)
  - bc/memcontrol: fix per-bc memcg pages output (Stanislav Kinsbursky) [PSBM-26039]
  - fairsched: add missing close in sys_fairsched_mknod (Vladimir Davydov)
  - drivers/core/sysfs: respect ns when removing sys dev link (Vladimir Davydov) [PSBM-25801]
  - nfsd/sunrpc/mqueue: use sb->s_ns instead of data in fill_super (Vladimir Davydov) [PSBM-25107]
  - ve/cgroups: add missing list_del(cgroup_ve_list) on error path (Vladimir Davydov) [PSBM-24622]
  - ve: get rid of get_ve_by_name() (Vladimir Davydov) [PSBM-24622]
  - ve: allocate ids on cgroup create (Vladimir Davydov) [PSBM-24622]
  - ve: get rid of __ve_name (Vladimir Davydov) [PSBM-24622]
  - venet: fix compilation (Vladimir Davydov) [PSBM-24622]
  - Revert "VE/NET: replace veid with ve_name in veip_struct" (Vladimir Davydov) [PSBM-24622]
  - mm: ignore VM_SOFTDIRTY on VMA merging (Cyrill Gorcunov)
  - ve/cgroups: use cgroup subsystem names only if in vz compat mode (Vladimir Davydov) [PSBM-22882]
  - ve/pid_ns: do not panic on kthreads when reaping external tasks on zap pid_ns (Vladimir Davydov)
  - fairsched: fix nasty typos (Dmitry Guryanov)
  - kmod: add header inclusion (Stanislav Kinsbursky)
  - stat: add header inclusion (Stanislav Kinsbursky)
  - vzstat: move code to source file (Stanislav Kinsbursky)
  - ve/proc: add empty "partitions" entry (Stanislav Kinsbursky) [PSBM-18889]
  - ve/devpts: cleanup per-VE creation (Stanislav Kinsbursky)
  - ve: containerize tty and console devices (Stanislav Kinsbursky) [PSBM-20100]
  - ve/tty: containerize ttys and console devices (Stanislav Kinsbursky)
  - tty: split tty's and console init routines (Stanislav Kinsbursky)
  - ve/pid_ns: reap zombies with external parent on container's init exit (Stanislav Kinsbursky)
  - ve/umh: make it ve-stopping safe (Stanislav Kinsbursky)
  - ve: remove ve_mutex (Stanislav Kinsbursky)
  - sched: use LBF_SOME_PINNED to balance tasks among vcpus (Vladimir Davydov)
  - ve/umh: fix NULL pointer dereference in VE0 (Stanislav Kinsbursky)
  - ve/pty: containerize Unix98 pty drivers (Stanislav Kinsbursky) [PSBM-20100]
  - ve/pty: containerize Unix98 driver (Stanislav Kinsbursky)
  - pty: split Unix98 init routines (Stanislav Kinsbursky)
  - ve/pty: containerize legacy pty drivers (Stanislav Kinsbursky) [PSBM-20100]
  - ve/pty: containerize legacy driver (Stanislav Kinsbursky)
  - pty: split legacy init routines (Stanislav Kinsbursky)
  - devtmpfs: containerize it with new obj ns operation (Stanislav Kinsbursky)
  - fs: add data pointer to mount_ns() (Stanislav Kinsbursky)
  - ve/tty: register containerized tty drivers only on global VE (Stanislav Kinsbursky)
  - ve/tty: add tty_cdev_del helper (Stanislav Kinsbursky)
  - ve/tty: make tty_class VE-namespace aware (Stanislav Kinsbursky)
  - ve: do not set VE_MEMINFO_DEFAULT to VE0 on ve_create (Vladimir Davydov)
  - fairsched: mount cpuacct together with cpu (Dmitry Guryanov)
  - bc: mount mem and blkio subsystems separately (Dmitry Guryanov)
  - bc: create separate cgroup for mem and blkio hierarchies (Dmitry Guryanov)
  - fairsched: mount cpu and cpuset separately (Dmitry Guryanov)
  - fairsched: don't use common root cgroup in fairsched.c (Dmitry Guryanov)
  - ve: split beancounter hierarchy (Dmitry Guryanov)
  - ve/cgroups: don't use common root cgroup in vecalls.c (Dmitry Guryanov)
  - ve/cgroups: don't mount freezer subsystem (Dmitry Guryanov)
  - ve/cgroups: add functions ve_cgroup_open and ve_cgroup_remove (Dmitry Guryanov)
  - ve/sunrpc: use correct pointer to net_namespace in auth_gss.c (Dmitry Guryanov)
  - tty: don't try to free termios if TTY_DRIVER_DEVPTS_MEM is set (Stanislav Kinsbursky)
  - ve/sysfs: make dev/char/ directory tagged with VE tag (Stanislav Kinsbursky)
  - ve/sysfs: allow symlinks between tagged and generic directories (Stanislav Kinsbursky)
  - ve/kobject: new type for VE-aware object introduced (Stanislav Kinsbursky)
  - ve/kobject: introduce new namespace tag and operations for VE (Stanislav Kinsbursky)
  - ve/vzstat: move code to source file and cleanup headers (Stanislav Kinsbursky)
  - ve/vzstat: port vzstat bits from rh6 (Vladimir Davydov)
  - ve/sysctl: allow to change mqueue sysctl-s (Andrew Vagin) [PSBM-20102]
  - ve/sysctl: allow to write kernel/hostname and kernel/domainname entries in container (Cyrill Gorcunov) [PSBM-20102]
  - ve/sysctl: allow to write /proc/sys/kernel/$next$ entries in container (Cyrill Gorcunov)
  - devtmpfs: per-VE mounts introduced (Stanislav Kinsbursky) [PSBM-17915]
  - pid: export symbol nex_pidmap (Dmitry Guryanov) [PSBM-20095]
  - dcache: d_root_check: allow to proceed on disconnected entries (Kirill Gorkunov)
  - ve/fs: remove ve_proto.h header from super.c (Stanislav Kinsbursky)
  - mm: /proc/pid/pagemap: inspect _PAGE_SOFT_DIRTY only on present pages (Cyrill Gorcunov)
  - mm: track vma changes with VM_SOFTDIRTY bit (Cyrill Gorcunov)
  - VE/sysrq-trigger: make it VE-namespace aware (Stanislav Kinsbursky) [PSBM-20664]
  - ve/sched: port boosting hacks against prio inversion (Vladimir Davydov) [PSBM-15441]
  - ve/sched: port vcpu hotslice (Vladimir Davydov) [PSBM-16913 PSBM-16913 PSBM-17399]
  - ve/sched: port nr cpus limit (Vladimir Davydov) [PSBM-16856]
  - venet: add venet_free_stat callback (Dmitry Guryanov)
  - sched: calc_load_ve: do not account rt tasks (Vladimir Davydov) [PSBM-22149]
  - config.OpenVZ: enable options required for CRIU (Konstantin Khorenko)
  - mm: do not loose soft dirty bit if page is in migration state (Kirill Gorkunov)
  - Revert "ve: set vps_dumpable for a process, which writes start in ve.state" (Andrew Vagin)
  - VE: don't clear vps_dumpable if ve isn't running (Andrew Vagin)
  - ve: allow to start CT by external processes (v2) (Andrew Vagin)
  - ve: show content of /proc/cgroups if CT isn't running yet (Andrew Vagin)
  - ve: skip d_root_check() for CT0 (Andrew Vagin)
  - kmemcg: don't allocate extra memory for root memcg_cache_params (Andrey Vagin)
  - mm: move_ptes -- Set soft dirty bit depending on pte type (Cyrill Gorcunov)
  - mm: save soft-dirty bits on file pages (Cyrill Gorcunov)
  - mm: save soft-dirty bits on swapped pages (Cyrill Gorcunov)
  - proc-net: mark all files in proc-net directories as virtualized (Vladimir Davydov)
  - proc: mark only net dirs as virtualized by default (Vladimir Davydov)
  - ve: use proc_mkdir for proc dir creation (Vladimir Davydov)
  - fairsched: use proc_mkdir for proc dir creation (Vladimir Davydov)
  - net: remove include/net/netlink_sock.h (Vladimir Davydov)
  - cgroup/cpuset/fairsched: get rid of cgroup_lock (Vladimir Davydov)
  - cgroup: cgroup->top_cgroup => &cgroup->root->top_cgroup (Vladimir Davydov)
  - ve/cgroup: fix compilation (Vladimir Davydov)
  - cpuset: remove unused stuff and fix compilation (Vladimir Davydov)
  - bc/proc: fix compilation (Vladimir Davydov)
  - khleper: fix compilation (Vladimir Davydov)
  - sched: move declaration of cgroup related functions to global header (Vladimir Davydov)
  - all: trivial compilation fixes (Vladimir Davydov)
  - Initial OpenVZ config for 3.10.x branch added, based on kernel-3.10.10-200.fc19 Fedora 19 kernel. (Konstantin Khorenko)
  - veth: Make it carry NETIF_F_VIRTUAL (Cyrill Gorcunov)
  - ve/cgroup: delete VE cgroup on the error path (Andrew Vagin) [PSBM-21953]
  - pfcache: do not ignore TTU_MUNLOCK in try_to_unmap_file() (Maxim Patlasov)
  - pfcache: iterate peer list only for shared pages (Maxim Patlasov)
  - pfcache: release path if dentry_open() failed (Maxim Patlasov)
  - pfcache: check root path in ext4_open_pfcache() (Maxim Patlasov)
  - ve/devcgroup: fix mknod permissions - allow to create any dev inside a CT (Vladimir Davydov) [PSBM-21979]
  - pfcache: add hashed peers for ext4 (Konstantin Khlebnikov) [PSBM-20098]
  - pfcache: add generic mapping peers (Konstantin Khlebnikov) [PSBM-20098]
  - mpi: export arithmetic functions required for in-kernel DSA implementation (Konstantin Khorenko)
  - ve/pidns: allow to change ns_last_pid from containers (Andrew Vagin)
  - VENET: add netlink interface for venet (Dmitry Guryanov)
  - mpi: fix compilation (Konstantin Khlebnikov)
  - ms/mpi: revert "Revert "crypto: GnuPG based MPI lib - (Dmitry Kasatkin)
  - ms/mpi: revert "Remove unused code from MPI library" (Dmitry Kasatkin)
  - ve: convert get/put_ve to non-gpl functions (Konstantin Khlebnikov)
  - ve: return back 'down_at' ve_struct field (Konstantin Khlebnikov)
  - VE: add function legacy_name_to_veid (Dmitry Guryanov)
  - VE: fix couple compilation warnings (Konstantin Khlebnikov)
  - ve: set vps_dumpable for a process, which writes start in ve.state (Andrew Vagin)
  - ms/pagemap: prepare to reuse constant bits with page-shift (Pavel Emelyanov)
  - ms/mm: soft-dirty bits for user memory changes tracking (Pavel Emelyanov)
  - ms/pagemap: introduce pagemap_entry_t without pmshift bits (Pavel Emelyanov)
  - ms/clear_refs: introduce private struct for mm_walk (Pavel Emelyanov)
  - ms/proc/clear_refs: sanitize accepted commands declaration (Pavel Emelyanov)
  - ve/sysfs: drop full access for all containers (Konstantin Khlebnikov) [PSBM-20892]
  - ve/sysfs: remove xattr interface to ve permissions (Konstantin Khlebnikov)
  - ve/sysfs: add new interface to control sysfs (Konstantin Khlebnikov)
  - ve: move unlinking ve_sysfs_perms into right function (Konstantin Khlebnikov)
  - nfsd: enable UMH client tracker in a container (Stanislav Kinsbursky)
  - ve: khelper kthread in a container introduced (Stanislav Kinsbursky)
  - ve: introduce kthread_run_ve() helper (Stanislav Kinsbursky)
  - nfsd: containerize kthreads (Stanislav Kinsbursky)
  - ve: kthreads creation facility introduced (Stanislav Kinsbursky)
  - kthread: make of a new kthread's queuing code to a callback (Stanislav Kinsbursky)
  - fs: virtualize devtmpfs file system (Stanislav Kinsbursky)
  - cpuset: do not remove tasks from empty cpusets (Vladimir Davydov)
  - SCHED: rework cputime accounting (v2) (Vladimir Davydov) [PSBM-18113 PSBM-20541]
  - ve/nfsd: virtualize nfsd file system (Stanislav Kinsbursky)
  - ext4: pfcache_csum mount option (Konstantin Khlebnikov)
  - ve: permit full access in sysfs for all containers (Konstantin Khlebnikov)
  - venet: unregister ve cgroup cftypes (Konstantin Khlebnikov)
  - ext4: fix balloon_ino mount option (Konstantin Khlebnikov)
  - VE: add __find_ve_by_name() function (Dmitry Guryanov)
  - misc: remove redundant security check from mmap_min_addr_handler (Konstantin Khlebnikov) [PSBM-18031]
  - VE: use ve environtment for sysctl restrictions (Konstantin Khlebnikov) [PSBM-18032 PSBM-18030]
  - VE: use ve environtment for proc restrictions (Konstantin Khlebnikov) [PSBM-18021]
  - VE: virtualize cgroups (Konstantin Khlebnikov) [PSBM-20665 PSBM-20540]
  - VE/NET: port diff-net-substitute-ve_hook-by-pernet_operations-in-veth (v2) (Vladimir Davydov) [PSBM-20668 PSBM-18176]
  - VE/NET: port diff-net-substitute-ve_hook-by-pernet_operations-in-venet (v2) (Vladimir Davydov) [PSBM-20668 PSBM-18176]
  - VE: uncomment ve_log_init, ve_log_destroy (Vladimir Davydov)
  - VE/PRINTK: rework printk virtualization (v2) (Vladimir Davydov) [PSBM-20669 PSBM-17899]
  - ve: mark /proc/self as virtualized (Konstantin Khlebnikov)
  - mntns: allow changes in init namespace (Konstantin Khlebnikov)
  - devpts: don't require newinstance (Konstantin Khlebnikov)
  - devcgroup: fix default behaviour (Konstantin Khlebnikov)
  - ve: plug broken printk changes (Konstantin Khlebnikov)
  - ve: allow user ns in chroot (Konstantin Khlebnikov)
  - device_cgroup: fix compilation (Konstantin Khlebnikov)
  - oom_groups: fix user-ns uid mangling (Konstantin Khlebnikov)
  - ubc: fix user-ns uid mangling (Konstantin Khlebnikov)
  - UBC: fix compilation (Konstantin Khlebnikov)
  - FS/NAMESPACE: fix compilation (Konstantin Khlebnikov)
  - VENETDEV: fix compilation (Konstantin Khlebnikov)
  - NFSD: fix compilation (Konstantin Khlebnikov)
  - QUOTA: fix compilation (Konstantin Khlebnikov)
  - KMAPSET: fix compilation (Konstantin Khlebnikov)
  - SYSCTL: fix compilation (Konstantin Khlebnikov)
  - SYSFS: fix compilation (Konstantin Khlebnikov)
  - TUN: fix compilation (Konstantin Khlebnikov)
  - NET/PROC: fix compilation (Konstantin Khlebnikov)
  - CGROUPS: fix compilation (Konstantin Khlebnikov)
  - NET/VLAN: fix compilation (Konstantin Khlebnikov)
  - MM: fix compilation (Konstantin Khlebnikov)
  - VE: fix compilation (Konstantin Khlebnikov)
  - UBC/STATD: fix compilation (Konstantin Khlebnikov)
  - COMMON: fix compilation (Konstantin Khlebnikov)
  - CGROUP/FREEZER: revert changes (Konstantin Khlebnikov)
  - VE/DEVICE_CGROUP: fix compilation (Konstantin Khlebnikov) [PSBM-20663]
  - ploop: add ploop to the tree (Maxim V. Patlasov)
  - mm: Account for WRITEBACK_TEMP in balance_dirty_pages (Maxim V. Patlasov)
  - ext4: Provide a balloon nipple for management (Maxim V. Patlasov) [PSBM-41222]
  - ext4: Don't show the active balloon to user (Maxim V. Patlasov)
  - ext4: Teach statfs to report reduced disk usage (Maxim V. Patlasov)
  - ext4: Teach the fs where the balloon inode is (Maxim V. Patlasov)
  - block: export put_io_context_active() (Maxim V. Patlasov)
  - VE/NET: add ip_list file to ve controller (Dmitry Guryanov)
  - VE/NET: provide cgroup interface for venet ip management (Dmitry Guryanov)
  - VE/NET: replace veid with ve_name in veip_struct (Dmitry Guryanov)
  - VE: add __ve_name function (Dmitry Guryanov)
  - VE: add legacy_veid_to_name function (Dmitry Guryanov)
  - VE/PRINTK: check syslog capability in user ns (Vladimir Davydov) [PSBM-17980]
  - VE/MM: show_signal_msg: print vma addr to VE_LOG (Vladimir Davydov)
  - VE: add cgroup attribute ve.legacy_veid (Konstantin Khlebnikov)
  - VE/NET: don't oops in net_generic() on disabled features (Konstantin Khlebnikov)
  - UBC: kill BC_DEBUG_KMEM (Konstantin Khlebnikov)
  - VE/SYSFS: add xattrs to control ve-permissions (Konstantin Khlebnikov)
  - VE/SYSFS: hide forbidden entries in container (Konstantin Khlebnikov)
  - VE/SYSFS: implement ve-based permissions (Konstantin Khlebnikov)
  - KMAPSET: set of key-value mappings with build-in (Konstantin Khlebnikov)
  - VE: implement get_ve_by_name() (Konstantin Khlebnikov)
  - VE: more veid to ve_name conversion (Konstantin Khlebnikov)
  - VE: cgroup interface for starging container (Konstantin Khlebnikov)
  - VE: kill vzmond (Konstantin Khlebnikov)
  - VE: drop devpts superblock in ve_exit_ns (Konstantin Khlebnikov)
  - VE: manage namespaces in ve-cgroup (Konstantin Khlebnikov)
  - VE: manage list of running container in ve-cgroup (Konstantin Khlebnikov)
  - VE: praparation for non-numeric veid (Konstantin Khlebnikov)
  - VE: forbid cgroup attach during starting or (Konstantin Khlebnikov)
  - VE: allocate log buffer together with ve_struct (Konstantin Khlebnikov)
  - VE: fix error path in do_env_create() (Konstantin Khlebnikov)
  - VE: implement ve_start_container() (Konstantin Khlebnikov)
  - VE: simplify hooks in zap_pid_ns_processes() (Konstantin Khlebnikov)
  - VE: cleanup setup_iptables_mask() (Konstantin Khlebnikov)
  - VE: remove ve_init_task (Konstantin Khlebnikov)
  - VE: forbid nested containers (Konstantin Khlebnikov)
  - VE: forbids threads in ve_can_attach() (Konstantin Khlebnikov)
  - VE/VZETHDEV: pass ve_struct in veth_dev_start (Andrew Vagin)
  - VE: fix filesystem type permition check (Konstantin Khlebnikov)
  - VE: mark virtual filesystems as virtualized (Konstantin Khlebnikov)
  - VE: cleanup credentials handling (Konstantin Khlebnikov)
  - VE/PROC: mark content of /proc/self/net as virtualized (Konstantin Khlebnikov)
  - VE/BINFTM: fix destruction ordering (Konstantin Khlebnikov)
  - VE/NSPROXY: fix refcounting of init_nsproxy (Andrew Vagin) [PSBM-17904]
  - VE/CPUSET: make [cpus|mems]_allowed be subset of cpuset_[cpus|mems]_allowed (Vladimir Davydov) [PSBM-18531]
  - VE/CPUSET: remove lock in cgroup_set_[cpumask|nodemask] (Vladimir Davydov)
  - VE: export headers to userspace (Dmitry Guryanov)
  - VE: export switch_task_namespaces() (Konstantin Khlebnikov)
  - VE: export nr_threads_ve() (Konstantin Khlebnikov)
  - VE: convert khelper_wq to kthread_worker (Konstantin Khlebnikov)
  - VE: add kthread into container (Konstantin Khlebnikov)
  - VE: convert to cgroup (Konstantin Khlebnikov)
  - VE: move fairsched creation out of op_sem (Konstantin Khlebnikov)
  - VE: cleanup include/linux/ve.h (Konstantin Khlebnikov)
  - VE: remove ve.h from sched.h (Konstantin Khlebnikov)
  - VE: collect basic interface in ve_proto.h (Konstantin Khlebnikov)
  - VE: remove task->owner_env (Konstantin Khlebnikov)
  - VE: remove pcounter (Konstantin Khlebnikov)
  - VE: rework shutdown sequence (Konstantin Khlebnikov)
  - VE: remove set_exec_env() (Konstantin Khlebnikov)
  - VE: remove set_exec_env from vc_screen (Konstantin Khlebnikov)
  - VE: remove set_exec_env() from venet_set_features() (Konstantin Khlebnikov)
  - PIDNS: add proc mount option 'hidepidns=0|1' (Konstantin Khlebnikov)
  - PIDNS: remove sysctl kernel.pid_ns_hide_child (Konstantin Khlebnikov)
  - PIDNS: Make the pidns proc mount/umount logic (Konstantin Khlebnikov)
  - PIDNS: general revert and cleanup (Konstantin Khorenko)
  - PIDNS: implement change_pid_ns() (Konstantin Khlebnikov)
  - VE/CALLS: allow CAP_[SYS|NET]_ADMIN if CAP_VE_[SYS|NET]_ADMIN set (Vladimir Davydov)
  - VE/AUTOFS: port 71-diff-autofs-combined (Dmitry Guryanov)
  - VE/NFS: check VE_FEATURE_NFS is set on mount (Stanislav Kinsbursky)
  - VE/BINFTM: virtualization (Konstantin Khlebnikov)
  - VE/BINFTM: move all internal data to structure (Stanislav Kinsbursky)
  - VE/BINFTM: remove all old containerization code (Stanislav Kinsbursky)
  - VE/NFS: mark NFS as containerized (Stanislav Kinsbursky) [PSBM-18170]
  - VE/SUNRPC: mark SUNRPC PipeFS as containerized (Stanislav Kinsbursky) [PSBM-18170]
  - VE/FS: containerize filesystems access (Stanislav Kinsbursky)
  - VFS: revert changes around vfsmount namespaces (Konstantin Khlebnikov)
  - VE/FS: allow mountpoint operations for CAP_VE_SYS_ADMIN (Konstantin Khlebnikov)
  - VE/FS: allow to mknod inside ct (Vladimir Davydov)
  - config.OpenVZ: enable in-kernel crypto DSA code (Konstantin Khorenko)
  - config.OpenVZ: enable CONFIG_LEGACY_PTY_COUNT and CONFIG_NETLINK_DIAG (Konstantin Khorenko)
  - config.OpenVZ: enable CONFIG_LEGACY_PTYS (Konstantin Khorenko)
  - config.OpenVZ: remove CONFIG_BC_DEBUG_KMEM and CONFIG_VZ_CHECKPOINT (Konstantin Khorenko)
  - Initial OpenVZ config added, based on kernel-3.6.11-5.fc17 Fedora 17 kernel. (Konstantin Khorenko)
  - FAIRSCHED: allow writing to cpus_allowed and mems_allowed (Dmitry Guryanov)
  - VE/SCHED: remove sched stats from ve_task_info (Vladimir Davydov)
  - SCHED: account forks per task group (Vladimir Davydov) [PSBM-18113 PSBM-18113]
  - SCHED: account ctxsw per task group (Vladimir Davydov) [PSBM-18113 PSBM-18113]
  - FAIRSCHED: get rid of cgorup cpuacct subsys (Vladimir Davydov) [PSBM-18113]
  - SCHED: fix nr_sleeping accounting (Vladimir Davydov) [PSBM-18113]
  - SCHED: fix nr_iowait accounting (Vladimir Davydov) [PSBM-18113]
  - DEVPTS: handle early ptmx open (Konstantin Khlebnikov)
  - VE/PTRACE: simplify pid-ns hack (Konstantin Khlebnikov)
  - VE: allow reboot in container (Konstantin Khlebnikov)
  - VE: cleanup hacks in signal handling (Konstantin Khlebnikov)
  - VE: use pid-ns reboot event (Konstantin Khlebnikov)
  - VE: remove switching context in irq_enter/leave (Konstantin Khlebnikov)
  - VE/USERNS: setup equal uid mapping (Konstantin Khlebnikov)
  - VE: fix lockdep warning in ve_task_ppid_nr_ns() (Konstantin Khlebnikov)
  - VE: filter zap_ve_processes() (Konstantin Khlebnikov)
  - VECALLS: simplify legacy-devpts virtualization (Konstantin Khlebnikov)
  - VE/SYSCTL: ignore writes to sysctl vm.mmap_min_addr by (Konstantin Khlebnikov)
  - VE/SYSCTL: fixup virtualized sysctls (Konstantin Khlebnikov)
  - VE/SYSCTL: implement virtualized methods (Konstantin Khlebnikov)
  - VE/SYSCTL/IPC: mark as virtualized (Konstantin Khlebnikov)
  - VE/PROC/SYSCTL: show real permissions in stat (Konstantin Khlebnikov)
  - VE/SYSCTL: write permission restriction (Konstantin Khlebnikov) [PSBM-18022]
  - VE/PROC/UPTIME: fix task_cgroup() usage out of rcu protection (Konstantin Khlebnikov)
  - VE/PROC: show /proc/filesystems in container (Konstantin Khlebnikov)
  - VE/PROC: unblock more proc entries (Konstantin Khlebnikov) [PSBM-18889]
  - VE/PROC: unblock sysvipc interface (Konstantin Khlebnikov)
  - VE/PROC: fix bug in proc_readdir_de() (Konstantin Khlebnikov)
  - VE/PROC: replace glob_proc_root with S_ISVTX (Konstantin Khlebnikov)
  - VE/PROC: resticted proc-entries scope (Konstantin Khlebnikov) [PSBM-18019]
  - VE/DCACHE: reimplement d_root_check (Konstantin Khlebnikov)
  - VE/KOBJ: add function for send uevent in a currect exec_env only (Andrey Vagin)
  - VZPRIVNET: cache filtering result on dst (Pavel Emelyanov)
  - MISC: port of diff-misc-bits-2 (Dmitry Guryanov)
  - FS/QUOTA: Compatibility with older quotactl interface (Dmitry Guryanov)
  - UBC/SHMEM: remove beancounter (Konstantin Khlebnikov)
  - UBC/MEMCG: fix typo in mem_cgroup_apply_beancounter (Dmitry Guryanov)
  - UBC/MEMCG: change memsw before and after chaing memory (Konstantin Khlebnikov)
  - UBC/MEMCG: reset memsw limit before setting mem limit (Vladimir Davydov)
  - UBC: remove beancounter from struct pid (Konstantin Khlebnikov)
  - UBC: link with kmem controller (Konstantin Khlebnikov)
  - UBC: fix lost retval in memcg-ub link layer (Vladimir Davydov)
  - UBC: cleanup permission checks (Konstantin Khlebnikov)
  - UBC: tie beancounter and memory-cgroup together (Konstantin Khlebnikov)
  - UBC: link memcg with beancounter (Konstantin Khlebnikov)
  - VE/UBC/MM: enable memcg (Konstantin Khlebnikov)
  - mm: account all page tables for mm (Konstantin Khlebnikov)
  - simfs: to be substituted by bindmounts (Maxim V. Patlasov) [PSBM-18885 PSBM-18885 PSBM-34494 PSBM-20810]
  - MS/SIMFS: export statfs_by_dentry (Konstantin Khlebnikov)
  - VE/PRINTK: make log_from_idx, log_next use non-virtualized log_buf (Vladimir Davydov)
  - VE/PRINTK: printk virtualization (Vladimir Davydov) [PSBM-17899]
  - VE/NET: unblock net-namespaces (Konstantin Khlebnikov)
  - VE/NET: Allow userns root to control ppp device (Vladimir Davydov)
  - VE/NET: more get_exec_env() cleanups (Konstantin Khlebnikov)
  - VE/NET: hold ve ref until net is destroyed (Vladimir Davydov)
  - VE/NET: drop tcp_time_stamp fixup (Konstantin Khlebnikov)
  - VENET: cleanup owner_env references (Konstantin Khlebnikov)
  - VZETH: cleanup owner_env references (Konstantin Khlebnikov)
  - VE/NET: switch vz_security_*_check to netns (Konstantin Khlebnikov)
  - VE/NET: remove sysfs-related hacks for netdev (Konstantin Khlebnikov)
  - VE/NET: port of VZ VENET device (Stanislav Kinsbursky)
  - VE/NET: port of VZ VETH device (Stanislav Kinsbursky)
  - MS/PIDNS: don't force SIGKILL to tasks on child reaper death (Stanislav Kinsbursky)
  - MS/CGROUP: port kernel api (Vladimir Davydov) [PSBM-17927 PSBM-16529]
  - MS/CGROUP: self-destruction (without userspace helpers) (Konstantin Khlebnikov)
  - MS/CGROUP: export cgroup_kernel_close (Konstantin Khlebnikov)
  - cgroup: forbid mounting cgroups inside ve (Vladimir Davydov)
  - cgroup: adds kernel api stubs (Konstantin Khlebnikov)
  - cgroup: kernel api stubs (Konstantin Khlebnikov) [PSBM-17927]
  - x86/SYSCALL: remove sys32 vm86 warning (Dmitry Guryanov)
  - x86/NMI: introduce dumps via nmi (Dmitry Guryanov)
  - Initial patch commit + compilation fixes (Konstantin Khorenko) [PSBM-33584 PSBM-17651 PSBM-17886 PSBM-17909 PSBM-17918 PSBM-17915 PSBM-17917 PSBM-17914 PSBM-17902 PSBM-17924 PSBM-17926 PSBM-17924 PSBM-17918 PSBM-17930 PSBM-17931 PSBM-17945 PSBM-17960 PSBM-17971 PSBM-18875 PSBM-18876 PSBM-18877 PSBM-17908 PSBM-18878 PSBM-18879 PSBM-18056 PSBM-18882 PSBM-18884 PSBM-18899 PSBM-31125 PSBM-12955 PSBM-20089 PSBM-20089 PSBM-12523 PSBM-41530 OVZ-6600 OVZ-5192]
  - LICENSE: introduce COPYING.Parallels (Dmitry Guryanov)
  - MS/KBD: add file kbd_bind in sysfs, which allow unbind keyboard from tty (v2) (Andrey Vagin)
  - MS/DEVICE: input_mutex isn't static now (Andrey Vagin)
  - MS/NET/IPV6: remove duplicate neigh_ifdown (Vladimir Davydov) [PSBM-13449]
  - MS/MM/SLAB: show slab_info core (Dmitry Guryanov)
  - MS/NSPROXY: removing helper for restoring nsproxy (Konstantin Khlebnikov)
  - MS/IDLE: add boot param to forcibly enable intel auto demotion (Vladimir Davydov) [PSBM-11477]
  - MS/TTY: TIOSAK Secure Attention Key ioctl (Konstantin Khlebnikov) [PSBM-11881]
  - MS/FS/PROC: Drop the MS_RDONLY bit in proc_get_sb() (Stanislav Kinsbursky)
  - MS/FS/DCACHE: move vfs caches to headers (Dmitry Guryanov)
  - MS/DRV: move dev helpers to header (Andrey Vagin)
  - KBUILD: build should fail on modpost errors for external modules (Konstantin Khlebnikov)


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.4]
changelog:
  - ub/mm/writeback: do not check dirty limits for ub0 (Vladimir Davydov)
  - ub: do not check overcommit for ub0 (Vladimir Davydov)
  - kvm:vmx: more complete state update on APICv on/off (Roman Kagan) [PSBM-46939]
  - ve/kmod: Change modules whitelist to fit their aliases (Cyrill Gorcunov) [PSBM-46789]
  - ub: init ub0 bound css early (Vladimir Davydov) [PSBM-47147]
  - ub: add heuristic check for memory overcommit (Vladimir Davydov) [PSBM-45695]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.5]
changelog:
  - ve/mm: introduce min threshold for dcache (Vladimir Davydov) [PSBM-34161]
  - mm: memcontrol: fix meminfo:SUnreclaim output in containers (Vladimir Davydov)
  - mm: memcontrol: add stats for reclaimable and unreclaimable stats (Vladimir Davydov)
  - prctl: remove one-shot limitation for changing exe link (Stanislav Kinsburskiy) [PSBM-26967 PSBM-47315]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.6]
changelog:
  - ve/fs/overlay: allow overlayfs to be used inside a Container (Pavel Tikhomirov) [PSBM-47280]
  - ploop: push_backup: improve ioctl(PLOOP_IOC_PUSH_BACKUP_IO) (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: introduce ppb->reported_map (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: implement auto destroy (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: factor out destroy (Maxim Patlasov) [PSBM-45000]
  - ploop: get rid of direct calls to file->f_op->fsync() (Maxim Patlasov)
  - ploop: get rid of dio_fsync() (Maxim Patlasov)
  - ploop: io_direct: check for fsync fop on startup (Maxim Patlasov)
  - ploop: get rid of FOP_FSYNC (Maxim Patlasov)
  - ve/kmod: Allow netfilter conntrack inside VE (Cyrill Gorcunov) [PSBM-47359]
  - fs/aio: show real number of aio events in fs.aio-nr sysctl (Andrey Ryabinin) [PSBM-47209]
  - ms/aio: Multiply passed nr_events in io_setup() (Kirill Tkhai) [PSBM-47075 PSBM-47209]
  - mm: memcontrol: drop useless VM_BUG_ON's in memcg_{start,stop}_kmem_account (Vladimir Davydov)
  - ms/net: sock: move ->sk_shutdown out of bitfields (Andrey Ryabinin) [PSBM-47023]
  - ploop: avoid costly user-controllable kmalloc() calls (Andrey Ryabinin) [PSBM-47303]
  - ploop: push_backup: optimize ploop_pb_put_reported() (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: optimize ploop_pb_get_pending() (Maxim Patlasov) [PSBM-45000]
  - ms/KVM: x86: move steal time initialization to vcpu entry time (Marcelo Tosatti) [PSBM-46737]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.7]
changelog:
  - Revert "sched: Port diff-fairsched-cpuset-add-fake-cpuset-for-containers" (Pavel Tikhomirov)
  - ve/proc/cpuset: do not show cpuset in CT (Pavel Tikhomirov) [PSBM-47280]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.8]
changelog:
  - ve/kmod: rename {,fs-}binfmt_misc in the autoload whitelist (Dmitry Safonov) [PSBM-41216]
  - fuse: enable synchronous close for both "pstorage://" and "vstorage://" fs types (Andrey Zaitsev) [PSBM-47206]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.9]
changelog:
  - ploop: io_direct: delay f_op->fsync() until FLUSH|FUA (v2) (Maxim Patlasov) [PSBM-47026]
  - kernel/sysrq: reset watchdog on all cpus while during sysrq-w (Andrey Ryabinin) [PSBM-47486]
  - cbt: fix possible race on alloc_page() (Maxim Patlasov)
  - ploop: push_backup: merge pbd->cbt_map back to CBT (Maxim Patlasov) [PSBM-47429]
  - cbt: new api: blk_cbt_map_merge() (Maxim Patlasov) [PSBM-47429 PSBM-47429]
  - cbt: fix panic in blk_cbt_map_copy_once() (Maxim Patlasov) [PSBM-47416]
  - ms/x86/kasan: instrument user memory access API (Andrey Ryabinin)
  - ms/mm/kasan: add API to check memory regions (Andrey Ryabinin)
  - ms/mm/kasan: print name of mem[set,cpy,move]() caller in report (Andrey Ryabinin)
  - ms/dcache: add missing lockdep annotation (Linus Torvalds)
  - ms/dcache: dentry_kill() doesn't need the second argument now (Al Viro)
  - ms/dcache: dealing with the rest of shrink_dentry_list() livelock (Al Viro)
  - ms/dcache: shrink_dentry_list(): take parent's ->d_lock earlier (Al Viro)
  - ms/dcache: expand dentry_kill(dentry, 0) in shrink_dentry_list() (Al Viro)
  - ms/dcache: split dentry_kill() (Al Viro)
  - ms/dcache: lift the "already marked killed" case into shrink_dentry_list() (Al Viro)
  - ms/dcache: don't need rcu in shrink_dentry_list() (Miklos Szeredi)
  - ms/dcache: fold try_prune_one_dentry() (Al Viro)
  - ms/dcache: fold d_kill() (Vladimir Davydov) [PSBM-47312]
  - ms/kvm:vmx: more complete state update on APICv on/off (Roman Kagan) [PSBM-46939]
  - Revert "kvm:vmx: more complete state update on APICv on/off" (Konstantin Khorenko) [PSBM-46939]
  - pfcache: pick page from peer mapping after readahead (Vladimir Davydov) [PSBM-47541]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.10]
changelog:
  - arch: x86: don't charge kernel page tables to kmemcg (Vladimir Davydov)
  - pipe: uncharge page on ->steal (Vladimir Davydov)
  - net/af_unix: charge buffers to kmemcg (Vladimir Davydov) [PSBM-34562]
  - mm: charge/uncharge kmemcg from generic page allocator paths (Vladimir Davydov)
  - mm: Move PageBalloon and PageBuddy helpers to page-flags.h (Vladimir Davydov)
  - mm: memcontrol: drop memcg_kmem_commit_charge (Vladimir Davydov)
  - mm: Drop alloc_kmem_pages and friends (Vladimir Davydov) [PSBM-34562]
  - ploop: push_backup: copy stop status back to userspace (Maxim Patlasov) [PSBM-47429]
  - fs/aio-nr: fix decrement of aio-nr (Andrey Ryabinin) [PSBM-47209]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.11]
changelog:
  - pfcache: abort ext4_pfcache_open if inode already has peer installed (Vladimir Davydov) [PSBM-47806]
  - net: packet: rework rx/tx ring pages accounting (Vladimir Davydov) [PSBM-47873]
  - ve/mm: fix PAGE_KMEMCG_MAPCOUNT_VALUE (Vladimir Davydov)


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.12]
changelog:
  - ve: drop xattr policy toggle (Stanislav Kinsburskiy) [OVZ-6409]
  - ploop: push_backup: rework lockout machinery (Maxim Patlasov) [PSBM-47680 PSBM-47680]
  - Revert "ploop: push_backup must pass READs intact" (Maxim Patlasov) [PSBM-47680 PSBM-47680 PSBM-46775]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.13]
changelog:
  - net/skbuff: fix skb_clone() (Andrey Ryabinin) [PSBM-38924 PSBM-47290]
  - ve/netfilter/ipset: allow modules autoload (Pavel Tikhomirov) [PSBM-46102]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.14]
changelog:
  - ms/kmod: remove false positive warning "waiting module removal not supported: please upgrade" (Rusty Russell) [PSBM-27580 OVZ-6748 PSBM-47877]
  - ploop: push_backup: PLOOP_PEEK mode of ioctl(PLOOP_IOC_PUSH_BACKUP_IO) (Maxim Patlasov) [PSBM-47764]
  - cbt: blk_cbt_update_size() must return if cbt->block_max not changed (Maxim Patlasov)
  - cbt: blk_cbt_update_size() should not copy uninitialized data (Maxim Patlasov) [PSBM-48120]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.15]
changelog:
  - ve/vtty: Don't free console mapping until no clients left (Cyrill Gorcunov) [PSBM-39463]
  - fs: do not allow rootfs umount (Vasily Averin) [PSBM-46437]
  - ms/kernel/sysrq: restore touch_nmi_watchdog() in show_state_filter() (Andrey Ryabinin) [PSBM-47486]
  - ploop: fix gendisk disk_stats to be seen on partition (Maxim Patlasov) [PSBM-48266]
  - modules: set module author for Virtuozzo modules (Konstantin Khorenko) [PSBM-43847]
  - ploop: "Parallels loopback device" -> "Virtuozzo loopback device" (Konstantin Khorenko) [PSBM-43847]
  - license: put correct copyrights into file headers (Konstantin Khorenko) [PSBM-43847]
  - license: drop COPYING.Parallels file (Konstantin Khorenko) [PSBM-43847]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.16]
changelog:
  - netlink/diag: report flags for netlink sockets (Andrey Vagin) [PSBM-28386]
  - netlink: add an ability to restore messages in a receive queue (Andrey Vagin) [PSBM-28386]
  - netlink: allow to set peeking offset for sockets (Andrey Vagin) [PSBM-28386 PSBM-48484 PSBM-28386]
  - ploop: io_kaio: fix silly bug in kaio_complete_io_state() (Maxim Patlasov)
  - ploop: fix counting bio_qlen (Maxim Patlasov)
  - ve/device_cgroup: kill ACC_QUOTA permission (Andrey Ryabinin) [PSBM-48482]
  - ve/device_cgroup: allow to change device mount permission via cgroup (Andrey Ryabinin) [PSBM-48431]
  - ve/security: device_cgroup -- Allow manage devices in @pseudosuper state (Cyrill Gorcunov) [PSBM-48421]
  - ve/sysctl: remove unused fs.ve-area-access-check, net.ipv4.tcp_max_tw* (Pavel Tikhomirov) [PSBM-47061]


author: Vladimir Davydov <vdavydov@virtuozzo.com> [3.10.0-327.18.2.vz7.14.17]
changelog:
  - cgroup: fix path mangling for ve cgroups (Vladimir Davydov) [PSBM-48629]
  - cgroup: use cgroup_path_ve helper in cgroup_show_path (Vladimir Davydov)
  - Drop fairsched syscalls (Vladimir Davydov)
  - Use ve init task's css instead of opening cgroup via vfs (Vladimir Davydov) [PSBM-48629]
  - Drop VZCTL_ENV_CREATE (Vladimir Davydov)
  - Drop vz_compat boot param (Vladimir Davydov)
  - mm: memcontrol: fix race between kmem uncharge and charge reparenting (Vladimir Davydov) [OVZ-6756]
  - timers should not get negative argument (Vasily Averin) [PSBM-48475]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.18]
changelog:
  - ve: drop not used CAP_VE_ADMIN and CAP_VE_NET_ADMIN (Vladimir Davydov)
  - ploop: fix barriers for ordinary requests (Maxim Patlasov)
  - ms/mm: memcontrol: reclaim when shrinking memory.high below usage (Johannes Weiner) [PSBM-48546]
  - rh/locks: check for fl->fl_owner != filp in show_fd_locks (Stanislav Kinsburskiy) [PSBM-48727]
  - ve/fs: namespace -- Ignore device permissions during restore (Cyrill Gorcunov) [PSBM-48188]
  - ve: mark DEF_PERMS feature deprecated (Evgenii Shatokhin) [PSBM-40280]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.20]
changelog:
  - ve/net: sit: fix crash on newlink if VE_FEATURE_SIT is disabled (Vladimir Davydov)
  - ve/net: ipip: fix crash on newlink if VE_FEATURE_IPIP is disabled (Vladimir Davydov)
  - ve/net: ip_vti: skip per net init in ve (Vladimir Davydov) [PSBM-48698]
  - ve/net: ipip: enable in container (Vladimir Davydov) [PSBM-48608]
  - ve/fs: namespace -- Don't fail on permissions if @ve->devmnt_list is empty (Cyrill Gorcunov) [PSBM-48188]
  - ploop: deadcode cleanup in dio_submit() (Dmitry Monakhov)
  - ploop: skip redundant fsync for REQ_FUA in post_submit (Dmitry Monakhov)
  - ve/net: enable IPPROTO_ICMP inside Containers (Vasily Averin) [OVZ-6744 PSBM-47413]
  - ve/fairsched: Resurrect proc fairsched files (Vladimir Davydov) [PSBM-48824]
  - ve/binfmt_misc: Allow mount if capable(CAP_SYS_ADMIN) (Kirill Tkhai) [PSBM-47737]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.21]
changelog:
  - ploop: push_backup: implement timeout functions (Maxim Patlasov) [PSBM-48082]
  - ploop: push_backup: health monitor thread (Maxim Patlasov) [PSBM-48082]
  - ploop: push_backup: add timeout tunable (Maxim Patlasov)
  - ploop: push_backup: extend pb_set (Maxim Patlasov)
  - ploop: push_backup: factor rb_erase() out (Maxim Patlasov)
  - ploop: push_backup: introduce pb_set structure (Maxim Patlasov) [PSBM-48082 PSBM-48082]
  - ploop: fixup barrier handling during relocation (Maxim Patlasov)
  - ploop: fix barriers for PLOOP_E_RELOC_NULLIFY (Maxim Patlasov)
  - ploop: generalize issue_flush (Dmitry Monakhov)
  - ploop: remove preflush from dio_submit (Maxim Patlasov)
  - ploop: resurrect delay_fua for io_direct (Maxim Patlasov)
  - ploop: minor rework of ->write_page() io method (Dmitry Monakhov)
  - ploop: resurrect delayed_fua for io_kaio (Maxim Patlasov)
  - ploop: minor rework of ploop_req_delay_fua_possible (Maxim Patlasov) [PSBM-47107]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.22]
changelog:
  - Revert "ve/vmscan: do not throttle kthreads due to too_many_isolated" (Vladimir Davydov)
  - mm: vmscan: never wait on writeback pages (Vladimir Davydov) [PSBM-48115]
  - ub: account memory overcommit failures in UB_PRIVVMPAGES.failcnt (Andrey Ryabinin) [PSBM-48891]
  - ms/netfilter: x_tables: check for bogus target offset (Cyrill Gorcunov) [PSBM-49001]
  - ms/netfilter: x_tables: validate e->target_offset early (Cyrill Gorcunov) [PSBM-49001]
  - ms/netfilter: x_tables: make sure e->next_offset covers remaining blob size (Florian Westphal) [PSBM-49001]


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-42
changelog:
  - Fix a deadlock with hpc backup solution
  - CLKRN-92: Megaraid driver panic fixes
  - CLKRN-94: Improve a symlink attack protection by checking nested symlinks
  - CLKRN-95: Reduce high-order allocation impact in filesystem mount code
  - CLKRN-97: Fix race condition in common hashtable implementation


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-51
changelog:
  - CLKRN-125: net: netfilter: use vmalloc for ftp_buffer allocation
  - CLKRN-124: mm/memcg, ub: fix overflow in mem_cgroup_apply_beancounter()


author: Sergey Fokin <sfokin@cloudlinux.com> - 1.4-58
changelog:
  - CLKRN-63: make symlinks in /sys/dev/char be visible
  - CLKRN-138: cleanup a cpufreq_cpu_data to avoid access aftre free situation


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-59
changelog:
  - Updated version to 714 to avoid problems with migration from RHEL/CentOS
  to CloudLinux
  - Code clean-up on working with the filesystem


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-62
changelog:
  - Improved kernel GRUB entry checking, fixing error when initramfs might
  not be added in kernel GRUB entry


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-63
changelog:
  - CLKRN-151: fixup disk errors on HyperV hosts
  - CLKRN-149: tcp: check skb tailroom before collapsing


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-68
changelog:
  - CLKRN-944: CVE-2022-1016: netfilter: nf_tables: initialize registers in nft_do_chain()
  - CLKRN-943: CVE-2022-1015: netfilter: nf_tables: validate registers coming from userspace.


author: Anatoly Stepanov <astepanov@cloudlinux.com> - 1.5-69
changelog:
  - CLKRN-951: Revert "hide cgroups in /proc/cgroups in order to cheat systemd"
  - CLKRN-955: scsi: aacraid: fix illegal IO beyond last LBA
  - CLKRN-955: scsi: aacraid: fix shutdown crash when init fails
  - CLKRN-955: scsi: aacraid: Prevent crash in case of free interrupt during scsi EH path
  - KMODLVE-515: add missing path_put in lve_namespace_set_root


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-70
changelog:
  - KMODLVE-523: rmdir hooks are not being called
  - KMODLVE-516: network-manager has no access to mtu
  - KMODLVE-591: user_ptrace checks should account CAP_SYS_PTRACE


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-71
changelog:
  - CLKRN-881: backport XFS corruption fix from Centos 7
  - CLKRN-974: drm/vmwgfx: Fix two list_for_each loop exit tests
  - CLKRN-974: drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add
  - CLKRN-974: drm/vmwgfx: Fix double free in vmw_recv_msg()
  - CLKRN-974: drm/vmwgfx: fix memory leak when too many retries have occurred
  - CLKRN-974: drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
  - CLKRN-974: drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read
  - CLKRN-974: drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set
  - CLKRN-974: drm/vmwgfx: Don't double-free the mode stored in par->set_mode
  - CLKRN-974: drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user
  - CLKRN-974: drm/vmwgfx: Fix setting of dma masks
  - CLKRN-974: drm/vmwgfx: Fix 32-bit VMW_PORT_HB_[IN|OUT] macros
  - CLKRN-974: drm/vmwgfx: Fix a buffer object leak
  - CLKRN-974: drm/vmwgfx: Fix a destoy-while-held mutex problem.
  - CLKRN-974: drm/vmwgfx: Potential off by one in vmw_view_add()
  - CLKRN-974: perf/core: Fix address filter parser for multiple filters
  - CLKRN-974: ext4: don't BUG if someone dirty pages without asking ext4 first
  - CLKRN-974: ext4: force overhead calculation if the s_overhead_cluster makes no sense
  - CLKRN-974: ext4: fix overhead calculation to account for the reserved gdt blocks
  - CLKRN-974: ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
  - CLKRN-974: ipv4: drop dst in multicast routing path
  - CLKRN-974: ptrace: Reimplement PTRACE_KILL by always sending SIGKILL
  - CLKRN-974: inotify: show inotify mask flags in proc fdinfo
  - CLKRN-974: ext4: fix bug_on in ext4_writepages
  - CLKRN-974: ext4: fix use-after-free in ext4_rename_dir_prepare
  - CLKRN-974: md: protect md_unregister_thread from reentrancy
  - CLKRN-974: ext4: make variable "count" signed
  - CLKRN-974: ext4: fix bug_on ext4_mb_use_inode_pa
  - CLKRN-974: dm era: commit metadata in postsuspend after worker stops


author: Denis Kirjanov <dkirjanov@cloudlnux.com> - 1.5-74
changelog:
  - CLKRN-1061: introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty()
  - CLKRN-1061: netfilter: nf_tables: disallow non-stateful expression in sets earlier
  - CLKRN-1061: perf: Fix sys_perf_event_open() race against self
  - CLKRN-1061: RDMA/cma: Do not change route.addr.src_addr.ss_family
  - CLKRN-1061: xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate
  - CLKRN-1061: Bluetooth: use correct lock to prevent UAF of hdev object
  - CLKRN-1061: Bluetooth: fix use-after-free error in lock_sock_nested()
  - CLKRN-1061: media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
  - CLKRN-1061: CVE-2021-3564: Bluetooth: fix the erroneous flush_work() order
  - CLKRN-1061: CVE-2020-0465: HID: core: Sanitize event code and type when mapping input
  - CLKRN-1061: [media] firewire: don't break long lines
  - CLKRN-1061: [media] firewire: firedtv-avc: potential buffer overflow
  - CLKRN-1061: perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  - CLKRN-1061: net_sched: cls_route: remove the right filter from hashtable
  - CLKRN-1061: bluetooth: eliminate the potential race condition when removing the HCI controller
  - CLKRN-1061: CVE-2021-29650: netfilter: x_tables: Use correct memory barriers.
  - CLKRN-1061: CVE-2020-8648: vt: selection, close sel_buffer race
  - CLKRN-1061: CVE-2021-29154:  bpf, x86: Validate computation of branch displacements for x86-64
  - CLKRN-1061: CVE-2020-14331: Fix for missing check in vgacon scrollback handling
  - CLKRN-1061: net-sysfs: Call dev_hold always in rx_queue_add_kobject
  - CLKRN-1061: net-sysfs: Call dev_hold always in netdev_queue_add_kobject
  - CLKRN-1061: net-sysfs: call dev_hold if kobject_init_and_add success
  - CLKRN-1061: Bluetooth: A2MP: Fix not initializing all members
  - CLKRN-1061: Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel
  - CLKRN-1061: [usb] USB: core: Fix races in character device registration and deregistraion
  - CLKRN-1061: [usb] usb: cdc-acm: make sure a refcount is taken early enough
  - CLKRN-1061: [usb] USB: adutux: fix use-after-free on disconnect
  - CLKRN-1061: [fs] ext4: fix support for inode sizes > 1024 bytes
  - CLKRN-1061: [fs] ext4: forbid i_extra_isize not divisible by 4
  - CLKRN-1061: [fs] ext4: validate the debug_want_extra_isize mount option at parse time
  - CLKRN-1061: CVE-2019-19062: [crypto] crypto: user - fix memory leak in crypto_report
  - CLKRN-1061: [media] media: v4l: event: Prevent freeing event subscriptions while accessed
  - CLKRN-1061: [wireless] rtlwifi: prevent memory leak in rtl_usb_probe
  - CLKRN-1061: [wireless] iwlwifi: dbg_ini: fix memory leak in alloc_sgtable
  - CLKRN-1061: CVE-2019-19524: [input] Input: ff-memless - kill timer in destroy()
  - CLKRN-1061: CVE-2017-18551: [i2c] i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA
  - CLKRN-1061: [fs] ext4: work around deleting a file with i_nlink == 0 safely
  - CLKRN-1061: [netdrv] can: peak_usb: fix slab info leak
  - CLKRN-1061: [fs] fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
  - CLKRN-1061: [media] media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
  - CLKRN-1061: [scsi] scsi: libsas: delete sas port if expander discover failed
  - CLKRN-1061: CVE-2019-15917: [bluetooth] Bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in hci_uart_set_proto()
  - CLKRN-1061: [netdrv] fjes: Handle workqueue allocation failure
  - CLKRN-1061: [scsi] scsi: qla2xxx: fix a potential NULL pointer dereference
  - CLKRN-1061: CVE-2019-17053: [net] ieee802154: enforce CAP_NET_RAW for raw sockets
  - CLKRN-1061: CVE-2019-16994: [net] sit: fix memory leak in sit_init_net()
  - CLKRN-1061: CVE-2019-17055: [isdn] mISDN: enforce CAP_NET_RAW for raw sockets
  - CLKRN-1061: CVE-2019-18808: [crypto] crypto: ccp - Release all allocated memory if sha type is invalid
  - CLKRN-1061: [fs] nfs: Correct an nfs page array calculation error
  - CLKRN-1061: [security] selinux: properly handle multiple messages in selinux_netlink_send()
  - CLKRN-1061: [scsi] scsi: sg: add sg_remove_request in sg_write
  - CLKRN-1061: CVE-2020-12826: [fs] signal: Extend exec_id to 64bits
  - CLKRN-1061: CVE-2020-10732: [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()
  - CLKRN-1061: CVE-2020-10942: [vhost] vhost: Check docket sk_family instead of call getname
  - CLKRN-1061: [input] Input: add safety guards to input_set_keycode()
  - CLKRN-1061: [x86] kvm: x86: clear stale x86_emulate_ctxt->intercept value
  - CLKRN-1061: [x86] kvm: vmx: check descriptor table exits on instruction emulation
  - CLKRN-1061: [x86] kvm: nvmx: Check IO instruction VM-exit conditions
  - CLKRN-1061: [x86] kvm: nvmx: Refactor IO bitmap checks into helper function
  - CLKRN-1061: [x86] kvm: nvmx: Don't emulate instructions in guest mode
  - CLRKN-1061: [net] ipv6: constify ip6_dst_lookup_{flow|tail}() sock arguments
  - CLKRN-1061: CVE-2020-8649: CVE-2020-8647 [video] vgacon: Fix a UAF in vgacon_invert_region
  - CLKRN-1061: [wireless] mwifiex: Fix mem leak in mwifiex_tm_cmd
  - CLKRN-1061: [block] floppy: check FDC index for errors before assigning it
  - CLKRN-1061: mac80211: drop robust management frames from unknown TA
  - CLKRN-1061: mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()
  - CLKRN-1061: mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv()
  - CLKRN-1061: HID: hiddev: avoid opening a disconnected device
  - CLKRN-1061: CVE-2020-10757: mm: Fix mremap not considering huge pmd devmap
  - CLKRN-1061: vfio-pci: Invalidate mmaps and block MMIO access on disabled memory
  - CLKRN-1061: [scsi] scsi: qedi: remove memset/memcpy to nfunc and use func instead
  - CLKRN-1061: blktrace: Protect q->blk_trace with RCU
  - CLKRN-1061: netlabel: cope with NULL catmap
  - CLKRN-1061: CVE-2019-16746: [net] nl80211: validate beacon head
  - CLKRN-1061: [net] mac80211: Do not send Layer 2 Update frame before authorization
  - CLKRN-1061: cfg80211: Use const more consistently in for_each_element macros
  - CLKRN-1061: ieee80211: fix for_each_element_extid()
  - CLKRN-1061: cfg80211: add and use strongly typed element iteration macros
  - CLKRN-1061: CVE-2019-3901: [kernel] perf/core: Fix perf_event_open() vs. execve() race
  - CLKRN-1061: binfmt_elf: switch to new creds when switching to new mm
  - CLKRN-1061: CVE-2019-10638: [net] inet: switch IP ID generator to siphash
  - CLKRN-1061: CVE-2019-10638: [lib] siphash: add cryptographically secure PRF
  - CLKRN-1061: CVE-2019-10638: [fs] dcache: allow word-at-a-time name hashing with big-endian CPUs
  - CLKRN-1061: CVE-2019-15221: [sound] ALSA: line6: Fix memory leak at line6_init_pcm() error path
  - CLKRN-1061: CVE-2019-15221: [sound] ALSA: line6: Fix write on zero-sized buffer
  - CLKRN-1061: CVE-2019-14283: [block] floppy: fix out-of-bounds read in copy_buffer
  - CLKRN-1061: CVE-2019-10207: [bluetooth] Bluetooth: hci_uart: check for missing tty operations


author: Denis Kirjanov <dkirjanov@cloudlnux.com> - 1.5-74
changelog:
  - CLKRN-1061: introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty()
  - CLKRN-1061: CVE-2022-32250: CVE-2022-1966: netfilter: nf_tables: disallow non-stateful expression in sets earlier
  - CLKRN-1061: perf: Fix sys_perf_event_open() race against self
  - CLKRN-1061: RDMA/cma: Do not change route.addr.src_addr.ss_family
  - CLKRN-1061: xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate
  - CLKRN-1061: Bluetooth: use correct lock to prevent UAF of hdev object
  - CLKRN-1061: Bluetooth: fix use-after-free error in lock_sock_nested()
  - CLKRN-1061: media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
  - CLKRN-1061: CVE-2021-3564: Bluetooth: fix the erroneous flush_work() order
  - CLKRN-1061: CVE-2020-0465: HID: core: Sanitize event code and type when mapping input
  - CLKRN-1061: [media] firewire: don't break long lines
  - CLKRN-1061: [media] firewire: firedtv-avc: potential buffer overflow
  - CLKRN-1061: perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  - CLKRN-1061: net_sched: cls_route: remove the right filter from hashtable
  - CLKRN-1061: bluetooth: eliminate the potential race condition when removing the HCI controller
  - CLKRN-1061: CVE-2021-29650: netfilter: x_tables: Use correct memory barriers.
  - CLKRN-1061: CVE-2020-8648: vt: selection, close sel_buffer race
  - CLKRN-1061: CVE-2021-29154:  bpf, x86: Validate computation of branch displacements for x86-64
  - CLKRN-1061: CVE-2020-14331: Fix for missing check in vgacon scrollback handling
  - CLKRN-1061: net-sysfs: Call dev_hold always in rx_queue_add_kobject
  - CLKRN-1061: net-sysfs: Call dev_hold always in netdev_queue_add_kobject
  - CLKRN-1061: net-sysfs: call dev_hold if kobject_init_and_add success
  - CLKRN-1061: Bluetooth: A2MP: Fix not initializing all members
  - CLKRN-1061: Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel
  - CLKRN-1061: [usb] USB: core: Fix races in character device registration and deregistraion
  - CLKRN-1061: [usb] usb: cdc-acm: make sure a refcount is taken early enough
  - CLKRN-1061: [usb] USB: adutux: fix use-after-free on disconnect
  - CLKRN-1061: [fs] ext4: fix support for inode sizes > 1024 bytes
  - CLKRN-1061: [fs] ext4: forbid i_extra_isize not divisible by 4
  - CLKRN-1061: [fs] ext4: validate the debug_want_extra_isize mount option at parse time
  - CLKRN-1061: CVE-2019-19062: [crypto] crypto: user - fix memory leak in crypto_report
  - CLKRN-1061: [media] media: v4l: event: Prevent freeing event subscriptions while accessed
  - CLKRN-1061: [wireless] rtlwifi: prevent memory leak in rtl_usb_probe
  - CLKRN-1061: [wireless] iwlwifi: dbg_ini: fix memory leak in alloc_sgtable
  - CLKRN-1061: CVE-2019-19524: [input] Input: ff-memless - kill timer in destroy()
  - CLKRN-1061: CVE-2017-18551: [i2c] i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA
  - CLKRN-1061: [fs] ext4: work around deleting a file with i_nlink == 0 safely
  - CLKRN-1061: [netdrv] can: peak_usb: fix slab info leak
  - CLKRN-1061: [fs] fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
  - CLKRN-1061: [media] media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
  - CLKRN-1061: [scsi] scsi: libsas: delete sas port if expander discover failed
  - CLKRN-1061: CVE-2019-15917: [bluetooth] Bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in hci_uart_set_proto()
  - CLKRN-1061: [netdrv] fjes: Handle workqueue allocation failure
  - CLKRN-1061: [scsi] scsi: qla2xxx: fix a potential NULL pointer dereference
  - CLKRN-1061: CVE-2019-17053: [net] ieee802154: enforce CAP_NET_RAW for raw sockets
  - CLKRN-1061: CVE-2019-16994: [net] sit: fix memory leak in sit_init_net()
  - CLKRN-1061: CVE-2019-17055: [isdn] mISDN: enforce CAP_NET_RAW for raw sockets
  - CLKRN-1061: CVE-2019-18808: [crypto] crypto: ccp - Release all allocated memory if sha type is invalid
  - CLKRN-1061: [fs] nfs: Correct an nfs page array calculation error
  - CLKRN-1061: [security] selinux: properly handle multiple messages in selinux_netlink_send()
  - CLKRN-1061: [scsi] scsi: sg: add sg_remove_request in sg_write
  - CLKRN-1061: CVE-2020-12826: [fs] signal: Extend exec_id to 64bits
  - CLKRN-1061: CVE-2020-10732: [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()
  - CLKRN-1061: CVE-2020-10942: [vhost] vhost: Check docket sk_family instead of call getname
  - CLKRN-1061: [input] Input: add safety guards to input_set_keycode()
  - CLKRN-1061: [x86] kvm: x86: clear stale x86_emulate_ctxt->intercept value
  - CLKRN-1061: [x86] kvm: vmx: check descriptor table exits on instruction emulation
  - CLKRN-1061: [x86] kvm: nvmx: Check IO instruction VM-exit conditions
  - CLKRN-1061: [x86] kvm: nvmx: Refactor IO bitmap checks into helper function
  - CLKRN-1061: [x86] kvm: nvmx: Don't emulate instructions in guest mode
  - CLRKN-1061: [net] ipv6: constify ip6_dst_lookup_{flow|tail}() sock arguments
  - CLKRN-1061: CVE-2020-8649: CVE-2020-8647 [video] vgacon: Fix a UAF in vgacon_invert_region
  - CLKRN-1061: [wireless] mwifiex: Fix mem leak in mwifiex_tm_cmd
  - CLKRN-1061: [block] floppy: check FDC index for errors before assigning it
  - CLKRN-1061: mac80211: drop robust management frames from unknown TA
  - CLKRN-1061: mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()
  - CLKRN-1061: mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv()
  - CLKRN-1061: HID: hiddev: avoid opening a disconnected device
  - CLKRN-1061: CVE-2020-10757: mm: Fix mremap not considering huge pmd devmap
  - CLKRN-1061: vfio-pci: Invalidate mmaps and block MMIO access on disabled memory
  - CLKRN-1061: [scsi] scsi: qedi: remove memset/memcpy to nfunc and use func instead
  - CLKRN-1061: blktrace: Protect q->blk_trace with RCU
  - CLKRN-1061: netlabel: cope with NULL catmap
  - CLKRN-1061: CVE-2019-16746: [net] nl80211: validate beacon head
  - CLKRN-1061: [net] mac80211: Do not send Layer 2 Update frame before authorization
  - CLKRN-1061: cfg80211: Use const more consistently in for_each_element macros
  - CLKRN-1061: ieee80211: fix for_each_element_extid()
  - CLKRN-1061: cfg80211: add and use strongly typed element iteration macros
  - CLKRN-1061: CVE-2019-3901: [kernel] perf/core: Fix perf_event_open() vs. execve() race
  - CLKRN-1061: binfmt_elf: switch to new creds when switching to new mm
  - CLKRN-1061: CVE-2019-10638: [net] inet: switch IP ID generator to siphash
  - CLKRN-1061: CVE-2019-10638: [lib] siphash: add cryptographically secure PRF
  - CLKRN-1061: CVE-2019-10638: [fs] dcache: allow word-at-a-time name hashing with big-endian CPUs
  - CLKRN-1061: CVE-2019-15221: [sound] ALSA: line6: Fix memory leak at line6_init_pcm() error path
  - CLKRN-1061: CVE-2019-15221: [sound] ALSA: line6: Fix write on zero-sized buffer
  - CLKRN-1061: CVE-2019-14283: [block] floppy: fix out-of-bounds read in copy_buffer
  - CLKRN-1061: CVE-2019-10207: [bluetooth] Bluetooth: hci_uart: check for missing tty operations


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-76
changelog:
  - CLKRN-1076: substituted ipset allocating memory to kvzalloc
  - CLKRN-1083: CVE-2022-2588: net_sched: cls_route: remove from list when handle is 0


author: Denis Kirjanov <dkirjanov@cloudlnux.com>> - 1.5-77
changelog:
  - CLKRN-1061: fget: check that the fd still exists after getting a ref to it
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: KVM: x86/speculation: Disable Fill buffer clear within guests
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/srbds: Update SRBDS mitigation selection
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: cpu/speculation: Add prototype for cpu_show_srbds()
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/mmio: Enable CPU Fill buffer         clearing on idle
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug


author: Denis Kirjanov <dkirjanov@cloudlnux.com>> - 1.5-79
changelog:
  - KRNTSTNG-292: Fix oom_kill counter in CL7
  - CLKRN-1013: Move CL7 XFS to Centos 7/OpenVZ current implementation


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-80
changelog:
  - CLKRN-1077: disable kmem accounting due to memory leak
  - CVE: mm/rmap: Fix anon_vma->degree ambiguity leading to  double-reuse
  - CVE: mm: rmap: explicitly reset vma->anon_vma in unlink_anon_vmas()
  - CVE: CVE-2022-4378: proc: proc_skip_spaces() shouldn't think it is working on C strings
  - CVE: CVE-2022-4378: proc: avoid integer type confusion in get_proc_long
  - CVE: CVE-2022-2964: net: usb: ax88179_178a: Fix packet receiving
  - CVE: CVE-2022-2964: net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
  - CVE: CVE-2022-2964: net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32
  - CVE: CVE-2022-2964: ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32
  - CVE: CVE-2022-2964: net: usb: ax88179_178a: fix packet alignment padding


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-81
changelog:
  - KMODLVE-589: avoid crashes in os_set_dac_override()
  - CLKRN-1093: allow freezable sleep in kmodlve


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-82
changelog:
  - CVE: Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu
  - CVE: usb: mon: make mmapped memory read only
  - CLKRN-1176: added patch to fix ttypushback vulnerability
  - KMODLVE-596: fix cgroup stat parsing


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-83
changelog:
  - CLKRN-1406: revert some changes related to prod_net_disable2 - made the behaviour obliged
  - CLKRN-1399: improved fs.enforce_symlinksifowner option to close the SecureLink creating vulnerability


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-84
changelog:
  - CLKRN-1532: (CVE-2024-1086) netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - CLKRN-1203: switch back to using rh_reserved for tag links
  - CLKRN-1411: use monotonic clock for iolimits


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-76
changelog:
  - AL-2163: Reworked detection of the GRUB related issues during kernel installation/update
  - CLKRN-175: register events with different number
  - CLKRN-170: take into account stack_guard_gap value
  - KMODLVE-121: the freezer cgroup is released before closed


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-33
changelog:
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
    [Fix the Fix the patch to make sure makedumpfile-1.6.2/ path is used]


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-34
changelog:
  - kdump.sysconfig/x86_64: Disable HEST by default
  - Introduce kdumpctl rebuild command and update document


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-37
changelog:
  - dracut-module-setup: get localhost alias by manual
  - dracut-module-setup: filter out localhost for generic_fence_kdump
  - kdumpctl: distinguish the reason for ssh failure


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43
changelog:
  - module-setup: re-fix 99kdumpbase network dependency
  - kdumpctl: bail out immediately if host key verification failed


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48
changelog:
  - dracut-module-setup.sh: ensure cluster info is ready before query.
  - dracut-module-setup.sh: improve get_alias()


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8-1
changelog:
  - Resolves: rhbz#1673716 - Rebase k-h-c-i to version 0.8
  - The rebase also includes fixes for:
    - rhbz#1533190 - CVE-2017-15111 keycloak-httpd-client-install: unsafe
                     /tmp log file in --log-file option in keycloak_cli.py
    - rhbz#1533202 - CVE-2017-15112 keycloak-httpd-client-install: unsafe
                     use of -p/--admin-password on command line


author: Jaromir Capik <jcapik@redhat.com> - 1.0-7
changelog:
  - Missing ASL 2.0 license file included
  - Minor spec file changes according to the latest guidelines


author: David Howells <dhowells@redhat.com>
changelog:
  - Adjust the manual page for 'keyctl unlink' to show keyring is optional.
  - Add --version support for the keyutils version and build date.


author: David Howells <dhowells@redhat.com> - 1.5.4-1
changelog:
  - Fix the keyctl padd command and similar to handle binary input.
  - Make keyctl show able to take a keyring to dump.
  - Make keyctl show able to take a flag to request hex key IDs.
  - Make keyctl show print the real ID of the root keyring.


author: David Howells <dhowells@redhat.com> - 1.5.6-1
changelog:
  - Fix the request-key.conf.5 manpage.
  - Fix the max depth of key tree dump (keyctl show) [BZ 1002761].
  - The input buffer size for keyctl padd and pinstantiate should be larger [BZ 1002761].
  - Add keyctl_invalidate.3 manpage [BZ 1002761].


author: David Howells <dhowells@redhat.com> - 1.5.7-1
changelog:
  - Provide a utility function to find a key by type and name.
  - Allow keyctl commands to take a type+name arg instead of a key-id arg.
  - Add per-UID get_persistent keyring function [BZ 1014739].


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-2
changelog:
  - Resolves: #997594, misbehaving checkbox "Allow encryption with untrusted keys"
  - Resolves: #997599, Key Manager does not refresh after change
  - Resolves: #999850, shows error message despite the change was successful


author: Rex Dieter <rdieter@fedoraproject.org> - 4.10.1-2
changelog:
  - pull a few upstream patches, in particular...
  - kmix crahes moving streams between sinks (#922849)


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-12
changelog:
  - weak-modules: fix coverity introduced by latest changes
  - weak-modules: fix "permission denied" on some upgrades.
    Resolves: rhbz#1416566


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-17
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1468305
  - weak-modules: implement dry run by symlink restoration.
    Resolves: rhbz#1477073


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-18
changelog:
  - depmod: external directories support.
    Resolves: rhbz#1361857
  - BuildRequires automake autoconf libtool.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-20
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1510058


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-23
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1619889.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-26
changelog:
  - weak-modules: handle independent modules in one run
  - weak-modules: use asterisk for kernel version in sandbox
    Resolves: rhbz#1695547


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-28
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1774925


author: Alan Bartlett <ajb@elrepo.org> - 1.1.7-3
changelog:
  - Updated to the 29700 variant of the 1.1.7 source tarball.
  - Set release to 3 so as to be in sync with the EL5 version.


author: mpluskal@suse.com
changelog:
  - Update to 0.7.1
    * Fix sysdig-probe compilation for kernel < 3.4.0
    * Fix compilation on OSX
  - Changes for 0.7.0
    * Fix sysdig-probe for kernel 4.4
    * Fix a remotely possible deadlock during ioctl calls
    * Fix Kubernetes support when data returned from the API server
      is particularly big
    * Minor bugfixes
    * Spectrogram views in csysdig: spectro_all (System call latency
      spectrogram) and spectro_file (File I/O latency spectrogram)
    * Ability to authenticate to a Kubernetes API server using a
      certificate, via -K <file_name> or --k8s-api-cert=<file_name>.
      Can also be specified via the environment variable
      SYSDIG_K8S_API_CERT
    * Ability to sort columns in csysdig views using the keyboard
    * --filter-proclist: apply the filter to the process table
    * -M: add the possibility to stop collecting after X seconds
      evt.latency.quantized: 10-base log of the delta between an
      exit event and the correspondent enter event evt.latency.human:
      delta between an exit event and the correspondent enter event,
      as a human readable string (e.g. 10.3ms)


author: mpluskal@suse.com
changelog:
  - Update to 0.8.0
    * Bug fixes
      + Better terminal mouse handling for csysdig
      + Minor bugfixes
    * New and updated features
      + rkt support (when running sysdig in a container, bind
      mounting the rkt directory is necessary, e.g. -v
      /var/lib/rkt:/host/var/lib/rkt:ro for Docker)
      + chroot event
      + container.type: the container type, e.g. docker or rkt
      + Prebuild sysdig-probe for Debian kernels


author: mpluskal@suse.com
changelog:
  - Update to 0.9.0
    * Mesos and Marathon support:
    + csysdig views: Mesos Tasks, Mesos Frameworks, Marathon Apps,
      arathon Groups
    + -m sysdig/csysdig parameter to specify URLs for Mesos Master
      Marathon API
    + -pm sysdig parameter to get a Mesos-friendly event output
    + Filter fields: mesos.task.name, mesos.task.id,
      mesos.task.label, mesos.task.labels, mesos.framework.name,
      mesos.framework.id, marathon.app.name, marathon.app.id,
      marathon.app.label, marathon.app.labels, marathon.group.name,
      marathon.group.id
    * icontains filter comparison operator: case-insensitive string
      comparison
    * Support for SSL based authentication and bearer token
      authentication against the Kubernetes API server. Previously,
      SSL was just supported for CA verification. See the updated
      documentation for -K
    * New actions on csysdig views: lsof and renice
    * New network filter fields that support a CIDR notation
      (e.g. 127.0.0.1/24): fd.net, fd.cnet, fd.snet, fd.lnet, fd.rnet


author: mpluskal@suse.com
changelog:
  - Update to version 0.10.0:
    * setsid event
    * proc.sid filter field: the session id of the process
      generating the event
    * proc.sname filter field: the name of the current process
      session leader
    * --force-term-compat command line option: try to configure
      simple terminal
    * settings (xterm-1002) that work better with terminals like
      putty
    * Many minor bugfixes
    * builds with gcc6 (boo#985121)
  - Use pkgconfig() style dependencies
  - Build with lua-5.1 as builds fail with lua-5.2 and later


author: mpluskal@suse.com
changelog:
  - Update to version 0.11.0:
    * Support for tracers. A way to add user level events to sysdig
      stream. Seeannouncement blog post.
    * New csysdig views: Traces List, Traces Summary, Traces
      Spectogram
    * New evtin.* and span.* filters startswith operand for strings,
      ex: fd.name startswith /etc
    * evt.is_open_{read,write} fields, true or false if an event is
      an open() in read or write
    * Improved performances of Kubernetes metadata parsing.
    * Bug fixes for IPv6
  - Add sysdig-do-not-use-private-jq-api.patch to allow building
    with system JQ


author: mpluskal@suse.com
changelog:
  - Use current macros for KMP building
    * drop sysdig-kmp-preamble
  - Use exclusivearch instead of excluding architectures


author: mpluskal@suse.com
changelog:
  - Update to version 0.12.1:
    * Compilation issues when using non-bundled OpenSSL #672
    * Compilation issues under S390 architecture
    * Various issues on k8s parsing
    * Stale thread info when parsing processes within containers #665
    * Avoid getting cwd from driver, causes issues on Kernel 4.8
  - Changes for version 0.12.0:
    * New filters container.mount.* to match container mount points
    * New filter container.privileged to match containers running in
      privileged mode
    * Support latest kubernetes features: k8s.deployment.* and
      k8s.rs.* filters are now available
    * Added glob operator for strings, works as classic shell glob
      path matcher
    * Added pmatch operator
    * Add less package on docker image
  - Drop upstreamed sysdig-do-not-use-private-jq-api.patch
  - Enable building on s390x


author: mpluskal@suse.com
changelog:
  - Update to version 0.13.0 (boo#1017181):
    * Ability to open concatenated capture files
    * evtin.* fields can be used also for displaying now
    * Fix driver for Kernel 4.9
    * Fix on IPv4 mapped IPv6 parsing
    * Fix memory leak #694
    * Fix issue #687 about connecting to an K8s API server via HTTPS


author: aspiers@suse.com
changelog:
  - Fix .spec file bug which was causing Frankenstein kernel modules:
    https://github.com/draios/sysdig/issues/496#issuecomment-165929462


author: Thorsten Leemhuis <fedora[AT]leemhuis[DOT]info> - 1-15
changelog:
  - require kmod-${kmodname}-${kernel_uname_r} with >= in meta package to
    avoid problems if user has a newer akmods package that wants to install
    a newer kmod-${kmodname}-${kernel_uname_r}


author: Radek Novacek <rnovacek@redhat.com> 0.9.0-1
changelog:
  - Update to version 0.9.0
  - Drop upstreamed patches
  - Use CMake build system
  - Include FindCMPI.cmake and FindKonkretCMPI.cmake cmake modules
  - Add python subpackage


author: Radek Novacek <rnovacek@redhat.com> 0.9.0-3
changelog:
  - Enable direct calls
  - Fix method arguments that are both input and output
  - Don't install Find*.cmake files


author: Radek Novacek <rnovacek@redhat.com> 0.9.1-3
changelog:
  - Set format(printf) attribute to __KReturn2 function
  - Fix possible integer overflow
  - Resolves: rhbz#1000434, rhbz#1000430


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-29
changelog:
  - Process profile includedir in sorted order
  - Also, ignore dotfiles in included directories
  - Resolves: #1539824


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-32
changelog:
  - Include preauth name in trace output if possible
  - Update cert generation scripts to work on modern openssl
  - Fix per-request preauth scoping
  - Add test case for PKINIT DH renegotiation
  - Echo KDC cookies in preauth tryagain
  - Fall back to other preauth mechanisms after failures
  - Resolves: #1540130


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-1
changelog:
  - update to 1.12.2
    - drop patch for RT#7820, fixed in 1.12.2
    - drop patch for #231147, fixed as RT#3277 in 1.12.2
    - drop patch for RT#7818, fixed in 1.12.2
    - drop patch for RT#7836, fixed in 1.12.2
    - drop patch for RT#7858, fixed in 1.12.2
    - drop patch for RT#7924, fixed in 1.12.2
    - drop patch for RT#7926, fixed in 1.12.2
    - drop patches for CVE-2014-4341/CVE-2014-4342, included in 1.12.2
    - drop patch for CVE-2014-4343, included in 1.12.2
    - drop patch for CVE-2014-4344, included in 1.12.2
    - drop patch for CVE-2014-4345, included in 1.12.2
  - replace older proposed changes for ksu with backports of the changes
    after review and merging upstream (#1015559, #1026099, #1118347)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-4
changelog:
  - kpropd hasn't bothered with -S since 1.11; stop trying to use that flag
    in the systemd unit file


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-5
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1078888)
  - define _GNU_SOURCE in files where we use EAI_NODATA, to make sure that
    it's declared (#1059730,#1084068,#1109102)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-6
changelog:
  - backport patch to make the client skip checking the server's reply
    address when processing responses to password-change requests, which
    between NAT and upcoming HTTPS support, can cause us to erroneously
    report an error to the user when the server actually reported success
    (RT#7886)
  - backport support for accessing KDCs and kpasswd services via HTTPS
    proxies (marked by being specified as https URIs instead as hostnames
    or hostname-and-port), such as the one implemented in python-kdcproxy
    (RT#7929, #109919), and pick up a subsequent patch to build HTTPS
    as a plugin


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-8
changelog:
  - fix the problem where the %license file has been a dangling symlink
  - ksu: pull in fix from pull #206 to avoid breakage when the
    default_ccache_name doesn't include a cache type as a prefix
  - ksu: pull in a proposed fix for pull #207 to avoid breakage when the
    invoking user doesn't already have a ccache


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-7
changelog:
  - Fix installed files for -java subpkg
    Resolves: bz#1253143, build failure when java is installed in build enviroment


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-8
changelog:
  - Properly remove kross-java files
    Resolves: bz#1253143, build failure when java is installed in build enviroment


author: Jiri Olsa <jolsa@redhat.com> - 0.9.9-1
changelog:
  - updating to version 0.9.9
  - Resolves: #881654
  - Resolves: #1028410
  - Resolves: #1045025
  - Resolves: #1045368
  - Resolves: #1045388


author: Stanislav Kozina <skozina@redhat.com> - 0.9.15-1
changelog:
  - always load whitelist file from kernel-abi-whitelists package, remove the attached files
  - always load Module.symvers file from kernel-devel package, remove attached files
  - use python-bugzilla instead of private bz_xmlrpc package
  - Resolves: #1328384
  - Resolves: #906664
  - Resolves: #906659
  - Resolves: #1272348


author: Siteshwar Vashisht <svashisht@redhat.com> - 20120801-37
changelog:
  - Add configuration option to enable signal bubbling for backward compatibility
    Resolves: #1484937


author: Kamil Dudka <kdudka@redhat.com> - 20120801-137
changelog:
  - Increase the release number by 100 to make sure it stays higher than in RHEL-6
    Related: #1484937


author: Michal Nowak <mnowak@redhat.com> - 20020502-1
changelog:
  - renamed from unikurd-web-font -> kurdit-unikurd-web-fonts
  - enhanced %description field
  - changes for F11 fonts rules
  - add Obsoletes: unikurd-web-font <= 20020502-1


author: Robert Scheck <robert@fedoraproject.org> - 1.13-5
changelog:
  - Really added the plugindir patch now (thanks to Karsten Hopp)
  - Avoid the make errors because of mkdirhier better than until now


author: Mike FABIAN <mfabian@redhat.com> - 0.0.6-1
changelog:
  - Update to 0.0.6
  - Add RelaxNG schemas for the XML files (Vratislav Podzimek <vpodzime@redhat.com>)
  - Use SAX instead of the ElementTree (Vratislav Podzimek <vpodzime@redhat.com>)
  - Use 'trName' instead of 'name' for translated names (Vratislav Podzimek <vpodzime@redhat.com>)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.7-1
changelog:
  - Update to 0.0.7
  - Add examples for list_consolefonts()
  - Add a list_timezones() function
  - Add functions languageId() and territoryId()
  - Fix some translations of language names to get unique results returned by languageId()


author: Mike FABIAN <mfabian@redhat.com> - 0.0.8-1
changelog:
  - Update to 0.0.8
  - Add endonym for Maithili
  - Return True by default from supports_ascii (by Vratislav Podzimek)
  - Add grc, eo, ak, GH, cop, dsb, fj, FJ, haw, hil, la, VA, ln, kg, CD, CG, AO, mos, BF, ny, MW, smj, tet, TL, tpi, PG (Resolves: rhbz#985332 - some language codes are missing)
  - Import more translations from CLDR
  - Give pa_IN.UTF-8 higher weight than pa_PK.UTF-8 (Resolves: rhbz#986658, rhbz#986155)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.9-1
changelog:
  - Update to 0.0.9
  - Add endonyms for pa_Arab (and pa_PK) and translation of country name for Pakistan for pa_Arab
  - make languageId() return something even if a language name like "language (territory)" is given (Resolves: rhbz#986659 - some language name to its locale code failed)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.10-1
changelog:
  - Update to 0.0.10
  - Add translations for Belarusian and Belarus in Latin script (reported by Vratislav Podzimek)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.11-1
changelog:
  - Update to 0.0.11
  - Add translations for DE and NL territories in nds (reported by Vratislav Podzimek)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.12-1
changelog:
  - Update to 0.0.12
  - Match case insensitively in languageId() (Resolves: rhbz#1002000 (case insensitive languageId function needed))


author: Mike FABIAN <mfabian@redhat.com> - 0.0.13-4
changelog:
  - Add Add-support-for-timezone-translations.patch (Related: rhbz#1015209)
  - Add Fix-Chinese-translation-problem.patch (Related: rhbz#1015209)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.31-1
changelog:
  - Update langtable to 0.0.31
  - Resolves: rhbz#1202875
  - Revert change included in 0.0.31 which uses "eurlatgr" as the default
    consolefont for many languages because that font is not available in RHEL
  - Remove patches which are already included in 0.0.31


author: Remi Collet <rcollet@redhat.com> - 2.4.0-4
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/Php56
  - add numerical prefix to extension configuration file
  - drop unneeded dependency on pecl
  - add provides php-lasso


author: John Dennis <jdennis@redhat.com> - 2.4.1-7
changelog:
  - Add ECP support, brings Lasso up to current upstream tip + revised ECP patches
    Resolves: #1205342


author: John Dennis <jdennis@redhat.com> - 2.4.1-8
changelog:
  - Add explicit minimum dependency on glib2 2.42,
    for some reason RPM is not automatically detecting the dependency
    Resolves: #1254989


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3
changelog:
  - Resolves: #1634267 - ECP signature check fails with
                         LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                         instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4
changelog:
  - Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5
changelog:
  - Resolves: #1719014 - Expired certificate prevents tests from running
  - Actually apply the patch file for the previous build
  - Related: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6
changelog:
  - Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                         vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7
changelog:
  - Fix Coverity warning introduced by the previous patch
  - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                        vulnerability when parsing SAML responses


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-6
changelog:
  - Build both with and without GUI to allow the use on systems where Gtk
    dependency is undesirable. The latencytop package is still the full-blown build.
    latencytop-tui is the miminal build. latencytop-common has the shared files.


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-7
changelog:
  - Remove the broken fsync view, stop using the obsolete 'tracing_enabled'.
  - Better error message when run as non-root.


author: Jindrich Novy <jnovy@redhat.com> 2008
changelog:
  - update to latex2html-2008
  - license changed to GPL
  - update japanese support to l2h-2K8-jp20081220
  - update cfgcache.pm
  - fix BR


author: Jindrich Novy <jnovy@redhat.com> 2008-4
changelog:
  - require netpbm-progs
  - review fixes (#225980):
    - include documentation
    - set executable bit for makeseg and makemap scripts
    - white-space spec correction
    - move docs and example directory to %doc
    - nuke duplicated stuff


author: Jiri Olsa <jolsa@redhat.com> - 0.5.11-5.1
changelog:
  - latrace-aarch64-basic-audit.patch: add basic aarch64 LD_AUDIT support.
  - Add aarch64 to ExclusiveArch. (BZ#1094501)


author: Jiri Olsa <jolsa@redhat.com> - 0.5.11-6
changelog:
  - latrace-ppcle64-basic-audit.patch: add basic ppc64le LD_AUDIT support.
  - Add ppc64le to ExclusiveArch. (BZ#1125756)


author: Richard Hughes <richard@hughsie.com> 2.4-1
changelog:
  - Update to new upstream version.
  - Black point detection from the algorithm disclosed by Adobe
  - Added support for transforms on planar data with different stride
  - Added a new plug-in type for optimizing full transforms
  - Linear (gamma 1.0) profiles can now operate in unbounded mode
  - Added "half" float support


author: Richard Hughes <richard@hughsie.com> 2.5-1
changelog:
  - Update to new upstream version.
  - Added a reference for Mac MLU tag
  - Added a way to read the profile creator from header
  - Added error descriptions on cmsSmoothToneCurve
  - Added identity curves support for write V2 LUT
  - Added new cmsPlugInTHR() and fixed some race conditions
  - Added TIFF Lab16 handling on tifficc
  - Fixed a bug on big endian platforms not supporting uint64 or long long.
  - Fixed a multithead bug on optimization
  - Fixed devicelink generation for 8 bits
  - Fixed some 64 bit warnings on size_t to uint32 conversions
  - Rendering intent used when creating the transform is now propagated to profile
  - RGB profiles store only one copy of the curve to save space
  - Transform2Devicelink now keeps white point when guessing deviceclass is enabled
  - Update black point detection algorithm to reflect ICC changes
  - User defined parametric curves can now be saved in ICC profiles


author: Andrew Hughes <gnu.andrew@redhat.com> - 2.6-3
changelog:
  - Run tests as part of %check, fixing Makefile to set LD_LIBRARY_PATH
  - Use upstream endianness fix to avoid ppc64le being built big-endian
  - Resolves: #1250914


author: Rich Megginson <rmeggins@redhat.com> 0:4.18-8
changelog:
  - Resolves: bug 684012 - LDAPSchemaElement.getOptionalValues() mangles values
  - upstream bug https://bugzilla.mozilla.org/show_bug.cgi?id=640750


author: Matthew Harmsen <mharmsen@redhat.com> 0:4.19-5
changelog:
  - Fix build for CentOS 7 (mharmsen)
  - Resolves rhbz#1465103 - Missing getter methods in JDAPFilter classes
    (edewata)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.17-2
changelog:
  - Fix the minimal required tdb version
  - Related: rhbz#1133914 - Rebase libldb to version 1.1.17 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-2
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-3
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1
changelog:
  - Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1
changelog:
  - Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                             version 4.7.x


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Paul Wouters <pwouters@redhat.com> - 1.6.13-2
changelog:
  - Added reworked ldns-read-zone patch from trunk
    (adds -p for SOA padding, and -o for zeroizing timestamps/sigs)


author: Paul Wouters <pwouters@redhat.com> - 1.6.14-1
changelog:
  - [pulled before release]
  - Updated to 1.6.14
  - Removed merged in patch
  - Added new dependancy on ca-certificates for ldns-dane PKIX validation


author: Fridolin Pokorny <fpokorny@redhat.com> - 458-3
changelog:
  - Expanded lessecho usage (#948597)
  - Added lessfilter info to man (#948597)
  - Expanded lesskey usage (#948597)
  - Added --old-bot to help (#948597)


author: Jozef Mlich <jmlich@redhat.com> - 458-5
changelog:
  - fixing regression in 72dfd3f63594e1d4c9416180a95c47ae583934c6
    incorrect parsing of commandline arguments
  - Resolves #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-8
changelog:
  - changes introduced in less-458-old-bot-in-help.patch
    wasn't compiled in. It is necessary to use mkhelp tool.
    Resolves: #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-9
changelog:
  - The --use-backslash option documented in the man page
    was missing from online help for less.
    Resolves: #1109090


author: Martin Briza <mbriza@redhat.com> - 451-1
changelog:
  - Rebase to 451 (#835802)
  - Removed the empty-lessopen-pipe patch as the issue is now fixed upstream.


author: Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6
changelog:
  - Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
  - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
  - Added RFE - lftp configurations for restricting each SSL/TLS 
    version (#1182987)
  - Fixed bogus dates of this SPEC


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp


author: Michal Ruprich - 4.4.8-10
changelog:
  - Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                      - Patch edited so that it corresponds to upstream


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11
changelog:
  - Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
  - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11.1
changelog:
  - Resolves: #1797963 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-12
changelog:
  - Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased


author: Michal Ruprich <michalruprich@gmail.com> - 4.4.8-12.1
changelog:
  - Resolves: #1797964 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-13
changelog:
  - Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1392944 - File size decreases when synchronizing folders with a sftp account using lftp


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0.8-6
changelog:
  - Fix duplicate documentation (#1001256) by not using %doc
  - Turn on verbose build output via V=1 make
  - Use %?_isa in -devel base package dep


author: Benjamin Tissoires <btissoir@redhat.com> 1.4.7-2
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163604, bug 1163603)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163604, bug 1163603)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163604, bug 1163603)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.4.7-3
changelog:
  - CVE-2015-1802: missing range check in bdfReadProperties (bug 1258894)
  - CVE-2015-1803: crash on invalid read in bdfReadCharacters (bug 1258894)
  - CVE-2015-1804: out-of-bounds memory access in bdfReadCharacters (bug 1258894)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.2-1
changelog:
  - libXp 1.0.2. Drags in a bunch of general cleanup, code changes are quite
    limited and CVE-2013-2062 (#960362)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.1.5-3
changelog:
  - libXt 1.1.5
  - Merge F25:
  - Fix duplicate documentation (#1001246) by not using %doc
  - Turn on verbose build output via V=1 make
  - Remove %defattr
  - Use %?_isa in explicit package deps
  - Exclude docs from main package


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-1
changelog:
  - Pull in upstream .109 to get ARM architecture support.
  - Remove the broken sparc patch;  it should go upstream first.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-8
changelog:
  - Change the source location to the new upstream on fedorahosted
  - import a new tarball from the new source


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-10
changelog:
  - Un-revert the RHEL-specific changes. (Jeff Moyer)
  - Make devel sub-package depend on specific ver-rel (Jeff Moyer)
  - Resolves: bz#905462


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-12.2
changelog:
  - Get rid of sparc support (we don't build it) (Jeff Moyer)
  - Implement proper support for aarch64 (Jeff Moyer)
  - Resolves: bz#1026429


author: Rakesh Pandit <rakesh@fedoraproject.org> - 1.0.0-1
changelog:
  - Updated to 1.0.0
     * AO returned to active development
     * Added surround channel mapping API and capability
     * Updated all drivers on modern installs
     * New config file options
     * Driver options may be specified in config file
     * Support for MacOSX updated to 10.5 and later
     * Build in WMM driver rather than using dlopen()
     * Added Roar Audio driver
     * Added OpenBSD SNDIO driver
     * Workaround for ESD non-4096 byte write bug
     * Workaround aRts server crash bug
     * Workaround for VIA82xx click/crackle bugs under ALSA
     * Remove dead/unused drivers (solaris, alasa05, mmsound)
     * Numerous patches from multiple downstreams
  - Patch from upstream: libao-1.0.0 Pulse Audio Fix


author: Tomas Popela <tpopela@redhat.com> - 12.10.0-12
changelog:
  - Move package from EPEL 7 to RHEL 7, but leave the mono support in EPEL in
    libappindicator-sharp package.
  - Resolves: rhbz#1546657


author: Jochen Schmitt <Jochen herr-schmitt de> - 2.3.21-7
changelog:
  - Add aarch64 as a 65-Bit architecture (#975267)
  - Add libtool as a BR
  - Call libtoolize before autoreconf


author: Marek Polacek <polacek@redhat.com> 4.8.5-20
changelog:
  - handle exceptions in basic_istream::sentry (#1469384)
  - don't run pr63354.c on ppc (#1468546)
  - ensure proxy privatization safety (#1491395)
  - fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
  - on aarch64, remove libatomic.so (#1465510)


author: Marek Polacek <polacek@redhat.com> 4.8.5-21
changelog:
  - fix 27_io/basic_fstream/53984.cc
  - fix for classes with bases with mutable members (PR c++/77375)
  - fix handling side-effects of parameters (PR c/77767)
  - fix combine's make_extraction (PR rtl-optimization/78378)
  - fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
  - fix -A / -B to A / B folding (PR middle-end/80362)
  - fix comparison of decimal float zeroes (PR middle-end/80692)
  - fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)


author: Jeff Law <law@redhat.com> 4.8.5-24
changelog:
  - Sync gcc48-rh1469697-13 patch to upstream (#1469697)
  - Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
  - Avoid infinite loop if probing interval is less than guard size (#1469697)
  - Fix debug information for large probing interval on aarch64 (#1469697)
  - Fix ICE on ppc port with large probing interval (#1469697)

  - rebuild to remove static relocations not known to older linkers (#1508968)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.0.1-1
changelog:
  - New upstream release 0.3.0.1
  - https://fedorahosted.org/sssd/wiki/Releases/DingNotes-0.3.0.1
  - obsoletes patch0001


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.0.1-15
changelog:
  - Increase the release number to -15 to allow clean upgrade path from
    0.2 since some of the components kept their version the same in 0.3


author: Ondrej Kos <okos@redhat.com> - 0.3.0.1-18
changelog:
  - Apply patch to stop generating doxygen timestamps
  - Apply patch to include correct libini_config file


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.0.1-20
changelog:
  - Apply a patch by Dmitri Pal to strip trailing whitespace
  - Resolves: rhbz#1012434 - libiniconfig doesn't trim trailing whitespace


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-25
changelog:
  - Resolves: rhbz#1205557 - Include the latest upstream ding-libs release in 7.2
  - Port the SONAME hack


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-27
changelog:
  - Re-add the soname hack
  - Resolves: rhbz#1290382 - Rebase ding-libs to the latest available upstream


author: Michal Židek <mzidek@redhat.com> - 0.6.1-29
changelog:
  - Fix rpmdiff failure for 'Binary stripping'
  - Resolves: rhbz#1480270 - Rebase ding-libs to the latest upstream release


author: Michal Židek <mzidek@redhat.com> - 0.6.1-30
changelog:
  - Adopting to use Downstream Helper for bellow BZ backport
  - Related: rhbz#1507607 - ding-libs: libini_config: `ini_config_augment` reports errors on match failure


author: Michal Židek <mzidek@redhat.com> - 0.6.1-31
changelog:
  - Resolves: rhbz#1507607 - ding-libs: libini_config: `ini_config_augment` reports errors on match failure


author: Michal Židek <mzidek@redhat.com> - 0.6.1-32
changelog:
  - Previous change in spec file broke the application of downstream only patch
  - Related: rhbz#1507607 - ding-libs: libini_config: `ini_config_augment` reports errors on match failure


author: Karel Zak <kzak@redhat.com> 2.23.2-54
changelog:
  - fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
  - fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
  - fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
  - fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
  - fix #1562125 - "setarch ppc<*>" fails with "Unrecognized architecture"
  - fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
  - fix #1528959 - rbind creates duplicate entries in /proc/mounts
  - fix #1538721 - mount man page says sync option has no effect for ext4
  - fix #1252764 - icrnl is not set when autologin is used
  - fix #1561200 - [RFE] - sulogin: improve support for locked root account
  - fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device


author: Karel Zak <kzak@redhat.com> 2.23.2-59
changelog:
  - fix #1618711 - exec option in mount unable to override the implicit noexec in user option
  - fix #1616264 - Login to emergency shell failed


author: Karel Zak <kzak@redhat.com> 2.23.2-60
changelog:
  - fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login


author: Karel Zak <kzak@redhat.com> 2.23.2-61
changelog:
  - #1203378 - Cannot use swapon with fallocated XFS swapfile
  - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
  - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
  - #1639465 - Bad formatting in agetty.8 man page
  - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
  - #1678451 - Unable to mount to a directory that matches a dm device under /dev


author: Karel Zak <kzak@redhat.com> 2.23.2-62
changelog:
  - fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
  - fix #1712768 - lsmem segfaults on ppc64 wih -o
  - fix #1690102 - setarch(8) does not check error return values properly.
  - fix #1734261 - lscpu not showing Physical socket, chips information


author: Karel Zak <kzak@redhat.com> 2.23.2-64
changelog:
  - fix #1788896 - Internal testsuite: libmount tests failed
  - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
  - fix #1816183 - "mount -a" should ignore already mounted bind mounts.
  - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
  - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit


author: Karel Zak <kzak@redhat.com> 2.23.2-65
changelog:
  - fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
  - fix #1745657 - mismatch between spec file and uuidd runtime directory


author: Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1
changelog:
  - fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
  - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
  - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.6-1
changelog:
  - Move the  part_err library before part and fs (vtrefny)
  - Fix BuildRequires for crypto and dm packages (vtrefny)
  - Fix mounting read-only devices (vtrefny)
  - Fix the bd_s390_dasd_is_ldl function. (vponcova)
  - Add the bd_s390_dasd_is_fba function to check if DASD is FBA (vponcova)
  - Disable MD RAID tests on 32bit systems (vpodzime)
  - Fix error message when mounting with a wrong fs type (vtrefny)
  - Only create RPMs for requested/configured  plugins (vpodzime)
  - Only check dependencies of plugins to be built (vpodzime)
  - Only build and distribute plugins if configured so (vpodzime)
  - Fix format-security and unused-result compiler warnings (vtrefny)
  - Add an AC macro for modular builds (vpodzime)
  - Add functions for mounting and unmounting filesystems (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7-1
changelog:
  - Skip btrfs min size tests on Fedora 25 (vtrefny)
  - Make sure the loop device doesn't disappear during tests (vpodzime)
  - Close the loop device when autoclear is (un)set (vpodzime)
  - Do not enforce Python 3 for running tests in CI (vpodzime)
  - Revert "Use different BTRFS_MIN_MEMBER_SIZE on aarch64" (vtrefny)
  - Use both 'old' and 'new' sysfs files to read zRAM stats (vtrefny)
  - Check if libparted-fs-resize pkgconfig is available (vpodzime)
  - Do not try to get name for inactive partitions (vtrefny)
  - Skip tests for getting free regions on CentOS/RHEL (vpodzime)
  - Free the container holding the specs of free regions (vpodzime)
  - Open loop devices as O_RDONLY when getting flags (vpodzime)
  - Resolve maximum partition size when we know its start (vpodzime)
  - Use --id instead of --part-type when setting partition id (vpodzime)
  - Fix mdadm command for removing failed device from an array (vtrefny)
  - Skip bcache tests on CentOS/RHEL 7 (vpodzime)
  - Use six.assertRaisesRegex in the FS tests (vpodzime)
  - Use mkdtemp() instead of TemporaryDirectory() (vpodzime)
  - Fix installation without specifying --exec-prefix (vpodzime)
  - Add options to force mkfs.ext4/vfat to create a FS on the whole device (vpodzime)
  - Skip the test for device escrow on CentOS/RHEL (vpodzime)
  - Define DEVNULL on our own if not in subprocess (vpodzime)
  - Remove the patches from the spec file (vpodzime)
  - Sync the spec file with downstream (vpodzime)
  - Stop skipping zRAM stats tests (vtrefny)
  - Add more tests for zRAM stats (vtrefny)
  - Fix reading zRAM properties from sysfs (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.8-1
changelog:
  - Temporarily skip vfat generic resize test on rawhide (vtrefny)
  - Use "safeprobe" in "bd_fs_wipe" (vtrefny)
  - Add a generic filesystem resize function (vtrefny)
  - Add a function to get mountpoint for a device (vtrefny)
  - Add a function to get filesystem type for a device (vtrefny)
  - Only include the LVM DBus config when shipping LVM DBus (vpodzime)
  - Skip the LVM DBus vgreduce tests on Rawhide (vpodzime)
  - Do not build the lvm-dbus plugin on RHEL/CentOS (vpodzime)
  - Give zRAM more time to settle before trying to remove a device (vpodzime)
  - Put zram tests adding/removing devices into a separate class (vpodzime)
  - Skip LVM cache and RAID tests on Rawhide (vpodzime)
  - Fix the skip_on decorator factory for tests (vpodzime)
  - Use 'blkid -p' instead of lsblk to get device's FS type (vpodzime)
  - Improve the lvm_set_global_config test (vpodzime)
  - Pass '-y' to pvresize (vpodzime)
  - Create a copy of os.environ for a child process (vpodzime)
  - Revert "Use the "C.UTF-8" locale instead of just "C"" (vpodzime)
  - Fix how we create vfat FS in tests (vpodzime)
  - Skip the test if requiring unavailable locales (vpodzime)
  - Use the "C.UTF-8" locale instead of just "C" (vpodzime)
  - Add functions for working with ext2 and ext3 filesystems (vtrefny)
  - Link to gobject when lvm or btrfs is enabled (andreas)
  - Link to libm where needed (andreas)
  - Add a function for cleaning a device (vtrefny)
  - Add few code exaples to documentation (vtrefny)
  - Use a special exception for no fs signature when doing wipe (vpodzime)
  - One more incompatible os.symlink() call (vpodzime)
  - Do not use pass-by-name in the os.symlink() call (vpodzime)
  - Ignore previous errors when falling back to using ioctl() (vpodzime)
  - Use ioctl() call to teardown loop devices (vpodzime)
  - Resolve the device to remove for mdadm (vpodzime)
  - Add a function for getting device symlinks (vpodzime)
  - Use the new resolve_device() function where appropriate (vpodzime)
  - Add the resolve_device() function to the utils library (vpodzime)
  - First try to read the 'autoclear' flag from /sys/ (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.9-1
changelog:
  - Fix hardcoded reference to gcc (timo.gurr)
  - Catch and ignore partial failures in LVM tests' cleanups (vpodzime)
  - Fix hardcoded reference to pkg-config (timo.gurr)
  - Make GObject introspection optional (vpodzime)
  - Do not link libraries required by plugins to the GI files (vpodzime)
  - Make sure the whole build status image is shown (vpodzime)
  - Show CI status in README (at the GH repo's front page) (vpodzime)
  - Always require the libudev pkg (tgurr)
  - Make sure we give kernel time to fully setup zram device(s) (vpodzime)
  - fs_test.py: Close FDs when calling utilities (tasleson)
  - crypto.c: Correct segmentation fault (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.10-1
changelog:
  - Only enable partition size tolerance with alignment (vpodzime)
  - Limit the requested partition size to maximum possible (vpodzime)
  - Do not verify vfat FS' size after generic resize (vpodzime)
  - Specify tolerance for partition size (kailueke)
  - Only use the exact constraint if not using any other (vpodzime)
  - Check resulting FS size in tests for generic FS resize (vpodzime)
  - Query setting FS label support and generic relabeling (kailueke)
  - Do not strictly require all FS utilities (vpodzime)
  - Compile everything with the C99 standard (vpodzime)
  - Add partition resize function (kailueke)
  - Generic Check and Repair Functions (kailueke)
  - Query functions for FS resize and repair support (kailueke)
  - Update the project/source URL in the spec file (vpodzime)
  - Add functions for opening/closing TrueCrypt/VeraCrypt volumes (vpodzime)
  - Adapt to a change in behaviour in new libmount (vpodzime)
  - Try RO mount also if we get EACCES (vpodzime)
  - Size in bytes for xfs_resize_device (kailueke)
  - src/plugins/Makefile.am: Remove hard coded include path in /usr prefix (tristan.vanberkom)
  - Fixed include for libvolume_key.h (tristan.vanberkom)
  - Ignore parted warnings if possible (squimrel)
  - bcache tests: Remove FEELINGLUCKY checks (tasleson)
  - kbd.c: Code review corrections (tasleson)
  - kbd.c: Make bd_kbd_bcache_create work without abort (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.11-1
changelog:
  - Make the KbdZRAMDevicesTestCase inherit from KbdZRAMTestCase (vpodzime)
  - Allow non-source directory builds (kailueke)
  - Add a way to disable runtime dependency checks (vpodzime)
  - Link to GObject even if no plugin is activated (kailueke)
  - Skip zram tests on Rawhide (vpodzime)
  - Keep most utilities available for tests (vpodzime)
  - Use new libmount function to get (un)mount error message (vtrefny)
  - Update the documentation URL (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.12-1
changelog:
  - Own directories /etc/libblockdev and /etc/libblockdev/conf.d (vtrefny)
  - Wait for resized partition (kailueke)
  - Make sure the device is opened for libparted (vpodzime)
  - Fix label check in swap_test (vtrefny)
  - Use "run_tests" script for running tests from Makefile (vtrefny)
  - Add a script for running tests (vtrefny)
  - Tests: Move library initialization to setUpClass method (vtrefny)
  - Stop skipping FAT resize tests on rawhide (vtrefny)
  - Close filesystem before closing the partition during FAT resize (vtrefny)
  - Use mountpoint for "xfs_info" calls (vtrefny)
  - Use libmount cache when parsing /proc/mounts (vtrefny)
  - Add some space for the CI status (vpodzime)
  - Confirm the force when creating PVs in FS tests (vpodzime)
  - Skip vgremove tests on 32bit Debian (vtrefny)
  - Fix names of backing files in tests (vtrefny)
  -  Fix checking for available locales (vtrefny)
  - Skip dependency checking in mpath tests on Debian (vtrefny)
  - Skip zRAM tests on Debian (vtrefny)
  - Skip the test for device escrow on Debian too (vtrefny)
  - Skip free region tests on Debian too (vtrefny)
  - Fix redirecting command output to /dev/null in tests (vtrefny)
  - Try harder to unmount devices in test cleanup (vtrefny)
  - Require only plugins that are needed for given test (vtrefny)
  - Try to get distribution info from "PrettyName" if "CPEName" isn't available (vtrefny)
  - Use -ff when creating PVs in FS tests (vpodzime)
  - Sync spec with downstream (vpodzime)


author: Bastien Nocera <bnocera@redhat.com> - 0.2.3-6
changelog:
  + libbluray-0.2.3-0.12.git
  - Fix security issues in parts of the library that we never exercised
  Related: rhbz#1045453 rhbz#1045452


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.9-1
changelog:
  - Allow the Size python class to be easily imported (vpodzime)
  - Make sure pyexecdir is defined (vpodzime)
  - Do not run Python 3 tests without python3 (vpodzime)
  - Disable python3 on RHEL (vpodzime)
  - Reflect the configuration in the spec file template (vpodzime)
  - Make documentation generation conditional (vpodzime)
  - Make python3 support conditional (vpodzime)
  - Require lower version of libpcre (vpodzime)
  - Sync the spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.10-1
changelog:
  - Fix installation without specifying --exec-prefix (martin)
  - Sync the spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.11-1
changelog:
  - Fix README file name (vtrefny)
  - Add a build status image to the README.md (vpodzime)
  - Remove "glibc-all-langpacks" from test dependencies (vtrefny)
  - Check for requires in generated spec file, not in the template (vtrefny)
  - Fix checking for available locales (vtrefny)
  - Fix library name in acinclude.m4 (vtrefny)
  - Do not try to run translation tests on CentOS/RHEL 7 (vtrefny)
  - Skip tests if they require unavailable locales (vpodzime)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.11-4
changelog:
  - Python 2 binary package renamed to python2-libbytesize
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.0-1
changelog:
  - Make more space for CI status image (vtrefny)
  - Include limits.h to make sure ULONG_MAX is defined (vpodzime)
  - Remove extra 'is' in two docstrings (vpodzime)
  - Properly support 64bit operands (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.1-1
changelog:
  - Add NEWS.rst file (vtrefny)
  - Fix source and url in spec file (vtrefny)
  - Use only one git tag for new releases (vtrefny)
  - Actually translate the units when expected (vpodzime)
  - Add two temporary test files to .gitignore (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.2-1
changelog:
  - Use only version as a tag of the last release (vpodzime)
  - Do not require the glib-2.0 pkgconfig package (vpodzime)
  - Do not lie about tag creation (vpodzime)


author: Rex Dieter <rdieter@fedoraproject.org> 2007e-13
changelog:
  - _with_system_libc_client option (el6+) 
  - tight deps via %?_isa
  - drop extraneous Requires(post,postun): xinetd


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-98.el7
changelog:
  - kvm-block-curl-Don-t-lose-original-error-when-a-connecti.patch [bz#1235812]
  - kvm-vfio-pci-Add-pba_offset-PCI-quirk-for-Chelsio-T5-dev.patch [bz#1244347]
  - kvm-block-Print-its-file-name-if-backing-file-opening-fa.patch [bz#1238639]
  - kvm-block-Propagate-error-in-bdrv_img_create.patch [bz#1238639]
  - kvm-iotests-Add-test-for-non-existing-backing-file.patch [bz#1238639]
  - Resolves: bz#1235812
    (block/curl: Fix generic "Input/output error" on failure)
  - Resolves: bz#1238639
    (qemu-img shows error message for backing file twice)
  - Resolves: bz#1244347
    (Quirk for Chelsio T5 MSI-X PBA)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-99.el7
changelog:
  - kvm-usb-ccid-add-missing-wakeup-calls.patch [bz#1243731]
  - kvm-vpc-Handle-failure-for-potentially-large-allocations.patch [bz#1217349]
  - kvm-block-vpc-prevent-overflow-if-max_table_entries-0x40.patch [bz#1217349]
  - kvm-block-qemu-iotests-add-check-for-multiplication-over.patch [bz#1217349]
  - kvm-virtio-scsi-use-virtqueue_map_sg-when-loading-reques.patch [bz#1249718]
  - kvm-scsi-disk-fix-cmd.mode-field-typo.patch [bz#1249718]
  - kvm-rtl8139-avoid-nested-ifs-in-IP-header-parsing-CVE-20.patch [bz#1248766]
  - kvm-rtl8139-drop-tautologous-if-ip-.-statement-CVE-2015-.patch [bz#1248766]
  - kvm-rtl8139-skip-offload-on-short-Ethernet-IP-header-CVE.patch [bz#1248766]
  - kvm-rtl8139-check-IP-Header-Length-field-CVE-2015-5165.patch [bz#1248766]
  - kvm-rtl8139-check-IP-Total-Length-field-CVE-2015-5165.patch [bz#1248766]
  - kvm-rtl8139-skip-offload-on-short-TCP-header-CVE-2015-51.patch [bz#1248766]
  - kvm-rtl8139-check-TCP-Data-Offset-field-CVE-2015-5165.patch [bz#1248766]
  - Resolves: bz#1217349
    (qemu-img vpc driver segfault)
  - Resolves: bz#1243731
    (smart card emulation doesn't work with USB3 (nec-xhci) controller)
  - Resolves: bz#1248766
    (CVE-2015-5165 qemu-kvm: Qemu: rtl8139 uninitialized heap memory information leakage to guest [rhel-7.2])
  - Resolves: bz#1249718
    (Segfault occurred at Dst VM while completed migration upon ENOSPC)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-100.el7
changelog:
  - kvm-block-update-test-070-for-vhdx.patch [bz#1171576]
  - kvm-block-coverity-fix-check-return-value-for-fcntl-in-g.patch [bz#1219217]
  - Resolves: bz#1171576
    (test case 064 and 070 of qemu-iotests fail for vhdx with qemu-kvm-1.5.3-83.el7)
  - Resolves: bz#1219217
    (Coverity-detected defect: call to fcntl without checking return value)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-101.el7
changelog:
  - kvm-serial-reset-state-at-startup.patch [bz#922014]
  - kvm-ide-Check-validity-of-logical-block-size.patch [bz#1134670]
  - Resolves: bz#1134670
    (fail to specify the physical_block_size/logical_block_size value not 512 for IDE disk)
  - Resolves: bz#922014
    (RFE: support hotplugging chardev & serial ports (Windows guests))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-102.el7
changelog:
  - kvm-mc146818rtc-add-rtc-reset-reinjection-QMP-command.patch [bz#1191226]
  - Resolves: bz#1191226
    (libvirt requires rtc-reset-reinjection command, backport it to RHEL7.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-103.el7
changelog:
  - kvm-Drop-superfluous-conditionals-around-g_strdup.patch [bz#1218919]
  - kvm-util-Drop-superfluous-conditionals-around-g_free.patch [bz#1218919]
  - kvm-util-Fuse-g_malloc-memset-into-g_new0.patch [bz#1218919]
  - kvm-util-uri-uri_new-can-t-fail-drop-dead-error-handling.patch [bz#1218919]
  - kvm-util-uri-realloc2n-can-t-fail-drop-dead-error-handli.patch [bz#1218919]
  - kvm-util-uri-URI-member-path-can-be-null-compare-more-ca.patch [bz#1218919]
  - kvm-util-uri-Add-overflow-check-to-rfc3986_parse_port.patch [bz#1218919]
  - Resolves: bz#1218919
    (Coverity-detected defect: buffer overrun at uri.c:2035)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-104.el7
changelog:
  - kvm-qemu-iotests-Filter-qemu-io-output-in-025.patch [bz#1170974]
  - Resolves: bz#1170974
    (test case 025 of qemu-iotests fail for raw with qemu-kvm-1.5.3-83.el7.x86_64)


author: Jeff E. Nelson <jen@redhat.com> - 1.5.3-105.el7
changelog:
  - kvm-qtest-ide-test-disable-flush-test.patch [bz#1270341]
  - Resolves: bz#1270341
    (qemu-kvm build failure race condition in tests/ide-test)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-105.el7_2.1
changelog:
  - kvm-rbd-make-qemu-s-cache-setting-override-any-ceph-sett.patch [bz#1279389]
  - kvm-rbd-fix-ceph-settings-precedence.patch [bz#1279389]
  - Resolves: bz#1279389
    (ceph.conf properties override qemu's command-line properties)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-105.el7_2.2
changelog:
  - kvm-raw-posix-Fix-.bdrv_co_get_block_status-for-unaligne.patch [bz#1298828]
  - Resolves: bz#1298828
    ([abrt] qemu-img: get_block_status(): qemu-img killed by SIGABRT)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-105.el7_2.3
changelog:
  - kvm-fw_cfg-add-check-to-validate-current-entry-value-CVE.patch [bz#1298047]
  - Resolves: bz#1298047
    (CVE-2016-1714 qemu-kvm: Qemu: nvram: OOB r/w access in processing firmware configurations [rhel-7.2.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-105.el7_2.4
changelog:
  - kvm-vga-Remove-some-should-be-done-in-BIOS-comments.patch [bz#1331412]
  - kvm-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch [bz#1331412]
  - kvm-vga-add-vbe_enabled-helper.patch [bz#1331412]
  - kvm-vga-factor-out-vga-register-setup.patch [bz#1331412]
  - kvm-vga-update-vga-register-setup-on-vbe-changes.patch [bz#1331412]
  - kvm-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch [bz#1331412]
  - Resolves: bz#1331412
    (EMBARGOED CVE-2016-3710 qemu-kvm: qemu: incorrect banked access bounds checking in vga module [rhel-7.2.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-105.el7_2.5
changelog:
  - kvm-vga-add-sr_vbe-register-set.patch [bz#1347527]
  - Resolves: bz#1347527
    (Regression from CVE-2016-3712: windows installer fails to start)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-105.el7_2.6
changelog:
  - kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch [bz#1359728]
  - Resolves: bz#1359728
    (EMBARGOED CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS [rhel-7.2.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-105.el7_2.7
changelog:
  - kvm-block-iscsi-avoid-potential-overflow-of-acb-task-cdb.patch [bz#1358996]
  - Resolves: bz#1358996
    (CVE-2016-5126 qemu-kvm: Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl [rhel-7.2.z])


author: Steve Grubb <sgrubb@redhat.com> 0.7.5-2
changelog:
  - resolves: #1185610 - libcap-ng: update caps table for newer kernels
  - Fix a leaked FD in upstream code


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-2
changelog:
  - added missing files from git: COPYING-GPL and COPYING-LGPL
  - added patch from git for missing pkgconfig requires
    and fixed FSF address


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-3
changelog:
  - included upstreamed patches which are changing the license
    headers to be LGPLv2+ for the library parts and GPLv2+ for the
    binaries


author: jchaloup <jchaloup@redhat.com> - 0.41-8
changelog:
  - resolves: #885174
    loading configuration files from /etc/cgconfig.d/ directory
  - resolves: #885166
    use * character as a meta character for all mounted
  - resolves: #886920
    add examples to man pages
  - resolves: #1143851
    extending cgroup names with default
  - resolves: #1142807
    api.c: support for setting multiline values in control files
    config.c: xfs file system sets item->d_type to zero, stat() and S_ISREG() test added (#885174)


author: Nikola Forró <nforro@redhat.com> - 0.41-12
changelog:
  - resolves: #1406927
    start cgred service after nss-user-lookup target
    show warnings about unsuccessful user/group lookups


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - show warning when "tasks" file can not be opened
  - extend description of "controllers" section in cgrules.conf man page
    resolves: #1561736


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.12.4-1
changelog:
  - Update to 0.12.4
  - http://ftp.gnome.org/pub/GNOME/sources/libchamplain/0.12/libchamplain-0.12.4.news


author: Peter Robinson <pbrobinson@fedoraproject.org> - 0.12.3-1
changelog:
  - Update to 0.12.3
  - http://ftp.gnome.org/pub/GNOME/sources/libchamplain/0.12/libchamplain-0.12.3.news


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.3-1
changelog:
  - Upstream update to 0.3.3
    + Fix memory access violation.
    + Improved Python binding.
    + Merged with libchewing-data project. (r455)
    + Improved random key stroke tester.
    + Fix the handling of phonetic symbols in Hsu's keyboard.
    + Fix unexpected candidate disorder when doing symbol choice.
    + Revised phrase choice from rearward logic.
    + Fix cross compilation.
    + Improved shell script to merge changes form libchewing-data.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.3-4
changelog:
  - BuildRequires for libchewing-python changed
    from python-devel to python2-devel
  - RPM_BUILD_ROOT changed to buildroot


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-1
changelog:
  - Upstream update to 0.3.4
  - Download is changed to Google Code.
  - /usr/share/chewing is removed, data files now located in
    /usr/lib(64)/libchewing
  - Info for libchewing is included.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-3
changelog:
  - Fixed [Bug 913214] libchewing complains "no info dir entry" while installing
    Add direntry in libchewing.texi so it can be listed under 
    Category "Localization"


author: David Tardon <dtardon@redhat.com> - 0.3.1-5
changelog:
  - Resolves: rhbz#918079 libcmis::sha1() can return digests with fewer
    than 40 hexadecimal digits
  - Resolves: rhbz#918080 restrict redirection protocols


author: David Tardon <dtardon@redhat.com> - 0.5.0-2
changelog:
  - Related: rhbz#1290152 autoreconf is not needed
  - Related: rhbz#1290152 add a bunch of fixes found by coverity


author: Andreas Schneider <asn@redhat.com> - 1.0.0-1
changelog:
  - Update to version 1.0.0:
    * Added new test runner with group fixtures. The old runner is deprecated
    * Added an extensible message output formatter
    * Added jUnit XML message output
    * Added subunit message output
    * Added Test Anything Protocol message output
    * Added skip() command
    * Added test_realloc()
    * Added a cmockery compat header
    * Fixed a lot of bugs on Windows


author: Andreas Schneider <asn@redhat.com> - 1.0.1-1
changelog:
  - Update to version 1.0.1:
    * Added a macro for assert_ptr_equal().
    * Fixed test_realloc() if 0 size is passed.
    * Fixed objects packaging bug.
    * Fixed building with newer gcc versions.


author: Doug Ledford <dledford@redhat.com> - 1.3.1-6
changelog:
  - Update valgrind settings and build against newest valgrind libs
    that resolve a register clobber issue on ppc (1142101)
  - Build against latest libibverbs
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.3.1-7
changelog:
  - Remove modprobe file and move it to rdma package
  - Add requires on rdma package
  - Related: bz1164618


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Fix package description to differentiate the fact that this is for the T4
    Chelsio based adapters instead of the previous T3 generation


author: Doug Ledford <dledford@redhat.com> - 1.2.0-6
changelog:
  - Our -fno-strict-alias option patch was lost, and we discovered it
    was lost when I rebuilt the package.  Put it back and rebuild
    again.
  - Related: bz1062281


author: Doug Ledford <dledford@redhat.com> - 1.3.5-2
changelog:
  - Rebuild without modprobe file
  - Add requires on rdma package that now contains modprobe file
  - Related: bz1164618


author: Matej Mužila <mmuzila@redhat.com> - 5.3.21-23
changelog:
  - Mention in man page that care should be taken when running db_hotbackup
    with -c option. Resolves: rhbz#1460077


author: Tom Lane <tgl@redhat.com> 0.8.3-4
changelog:
  - Do not use -ffast-math; it breaks things and seems quite unlikely to offer
    any useful performance benefit for this type of package, anyway
  Resolves: #629964


author: Tom Lane <tgl@redhat.com> 0.8.4-1
changelog:
  - Update to version 0.8.4 (seems to contain only configure-support updates,
    but might as well adopt it)
  - Fix memory leak due to incorrect test in _is_row_fetched()
  Related: #733413


author: Tom Lane <tgl@redhat.com> 0.8.3-12
changelog:
  - Remove unnecessary package-name Requires:, since dependencies on library
    sonames should be enough, and we don't want to hard-wire assumptions about
    which packages provide which libraries
  - isa-ify cross-subpackage Requires:


author: Simone Caronni <negativo17@gmail.com> - 16.04.0-2
changelog:
  - Add tests, remove valgrind-devel build requirements (#1262274).
  - Disable tests until dbus-test-runner is available.


author: Richard W.M. Jones <rjones@redhat.com> - 1.12-13.1.el7
changelog:
  - Add patch to fix multilib conflicts in dnet-config
    resolves: rhbz#1059593
  - Remove RPM cruft from the spec file.


author: Jaroslav Mracek <jmracek@redhat.com> - 0.10.1-1
changelog:
  - Update to 0.10.1
  - It improves query performance with name and arch filters. Also nevra filter will now
    handle string with or without epoch.
  - Additionally for python bindings it renames NEVRA._has_just_name() to NEVRA.has_just_name() due
    to movement of code into c part of library.
  - Resolves: rhbz#1260242 - --exclude does not affect dnf remove's removal of requirements
  - Resolves: rhbz#1485881 - DNF claims it cannot install package, which have been already installed
  - Resolves: rhbz#1361187 - [abrt] python-ipython-console: filter_updown(): python3.5 killed by SIGABRT


author: Jaroslav Mracek <jmracek@redhat.com> - 0.11.1-1
changelog:
  - Rerelease of 0.11.1-1
  - Improvement query performance
  - Run file query in hy_subject_get_best_solution only for files (arguments that start with ``/`` or
    ``*/``)
  - Resolves: rhbz#1498207 - DNF crash during upgrade installation F26 -> F27


author: Dominik Mierzejewski <rpm[AT]greysector.net> 4.1.4-0.1.svn1184
changelog:
  - fix multilib conflict, based on a patch by Rex Dieter (rhbz#477684)
  - update to SVN r1184
  - move TODO to devel docs


author: Dominik Mierzejewski <rpm@greysector.net> 4.1.4-0.1.svn1183
changelog:
  - updated to SVN r1183
  - simplified multilib patch
  - fixed endianness issues (rhbz#442508)
  - added some docs


author: Tom Hughes <tom@compton.nu> - 20120410-1
changelog:
  - Update to 20120410 release
  - Drop the 0. from the version - the dates are the upstream versions
  - Remove explicit dependencies on elfutils-libelf


author: Jerry James <loganjerry@gmail.com> - 3.0-3.20110227cvs
changelog:
  - Update to 3.0 (20110227 snap)
  - Drop upstreamed -sigwinch patch
  - Preserve ChangeLog timestamp when converting to UTF-8
  - Fix "unused direct shared library dependency" warning from rpmlint
  - Don't BR gawk; it is on the exceptions list


author: Kamil Dudka <kdudka@redhat.com> 3.0-7.20120601cvs
changelog:
  - Update to 3.0 (20120601 snap)
  - fix crash of el_insertstr() on incomplete multi-byte sequence (#840598)


author: Pravin Satpute <psatpute@redhat.com> - 1:1.07.2-11
changelog:
  - Decided to defer Liberation 2.0 feature in Fedora 18.
  - Reverting to Liberation 1.07.2. 
  - Using 11 release to match with Liberation Sans Narrow


author: Jarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8
changelog:
  - Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426)
  - Fix up Obsoletes to all use <= comparisons


author: Pawel Salek <pawsa@theochem.kth.se> - 1.0.4-14
changelog:
  - fix bug 599428: use 'version' macro instead of '_version'.
  - Use SSL patch by Ludwig Nussel of SUSE (bugzilla att id 399130).


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.11-2
changelog:
  - Make a patch out of Michal's pkgconfig support.
  - Modernize the configure.ac file for Automake >= 1.13.
  - Respect the Fedora CFLAGS
    https://bugzilla.redhat.com/show_bug.cgi?id=908096


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.15-3
changelog:
  - Get the package closer to what upstream intended:
    - Do not move the headers into a subfolder of /usr/include
    - Make a libev-libevent-devel subpackage to contain the libevent
      compatibility header, so that only this subpackage conflicts with
      libevent-devel, not all of libev-devel
    - Drop the pkgconfig file, as upstream rejected it several times already.


author: Steve Dickson <steved@redhat.com> 2.0.14-1
changelog:
  - Updated to latest stable upstream version: 2.0.14-stable (bz 727129)
  - Removed the installion of the outdate man pages and the latex raw docs.
  - Corrected where the other doc are installed.


author: Steve Dickson <steved@redhat.com> 2.0.18-1
changelog:
  - Updated to latest stable upstream version: 2.0.18-stable
  - Moved documentation into its own rpm (bz 810138)


author: Petr Sabata <psabata@redhat.com> - 0.6.20-1
changelog:
  - 0.6.20 bump
  - Repackaging prehistoric libexif-docs, introducing version string in filename
  - Buildroot cleanup


author: Petr Šabata <contyk@redhat.com> - 0.6.21-1
changelog:
  - 0.6.21 bump
  - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
    CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845)
  - Drop the pre-generated docs and introduce a doc subpackage


author: Dan Horák <dhorak@redhat.com> - 3.0.13-16
changelog:
  - Drop ppc64le from the multilib list
  - Use additional BR: only in ppc64le build
  - Resolves: RHBZ1116945


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-6
changelog:
  - Related: rhbz#749103 can restore iText requirement now that
    iText doesn't pull in the entire gcj stack


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-9
changelog:
  - repack source to remove bundled multi-license .jars
  - encodings/Grapheme-Cluster-Properties.txt is under UCD


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 0.8.2-1.cloudlinux
changelog:
  - Remove "--rebuild-types" from doc/meson.build. For details see
    https://gitlab.freedesktop.org/libfprint/libfprint/merge_requests/9/


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-5
changelog:
  - add FIPS DRBG implementation
  - run the FIPS POST tests in shared library constructor
  - make it possible to run the test suite in the FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-12.1
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-14
changelog:
  - add DRBG CAVS driver and other necessary CAVS driver updates (#1172568)
  - allow ath reinitialization in FIPS mode
  - allow for auto-initialization of DRBG


author: Debarshi Ray <rishi@fedoraproject.org> - 0.10.4-4
changelog:
  - Ensure that the new exiv2 soname is used during the build
  - Adapt to Exiv2::BasicIo API change
    Resolves: rhbz#1486570


author: Iryna Shcherbina <ishcherb@redhat.com> - 1:1.0.1-0.2.20180226gitb029c24
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Adam Jackson <ajax@redhat.com> - 1.0.1-0.6.git5baa1e5
changelog:
  - Enable %check for all but ppc64 and s390x, which has known but low-impact
    failures
  - Simplify %release


author: Ray Strode <rstrode@redhat.com> 2.32.1-4
changelog:
  - drop /etc/skel entry. libgnome creates it by default if it's
    not around and it needs it anyway. Better not to clutter users
    home directories just because they install glade.


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Kalev Lember <kalevlember@gmail.com> - 3.4.0.1-1
changelog:
  - Update to 3.4.0.1
  - Obsolete the -capplet subpackage; the whole plugins architecture is
    removed from libgnomekbd


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Fabiano Fidêncio <fidencio@redhat.com> 0.3.3-2
changelog:
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274356
  - Add OvirtProxy::sso-token support for oVirt 4.0
    Resolves: rhbz#1324457


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Resolves: rhbz#1346256


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-4
changelog:
  - Add upstream patch forcing use of the older v3 REST API as we don't support
    yet the v4 API
    Resolves: rhbz#1346215


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.3-5
changelog:
  - New storage format added in oVirt 4.1
    Resolves: rhbz#1346215
  - Check if operation was cancelled before disconnecting signal
    Resolves: rhbz#1431275


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.4-1
changelog:
  - Rebase to latest 0.3.4 upstream release. Still quite a few patches as
    there was no 0.3.5 release yet
    Resolves: rhbz#1584266


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.4-2
changelog:
  - Parse XML nodes automatically
    Related: rhbz#1427467
  - Set detailed error message for async call
    Related: rhbz#1427467


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.4-4
changelog:
  - Use certificate data from XML
    Resolves: rhbz#https://bugzilla.redhat.com/show_bug.cgi?id=1402909


author: Rex Dieter <rdieter@fedoraproject.org> - 0.8.2-7
changelog:
  - libgpod.pc Requires: libimobiledevice-1.0 ... overlinking (#818594)
  - tighten subpkg deps (via %_isa)
  - omit -devel deps that (should) get autodetected already


author: Caolán McNamara <caolanm@redhat.com> 1.14.26-1
changelog:
  - latest version
  - drop integrated gnome689706.gsf_input_dup.patch
  - libgsf-python is gone with "excise old bit-rotted python support"


author: Lukas Nykryn <lnykryn@redhat.com> - 219-71
changelog:
  - core: add a new unit_needs_console() call (#1524359)
  - core: rework how we count the n_on_console counter (#1524359)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-72
changelog:
  - service: introduce protocol error type (#1733998)
  - service: fix main processes exit behavior for type notify services (#1733998)
  - service: go through stop_post on failure (#4770) (#1733998)
  - Call getgroups() to know size of supplementary groups array to allocate (#1743230256 KB)
  - udev: introduce CONST key name (#1748051)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-73.2
changelog:
  - core: when restarting services, don't close fds (#1803802)
  - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
  - tests: add basic journal test (#1803802)
  - tests: add regression test for `systemctl restart systemd-journald` (#1803802)
  - tests: add test that journald keeps fds over termination by signal (#1803802)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-74
changelog:
  - sd-bus: bump message queue size again (#1770158)
  - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
  - add test for ExecStopPost (#1733998)
  - core: when restarting services, don't close fds (#1757704)
  - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
  - tests: add basic journal test (#1757704)
  - tests: add regression test for `systemctl restart systemd-journald` (#1757704)
  - tests: add test that journald keeps fds over termination by signal (#1757704)
  - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
  - journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
  - mount: don't propagate errors from mount_setup_unit() further up (#1804757)
  - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
  - fix the fix for #1691511 (#1804757)
  - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
  - Consider smb3 as remote filesystem (#1811700)
  - mount: don't add Requires for tmp.mount (#1813270)
  - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
  - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
  - sd-journal: remove the dead code and actually fix #14695 (#1812889)
  - swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
  - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
  - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
  - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
  - core: clarify that the CollectMode bus property is constant (#1817576)
  - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
  - logind: check PolicyKit before allowing VT switch (#1797672)
  - timer: don't use persietent file timestamps from the future (#6823) (#1769923)
  - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
  - bus_open leak sd_event_source when udevadm trigger。 (#1798503)
  - journal-remote: split-mode=host, remove port from journal filename (#1244691)
  - core: downgrade log message about inability to propagate cgroup release message (#1679934)
  - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
  - set kptr_restrict=1 (#1689344)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-76
changelog:
  - core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
  - core: rework StopWhenUnneeded= logic (#1775291)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-77
changelog:
  - core: coldplug possible nop_job (#1829754)
  - core: make sure to restore the control command id, too (#1828953)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-78.1
changelog:
  - device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
  - device: don't emit PropetiesChanged needlessly (#1793527)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-78.2
changelog:
  - core: don't update unit description if it is already set to the same value (#1793527)
  - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
  - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-78.4
changelog:
  - test: add a test/reproducer for BZ#1989245 (#1989245)
  - strv: fix buffer size calculation in strv_join_quoted() (#1989245)
  - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.10-6
changelog:
  - Rebase to libguestfs 1.36.10 in RHEL 7.5.
    resolves: rhbz#1472272
  - Build against OCaml 4.05
    resolves: rhbz#1447981
  - Enable the copyonread flag when running the appliance using libvirt.
    resolves: rhbz#1466563
  - Make sure kernel-rt is never used as Requires.
    resolves: rhbz#1471651
  - v2v: disable unconfiguration of manually installed VMware tools.
    resolves: rhbz#1477905
  - v2v: prefer pigz or pxz for uncompressing OVA files, if available
    resolves: rhbz#1448739
  - resize: handle empty UUIDs for swap partitions
    resolves: rhbz#1482737
  - v2v: remove mention of --dcpath in an error message
    resolves: rhbz#1486197
  - Disables the QEMU image file locking when opening disks as read-only
    resolves: rhbz#1417306
    resolves: rhbz#1503497
  - Briefly document the format used for URIs
    resolves: rhbz#1450325
  - v2v: deal with grub2 configurations without a default set
    resolves: rhbz#1472288
  - v2v: warn when a guest has passthrough devices
    resolves: rhbz#1472719
  - v2v: fix three regular expressions
    resolves: rhbz#1494555
  - v2v: enable conversion of full-disk LUKS-encrypted Linux guests
    resolves: rhbz#1451665
  - v2v: new 'vddk' import method
    resolves: rhbz#1477912
    resolves: rhbz#1513884
  - Enable libguestfs to work on z Systems
    resolves: rhbz#1479526
  - p2v: fx check for sudo requiring a password
    resolves: rhbz#1500673
  - v2v: handle disks with snapshots in vCenter
    resolves: rhbz#1172425
  - rescue: backport improved version
    resolves: rhbz#1438710
  - v2v: improve bootloader detection
    resolves: rhbz#1508299
  - v2v: parse MAC address of network interfaces in OVF files
    resolves: rhbz#1506572
  - Unconditionally depend on libvirt-daemon-kvm >= 3.9.0-1, which will always
    pull the right qemu-kvm too, and thus remove the unversioned dependencies
    on it
    resolves: rhbz#1500870
  - v2v: fix RPM file owned test
    resolves: rhbz#1503958
  - Do not open read-only disks using <shareable/> in the libvirt backend
    resolves: rhbz#1518517
  - v2v: handle better when grubby does not report any default kernel
    resolves: rhbz#1519204
  - v2v: enhance vmx import method to access via SSH
    resolves: rhbz#1523767
  - builder: fix caching of templates when using --cache-all-templates
    resolves: rhbz#1523650


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12
changelog:
  - Rebase to libguestfs 1.38.2 in RHEL 7.6.
    resolves: rhbz#1551055
  - v2v: warn about unknown VMware controller types
    resolves: rhbz#1510801
  - df: show correct sizes in human-readable mode for filesystems with
    block size = 512
    resolves: rhbz#1525262
  - v2v: fix example URL in man page
    resolves: rhbz#1540535
  - Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
    resolves: rhbz#1541525
  - Fix qemu-img-ma dependency in non-x86_64 architectures
    resolves: rhbz#1568676
  - v2v: update "resume=/dev/sdaX" entries in GRUB command lines
    resolves: rhbz#1532224
  - v2v: fix virtio-rng and memballoon OVF fragment for RHV
    resolves: rhbz#1550168
  - v2v: detect whether the root filesystem was not mounted in read-write mode
    resolves: rhbz#1567763
  - v2v: import OVAs with snapshots
    resolves: rhbz#1570407
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1571237
  - Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
    place where it used now (by virt-builder-repository).
  - v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
    oVirt REST API
    resolves: rhbz#1557273
  - Start lvmetad earlier when booting the appliance
    resolves: rhbz#1581810
  - v2v: fix kernel detection in Ubuntu guests since 18.04
    resolves: rhbz#1591248
  - v2v: convert the CPU topology correctly
    resolves: rhbz#1541908
  - Add a new inspect_get_osinfo API, and add its result to the output of
    virt-inspector
    resolves: rhbz#1544842
  - Pass absolute paths to NBD sockets when using the libvirt backend
    resolves: rhbz#1588451
  - v2v: do not write only <vendor> without <model> in libvirt XMLs
    resolves: rhbz#1591789
  - v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
    used for -it vddk, and -o rhv-upload
    resolves: rhbz#1589776
    resolves: rhbz#1608718
  - v2v/p2v: disable on aarch64, since it is not supported (nor even working)
    there
    resolves: rhbz#1601488
  - v2v: handle srN devices in libvirt XML (for virt-p2v)
    resolves: rhbz#1612785
  - Do not use the -cpu parameter under any circumstances for ppc64le.
    resolves: rhbz#1605071


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12.el7_6.1
changelog:
  - v2v: update documentation regarding SHA-2 certificates in Windows 7 and
    Windows Server 2008 R2
    resolves: rhbz#1632788
  - v2v: fix rhev-apt firstboot command for Windows
    resolves: rhbz#1625216


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-5
changelog:
  - Rebase to libguestfs 1.40.2 in RHEL 7.7.
    resolves: rhbz#1621895
  - v2v: uninstall the VMware Tools correctly
    resolves: rhbz#1465849
    resolves: rhbz#1481930
  - v2v: fix VMware vCenter roles needed for conversion
    resolves: rhbz#1530967
  - v2v: preserve the VM Generation ID
    resolves: rhbz#1598350
  - Query QEMU to known whether KVM is supported
    resolves: rhbz#1605071
  - v2v: add --mac option
    resolves: rhbz#1607274
  - v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
    resolves: rhbz#1619665
    resolves: rhbz#1691659
  - v2v: provide a way to query for the estimated size of the disks
    resolves: rhbz#1622785
  - Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
    resolves: rhbz#1634248
  - p2v: add an option to Shutdown the machine after the conversion
    resolves: rhbz#1642044
  - v2v: fix epoch when querying installed RPM packages
    resolves: rhbz#1669395
  - Use a better icon for RHEL >= 7 guests
    resolves: rhbz#1679482
  - v2v: improve the architecture detection of Linux kernel modules
    resolves: rhbz#1690574
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1688155
  - v2v: update nbdkit information in documentation
    resolves: rhbz#1605242
  - v2v: warn when a guest has 'direct' network interfaces
    resolves: rhbz#1151902
  - v2v: use proper SELinux label for nbdkit sockets
    resolves: rhbz#1698437


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-5.el7_7.1
changelog:
  - v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
    for 'rhv-upload'
    resolves: rhbz#1726168


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-7
changelog:
  - v2v: -o rhv-upload: improve wait logic after finalize
    resolves: rhbz#1680361
  - v2v: fix DISKTYPE value in generated .ovf files
    resolves: rhbz#1750719


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.50
changelog:
  - v2v:
    * When debugging, dump OVF to stderr.
    * Ignore missing kernels from grub
      resolves: rhbz#1230412
    * Calculate VMware dcPath correctly (1256823)
    * Map empty VMware network or bridge name to default (1257895)
  - p2v:
    * Wait for network to come online before testing connection
      resolves: rhbz#1256222
  - Fix tests to run correctly with libguestfs-winsupport 7.2.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.51
changelog:
  - v2v: Fix handling of extra slashes in dcPath calculation
    resolves: rhbz#1258342 rhbz#1256823
  - v2v: Fix -oa preallocation option
    resolves: rhbz#1251909


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.52
changelog:
  - v2v: Warn if Group Policy or AV software may result in 7B boot failure
    (1260689)
  - v2v: Fix OVF XML to enable qxl display
    resolves: rhbz#1260590


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.53
changelog:
  - v2v: Error if certain options appear twice on the command line (1261242)
  - v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
  - v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
  - v2v: Detect AVG Technologies as AV software (1261436)
    resolves: rhbz#1261281


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.32.7-3
changelog:
  - Rebase to libguestfs 1.32 in RHEL 7.3
    resolves: rhbz#1218766
  - The full tests are now run after the package has been built.
  - New tool and subpackage: virt-dib (safe diskimage-builder replacement).
  - New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
    (see https://bugzilla.redhat.com/1194158).
  - New tool: virt-get-kernel.
  - Depend on java-headless instead of full java.
  - New tool: virt-v2v-copy-to-local.
  - Disable virt-v2v subpackage on ppc64 etc
    resolves: rhbz#1287826
  - v2v: Remove VirtualBox Additions correctly
    resolves: rhbz#1296606
  - Add clearer warnings sections to all man pages
    resolves: rhbz#1293527
  - v2v: Disable the --in-place option.
  - v2v: Support conversion of Windows > 7
    resolves: rhbz#1190669
  - Add code to verify tarball signatures.
  - General performance improvements.
  - v2v: Prevent duplicate -b, -n, -oa options
    resolves: rhbz#1326266
    resolves: rhbz#1325825
  - v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
  - v2v: Fix alignment issues in treeviews in conversion dialog
    resolves: rhbz#1340407
  - p2v: spinner should be hidden when it stops spinning
    resolves: rhbz#1341564
  - p2v: ethtool command is not supported on p2v client
    resolves: rhbz#1341608
  - p2v: Add ifconfig command to ISO
    resolves: rhbz#1342447
  - p2v: Warn if virt-p2v-make-disk used on a partition
    resolves: rhbz#1342337
  - Build using OCaml with fix for CVE-2015-8869.
    resolves: rhbz#1343101
  - customize: Add --uninstall option (upstream 1343375)
  - p2v: Document permissions on id_rsa file
    resolves: rhbz#1343414
  - p2v: Print full curl error message
    resolves: rhbz#1343423
  - get-kernel: Fix --format auto
    resolves: rhbz#1341984
  - v2v: Provide better <Origin/> information to RHEV-M
    resolves: rhbz#1342398
  - customize: Give an error if --truncate-recursive path does not exist
    resolves: rhbz#1345809
  - sysprep: Add --network option so that --install option can be used
    resolves: rhbz#1345813
  - p2v: Print proper error if incorrect password is given
    resolves: rhbz#1227599
  - p2v: Print ssh error if incorrect hostname is given
    resolves: rhbz#1167916
  - p2v: Display progress of operation in non-GUI mode
    resolves: rhbz#1229386
  - p2v: Add a dialog confirming the user really means to cancel
    resolves: rhbz#1340464
  - p2v: log window should process colour escapes and backspaces
    resolves: rhbz#1314244
  - v2v: Fix installation of virtio drivers with *.dll files
    resolves: rhbz#1311373
  - p2v: Improve error message when ssh login to conversion server fails
    resolves: rhbz#1348900
  - v2v: Remove --dcpath parameter from manual
    resolves: rhbz#1315237
  - v2v: Fix conversion of guests with floppy drives
    resolves: rhbz#1309706
  - p2v: Better error when sudo requires a password
    resolves: rhbz#1340809
  - v2v: Refuse to convert if there is < 1GB free in temporary directory
    resolves: rhbz#1316479
  - inspection: Get Windows drive letters for GPT disks
    resolves: rhbz#1349237
  - p2v: Add disk utils and display serial number of disks
    resolves: rhbz#855058
  - p2v: Fix timeout error when connecting to unresponsive ssh server
    resolves: rhbz#1350363
  - Remove external dependency generator.  Use supermin RPM deps instead.
    related: rhbz#1309796
  - p2v: Flush messages to the journal immediately
    resolves: rhbz#1229386
  - customize: Fix --install on ppc64le
    resolves: rhbz#1264835
  - lib: Fix finding icons in Windows 7 64 bit guests
    resolevs: rhbz#1352761
  - v2v: Add virsh --quiet flag when running virt-v2v --quiet
    resolves: rhbz#1358142
  - lib: Fix inspection of ISOs with latest libosinfo
    resolves: rhbz#1359652
  - dib: Fix run_command exit handlers on failure
    resolves: rhbz#1362357
  - dib: Rework run of extra-data.d hooks
    resolves: rhbz#1362354
  - Miscellaneous fixes to man pages and --help output
    resolves: rhbz#1362668
  - lib: Specify backing format for read-only files
    resolves: rhbz#1354335
  - Fix --selinux-relabel option
    resolves: rhbz#1362669
  - sparsify: Fix --in-place option with UEFI guest
    resolves: rhbz#1364347
  - p2v: Use latest linux-firmware in ISO
    resolves: rhbz#1364419
  - v2v: Fix guest name when using -i disk
    resolves: rhbz#1365005
  - p2v: Fix GUI message.
  - v2v: Make fstrim message clearer
    resolves: rhbz#1366456
  - v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
    resolves: rhbz#1367615
  - lib: Fix assert-fail if port is missing in libvirt XML
    resolves: rhbz#1370424


author: Pino Toscano <ptoscano@redhat.com> - 1:1.32.7-3.el7_3.1
changelog:
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1406289
  - Disable EDD when launching the appliance
    resolves: rhbz#1406393
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1406854


author: Pino Toscano <ptoscano@redhat.com> - 1:1.32.7-3.el7_3.2
changelog:
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1408124
  - Avoid spurious dependency on kernel-rt.


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.3-6
changelog:
  - Rebase to libguestfs 1.36 in RHEL 7.4.
    resolves: rhbz#1359086
  - v2v: always use names for libvirt pools
    resolves: rhbz#1141631
  - v2v: correctly find GRUB in RHEL UEFI guests
  - v2v: uninstall VMware tools packages from guests
    resolves: rhbz#1155150
  - v2v: install RHEV-APT only when using -o rhev/-o vdsm
    resolves: rhbz#1161019
  - New API: btrfs-filesystem-show
    resolves: rhbz#1164765
  - p2v: always enable debugging when running virt-v2v
    resolves: rhbz#1167623
  - libguestfs prefers virtio-pci on aarch64
    resolves: rhbz#1237250
  - v2v: make sure to copy all the driver files on Windows
    resolves: rhbz#1255610
  - Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
    Requires to >= 1.3.10-5.8.el7
    resolves: rhbz#1311890
  - v2v: ignore all the environment variables for proxy when exporting from
    vCenter
    resolves: rhbz#1354507
  - virt-sysprep can deal with full-LUKS encrypted guests
    resolves: rhbz#1362649
  - All the tools have bash completion scripts.
    resolves: rhbz#1367738
  - v2v: do not remove Processor and Intelppm nodes in Windows guests
    resolves: rhbz#1372668
  - Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
    regular expression in file_contexts file
    resolves: rhbz#1374232
  - v2v: set all the properties on creation when exporting to Glance
    resolves: rhbz#1374405
  - v2v: set hw_video_model when exporting to Glance
    resolves: rhbz#1374651
  - v2v: fix OVA conversion as root using the libvirt backend
    resolves: rhbz#1375157
  - Various improvements and fixes to the documentation
    resolves: rhbz#1377081
    resolves: rhbz#1390876
    resolves: rhbz#1398070
    resolves: rhbz#1425306
  - v2v: support <listen type='socket'> and <listen type='none'>
    resolves: rhbz#1378022
  - v2v: allow libvirt >= 2.1.0 for vCenter conversions
    resolves: rhbz#1379240
  - p2v: enable mnemonics in the GUI
    resolves: rhbz#1379289
  - Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
    resolves: rhbz#1382275
  - Correctly parse mount options in btrfs entries in /etc/fstab.
    resolves: rhbz#1383517
  - Read secrets from libvirt domains, when inspecting them
    resolves: rhbz#1392798
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1400205
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1401474
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1402301
  - resize: allow URIs for the output disk
    resolves: rhbz#1404182
  - Disable EDD when launching the appliance
    resolves: rhbz#1404287
  - v2v: increase the memory allocated to the appliance
    resolves: rhbz#1418283
  - p2v: switch from GTK+ 2 to GTK+ 3
  - p2v: add dbus-devel as BuildRequires to disable suspension during the
    conversion
  - libguestfs-java: bump the java-headless Require to >= 1.7.0, matching the
    Build-Require, and the generated bytecode
    resolves: rhbz#1364518
  - Do not try to use/write to /var/cache/yum & /var/log/yum.log
  - Bump ocaml-findlib-devel BuildRequires to >= 1.3.3-7.el7, because of
    RHBZ#1403897
  - v2v: remove --dcpath & --dcPath from --help output too
    resolves: rhbz#1429430
  - v2v: force VNC as display for -i disk, as SDL is not supported
    resolves: rhbz#1372671
  - v2v, p2v: rename rhvm network to ovirtmgmt
    resolves: rhbz#1429491
  - v2v: when exporting to local disk, check that UEFI firmware is installed
    before conversion
    resolves: rhbz#1429506
  - dib: actually generate SHA256 checksums when using --checksum
    resolves: rhbz#1430184
  - v2v: do not mention SUSE Xen hosts as supported
    resolves: rhbz#1430203
  - v2v: depend on OVMF/AAVMF, for converting EFI guests
    resolves: rhbz#1429643
  - v2v: use absolute path when using an OVA as backing file
    resolves: rhbz#1430680
  - v2v: support Debian/Ubuntu guests
    resolves: rhbz#1387213
  - sysprep: remove DHCP_HOSTNAME entries
    resolves: rhbz#1427529
  - v2v: avoid repeated "run virt-v2v -v -x" message on error
    resolves: rhbz#1167623
  - bash-completion: add script for virt-v2v-copy-to-local
    resolves: rhbz#1367738
  - v2v: fix virtio block driver installation for Windows 10 and Windows 2016
    resolves: rhbz#1434737
  - Replace the libosinfo dependency with osinfo-db, since we are only using
    the osinfo database.
  - v2v: fix virtio driver installation for Windows 8 UEFI
    resolves: rhbz#1431579
  - v2v: new 'vmx' import method
    resolves: rhbz#1441197
  - v2v: properly identify Windows 2016 guests when exporting them to RHV-M
    resolves: rhbz#1447202
  - Run pvresize in non-interactive mode
    resolves: rhbz#1460692
  - resize: make sure the input disk is read-only
    resolves: rhbz#1463714
  - Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
    resolves: rhbz#1463646


author: Richard W.M. Jones <rjones@redhat.com> - 1.0-6
changelog:
  - Require libguestfs 1.7.17 (newer version in RHEL 6.1).
  - Require febootstrap-supermin-helper instead of febootstrap
    resolves: RHBZ#670299.


author: Richard W.M. Jones <rjones@redhat.com> - 7.0-2
changelog:
  - Resync against Rawhide package (ntfs-3g 2013.1.13).
  - Drop HAL file since HAL is dead.
    resolves: rhbz#819939


author: Richard W.M. Jones <rjones@redhat.com> - 7.1-2
changelog:
  - New package for RHEL 7.1
  - Rebase to ntfs-3g 2014.2.15
    resolves: rhbz#1100319
  - Change the package so it works with supermin5.
  - Remove dependency on external FUSE.


author: Richard W.M. Jones <rjones@redhat.com> - 7.2-2
changelog:
  - Fix for handling guest filenames with invalid or incomplete
    multibyte or wide characters
    resolves: rhbz#1301593


author: Richard W.M. Jones <rjones@redhat.com> - 7.2-3
changelog:
  - Fix for CVE-2019-9755
    (heap-based buffer overflow leads to local root privilege escalation)
    resolves: rhbz#1698502


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream version
  - Do not use deprecated GLib functionality
  - Unref the GMainloop after it has been run, not when just quit


author: Marek Kasik <mkasik@redhat.com> - 0.2.4-1
changelog:
  - Update to 0.2.4
  - Backport several important patches from current master
  - Revert addition of GXPSImage (it would change ABI)
  - Resolves: #1384959


author: Marek Kasik <mkasik@redhat.com> - 0.2.5-1
changelog:
  - Update to newly released 0.2.5
  - Preserve ABI by exporting the same set of methods as before
  - Resolves: #1384959


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-2
changelog:
  - Ensure gxps_archive_read_entry() fills the GError in case of failure
  - Handle errors returned by archive_read_data()
  - Resolves: #1574844


author: Rafael Aquini <aquini@redhat.com> - 2.16-13
changelog:
  - tests/stack_grow_into libhugetlbfs test fixes (#1422960)
  - PPC vm/hugepage/libhugetlbfs test fix (#1515365)


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 0.5.224-1
changelog:
  - Add BSD license text to COPYING
  - Clean up the AM_CFLAGS settings
  - Minor fixes to the spec.in, including license, config and url entries


author: Jarod Wilson <jarod@redhat.com> - 12-3
changelog:
  - Take libi40iw out of tech-preview state (rhbz 1428930)
  - Add ibv_*_pingpong man pages (rhbz 1416541)


author: Jarod Wilson <jarod@redhat.com> - 12-4
changelog:
  - Clean up devel files list
  - Fix up a few dependencies rpmdiff complained about (rhbz 1404035)
  - Add Requires: pciutils for dracut to behave in minimalist cases (rhbz 1429046)
  - Adjust Conflicts: on infiniband-diags to match RHEL packaging (rhbz 1428785)


author: Jarod Wilson <jarod@redhat.com> - 13-1
changelog:
  - Update to rdma-core v13 release (rhbz 1404035)
  - Mellanox mlx5 Direct Verbs support (rhbz 1426430)
  - Get build working on s390x, less mlx5 (rhbz 1434029)


author: Jarod Wilson <jarod@redhat.com> 13-6
changelog:
  - Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
  - Add necessary Provides/Obsoletes for old -static packages
  - Remove ibverbs providers that we aren't currently able to support
  - Resolves: rhbz#1453096, rhbz#1451607


author: Jarod Wilson <jarod@redhat.com> 15-2
changelog:
  - Fix ibacm segfault and improper multicast handling
  - Resolves: rhbz#1502745
  - Resolves: rhbz#1502759


author: Honggang Li <honli@redhat.com> 15-3
changelog:
  - srp_daemon: Don't create async_ev_thread if only run once
  - srp_daemon: Remove unsupported systemd configurations
  - srp_daemon: Start srp_daemon service after network target
  - Resolves: bz1525193
  - Resolves: bz1528671


author: Jarod Wilson <jarod@redhat.com> 15-4
changelog:
  - Add support for extended join multicast API in librdmacm
  - Add support for striding RQ on mlx5
  - Resolves: rhbz#1515487, rhbz#1516571


author: Jarod Wilson <jarod@redhat.com> 15-5
changelog:
  - libmlx4: report RSS caps for improved DPDK support
  - Fix double mutex unlock in iwpmd
  - Resolves: rhbz#1527350
  - Resolves: rhbz#1542362


author: Jarod Wilson <jarod@redhat.com> 15-7
changelog:
  - i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
    causing problems with suspend and resume, and fall back to load via
    systemd rdma initscript.
  - Resolves: rhbz#1568325


author: Doug Ledford <dledford@redhat.com> - 1.3.11-1
changelog:
  - Update to latest upstream release (dependency for another package)
  - Enable valgrind in build
  - Related: bz1092538


author: Doug Ledford <dledford@redhat.com> - 1.3.12-1
changelog:
  - Build on s390
  - Update to latest version to work with OPA enabled libibumad
  - Related: bz1169962, bz1186159


author: Doug Ledford <dledford@redhat.com> - 1.3.10.2-1
changelog:
  - Update to latest upstream release
  - Pick up OPA MAD support
  - Drop s390 restriction
  - Resolves: bz1169962
  - Related: bz1186159


author: Doug Ledford <dledford@redhat.com> - 1.1.6-5
changelog:
  - Correct the Url and Source tags now that the openfabrics server no longer
    responds if you don't include the www in the link


author: Doug Ledford <dledford@redhat.com> - 1.1.7-6
changelog:
  - Add in support for flow steering and IP addressing of UD RoCE QPs
  - Resolves: bz1058537, bz1062281


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Grab official upstream release.  This includes all of the pre-release
    items we had in the last release except for the IP based RoCE GID
    addressing changes.  So we are still carrying patches for those two
    items
  - Upstream fixed the copy-n-paste error that broke flow steering
  - Related: bz1122333


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Grab official upstream release.  This includes all of the pre-release
    items we had in the last release except for the IP based RoCE GID
    addressing changes.  So we are still carrying patches for those two
    items
  - Upstream fixed the copy-n-paste error that broke flow steering
  - Related: bz1094988
  - Resolves: bz947308


author: Doug Ledford <dledford@redhat.com> - 1.1.8-2
changelog:
  - Update RoCE IP addressing patches to latest version under review
  - Build against valgrind on ppc64le
  - Fix a coverity found issue
  - Resolves: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.1.8-4
changelog:
  - Fix one of the coverity bugs in a different way (the original fix
    caused a problem in libmlx4)
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.1.8-6
changelog:
  - Add build on s390
  - Drop back to building against libnl instead of libnl3
  - Resolves: bz1182178, bz1177115


author: Doug Ledford <dledford@redhat.com> - 1.1.8-7
changelog:
  - Add checksum offload support
  - Update the various patches to the ones from the official upstream git repo
  - Related: bz1195888


author: Robert Scheck <robert@fedoraproject.org> 0.46-1
changelog:
  - Upgrade to 0.46 (#525933, #628893)
  - Fixed race in populating builtin timezone components (#637150)
  - Fixed wrong ICAL_ERRORS_ARE_FATAL preprocessor check (#575715)


author: Jarod Wilson <jarod@redhat.com> 1.2.0-1
changelog:
  - Update to libiec61883 v1.2.0 release
  - Rework installtests patch to not require autoreconf
  - Make iso channel allocation work w/o local fw node r/w


author: Tim Waugh <twaugh@redhat.com> 0.2.11-6
changelog:
  - Package review fixes (bug #226031):
    - Drop prereq on ldconfig.
    - Removed trailing dot in devel package summary.
    - Fixed devel package requirement on main package.
    - Use SMP make flags.
    - Removed static libraries and la files.
    - Fixed source URL.
    - Make sure timestamps are preserved on install.
    - Ship AUTHORS and NEWS.


author: Tim Waugh <twaugh@redhat.com> 0.2.11-9
changelog:
  - The python sub-package now requires the exactly-matching main
    package (bug #605169).
  - Fixed strict aliasing warnings (bug #605170).


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.4-3
changelog:
  - disable broken python/cython bindings (for now, currently FTBFS)
  - track soname
  - tighten  subpkg deps


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.3-3
changelog:
  - Fix touchpad tap timestamps (#1491525)
  - Fix missing show-keycodes entry in man page (#1491532)
  - Change palm detection thresholds (#1491537)
  - Ignore tap motion threshold for nfingers > nslots (#1491533)
  - Fix a memory leak on destroy
  - Ignore hovering touches while tapping
  - Fix a man page typo


author: Peter Hutterer <peter.hutterer@redhat.com> 1.5.2-2
changelog:
  - Swap to the correct tarball so we match the checksums from upstream (had a
    local mixup of tarballs)


author: Rex Dieter <rdieter@fedoraproject.org> 3.52.6-3
changelog:
  - capitalize Name,Summary,Version tags
  - -devel: capitalize Summary
  - fix spurious permissions on header files
  - refresh upstream source
  - -admin,-devel: add %defattr(...)


author: Rex Dieter <rdieter@fedoraproject.org> 3.52.6-4
changelog:
  - -devel: install headers to /usr/include/libiodbc/ to better avoid
    conflicts and need for bogus unixODBC-devel dep


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10
changelog:
  - Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
  - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
  - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
  - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1
changelog:
  - Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
  - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2
changelog:
  - Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
  - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  - just bumping the version to build for proper target


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3
changelog:
  - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
    (Previous attempt to fix this issue was incomplete)


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4
changelog:
  - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
    (Previous attempt to fix this issue was incomplete (again))


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5
changelog:
  - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
    (Previous attempt to fix this issue was incomplete (again))
  - just bumping the version to build for proper target


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6
changelog:
  - Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
  - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
  - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
  - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
  - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
  - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
  - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
  - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7
changelog:
  - Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
  - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
  - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8
changelog:
  - Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
  - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
  - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
  - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
  - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9
changelog:
  - Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
  - Resolves: rhbz#1968330 - id lookup is failing intermittently
  - Resolves: rhbz#1964415 - Memory leak in the simple access provider
  - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11
changelog:
  - Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
  - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12
changelog:
  - Resolves: rhbz#2006382 - IPA Intermittence fetching groups
  - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
  - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
  - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13
changelog:
  - Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
  - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14
changelog:
  - Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z]
  - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
  - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15
changelog:
  - Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
  - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> 1.16.5-10.16
changelog:
  - Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-6
changelog:
  - Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
  - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7
changelog:
  - Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
  - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8
changelog:
  - Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
  - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                             It is done in two steps (two different nsupdate messages).


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-48
changelog:
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-49
changelog:
  - Process ghost members only once
  - Fix processing of universal groups with members from different domains
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-50
changelog:
  - Add a patch dependency
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-51
changelog:
  - Bump the release number
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-53
changelog:
  - Resolves: rhbz#1187192 - IPA initgroups don't work correctly in
                             non-default view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-55
changelog:
  - Fix endianess bug in fill_id()
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-57
changelog:
  - Run the restart in sssd-common posttrans
  - Explicitly require libwbclient
  - Resolves: rhbz#1187113 - sssd deamon was not running after RHEL 7.1 upgrade


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.2
changelog:
  - Resolves: rhbz#1199143 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.3
changelog:
  - Set a pointer in ldap_child to NULL to avoid warnings
  - Related: rhbz#1198759 - ccname_file_dummy is not unlinked on error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.4
changelog:
  - Handle case where there is no default and no rules
  - Resolves: rhbz#1199143 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.5
changelog:
  - Resolves: rhbz#1203365 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.6
changelog:
  - Initialize variable in the views code in one success and one failure path
  - Resolves: rhbz#1203365 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.7
changelog:
  - Resolves: rhbz#1214286 - SSSD downloads too much information when fetching
                             information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.8
changelog:
  - Filter out domain-local groups during AD initgroups operation
  - Related: rhbz#1214286 - SSSD downloads too much information when fetching
                            information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.12
changelog:
  - Resolves: rhbz#1226801 - ignore_group_members doesn't work for subdomains
  - Resolves: rhbz#1226180 - Provide a way to disable the cleanup task


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.14
changelog:
  - Resolves: rhbz#1244761 - Relax the libldb requirements to unblock
                             RH Storage


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.15
changelog:
  - Resolves: rhbz#1255442 - getgrgid for user's UID on a trust client
                             prevents getpw*


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.16
changelog:
  - Resolves: rhbz#1255443 - Add index for 'objectSIDString' and maybe to
                             other cache attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.17
changelog:
  - Actually apply the patch for rhbz#1255442
  - Resolves: rhbz#1255442 - getgrgid for user's UID on a trust client
                             prevents getpw*


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.18
changelog:
  - Resolves: rhbz#1268205 - SSSD intermittently fails to resolve external
                             IPA group membership.


author: Doug Ledford <dledford@redhat.com> - 1.2-1.el6
changelog:
  - Update to latest upstream source
  - Change BuildRequires from valgrind to valgrind-devel for rhel6
  - Drop ppc64 build as it isn't officially supported upstream
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.3-1
changelog:
  - Update to latest upstream release and build against latest libibverbs
  - Resolve mezzanine configure issue (1085946)
  - Related: bz1137044


author: Paolo Bonzini <pbonzini@redhat.com> - 1.7.0-3
changelog:
  - Correct license for libiscsi-utils, prefer %global to %define
  - Add Requires
  - Remove %clean section


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-3
changelog:
  - Fixed issues reported by coverity (bz #1026820)
  - Do not mark /etc/ld.so.conf.d/ as config (bz #1011126)
  - Resolves: #1026820 
  - Resolves: #1011126


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-7.el7
changelog:
  - libiscsi-Discovery-return-multiple-portals-for-the-same-disco.patch [bz#1266523]
  - libiscsi-iscsi-ls-skip-link-local-IPv6-addresses.patch [bz#1266523]
  - Resolves: bz#1266523
    (iscsi-ls doesn't work if target has more than one portal)


author: Honza Horak <hhorak@redhat.com> 1.2.4-2
changelog:
  - Changed license from GPLv2 to GPLv2+ to correspond with source
  - Added license LGPLv2+ due to make_isohybrid_mbr.c


author: Matthias Clasen <mclasen@redhat.com> - 1.2.8-2
changelog:
  - Don't ship api docs twice (they were included in both
    the main and the devel package, by accident (need to save
    space on the f19 live images)


author: Nikola Forró <nforro@redhat.com> - 1.2.90-7
changelog:
  - Fix CVE-2018-11212 (#1586062)
  - Fix CVE-2016-3616 (#1318509), CVE-2018-11213 (#1589091)
    and CVE-2018-11214 (#1589110)
  - Fix CVE-2018-11813 (#1591203)


author: Than Ngo <than@redhat.com> - 4.10.5-2
changelog:
  - bz#970713, CVE-2013-2126, double-free flaw when handling
    damaged full-color in Foveon and sRAW files


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-8
changelog:
  - rename to liblockfile
  - sorting file to main and -devel package
  - explicitly list files in files-section


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-9
changelog:
  - change description and summary of -devel-subpackage
  - make wildcard for man-pages even match against uncompressed files


author: Mahaveer Darade <mah.darade@gmail.com> - 0.3.5-1
changelog:
  - upgrade to upstream version 0.3.5
  - drop patch0, merged upstream
    liblognorm-0.3.4-rename-to-lognormalizer.patch
  - remove trailing whitespace


author: Jiri Vymazal <jvymazal@redhat.com> 2.0.2-2
changelog:
  RHEL 7.6 erratum
  - added patch with skipempty support
    resolves: rhbz#1565219
  - removed no longer used patch file


author: Rui Matos <rmatos@redhat.com> - 2.5.2-11
changelog:
  - Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
    CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 7.12-7
changelog:
  - Add patch to link malshow with -lm, hopefully fixes FTBFS caused by
    https://fedoraproject.org/wiki/Features/ChangeInImplicitDSOLinking


author: Michal Ruprich <mruprich@redhat.com> - 1.2.0-5
changelog:
  - Resolves: #1643464 - Add libmaxminddb package as a successor of deprecated GeoIP package
  - Lowering the release to 1.2.0-5 due to current version in el8 - having larger version would break the migration from el7 to el8


author: Remi Collet <remi@fedoraproject.org> - 1.0.11-1
changelog:
  - update to 1.0.11, soname bump to libmemcached.so.11
  - drop broken SASL support
  - don't generate parser (bison 2.6 not supported)


author: Remi Collet <remi@fedoraproject.org> - 1.0.12-1
changelog:
  - update to 1.0.12
  - add aclocal/ax_lib_libmemcached.m4
  - abi-compliance-checker verdict : Compatible
  - uggly hack for man pages


author: Remi Collet <remi@fedoraproject.org> - 1.0.14-1
changelog:
  - update to 1.0.14
  - libmemcachedprotocol removed
  - sasl support is back
  - run test during build
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1079994 (bigendian)
    https://bugs.launchpad.net/libmemcached/+bug/1079995 (config.h)
    https://bugs.launchpad.net/libmemcached/+bug/1079996 (dtrace)
    https://bugs.launchpad.net/libmemcached/+bug/1079997 (-ldl)
    https://bugs.launchpad.net/libmemcached/+bug/1080000 (touch)


author: Remi Collet <remi@fedoraproject.org> - 1.0.15-1
changelog:
  - update to 1.0.15
  - libmemcachedprotocol is back
  - add memaslap command line tool
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1094413 (libevent)
    https://bugs.launchpad.net/libmemcached/+bug/1094414 (c99 MODE)


author: Remi Collet <remi@fedoraproject.org> - 1.0.16-1
changelog:
  - update to 1.0.16
  - ignore test result for memaslap (XFAIL but PASS)
    https://bugs.launchpad.net/libmemcached/+bug/1115357


author: Václav Pavlín <vpavlin@redhat.com> - 0.9.33
changelog:
  - Update to latest uptsream release 0.9.33 due to
    security issues.
    Resolves: rhbz#1039393, rhbz#1039387


author: Doug Ledford <dledford@redhat.com> - 1.0.4-2
changelog:
  - Fix Url and Source tags
  - Drop old Provides/Obsoletes we used to change package names
  - Pick up a bug fix to modprobe.d/libmlx4.conf


author: Doug Ledford <dledford@redhat.com> - 1.0.5-1
changelog:
  - Update to latest upstream
  - Drop awk based setup for a bash based setup, making including
    the setup code on an initramfs easier
  - Modernize spec file


author: Doug Ledford <dledford@redhat.com> - 1.0.5-7
changelog:
  - Fix dracut module support to work with rdma dracut module
  - Add support for IP based RoCE addressing and UD QPs
  - Add flow steering support
  - Related: bz1064316, bz1062284, bz1058538


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream release
  - Update RoCE IP GID support
  - Fix flow steering support
  - Related: bz1122333


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream release
  - Update RoCE IP GID support
  - Fix flow steering support
  - Resolves: bz1094988


author: Doug Ledford <dledford@redhat.com> - 1.0.6-2
changelog:
  - Bump and rebuilt against latest libibverbs (updated RoCE GID
    patch in libibverbs)
  - Fix a couple compiler warnings (the problems were bogus, but
    we still prefer a silent build)
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Drop the module init stuff and move it to the rdma package
  - Make sure we require the rdma package, and that we conflict
    with older versions of the package
  - Related: bz1164618


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1
changelog:
  - Update to latest upstream release
  - Remove files related to setting ports to Ethernet mode as that
    isn't even supported on this card yet and the files that are
    there will be wrong when it is supported
  - Resolves: bz1061584


author: Jarod Wilson <jarod@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream release v1.2.1
  - This is libmlx5, not libmlx4, fix descriptions accordingly
  - Resolves: bz1298698, bz1275412, bz1275396, bz1296267, bz1296186, bz1288821


author: Jarod Wilson <jarod@redhat.com> - 1.2.1-7
changelog:
  - Fix mlx5_post_send incompatibility with ibv_post_send ABI
  - Add explicit Requires: on libibverbs >= 1.2.1
  - Resolves: rhbz#1364525


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-4
changelog:
  - Remove docs from -devel package
  - Upgrade cmake requirement to 2.8.0
  - Add cmake to -devel requires


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-5
changelog:
  - Remove conflict with libproxy, its not really necessary since
    we already have the latest libproxy in rawhide.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - Update to 1.6.0
  - Adds Modulemd.ModuleStream object, deprecating Modulemd.Module
  - Adds Modulemd.Translation and Modulemd.TranslationEntry objects
  - Adds Modulemd.ImprovedModule object that collects streams, defaults and
    translations together
  - Adds new Modulemd.index_from_*() funtions to get a hash table of
    Modulemd.ImprovedModule objects for easier searching
  - Moves function documentation to the public headers
  - Corrects the license headers to MIT (they were incorrectly listed as MITNFA
    in previous releases)
  - Makes the "eol" field optional for Modulemd.ServiceLevel
  - Clean up HTML documentation
  - Fixes a type error on 32-bit systems


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - Update to 1.6.3
  - Drop upstreamed patch
  - Don't return ModuleStream objects from modulemd_module_new_all_from_*_ext()
  - Ensure that Component buildorder property is signed
  - Work around optimization bug
  - Don't crash dumping translation events without summary or desc
  - Remove Obsoletes: python-modulemd from EPEL


author: John5342 <john5342 at, fedoraproject.org> 4.2-1
changelog:
  - Rebase to new upstream version
  - Drop patches (they were already both upstream waiting for this new release)
  - No real changes in this version since we already carried all patches except the version change


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.4.alpha
changelog:
  - Avoid 'test/md5.c:126:3: warning: dereferencing type-punned pointer
    will break strict-aliasing rules' by adding -fno-strict-aliasing flag.


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.6.alpha
changelog:
  - Fixes for CVE-2018-14679 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682
  - resolves: rhbz#1611550 rhbz#1611551 rhbz#1611552 rhbz#1611553


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream version
  - Add pseudoprovide for libibverbs-driver.{_arch} while keeping old
    pseudoprovide until libibverbs can be rebuilt without needing the
    old provide


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Undo pseudoprovide workaround as it's no longer needed due to
    a change in the libibverbs requirements


author: Christophe Fergeau <cfergeau@redhat.com> - 4.0.3-1
changelog:
  - New upstream 4.0.3 release, should fix a bug breaking metadata fetching
    from musicbrainz servers


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-1
changelog:
  - Package libmusicbrainz5, apart from the name/version it's identical to
    libmusicbrainz4 so this .spec is based on it.


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-2
changelog:
  - Address review comments (rhbz#832670)
      fix licence (LGPLv2+ -> LGPLv2)
      fix tarball URL
      remove obsolete use of RPM_BUILD_ROOT
      remove BuildRequires on pkg-config
      remove use of %defattr


author: Jiri Pirko <jpirko@redhat.com> - 1.2-1
changelog:
  - Update to 1.2
  - libndp: silently ignore packets with optlen 0 [1016064]
  - libndp: fix processing for larger options [1016064]
  - libndp: do not fail on receiving non-ndp packets [1016078]


author: Jiri Pirko <jpirko@redhat.com> - 1.2-3
changelog:
  - libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf() [1044084]


author: Lubomir Rintel <lrintel@redhat.com> - 1.2-5
changelog:
  - libndp: validate the IPv6 hop limit [CVE-2016-3698]
  - libndb: reject redirect and router advertisements from non-link-local [CVE-2016-3698]


author: Eric Garver <egarver@redhat.com> - 1.2-7
changelog:
  - libndp: add option flags to send messages
  - ndptool: add option to send messages types
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - libndp: revert API change for ndp_msg_send() and add


author: Doug Ledford <dledford@redhat.com> - 1.1.4-1
changelog:
  - Update to latest and rebuild against latest libibverbs and
    valgrind (1142116)
  - Related: bz1137044


author: Steve Dickson <steved@redhat.com> 0.25-13
changelog:
  - Strip newlines out of IDMAP_LOG messages (bz 1261124)
  - Fixed some NEGATIVE_RETURNS that a Covscan scan found (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-14
changelog:
  - nss_getpwnam: correctly check for negative values (bz 1271449)
  - Fixed a memory leak in nss_name_to_gid() (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-16
changelog:
  - Add options to aid id mapping in multi domain environments (bz 1378557)
  - Query DNS for the the NFSv4 domain (bz 980925)


author: Steve Dickson <steved@redhat.com> 0.25-18
changelog:
  - Enlarge the TXT record to lager than 127 characters (bz 1498210)
  - Allow white spaces in static IP mapping (bz 1455923)


author: Phil Sutter <psutter@redhat.com> [1.0.6-5.el7]
changelog:
  - expr: lookup: give support for inverted matching (Phil Sutter) [1441084]
  - tests: stricter string attribute validation (Phil Sutter) [1441084]


author: Phil Sutter <psutter@redhat.com> [1.0.6-6.el7]
changelog:
  - chain: dynamically allocate name (Phil Sutter) [1353320]
  - src: Avoid returning uninitialized data (Phil Sutter) [1353319]
  - expr/limit: Drop unreachable code in limit_to_type() (Phil Sutter) [1353312]
  - ruleset: Initialize ctx.flags before calling nftnl_ruleset_ctx_set() (Phil Sutter) [1353322]
  - src: Fix nftnl_*_get_data() to return the real attribute length (Phil Sutter) [1353322]
  - expr/ct: prevent array index overrun in ctkey2str() (Phil Sutter) [1353309]
  - utils: Don't return directly from SNPRINTF_BUFFER_SIZE (Phil Sutter) [1353311]
  - set: prevent memleak in nftnl_jansson_parse_set_info() (Phil Sutter) [1353311]


author: Phil Sutter <psutter@redhat.com> [1.0.8-2.el7]
changelog:
  - trace: Check return value of mnl_attr_parse_nested() (Phil Sutter) [1510538]
  - set_elem: Don't return garbage in nftnl_set_elems_parse() (Phil Sutter) [1510538]
  - ruleset: Avoid reading garbage in nftnl_ruleset_cb() (Phil Sutter) [1510538]
  - object: Avoid returning garbage in nftnl_obj_do_parse() (Phil Sutter) [1510538]
  - gen: Remove a pointless call to mnl_nlmsg_get_payload() (Phil Sutter) [1510538]
  - data_reg: Add a missing break in nftnl_data_reg_snprintf (Phil Sutter) [1510538]


author: Dan Williams <dcbw@redhat.com> - 1.1-14
changelog:
  - Fix portmap position calculation (rh #677526) (rh #677725)
  - Make port allocation threadsafe (rh #677527) (rh #677724)


author: Thomas Haller <thaller@redhat.com> - 3.2.21-6
changelog:
  - fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
  - fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
  - fix printing in nl_msec2str for whole seconds
  - don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
  - backport nl_has_capability function


author: Thomas Haller <thaller@redhat.com> - 3.2.21-9
changelog:
  - improve local port handling for netlink socket with EADDRINUSE (rh #1249158)
  - rtnl: backport support for link-netnsid attribute (rh #1255050)


author: Lubomir Rintel <lrintel@redhat.com> - 1.0.3-1.git20160615.28a0e28
changelog:
  - New snapshot:
  - applet: make new auto connections only available for current user (rh #1176042)
  - editor: allow forcing always-on-top windows for installer (rh #1097883)
  - editor: allow changing bond MTU (rh #1177582)
  - editor: use ifname instead of UUID in slaves' master property (rh #1083186)
  - editor: allow adding Bluetooth connections (rh #1229471)


author: Lubomir Rintel <lrintel@redhat.com> - 1.0.6-1
changelog:
  - Align with the 1.0.6 upstream release:
  - editor: add support for setting MTU on team connections (rh #1255927)
  - editor: offer bond connections in vlan slave picker (rh #1255735)


author: Jiří Klimeš <jklimes@redhat.com> - 1.0.6-2
changelog:
  - libnm-gtk: fix a possible crash on widgets destroy (rh #1267326)
   - libnm-gtk: use symbolic icons for password store menu (rh #1267330)


author: Jiří Klimeš <jklimes@redhat.com> - 1.0.6-2
changelog:
  - libnm-gtk: fix a possible crash on widgets destroy (rh #1267326)
  - libnm-gtk: use symbolic icons for password store menu (rh #1267330)


author: Lubomir Rintel <lrintel@redhat.com> - 1.4.0-1
changelog:
  - Update to network-manager-applet 1.4.0 release
  - c-e: add editor for teaming devices (rh #1079465)


author: Lubomir Rintel <lrintel@redhat.com> - 1.8.0-0.1.git20170326.f260f8a
changelog:
  - Update to network-manager-applet 1.8 snapshot
  - c-e: add missing mnemonic characters to buttons (rh #1434317)
  - c-e: fix handling of devices without permanent MAC address in devices combo box (rh #1380424)


author: Dan Mashal <dan.mashal@fedoraproject.org> - 0.7.5-5
changelog:
  - Fix RHBZ #925824
  - Update source URL
  - Fix mix of spaces and tabs in spec file
  - Fix bogus changelog date


author: Ray Strode <rstrode@redhat.com> 0.7.5-8
changelog:
  - Don't require desktop notification daemon (breaks a build loop with mutter/gnome-shell)
    Related: #1174722


author: Jarod Wilson <jarod@redhat.com> - 1.0.8-1
changelog:
  - Update to upstream release v1.0.8 for RoCE v2 support
  - Restore AUTHORS, COPYING and README installation
  - Resolves: bz1276743


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.0.9-1
changelog:
  - Updated to 0.0.9
  - Dropped obsolete Group, Buildroot, %clean and %defattr
  - Switched to .bz2 sources
  - Dropped included patches


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-3
changelog:
  - Resolves: rhbz#1712458 - [machines] The function of 'Auto-detect guest
                             operating system' is not available on rhel 7.7


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-4
changelog:
  - Resolves: rhbz#1727842 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Neal Becker <ndbecker2@gmail.com> - 0.9.9-2
changelog:
  - Remove libotf-config (just just pkg-config instead)
  - Remove example/Makefile to fix multilib conflict


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-3.1
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1169773)


author: Adam Jackson <ajax@redhat.com> 0.12.902-4
changelog:
  - libpciaccess-lol-dev-port.patch: Don't use /dev/port since the kernel insists
    that it remain unusably broken.


author: Krzysztof Czurylo <krzysztof.czurylo@intel.com> - 1.1-1
changelog:
  - NVML 1.1 release
  - Update link to source tarball
  - Add libpmempool subpackage
  - Remove obsolete patches


author: Tom Lane <tgl@redhat.com> 2:1.5.10-3
changelog:
  - Remove compat subpackage (it's now a separate package "libpng12")
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 2:1.5.12-1
changelog:
  - Update to libpng 1.5.12 for minor bug fixes
  - Activate chunk size limits by default, with a very generous default limit


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptf based on upstream
  - Related: #1283576


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptr base on upstream
  - Related: #1283575


author: Peter Robinson <pbrobinson@fedoraproject.org> - 0.4.7-4
changelog:
  - Add upstream patches to use js rather than xulrunner
  - Add patch to fix FTBFS on gcc 4.7
  - Cleanup spec for latest updates and remove obsolete bits


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-1
changelog:
  - fix leak when throwing PWQError exception
  - added pkgconfig file
  - call the simplicity checks before the cracklib check
  - add enforce_for_root option to the PAM module
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-1
changelog:
  - use rpm built-in filtering of provides (rhbz#830153)
  - remove strain debug fprintf() (rhbz#831567)


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-5
changelog:
  - fix brittle configuration settings (#1259633)
  - fix abort when generating large passwords on some architectures


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.4-1
changelog:
  LOG: prevent the last char of the blackbox message from getting lost.
  Example: make the blackbox example more practical.
  Add the processing which remove notifier at skiplist_destroy function
  Add the processing which remove hash node and notifier at hashtable_destroy function
  Unify to QB_TRUE/QB_FALSE a boolean value
  Document the default prefix in INSTALL
  Unify the list processing with qb_list function
  Add travis link to the readme.
  Fix return code which is an error occurred at pthread function
  TEST: add a progam to compare the speed of vsnprintf and qb_vsnprintf_serialize
  LOG: add a test for a padded hex int.
  Fedora's splint has a strange syntax error, don't fail on it.
  LOG: fix truncation in some messages that get padded.
  Fix the blackbox formatter when specifing the string len/precision
  Fix strlcpy and strlcat functions
  IPC: don't over log on disconnect
  Make sure we don't use the format string whilst it is getting changed.
  ptrie: deref the current node in trie_iter_free()
  LOG: fix the format comparison to avoid generating multiple entries.
  LOG: set the return code when calloc fails
  IPC: call poll if we are mid message and get EAGAIN
  Remove extra ";"
  IPC: set the error more correctly when qb_sys_mmap_file_open() fails.
  Make sure that mmap'ed files smaller than a page size are written to.
  example/test: check for error in qb_ipc_run()
  example: check for error in qb_ipc_run()
  TEST: fix typo s/,/; in check_ipc.c


author: David Vossel <dvossel@redhat.com> - 0.16.0-4
changelog:
  - Require log filtering to match function and file exactly.
    No substring matching.

  - Fixes complile time issue with 'make check' unit tests.

    Resolves: rhbz#1018091


author: David Vossel <dvossel@redhat.com> - 0.17.1-1
changelog:
  Fix: ipcs: Correctly allocate receive buffer size
    Fix: ipc_socket: Signalhandler must be resetted to Default, use only cleanup_sigpipe to return from qb_ipc_dgram_sock_setup.
    Fix: trie: allow modifying the trie map during the notify callback
    Fix: fix invalid option when run 'ipcclient -h'
    Fix: epoll: don't miss poll events under high load
    Fix: ipc_shm: fix error handling in qb_ipcs_shm_connect()
    Fix: ringbuffer: fix size in qb_rb_create_from_file()
    Fix: ringbuffer: fix qb_rb_open_2() debug format string
    Fix: trie: fixes regression caused by ref count refactoring
    Fix: ipcc: Properly timeout during recv when timeout value is provided

    Resolves: rhbz#1110043
    Resolves: rhbz#975903


author: David Vossel <dvossel@redhat.com> - 0.17.1-1.1
changelog:
  Fix bug that prevents ipc server from working in pid with realtime priority.

    Resolves: rhbz#1198718


author: Christine Caulfield <ccaulfie@redhat.com> - 0.17.1-2.1
changelog:
  Increase size of the buffer where we make the socket name to allow for longer PIDs
    Resolves bz#1114852


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-2
changelog:
  Detect IPC Shared memory corruption in peek as well as read. Prevents
    the mainloop from spinning if multithreaded IPC (which is currently 
    not supported) is attempted without locking.
    Resolves: rhbz#1422454


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-3
changelog:
  Allow IPC system to use filesystem sockets instead of abstract
    sockets if a configuration file exists.
    Resolves: rhbz#1446254


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-4
changelog:
  Revert git patch 189ca28 which caused problems with pacemaker CIB
    closing down.
    Resolves: rhbz#1459276


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-5
changelog:
  Put backpatch 189ca28 as it's not the culprit
    
    Don't truncate IPC files in the client as it can cause servers to crash.
    I've also had to (for this release) disable one of the tests as it checks
    for truncated files.
    Resolves: rhbz#1459276


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-7
changelog:
  Prevent crashes when client truncates SHM segment
    I've reverted the patch for 1459276 which is no longer needed as this
    is a proper fix.
    Resolves: rhbz#1473695


author: David Tardon <dtardon@redhat.com> - 1:4.3.7.2-2
changelog:
  - Related: rhbz#1205091 add more fixes from f21
  - Resolves: tdf#91078 check also DBData modified, not only named expressions
  - don't include red spelling underlines on bitmap copy/paste


author: David Tardon <dtardon@redhat.com> - 1:4.3.7.2-4
changelog:
  - Related: rhbz#1205091 add another bunch of fixes from Fedora
  - rhbz#1219137 tweak ruler for happenchance side-effect
  - Related: rhbz#1205091 do not filter out requires


author: David Tardon <dtardon@redhat.com> - 1:4.3.7.2-5
changelog:
  - Related: rhbz#1205091 fix for ppc64
  - Related: rhbz#1205091 fix deps for gdb-debug-support subpackage


author: David Tardon <dtardon@redhat.com> - 1:4.3.7.2-5.1
changelog:
  - Resolves: rhbz#1285820 various flaws
  - CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
  - CVE-2015-5212 Integer underflow in PrinterSetup length
  - CVE-2015-5213 Integer overflow in DOC files
  - CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
    causing memory corruption


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.1.0.4-5
changelog:
  - Resolves: rhbz#989246 Honor user's JavaDriverClass override in mysql driver
  - Resolves: fdo#67045 fix several nasty screen selection issues


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 3.2-2
changelog:
  - Build in the build section, install in the install section
  - Add the _isa macro to the libreoffice dependencies


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 3.2-4
changelog:
  - Specify CC_FLAGS and COMP_LINK_FLAGS so that an extra -O switch and setting an
    rpath are avoided.


author: Caolán McNamara <caolanm@redhat.com> - 1:5.0.6.2-4
changelog:
  - Resolves: rhbz#1378521 crash in calc on exit after using csv dialog with a11y enabled
  - Resolves: rhbz#1397992 crash in calc on closing dialog with a11y enabled


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.9-1
changelog:
  - handle: Fix memory leak when looking for local metalink/mirrorlist (Issue #33)
  - Return -1 for LRR_YUM_TIMESTAMP if no repomd is available
  - Use CURLOPT_ERRORBUFFER to get more useful error messages
  - repoutil_yum: lr_repoutil_yum_check_repo: fix path handling


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-1
changelog:
  - Substitute vars in URL in the lr_downloadtarget_new()
  - New module repoconf for reading of *.repo files
  - Add LRE_VALUE code + LR_REPOCONF_ERROR error domain
  - Fail if gpgcheck enabled but repomd.xml signature is not available
  - Support for RHEL6
  - Add LRO_GNUPGHOMEDIR option
  - Refactoring to prevent RhBug: 1144741
  - fastest_mirror: Use <0.0 (-1.0) instead of DBL_MAX when a connection time wasn't measured
  - Add sanity checks in order to avoid bugs like: 1166533, 1160087
  - Refactoring


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1
changelog:
  - downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
  - downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
  - downloader: Show also calculated checksums in error message about bad checksum
  - Python: Return all strings in unicode


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1
changelog:
  - Fix ABI compatibility (RhBug: 1185180)
  - fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
  - downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
  - Make building tests and docs optional
  - librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1
changelog:
  - tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
  - Add LRO_OFFLINE
  - Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
  - Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
  - Add LR_VERSION constant with version string
  - python: Import contants from C librepo module in a loop
  - repoconf: Add support for failover and skip_if_unavailable options
  - handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
  - Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
  - util: Add lr_is_local_path()
  - New module repoconf for reading *.repo files
  - Add LRO_HTTPHEADER option (RhBug: 1181123)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.15-1
changelog:
  - Do not inlude header in the body output (RhBug: 1207685)
  - metalink: Proper error handling
  - New LRR_RPMMD_* contants
  - Support for client certificates
  - Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
  - CMakeLists.txt: do not check for CXX
  - build: Use solely pkg-config to find glib


author: Colin Walters <tmlcoch@redhat.com> - 1.7.16-1
changelog:
  - Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
  - downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
  - test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
  - repoconf: Proper handling of gint64 and guint64 types
  - build: Be compatible with cmake 2.8
  - handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
  - utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
  - Python: call lr_global_init() during module initialization
  - Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
  - util: Honor RFC 3986 (Issue #55)


author: Marek Blaha <mblaha@redhat.com> - 1.8.1-1
changelog:
  - Add yumrecord substitution mechanism (mluscon)
  - Fix a memory leak in signature verification (cwalters)
  - Add new option LRO_FTPUSEEPSV
  - downloader prepare_next_transfer(): simplify long line
  - downloader prepare_next_transfer(): add missing error check
  - downloader prepare_next_transfer(): cleanup error path
  - downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
  - handle: Don't use proxy cache for downloads of metalink/mirrorlist
  - handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
  - downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
  - Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
  - New test: always try to download from the fastest mirror (Alexander Todorov)


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-31
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Related: #1266853


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-32
changelog:
  - Save remote name in reported_to
  - Add a function for compressing dumpdirs
  - Introduce global configuration + option for excluded elements
  - attach the URL of the uploaded problem to the relevant report
  - Resolves: #1300780


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-33
changelog:
  - lib: allow report SELinux denial from sealert under common user
  - mailx: stop creating dead.letter on mailx failures
  - mailx: introduce debug parameter -D
  - mailx: mail formatting: add comment right after %oneline
  - mailx: use problem report api to define an emais' content
  - lib: remove unused function make_description_bz
  - rhtsupport: attach all dump dir's element to a new case
  - rhtsupport: add pkg_vendor, reproducer and reproducible to description
  - rhtsupport: use problem report API to create description
  - lib: add Problem Format API
  - augeas: trim spaces before key value
  - rhtsupport: Discourage users from reporting in non Red Hat stuff
  - rhtsupport: Discourage users from opening one-shot crashes
  - report-gtk: Require Reproducer for RHTSupport
  - Add workflow for RHEL anonymous report
  - bugzilla: don't report private problem as comment
  - lib: move CREATE_PRIVATE_TICKET to the global configuration
  - event config: add support for 'restricted access'
  - report-gtk: offer users to create private ticket
  - bugzilla: make the event configurable
  - uploader: /etc/libreport/plugins/upload.conf as default conf file
  - dd: make function uid_in_group() public
  - uploader: add possibility to set SSH keyfiles
  - uploader: move username and password to the advanced options
  - uploader: allow empty username and password
  - curl: add possibility to configure SSH keys
  - Resolves #1289513, #1277849, #1289513, #1279453, #1258482, #1236613, #1261358, #1281312, #1309317, #1264921


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-36
changelog:
  - introduce 'stop_on_not_reportable' option
  - fix a double free of config at exit in reporter-rhtsupport
  - Related: #1373094, #1257159


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-39
changelog:
  - Introduce workflow for adding data to existing case
  - Change default URL to the FAF server
  - wizard: fix 'Show log' window not displaying correctly
  - augeas: fix parsing spaces in configuration files
  - Related: #1303326, #1435256, #1463313


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-43
changelog:
  - dd: extend the scope of DD_DONT_WAIT_FOR_LOCK
  - dd: log lock warning only once not x times per sec
  - dd: add functions for opening dd item
  - testsuite: Add macros for value comparison
  - testsuite: assert for common function results
  - testsuite: expose the last check result
  - testsuite: fix dd_open_item_file test
  - tests: include testsuite.h in the dist archive
  - spec: include testsuite headers in the devel package
  - Related: #1588272, #1613236


author: Paul Wouters <pwouters@redhat.com> - 3.22-2
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555)
  - Resolves: rhbz#1372050 RFE: Support IKE and ESP over TCP: RFC 8229


author: Paul Wouters <pwouters@redhat.com> - 3.22-3
changelog:
  - Resolves: rhbz#1475434 Add support for AES-GMAC for ESP (RFC-4543) to libreswan
  - Resolves: rhbz#1300759 Implement RFC-7427 Digital Signature authentication


author: Paul Wouters <pwouters@redhat.com> - 3.22-5
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [updated]
  - Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
  - Resolves: rhbz#1375776 [IKEv2 Conformance] Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA reques failed
  - Resolves: rhbz#1375750 SECCOMP support for libreswan [updated for libunbound syscalls]
  - Resolves: rhbz#1300763 Implement draft-ietf-ipsecme-split-dns for libreswan


author: Paul Wouters <pwouters@redhat.com> - 3.23-0.1.rc4
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
  - Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
  - Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
  - Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
  - Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
  - Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA


author: Paul Wouters <pwouters@redhat.com> - 3.23-2
changelog:
  - Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
  - Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]


author: Paul Wouters <pwouters@redhat.com> - 3.23-4
changelog:
  - Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
  - Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues


author: Paul Wouters <pwouters@redhat.com> - 3.25-1
changelog:
  - Resolves: rhbz#1591817 rebase libreswan to 3.25
  - Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
  - Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs >= 1.6.6


author: Paul Wouters <pwouters@redhat.com> - 3.25-2
changelog:
  - Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors


author: Paul Wouters <pwouters@redhat.com> - 3.25-3
changelog:
  - Resolves: rhbz#1655440 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth


author: Paul Wouters <pwouters@redhat.com> - 3.25-4
changelog:
  - Resolves: rhbz#1660536 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
  - Resolves: rhbz#1660544 config: recursive include check doesn't work
  - Resolves: rhbz#1660542 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
  - Resolves: rhbz#1664244 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.1
changelog:
  - Resolves: rhbz#1665369 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.2
changelog:
  - Resolves: rhbz#1672921 - Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated bugfix]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.3
changelog:
  - Resolves: rhbz#1680483 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.4
changelog:
  - Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.5
changelog:
  - Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart [rhel-7.6.z] [updated]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.6
changelog:
  - Resolves: rhbz#1680483 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure [rhel-7.6.z] [updated]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.7
changelog:
  - Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start [updated for eclipsed handling]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.8
changelog:
  - Resolves: rhbz#1708060 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-5
changelog:
  - Resolves: rhbz#1639404 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
  - Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
  - Resolves: rhbz#1629902 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
  - Resolves: rhbz#1623279 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11
  - Resolves: rhbz#1625303 config: recursive include check doesn't work
  - Resolves: rhbz#1664521 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits


author: Paul Wouters <pwouters@redhat.com> - 3.25-6
changelog:
  - Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated]
  - Resolves: rhbz#1679735 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure


author: Paul Wouters <pwouters@redhat.com> - 3.25-7
changelog:
  - Resolves: rhbz#1673105 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart


author: Paul Wouters <pwouters@redhat.com> - 3.25-8
changelog:
  - Resolves: rhbz#1686991 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE


author: Paul Wouters <pwouters@redhat.com> - 3.25-8.1
changelog:
  - Resolves: rhbz#1746052 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire [rhel-7.7.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-9
changelog:
  - Resolves: rhbz#1724200 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire


author: Paul Moore <pmoore@redhat.com> - 1.0.0-0
changelog:
  - New upstream version
  - Remove verbose build patch as it is no longer needed
  - Enable _smp_mflags during build stage


author: Paul Moore <pmoore@redhat.com> - 2.2.1-1
changelog:
  - Removed '--disable-static' from the build to ensure that scmp_sys_resolver
    is self contained and resolve RPATH issues


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Fix location of selinuxfs mount point (#1321086)
  - Only mount /proc if necessary
  - procattr: return einval for <= 0 pid args
  - procattr: return error on invalid pid_t inpu


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix setexecfilecon() to work better in a chroot (#1329931)
  - Fix typo in sefcontext_compile.8 (#1320062)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-4
changelog:
  - Clarify is_selinux_mls_enabled() description
  - Explain how to free policy type from selinux_getpolicytype()
  - Compare absolute pathname in matchpathcon -V
  - Add selinux_snapperd_contexts_path()
  - Modify audit2why analyze function to use loaded policy
  - Sort object files for deterministic linking order
  - Respect CC and PKG_CONFIG environment variable
  - Avoid mounting /proc outside of selinux_init_load_policy()
  - Fix multiple spelling errors


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Add missing av_permission values (#1025931)
  - Set an appropriate errno in booleans.c (#1402140)
  - Change matchpathcon usage to match with matchpathcon manpage (#1412797)


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.2-4
changelog:
  - Fix libselinux.spec file
  - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
  - Add Int_to_mcs function to generate MCS labels from integers.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-5
changelog:
  - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
  - Add Int_to_mcs function to generate MCS labels from integers.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-6
changelog:
  - Add additional go bindings for get*con calls
  - Add go bindings test command
  - Modify man pages of set*con calls to mention that they are thread specific
  Resolves:#1053122


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Sort object files for deterministic linking order
  - Support overriding Makefile RANLIB
  - Respect CC and PKG_CONFIG environment variable
  - Fix multiple spelling errors
  - genhomedircon: %{USERID} and %{USERNAME} support and code cleanups


author: Petr Lautrbach <plautrba@redhat.com> 2.5-4
changelog:
  - genhomedircon: add support for Development/Debug syntax
  - genhomedircon: generate contexts for logins mapped to the default user
  - Validate and compile file contexts before installing
  - Swap tcp and udp protocol numbers


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-8
changelog:
  - Save linked policy, skip re-link when possible
  - Replace access(,F_OK) checks to make setuid programs work (#1186431)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-9
changelog:
  - Update semanage to allow runtime labeling of Infiniband Pkeys (#1466274)
  - Update semanage to allow runtime labeling of ibendports (#1466274)
  - Keep copy of file_contexts.homedirs in policy store (#1409813)
  - Add support for listing fcontext.homedirs file (#1409813)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-12
changelog:
  - Do not change file mode of seusers and users_extra (#1512639)
  - Improve warning for installing disabled module (#1337199)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-14
changelog:
  - Include user name in ROLE_REMOVE audit events (#1622045)
  - Improve "reset umask before creating directories"


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-14
changelog:
  - Cleanup handling of missing mls_range to fix problems with useradd -Z
  - Fix auditing of login record changes, roles were not working correctly.
  Resolves: #1018840


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Update to upstream 
  	* fix neverallow checking on attributes
  	* Move context_copy() after switch block in ocontext_copy_*().
  	* check for missing initial SID labeling statement.
  	* Add always_check_network policy capability
  	* role_fix_callback skips out-of-scope roles during expansion.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  	* filename_trans: use some better sorting to compare and merge
  	* coverity fixes
  	* implement default type policy syntax
  	* Fix memory leak issues found by Klocwork
  - Add CONTRAINT_NAMES to the kernel


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Correctly detect unknown classes in sepol_string_to_security_class
  - Sort object files for deterministic linking order
  - Fix neverallowxperm checking on attributes
  - Remove libsepol.map when cleaning
  - Add high-level language line marking support to CIL
  - Change logic of bounds checking to match change in kernel
  - Fix multiple spelling errors
  - Only apply bounds checking to source types in rules
  - Fix CIL and not add an attribute as a type in the attr_type_map
  - Build policy on systems not supporting DCCP protocol
  - Fix extended permissions neverallow checking
  - Fix CIL neverallow and bounds checking
  - Android.mk: Add -D_GNU_SOURCE to common_cflags


author: Petr Lautrbach <plautrba@redhat.com> 2.5-5
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6
changelog:
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-7
changelog:
  - Define cgroup_seclabel policy capability (rhbz#1493517)
  - Fix unitialized jmp and invalid dereference


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-8.1
changelog:
  - Define nnp_nosuid_transition policy capability (rhbz#1480519)
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - Allow runtime labeling of ibendports (rhbz#1464489)
  - Allow runtime labeling of Infiniband Pkeys (rhbz#1464489)
  - Add IB end port handling to CIL (rhbz#1464489)
  - Add ibendport ocontext handling (rhbz#1464489)
  - Add support for ibendportcon labels (rhbz#1464489)
  - Add Infiniband Pkey handling to CIL (rhbz#1464489)
  - Add ibpkey ocontext handling (rhbz#1464489)
  - Add support for ibpkeycon labels (rhbz#1464489)
  - Remove unused attribute on a used argument from avrule_read() (rhbz#1464489)
  - Add binary module support for xperms
  - Add support for converting extended permissions to CIL


author: kwizart < kwizart at gmail.com > - 2.2.2-2
changelog:
  - Fix http://bugzilla.redhat.com/415121
  - Add disable-static
  - Don't use makeinstall macro
  - Update License field


author: Kalev Lember <kalev@smartlink.ee> - 2.2.8-4
changelog:
  - Spec cleanup
  - Use macro for automatically calculating ftp directory name with
    first two digits of tarball version.
  - Dropped R: pkgconfig from -devel as it's now automatically added by rpm
  - Own /usr/share/doc/libsigc++-2.0/ dir and mark /usr/share/devhelp/ as %doc
  - Require base package from -doc subpackage
  - Drop unneeded doxygen and graphviz BRs


author: Peter Jones <pjones@redhat.com> - 2.3.3-6
changelog:
  - Pull in all the coverity fixes we sent upstream.  I had thought these
    made it in to this release; they did not, but the 2.4.0 release they are
    in is also the python 3 switchover, so we need these as patches.
    Related: rhbz#1463329


author: Peter Jones <pjones@redhat.com> - 2.3.3-8
changelog:
  - Fix smbios-sys-info-lite crashes when an asset tag is not set
    Resolves: rhbz#1562440
  - Fix vestigial c++ artifacts included in the package
    Resolves: rhbz#1562440


author: Tom Callaway <spot@fedoraproject.org> - 0.4.8-9
changelog:
  - mark symbols which conflict with RPM as "internal", resolves bz 864324
    Thanks to Michele Baldessari


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12.1
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)


author: Remi Collet <remi@remirepo.net> - 1.0.16-1
changelog:
  - update to 1.0.16
  - soname bump to 23 (libsodium13 compat package exists)
  - manage update from libsodium23 (3rd party repository)
  - Add static library subpackage
  - fix license management


author: Jaroslav Mracek <jmracek@redhat.com> - 0.6.34-3
changelog:
  - Make sure that targeted updates don't do reinstalls
  - Resolves: bug#1668256
  - Fix NULL pointer dereference (CVE-2018-20532, CVE-2018-20533)
  - Resolves: bug#1669562
  - Resolves: bug#1669576
  - Fix illegal address access in pool_whatprovides (CVE-2018-20534)
  - Resolves: bug#1670453


author: Milan Crha <mcrha@redhat.com> - 2.62.2-2
changelog:
  - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c: get_cookies() on empty hostnames
  - Resolves: #1598838


author: Matthias Clasen <mclasen@redhat.com> - 0.2.4-1
changelog:
  - Update to 0.2.4
  - See http://mail.gnome.org/archives/gnome-announce-list/2010-February/msg00059.html


author: Jan Grulich <jgrulich@redhat.com> - 1.4.4-11.20101004cvs
changelog:
  - Fix global buffer overflow
    Resolves: bz#1301202

  - Fix improper handling of CSRC count and extension header length in RTP header
    Resolves: bz#1323705

  - Fix buffer overflow in application of crypto profiles
    Resolves: bz#1141897


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-9
changelog:
  - curl consumes too much memory during scp download (#1080459)
  - prevent a not-connected agent from closing STDIN (#1147717)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12
changelog:
  - session: avoid printing misleading debug messages (#1503294)
  - scp: send valid commands for remote execution (#1489733)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12.el7_6.1
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12.el7_6.3
changelog:
  - fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)


author: Kamil Dudka <kdudka@redhat.com> 1.8.0-2
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
  - fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
  - fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Paul Howarth <paul@city-fan.org> 1.4.3-1
changelog:
  - Update to 1.4.3
    - compression: add support for zlib@openssh.com
    - sftp_read: return error if a too large package arrives
    - libssh2_hostkey_hash.3: update the description of return value
    - Fixed MSVC NMakefile
    - examples: use stderr for messages, stdout for data
    - openssl: do not leak memory when handling errors
    - improved handling of disabled MD5 algorithm in OpenSSL
    - known_hosts: Fail when parsing unknown keys in known_hosts file
    - configure: gcrypt doesn't come with pkg-config support
    - session_free: wrong variable used for keeping state
    - libssh2_userauth_publickey_fromfile_ex.3: mention publickey == NULL
    - comp_method_zlib_decomp: handle Z_BUF_ERROR when inflating
  - Drop upstreamed patches


author: Gris Ge <fge@redhat.com> 1.4.0-1
changelog:
  - Add Python3 support.
  - New sub rpm package python3-libstoragemgmt.
  - Add support of lmiwbem.
  - Allow plugin test to be run concurrently.
  - Bug fixes:
      * Fix megaraid plugin for dell PERC.
      * Fix local disk rotation speed query on NVMe disk.
      * Fix lsmcli incorrect try-expect on local disk query.
      * Fix all the gcc compile warnings.
      * Fix the obsolete usage of AC_OUTPUT in configure.ac.
  - Library adds:
      * Query serial of local disk:
          lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
      * Query LED status of local disk:
          lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
      * Query link speed of local disk:
          lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()


author: Gris Ge <fge@redhat.com> - 1.5.0-2
changelog:
  - Fix multilib confliction of nfs-plugin by move binrary file to
    another subpackage libstoragemgmt-nfs-plugin-clibs


author: Tony Asleson <tasleson@redhat.com> - 1.8.1-2
changelog:
  - https://bugzilla.redhat.com/show_bug.cgi?id=1872745
  - https://bugzilla.redhat.com/show_bug.cgi?id=1903665


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.8-1
changelog:
  - Rebase to libtalloc 2.1.8
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.9-1
changelog:
  - Rebase to libtalloc 2.1.9
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.10-1
changelog:
  - Rebase to libtalloc 2.1.10
  - Resolves: rhbz#1470053 - Rebase libtalloc to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.14-1
changelog:
  - Rebase to libtalloc 2.1.14
  - Resolves: rhbz#1658747 - Rebase libtalloc to version 2.1.14 for Samba


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-1
changelog:
  - Rebase to libtalloc 2.1.16
  - Resolves: rhbz#1736005 - Rebase libtalloc to version 2.1.16 for Samba


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.6-2
changelog:
  - Resolves: rhbz#1241015 - tdb deadlocks if you acquire allrecord_lock
                             and start two traverses


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.12-2
changelog:
  - Resolves: rhbz#1441231 - The tdb robust mutexes runtime check is not thread safe and ends in a deadlock


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.15-1
changelog:
  - Resolves: rhbz#1470049 - Rebase libtdb to enable samba rebase to
                             version 4.7.x


author: Marcelo Ricardo Leitner <mleitner@redhat.com> - 1.25-2
changelog:
  - Updated to 1.25 [1286840 1286063]
  - Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]


author: Marcelo Ricardo Leitner <mleitner@redhat.com> - 1.25-4
changelog:
  - Added patches to avoid hung on shutdown [1330550]
  - Added patch to fix an out-of-bound write with zero-length hardware
    address [1286840]


author: Xin Long <lxin@redhat.com> - 1.25-5
changelog:
  - Added patch to escape some sensitive characters [1383997]
  - Added patch to check port link_up when a port is added for lb runner
    [1393430]


author: Xin Long <lxin@redhat.com> - 1.27-5
changelog:
  - Added patch to fix runner.sys_prio default in man docs [1533813]
  - Added patch to empty LDFLAGS before checking for libnl3 in configure.ac [1533847]
  - Added patch to not crash when trying to print unregistered device name [1563155]


author: Xin Long <lxin@redhat.com> - 1.27-7
changelog:
  - Added an option to force log output to stdout, stderr or syslog [1596917]
  - Fixed s32/u32 data storage on big endian [1545574]
  - Documented ARP Ping link_watch.vlanid option [1645169]
  - Sent LACPDU when port state transitions from DEFAULT to CURRENT [1645169]


author: Xin Long <lxin@redhat.com> - 1.29-1
changelog:
  - man teamd.conf: update some parameter default values [1732586]
  - 1.29 release
  - teamd: improve the error output for non-integer port prio
  - teamd: return 0 if tdport doesn't exist in teamd_config_port_set
  - teamd: add port_master_ifindex_changed for link_watch_port_watch_ops [1720137]
  - initscripts: fix if/fi align
  - teamd: fix a json object memleak in get_port_obj() [1704451]
  - libteam: set netlink event socket as non-blocking [1680655]
  - libteam: double NETLINK_RCVBUF to fix -ENOMEM error
  - teamd: add a default value 1000 for link_watch.interval
  - teamd: use enabled option_changed to sync enabled to link_up for lb runner [1629670]
  - teamd: tdport has to exist if item->per_port is set in __find_by_item_path
  - teamd: remove port if adding fails
  - teamd: lacp: update port state according to partner's sync bit
  - man: fix runner.min_ports default value
  - teamd: lw: nsna_ping: only send ns on enabled port [1730558]
  - teamd: lw: arp_ping: only check arp reply message
  - teamd: config: update local prio to kernel [1714440]
  - teamnl: update help message


author: Xin Long <lxin@redhat.com> - 1.29-2
changelog:
  - teamd/lacp: fix segfault due to NULL pointer dereference [1758072]
  - teamd: fix build error in expansion of macro teamd_log_dbgx [1758072]
  - teamd: update ctx->hwaddr after setting team dev to new hwaddr [1772799]
  - libteam: wapper teamd_log_dbg with teamd_log_dbgx [1758072]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-2
changelog:
  - Allow building with RHEL-7.0 libtalloc
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-3
changelog:
  - BuildRequire the minimal applicable libtalloc version
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.31-2
changelog:
  - Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                         heavy threaded load [rhel-7.4.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.33-1
changelog:
  - Resolves: #1470054 - Rebase libtevent to enable samba rebase to version
                         4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.34-1
changelog:
  - Resolves: #1512414 - tevent can cause a Samba file corruption bug under
                         heavy threaded load


author: Hans de Goede <hdegoede@redhat.com> - 1:1.1.1-6
changelog:
  - run autoreconf for aarch64 support (#925898)
  - add a patch from upstream fixing a crash when compiled with gcc-4.8 (#959001)
  - cleanup spec-file


author: Petr Hracek <phracek@redhat.com> - 4.0.3-8
changelog:
  - tiff2ps manual page doesn't contain help for all options
  - tiffcp options differ in program help and manual page
  Resolves: #510240
  Resolves: #510258


author: Petr Hracek <phracek@redhat.com> - 4.0.3-10
changelog:
  - Resolves: #996827  CVE-2013-4231 CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
    libtiff various flaws


author: Petr Hracek <phracek@redhat.com> - 4.0.3-15
changelog:
  - This resolves several CVEs
  - CVE-2014-8127, CVE-2014-8129, CVE-2014-8130
  - CVE-2014-9330, CVE-2014-9655, CVE-2015-8781
  - CVE-2015-8784, CVE-2015-1547, CVE-2015-8683
  - CVE-2015-8665, CVE-2015-7554, CVE-2015-8668
  - Resolves: #1299920


author: Nikola Forró <nforro@redhat.com> - 4.0.3-21
changelog:
  - Remove patches for CVEs:
    CVE-2014-8127, CVE-2014-8129, CVE-2014-8130,
    CVE-2014-9330, CVE-2015-7554, CVE-2015-8665,
    CVE-2015-8683, CVE-2015-8781, CVE-2015-8784
  - Add patches for CVEs:
    CVE-2016-3632, CVE-2016-3945, CVE-2016-3990,
    CVE-2016-3991, CVE-2016-5320
  - Update patches for CVEs:
    CVE-2014-9655, CVE-2015-1547, CVE-2015-8668
  - Related: #1299920


author: Nikola Forró <nforro@redhat.com> - 4.0.3-25
changelog:
  - Add patches for CVEs:
    CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,
    CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,
    CVE-2015-8784
  - Related: #1299920


author: Nikola Forró <nforro@redhat.com> - 4.0.3-21
changelog:
  - Remove patches for CVEs:
    CVE-2014-8127, CVE-2014-8129, CVE-2014-8130,
    CVE-2014-9330, CVE-2015-7554, CVE-2015-8665,
    CVE-2015-8683, CVE-2015-8781, CVE-2015-8784
  - Add patches for CVEs:
    CVE-2016-3632, CVE-2016-3945, CVE-2016-3990,
    CVE-2016-3991, CVE-2016-5320
  - Update patches for CVEs:
    CVE-2014-9655, CVE-2015-1547, CVE-2015-8668
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-25
changelog:
  - Add patches for CVEs:
    CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,
    CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,
    CVE-2015-8784
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-26
changelog:
  - Add patches for CVEs:
    CVE-2016-9533, CVE-2016-9534, CVE-2016-9535,
    CVE-2016-9536, CVE-2016-9537, CVE-2016-9540,
    CVE-2016-5652, CVE-2015-8870
  - Resolves: #1412080


author: Nikola Forró <nforro@redhat.com> - 4.0.3-26
changelog:
  - Add patches for CVEs:
    CVE-2016-9533, CVE-2016-9534, CVE-2016-9535,
    CVE-2016-9536, CVE-2016-9537, CVE-2016-9540,
    CVE-2016-5652, CVE-2015-8870
  - Resolves: #1412081


author: Nikola Forró <nforro@redhat.com> - 4.0.3-28
changelog:
  - Fix CVE-2016-3186
  - Resolves: #1319503
  - Fix CVE-2018-7456
  - Resolves: #1561318
  - Fix CVE-2018-8905
  - Resolves: #1574548
  - Fix CVE-2018-10779
  - Resolves: #1598503
  - Fix CVE-2018-10963
  - Resolves: #1598726
  - Fix CVE-2018-12900
  - Resolves: #1600430
  - Fix CVE-2018-17100
  - Resolves: #1632578
  - Fix CVE-2018-17101
  - Resolves: #1632579
  - Fix CVE-2018-18557
  - Resolves: #1647737
  - Fix CVE-2018-18661
  - Resolves: #1647965


author: David Shea <dshea@redhat.com> - 0.4.1-2
changelog:
  - Make whitespace and indentation consistent (iain.lane@canonical.com)
  - Switched to a git-formatted patch for the FSF address to make things easier
    for me to track (dshea)
  - Create local copies of string properties. (dshea)
  - Moved CcTimezoneLocation into its own file. (dshea)
  - Don't close a NULL file pointer. (dshea)
  - Turn on and fix g-ir-scanner warnings. (dshea)
  - Added a .bzrignore file to ignore all the files generated by the build. (dshea)
  - Ignore the INSTALL file (dshea)
  - Added a function to clear the location set for a CcTimezoneMap (dshea)
  - Allow the timezone highlight to be manually set separately from the location. (dshea)


author: David Shea <dshea@redhat.com> - 0.4.1-4
changelog:
  - Merge fixes from lp:timezonemap
  - Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane)
  - Set en_name correctly (iain.lane)
  - Don't call g_type_init() on glib >= 2.35; it's deprecated (iain.lane)


author: David Shea <dshea@redhat.com> - 0.4.2-6
changelog:
  - Updated the time zone map images
  - Updated the city data from geonames.org
  - Fix a memory leak and potential crash with the locations list
  - Cycle through a smaller list of map locations on repeated clicks


author: David Shea <dshea@redhat.com> - 0.4.4-1
changelog:
  - Fixes for LP#1440157:
    Port to libsoup directly for geoname results
    Fix some memory leaks
    Do not reuse GCancellables
  - Upstream merges of SVG update and constrained location cycles


author: Steve Dickson <steved@redhat.com> 0.2.4-0.7
changelog:
  - Backported upstream debugging (bz 1273159)
  - Fixed memory leak in svc_vc_create (bz 1276685)
  - Fixed memory leaks in server-side GSS authenticator (bz 1282488)


author: Steve Dickson <steved@redhat.com> 0.2.4-0.16
changelog:
  - getnetconfig.c: fix a BAD_FREE (CWE-763) (bz 1631609)
  - Fix EOF detection on non-blocking socket (bz 1331554)


author: Simone Caronni <negativo17@gmail.com> - 1.17-16
changelog:
  - Update SPEC, remove obsolete tags, fix formatting.
  - Add patch for pkg config (libtomcrypt.pc).
  - Add correct build requirements for Fedora 19+ and RHEL 7+.


author: Simone Caronni <negativo17@gmail.com> - 1.17-20
changelog:
  - Make doc package noarch.
  - Remove executable bits from LICENSE file and source files.
  - Require isaed library for devel subpackage.
  - Require CVE fixed libtommath library.


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.2-10
changelog:
  - temporarily disable the 'gcj' tests (#869578) -- this is just to (1) allow
    build under f18+ and RHEL-7.0 and (2) don't through out upstream testsuite.
    Added patch must be removed once the 'ecj' utility is fixed
  - libtool-ltdl shouldn't own /usr/share/libtool/ directory
  - move the .so file without version back to devel package (sorry for that)


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.2-14
changelog:
  - allow root to copy files into NFS in libtoolize (#740079)
  - pre-filter sed's input by dd (#636045)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.1.2-2.el7
changelog:
  - Fix crash when loop-deleting non-loop device (#1036076)
  - Fix some thread safety issues (#1036099)
  - Fix lingering mount after CD-ROM drive is ejected (#835120)
  - Fix some uninitializes variables (#1056580)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7.3-2
changelog:
  - Put back the hack to ensure hardening
    Related: rhbz#1477736
  - Fix the relationship between new udisks2 and storaged
    Related: rhbz#1477736


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7.3-3
changelog:
  - Add and use a service for cleaning up mount point directories
    Resolves: rhbz#1384796
  - Do not try to create file watchers for RAIDs without redundancy
    Resolves: rhbz#1400056


author: Vojtech Trefny <vtrefny@redhat.com> - 2.7.3-7
changelog:
  - core: Add Encrypted.Resize method
    Resolves: rhbz#1567992
  - Fix checking for distribution and version in integration tests
    Resolves: rhbz#1508385
  - Do not skip integration tests on CentOS/RHEL
    Resolves: rhbz#1511974
  - Fix failing MDRAID integration test
    Resolves: rhbz#1511986


author: Tomas Bzatek <tbzatek@redhat.com> - 2.7.3-9
changelog:
  - Build udisks2-lsm subpackage (#1672664)
  - Fix sigint source removal on daemon exit (#1643350)
  - CVE-2018-17336: Fix format string vulnerability in udisks_log (#1637427)
  - Describe command options in the udisksctl man page (#1568269)


author: Roozbeh Pournader <roozbeh@gmail.com> - 20080409-1
changelog:
  - Update to upstream 20080409: Unicode 5.1 support
  - Change package versioning scheme
  - Update summary and description
  - Add DistTag
  - Remove copy of GPL from RPM: the only file it applies to is not shipped


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-2
changelog:
  - lu-Fix-rpmdiff-failure.patch [bz#1229359]
  - lu-Fix-buffer-overflow-reported-by-Coverity.patch [bz#1233114]
  - Resolves: bz#1229359
    (Fix multilib support)
  - Resolves: bz#1233114
    (fix off-by-one in dwarf_to_unw_regnum (CVE-2015-3239))


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-5
changelog:
  - Version bumped [bz#1238864]
  - Resolves: bz#1238864
    libunwind: bump version to win against existing branches


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-5.el7_2.2
changelog:
  - Fix update from EPEL version [bz#1289950]
  - Resolves: bz#1289950
    (libunwind in RHEL 7.2 has a smaller release than the last libunwind package in EPEL-7)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-2.el7
changelog:
  - Rebase to 1.2 [bz#1384435]
  - Resolves: bz#1384435
    (Rebase libunwind package (and add for ppc64le): libunwind)


author: Hans de Goede <hdegoede@redhat.com> - 1.0.11-1
changelog:
  - New libusbx package, replacing libusb1
  - Switching to libusbx upstream as that actually does releases (hurray)
  - Drop all patches (all upstream)
  - Drop -static subpackage (there are no packages using it)


author: Hans de Goede <hdegoede@redhat.com> - 1.0.11-2
changelog:
  - Fix URL to actually point to libusbx
  - Improve description to explain the relation between libusbx and libusb
  - Build the examples (to test linking, they are not packaged)


author: Miloslav Trmač <mitr@redhat.com> - 0.58-2
changelog:
  - Always use secure_getenv() or __secure_getenv(), fail build if neither is
    available.  Patch by Viktor Hercinger <vhercing@redhat.com>.


author: Doug Ledford <dledford@redhat.com> - 1.1.0.237-2
changelog:
  - Some of the scripts are missing the execute bit, fix that
  - Clean up the check script to be more appropriate for in-box use
  - Resolves: bz1182413, bz1182417


author: Jarod Wilson <jarod@redhat.com> - 2.0.1-1
changelog:
  - Update to libusnic_verbs v2.0.1 and usnic-tools v1.1.0.0
  - Use actual upstream tarballs
  - Call usnic-tools usnic-tools instead of libusnic_verbs-utils
  - Resolves: bz1281635


author: Jarod Wilson <jarod@redhat.com> - 2.0.1-3
changelog:
  - Add missing Requires: libusnic_verbs to usnic-tools sub-package
  - Bump to usnic-tools v1.1.1.0, drop patch that was merged upstream
  - BuildRequires: libibverbs v1.2.0 or later now, and infinipath-psm-devel
  - Related: bz1096997


author: Jarod Wilson <jarod@redhat.com>
changelog:
  - Drop libusnic_verbs from package, obsoleted by rdma-core
  - Update to usnic-tools v1.1.2.0 upstream release
  - Fix upgrade paths with rdma-core
  - Resolves: rhbz#1507612


author: Hans de Goede <hdegoede@redhat.com> - 0.8.8-1
changelog:
  - New upstream release 0.8.8
  - Add patches from upstream git to improve Pixart JPEG decoding
  - Add patch from upstream git to fix building with latest kernels (rhbz#823863)


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2
changelog:
  - Add a few libv4l2rds patches from upstream, which bring libv4l2rds to its
    final API / ABI, so that apps build against it won't need a rebuild in the
    future


author: Simone Caronni <negativo17@gmail.com> - 0.6-2
changelog:
  - Enable documentation by default.
  - Clean up spec file a bit; remove el5 tags.
  - Let %doc find the proper location for the documentation.


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.1-2
changelog:
  - Resolves rhbz #1253829 - fix 3 CVEs:
   - CVE-2015-5198: libvdpau incorrect check for security transition
   - CVE-2015-5199: libvdpau directory traversal in dlopen
   - CVE-2015-5200: libvdpau vulnerability in trace functionality


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-23
changelog:
  - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
  - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
  - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
  - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-24
changelog:
  - qemu: Prefer nvdimmPath over hugepages for memory-backend-file (rhbz#1724980)
  - docs: snapshot: Encourage people ot use disk 'target' to refer to disks (rhbz#1584682)
  - docs: schemas: Add 'seclabel' for external disk snapshot (rhbz#1584682)
  - tests: domainsnapshotxml2xml: make 'disk-seclabel' test operational (rhbz#1584682)
  - util: storage: Clean up label use in virStorageFileGetMetadataInternal (rhbz#1731329)
  - util: storage: Don't leak metadata on repeated calls of virStorageFileGetMetadata (rhbz#1731329)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-25
changelog:
  - qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1731783)
  - qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1731783)
  - qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1731783)
  - qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1731783)
  - qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1731783)
  - qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1731783)
  - qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1731783)
  - qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1731783)
  - qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1731783)
  - qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1731783)
  - qemu: Fix crash on incoming migration (rhbz#1731783)
  - util: storage: Refactor logic for using virStorageFileGetBackendForSupportCheck (rhbz#1724808)
  - util: storage: Allow checking whether virStorageFileCreate is supported (rhbz#1724808)
  - util: Export virStorageFileSupportsBackingChainTraversal (rhbz#1724808)
  - qemu: Allow skipping some errors in qemuDomainStorageOpenStat (rhbz#1724808)
  - util: storagefile: Don't report errors from virStorageSourceUpdatePhysicalSize (rhbz#1724808)
  - qemu: driver: Improve error suppression in qemuDomainStorageUpdatePhysical (rhbz#1724808)
  - qemu: Allow suppressing errors from qemuStorageLimitsRefresh (rhbz#1724808)
  - qemu: Don't report some ignored errors in qemuDomainGetStatsOneBlockFallback (rhbz#1724808)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-26
changelog:
  - conf: make arg to virDomainNetGetActualVirtPortProfile() a const (rhbz#1502754)
  - qemu: move runtime netdev validation into a separate function (rhbz#1502754)
  - qemu: call common NetDef validation for hotplug and device update (rhbz#1502754)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-27
changelog:
  - conf: utility function to update entry in def->nets array (rhbz#1558934)
  - spec: Fix permissions of /var/run/libvirt/qemu (rhbz#1738693)
  - RHEL: virscsi: Check device type before getting it's /dev node name (rhbz#1754241)
  - RHEL: virscsi: Support TAPEs in virSCSIDeviceGetDevName() (rhbz#1754241)
  - RHEL: virscsi: Introduce and use virSCSIDeviceGetUnprivSGIOSysfsPath() (rhbz#1754241)
  - RHEL: virutil: Accept non-block devices in virGetDeviceID() (rhbz#1754241)
  - virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1759904)
  - test: Introduce virnetdevopenvswitchtest (rhbz#1759904)
  - vircommand: Separate mass FD closing into a function (rhbz#1759904)
  - virCommand: use procfs to learn opened FDs (rhbz#1759904)
  - util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1759904)
  - util: Avoid possible error in virCommandMassClose (rhbz#1759904)
  - RHEL: qemuSetUnprivSGIO: Actually use calculated @sysfs_path to set unpriv_sgio (rhbz#1754241)


