# changelog

author: Chris Leech <cleech@redhat.com> - 6.2.0.873-21
changelog:
  - 1069825
  - boot session handling improvements
  - Fix iscsi-mark-root for changed iscsiadm output
  - Make sure iscsiuio is running for boot session recovery when using the
    bnx2i transport by forcing iscsiuio.service start
  - Make NM dispatch triggered re-check for autostart sessions async
  - Accept exit code 21, no records, from iscsiadm as success in
    iscsi.service


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-22
changelog:
  - 1081798 retry login on host not found error
  - 1111925 ignore iscsiadm return in iscsi.service
  - 1126524 make sure systemd order against remote mounts is correct
  - 963039 add discovery as a valid mode in iscsiadm.8
  - sync with upstream


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-24
changelog:
  - 1040343 segfault from unexpected netlink event during discovery
  - inhibit strict aliasing optimizations in iscsiuio, rpmdiff error


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-29
changelog:
  - 1166713 1187792 add missing ExecStart, only newer systemd lets that be optional for oneshot services


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-32
changelog:
  - 1235684 apply safe_logout setting to flashnode sessions as well
    but only when logging out by session id, not by flashnode index


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-34
changelog:
  - 1322000 ensure TCP abort on session failure to prevent data corruption with link flap
  - 1294964, 1265073, 1213569 iscsiuio update, fix small ARP table issue
  - 1309488 remove broken sysfs cache code to speed up login of many sessions
  - 1330348 sync with upstream Open-iSCSI for minor fixes


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-6
changelog:
  - 1507945 force start iscsiuio for boot session recovery with qedi
  - 1457359 start systemd socket listeners, otherwise if iscsid is started
    directly iscsiuio doesn't activate as expected


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-12
changelog:
  - 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
  - 1624670 Login negotiation failed due to CHAP_N values do not match
            (rec update race condition)


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-17
changelog:
  - 1518367 boot from iSCSI not establishing all sessions persistently
  - 1667965 A manual restart of iscsi.service modifies records node.startup value


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-18
changelog:
  - 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)


author: Than Ngo <than@redhat.com> - 3.2-94
changelog:
  - Resolves: bz#1060370
    update patch to handle all cases by recursing through fmtmsg
    instead of vfmtmsg directly which depends on va_list type.


author: Chris Leech <cleech@redhat.com> - 0.93-4
changelog:
  - set hardened build flag, required for long running processes (isnsd)
  - patch makefile to actually use LDFLAGS


author: Brian C. Lane <bcl@redhat.com> 1.0.9-1
changelog:
  - Add python-isomd5sum package with python bindings
  - Add callback and interrupt support to the python library
  - Add RPM_OPT_FLAGS to CFLAGS and update makefile to use CFLAGS from environment


author: Brian C. Lane <bcl@redhat.com> 1.0.10-1
changelog:
  - Fix for gcc type-punned and sizeof pointer warnings. (bcl)
  - Add exit code 2 for user abort (#907600) (bcl)
  - Cleanup TABs and update Copyrights (bcl)
  - Standardize *FLAGS in Makefile (ryan)


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.3rc1
changelog:
  - Adding iwpmd.conf file to enable changing the size
    of the netlink socket receive buffer
  - Including a fix for failing to send netlink messages


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.3
changelog:
  - Fix for the init script to enable the service to start automatically
    after boot on SLES11 SP4
  - Releasing libiwpm-1.0.3 to be included in OFED-3.18-1


author: Dave Anderson <anderson@redhat.com> - 01.00.00.2113-1
changelog:
  - Copied upstream v01.00.00.2113.tar.gz into ixpdimm_sw-01.00.00.2113.tar.gz
    and did an rhpkg new-sources to replace the mismatched checksum version 
    included in the Fedora src.rpm
  - Resolves: rhbz#1270993


author: Eric Sandeen <sandeen@redhat.com> - 01.00.00.2111-1
changelog:
  - Downgrade to v01.00.00.2113 to satisfy existing RHEL7 deps
  - Add explicit inter-package dependencies
  - Resolves: rhbz#1270993


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-18
changelog:
  - CVE-2011-4516, CVE-2011-4517 jasper: heap buffer overflow flaws
    lead to arbitrary code execution (CERT VU#887409) (#765660)
  - Fixed problems found by static analysis of code (#761440)
  - spec file modernized


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-26.1
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171210)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-26.2
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173568)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173568)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-26.3
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183673)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183681)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171211)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)


author: Josef Ridky <jridky@redhat.com> - 1.900.1-30
changelog:
  - Multiple security fixes (fixed by thoger):
    CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
    CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
    CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
    CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
    CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
    CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
  - Fix implicit declaration warning caused by security fixes above


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-59.1.10.3
changelog:
  - updated to icedtea6 1.10.3
  - http://blog.fuseyism.com/index.php/2011/07/21/icedtea6-1103-released/


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-60.1.10.4
changelog:
  - updated to icedtea6 1.10.4
  - Security fixes
    - S7000600, CVE-2011-3547: InputStream skip() information leak
    - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
    - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
    - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
    - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
    - S7055902, CVE-2011-3521: IIOP deserialization code execution
    - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
    - S7064341, CVE-2011-3389: HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)
    - S7070134, CVE-2011-3558: HotSpot crashes with sigsegv from PorterStemmer
    - S7077466, CVE-2011-3556: RMI DGC server remote code execution
    - S7083012, CVE-2011-3557: RMI registry privileged code execution
    - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
  - Bug fixes
    - RH727195 : Japanese font mappings are broken
  - Backports
    - S6826104, RH730015: Getting a NullPointer exception when clicked on Application & Toolkit Modal dialog
  - Zero/Shark
    - PR690: Shark fails to JIT using hs20.
    - PR696: Zero fails to handle fast_aldc and fast_aldc_w in hs20.


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-60.1.10.4
changelog:
  - omajid have added Patch6 as (probably temporally) solution for S7103224 for buildability on newest glibc libraries.


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.64.1.11.12
changelog:
  - Removed the temporary libffi-compat-5 requirement
  - Updated BR to java6-1.6.0-devel
  - Build with OpenJDK6 specifically


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - removed patch100: 8000791-regression-fix.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - removed useless runtests parts
  - included also java.security.old files
  - added:
     - Patch103 type_hsx23_patch3.patch
     - Patch104 type_hsx23_patch4.patch
   -to fix zero type error
   -aplied everywhere, as should go upstream
  - Resolves: rhbz#1018679


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - removed upstreamed  patch103 type_hsx23_patch3.patch
  - Resolves: rhbz#1053279


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - renmoved upstreamed patch9, 1051245.patch
  - Resolves: rhbz#1099563


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - added upstreamed patch patch9 rh1115580-unsyncHashMap.patch
  - Resolves: rhbz#1115869


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.33-1.13.5.0
changelog:
  - Update to IcedTea 1.13.5
  - Remove upstreamed patches.
  - Regenerate add-final-location-rpaths patch against new release.
  - Change versioning to match java-1.7.0-openjdk so revisions work.
  - Use xz for tarballs to reduce file size.
  - No need to explicitly disable system LCMS any more (bug fixed upstream).
  - Add icedteasnapshot to setup lines so they work with pre-release tarballs.
  - Resolves: rhbz#1148901


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Update to IcedTea 1.13.6
  - Remove upstream patch type_hsx23_patch4.patch.
  - Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
  - Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
  - Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
  - Add US_export_policy.jar and local_policy.jar to packages.
  - Resolves: rhbz#1180292


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0.1
changelog:
  - Update to latest 1.13.6 release candidate tarball
  - Fixes a number of issues found with b34:
  - * OJ51, PR2187: Sync patch for 4873188 with 7 version
  - * OJ52, PR2185: Application of 6786276 introduces compatibility issue
  - * OJ53, PR2181: strict-aliasing warnings issued on PPC32
  - * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
  - * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - Resolves: rhbz#1180292


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - added upstreamed patch patch9 rh1115580-unsyncHashMap.patch
  - Resolves: rhbz#1115870
  - forwardported from rhel 6.6, patch10, add-final-location-rpaths.patch (rh1059925)
   - Work when capabilities are set on the binary
   - Include hardcoded install path as well as $ORIGIN in RPATH
   - Don't Expect LD_LIBRARY_PATH to be set in the launcher


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.33-1.13.5.0
changelog:
  - Update to IcedTea 1.13.5
  - Remove upstreamed patches.
  - Regenerate add-final-location-rpaths patch against new release.
  - Change versioning to match java-1.7.0-openjdk so revisions work.
  - Use xz for tarballs to reduce file size.
  - No need to explicitly disable system LCMS any more (bug fixed upstream).
  - Add icedteasnapshot to setup lines so they work with pre-release tarballs.
  - Resolves: rhbz#1148902


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Update to IcedTea 1.13.6
  - Remove upstream patch type_hsx23_patch4.patch.
  - Regenerate add-final-location-rpaths patch against new release.
  - Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
  - Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
  - Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
  - Add US_export_policy.jar and local_policy.jar to packages.
  - Resolves: rhbz#1180293


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.1
changelog:
  - Update to latest 1.13.6 release candidate tarball
  - Fixes a number of issues found with b34:
  - * OJ51, PR2187: Sync patch for 4873188 with 7 version
  - * OJ52, PR2185: Application of 6786276 introduces compatibility issue
  - * OJ53, PR2181: strict-aliasing warnings issued on PPC32
  - * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
  - * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - Regenerate add-final-location-rpaths patch against new release.
  - Resolves: rhbz#1180293


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.35-1.13.7.0
changelog:
  - Update to IcedTea 1.13.7
  - Regenerate add-final-location-rpaths patch so as to be less disruptive.
  - Resolves: rhbz#1209067


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.36-1.13.8.0
changelog:
  - Update to IcedTea 1.13.8
  - Update no_pr2125.patch to work against new version.
  - Resolves: rhbz#1235153


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.2
changelog:
  - Update with new IcedTea & b37 tarballs, including Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271929


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.3
changelog:
  - Update with new IcedTea & b37 tarballs, including more Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271929


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.4
changelog:
  - Update with new IcedTea & b37 tarballs, including fix for appletviewer regression.
  - Resolves: rhbz#1271929


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.35-1.13.7.0
changelog:
  - Update to IcedTea 1.13.7
  - Regenerate add-final-location-rpaths patch so as to be less disruptive.
  - Add ExcludeArch directive for RH1209326
  - Resolves: rhbz#1209068


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.36-1.13.8.0
changelog:
  - Update to IcedTea 1.13.8
  - Update no_pr2125.patch to work against new version.
  - Resolves: rhbz#1235154


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.2
changelog:
  - Update with newer tarball, including 6763122 fix for TCK regression.
  - Use release + 1 to avoid having a lower version than the 6.7 version.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.3
changelog:
  - Update with new IcedTea & b37 tarballs, including Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.4
changelog:
  - Update with new IcedTea & b37 tarballs, including more Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.5
changelog:
  - Update with new IcedTea & b37 tarballs, including fix for appletviewer regression.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.0
changelog:
  - Update to IcedTea 1.13.12 & OpenJDK 6 b40.
  - Separate SystemTap option from bootstrap options.
  - Depend on mailcap for /etc/mime.types (PR2800)
  - Use configure macro and disable long-running JTreg & SystemTap tests from make check
  - Remove redundant patch-ecj target invocation for bootstrap build.
  - Add check section to run the new tests introduced in 1.13.12.
  - Fix context for rpath patch following PR3140.
  - Add RHEL version of b40 tarball.
  - Require mailcap at build time as well, so configure finds /etc/mime.types
  - Resolves: rhbz#1350046


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.1
changelog:
  - Separate bootstrap option as it should not be tied to the JDK used.
  - Enable bootstrapping on JIT architectures going forward.
  - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
  - Resolves: rhbz#1350046


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.3
changelog:
  - Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
  - Resolves: rhbz#1350046


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.1
changelog:
  - Update to IcedTea 1.13.12 & OpenJDK 6 b40.
  - Separate SystemTap option from bootstrap options.
  - Depend on mailcap for /etc/mime.types (PR2800)
  - Use configure macro and disable long-running JTreg & SystemTap tests from make check
  - Remove redundant patch-ecj target invocation for bootstrap build.
  - Add check section to run the new tests introduced in 1.13.12.
  - Fix context for rpath patch following PR3140.
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.2
changelog:
  - Require mailcap at build time as well, so configure finds /etc/mime.types
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.3
changelog:
  - Separate bootstrap option as it should not be tied to the JDK used.
  - Enable bootstrapping on JIT architectures going forward.
  - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.5
changelog:
  - Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.8
changelog:
  - Set install directories in configure so that @prefix@ is substituted correctly in tapset
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.9
changelog:
  - Require a JDK with RH1334465/PR2956 fixed and turn off bootstrapping for Zero architectures.
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Update to IcedTea 1.13.13 & OpenJDK 6 b41.
  - Fix context for rpath patch following PR3213.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.91-2.6.2.1
changelog:
  - Bump to 2.6.2 and u91b00.
  - Disable system LCMS 2 for now until security of it can be verified.
  - Drop patches for PR2560/RH1245855 as now applied upstream.
  - Sync minor changes from RHEL 6 spec file.
  - Resolves: rhbz#1271923


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.0
changelog:
  - Bump to 2.6.4 and u95b00.
  - Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
  - Drop 8072932or8074489 patch as applied upstream in u91b01.
  - Add MD5 checksums for last two version of the java.security file.
  - Resolves: rhbz#1295768


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.0
changelog:
  - Bump to 2.6.5 and u99b00.
  - Correct check for fsg.sh in tarball creation script
  - Resolves: rhbz#1320658


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.101-2.6.6.0
changelog:
  - Bump to 2.6.6 and u101b00.
  - Drop AArch64 patch (PR2914) included in 2.6.6
  - Drop a leading zero from the priority as the update version is now three digits
  - Update PR2809 patch to apply against 2.6.6.
  - Resolves: rhbz#1325427


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.0
changelog:
  - Bump to 2.6.7 and u111b00.
  - Update SystemTap bundle with fix for PR3091/RH1204159
  - Drop patches (PR2938 (ttable_match_7) and PR2939 (fontpath)) applied upstream.
  - Resolves: rhbz#1350041


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.1
changelog:
  - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
  - Resolves: rhbz#1350041


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.1
changelog:
  - Bump to 2.6.7 and u111b00.
  - Update SystemTap bundle with fix for PR3091/RH1204159
  - Drop patches (PR2938, PR2939, PR3012, PR3013 and PR1437) applied upstream.
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.2
changelog:
  - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.3
changelog:
  - Add additional changes to 8162344 to fix issues which only show up on a full build.
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.4
changelog:
  - Require a version of java-1.7.0-openjdk-devel with a working jar uf
  - Use readlink rather than a wildcard to resolve the system JDK directory
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.5
changelog:
  - Change to disable RC4 did not add MD5 checksum of previous java.security file from 2016/01
  - Resolves: rhbz#1350042


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.111-2.6.7.6
changelog:
  - declared check_sum_presented_in_spec and used in prep and check
  - it is checking that latest packed java.security is mentioned in listing
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.7
changelog:
  - Rebuild java-1.7.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372747)
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.0
changelog:
  - Bump to 2.6.8 and u121b00.
  - Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
  - Update md5sum list with checksum for the new java.security file.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.0
changelog:
  - Bump to 2.6.9 and u131b00.
  - Remove patch application debris in fsg.sh.
  - Re-generate PR2809 and RH1022017 against 2.6.9.
  - Update md5sum list with checksum for the new java.security file.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.0
changelog:
  - Bump to 2.6.10 and u141b00.
  - Adjust RH1022017 following application of 8173783
  - Add more detailed output to fsg.sh and generate_source_tarball.sh.
  - Update md5sum list with checksum for the new java.security file.
  - Bump to u141b01 to include S8043723 fix for s390.
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.1
changelog:
  - Bump to 2.6.9 and u131b00.
  - Remove patch application debris in fsg.sh.
  - Re-generate PR2809 and RH1022017 against 2.6.9.
  - Update md5sum list with checksum for the new java.security file.
  - Add blacklisted.certs to installation file list.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.2
changelog:
  - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  - Update jstack tapset to handle AArch64
  - Handle unsupported architectures by calling the error function rather than a parse failure
  - ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
  - Resolves: rhbz#1373986


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.3
changelog:
  - Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
  - Apply backports before local RPM fixes so they will be the same as when applied upstream
  - Adjust RH1022017 following application of 8173783
  - Resolves: rhbz#1422738


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.1
changelog:
  - Bump to 2.6.10 and u141b00.
  - Add more detailed output to fsg.sh and generate_source_tarball.sh.
  - Update md5sum list with checksum for the new java.security file.
  - Drop 8173783 backport which is now applied upstream.
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.3
changelog:
  - Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
  - Resolves: rhbz#1273760


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.4
changelog:
  - Fix merge error with "native2ascii changes file permissions of input file"
  - Resolves: rhbz#1446700


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.141-2.6.10.5
changelog:
  - make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
  - aligned with this change, applied repackReproduciblePolycies.sh
  - 1183793 is missing blocker
  - Resolves: rhbz#1448880


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.151-2.6.11.1
changelog:
  - Bump to 2.6.11 and u151b00.
  - Update java-access-bridge-security.patch to apply against 2.6.11.
  - Drop 7177216 merge fix which is applied upstream.
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.1
changelog:
  - Fix missing return statement in hotspot/src/cpu/aarch64/vm/c1_LIRAssembler_aarch64.cpp.
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.1
changelog:
  - Fix missing return statement in hotspot/src/os_cpu/linux_aarch64/vm/os_linux_aarch64.cpp
  - Temporarily add -Wno-error=return-type so we can catch them all.
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.1
changelog:
  - Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
  - Fix missing return statement in hotspot/src/cpu/aarch64/vm/vm_version_aarch64.cpp
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.1
changelog:
  - Update to new tarball with AArch64 return value fixes, dropping local patch.
  - Drop -Wno-error=return-type now they appear to be fixed.
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.1
changelog:
  - Spoke too soon... fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.2
changelog:
  - Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.0
changelog:
  - Bump to 2.6.14 and u181b00.
  - Drop 8197981 Zero 32-bit patch now applied upstream.
  - Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.1
changelog:
  - Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.3
changelog:
  - Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
  - Resolves: rhbz#1559766


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.181-2.6.14.5
changelog:
  - added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
  - Resolves: rhbz#1559766


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.181-2.6.14.10
changelog:
  - jsa files changed to 444 to pass rpm verification
  - Add reg-ex for filtering private libraries' provides/requires.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.10
changelog:
  - Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.191-2.6.15.0
changelog:
  - Bump to 2.6.15 and u191b00.
  - Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.201-2.6.16.1
changelog:
  - Bump to 2.6.16 and u201b00.
  - Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.201-2.6.17pre01.0
changelog:
  - Bump to 2.6.17pre01.
  - Add support for icedtea_snapshot so we can build pre-releases.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.211-2.6.17.0
changelog:
  - Bump to 2.6.17.
  - Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
  - Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
  - Resolves: rhbz#1661577


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.7.0.211-2.6.17.1
changelog:
  - Produce debug symbols for libpulse-java.so
  - Set IT_CFLAGS=-g so that debug symbols for the pulse audio
  - native library are being produced. This is needed to fix
  - rpmdiff errors of missing .debug_info in pulse-java.so.debug.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.211-2.6.17.2
changelog:
  - Synchronise Requires with java-1.8.0-openjdk
  - Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
  - Add libjavagtk.so and libmawt.so to _privatelibs
  - Remove duplicate fontconfig build requirement
  - Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
  - Add _isa to NSS requirements
  - Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
  - Resolves: rhbz#1608957


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.231-2.6.19.0
changelog:
  - Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
  - Fix fsg.sh to fail if patching fails.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.241-2.6.20.0
changelog:
  - Bump to 2.6.20 and OpenJDK 7u241-b01.
  - Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.241-2.6.20.1
changelog:
  - Bump to 2.6.20 and OpenJDK 7u241-b01.
  - Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Drop JDK-8226318/RH1738637 which is now included upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.261-2.6.22.1
changelog:
  - Add release notes from IcedTea.
  - Mark license files with appropriate macro.
  - Resolves: rhbz#1810557


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.2.fel7
changelog:
  - added and applied patch121, FixPPC64StackOverflow.patch
  - all redundant ppc64 strings replaced by power64 macro
  - Resolves:rhbz#1018680


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.3.fel7
changelog:
  - just bumped release, need to confirm, that   patch121, FixPPC64StackOverflow.patch
    really works
  - Resolves:rhbz#1018680


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.4.fel7
changelog:
  - Removed obsoletes for java-1.6.0-openjdk* ,  until decided its presence in el7
  - Resolves:rhbz#1018680


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.4.0.el7
changelog:
  - updated to security icedtea 2.4.4
   - icedtea_version set to 2.4.4
   - updatever bumped to       51
   - release reset to 0
  - sync with fedora
   - added and applied patch411 1029588.patch (rh 1029588)
   - added aand applied patch410, 1015432 (rh 1015432)
   - and so removed patch121 FixPPC64StackOverflow.patch
  - added patch412 zero-x32.diff to try to fix zero builds build
  - Resolves: rhbz#1053280


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.5.0.el7
changelog:
  - updated to icedtea 2.4.5 + sync with f21
   - http://blog.fuseyism.com/index.php/2014/01/29/icedtea-2-4-5-released/
  - removed buildRequires: pulseaudio >= 0.9.11, as not neccessary
   -  but kept libs-devel)
  - removed upstreamed or unwonted patches (thanx to gnu_andrew to pointing them out)
   - patch410 1015432.patch (upstreamed)
   - patch411 1029588.patch
   - patch412 zero-x32.diff
   - patch104 java-1.7.0-ppc-zero-jdk.patch
   - patch105 java-1.7.0-ppc-zero-hotspot.patch
  - patch402 gstackbounds.patch and patch403 PStack-808293.patch applied always
   (again thanx to gnu_andrew)
  - merged other gnu_andrew's changes
   - FT2_CFLAGS and FT2_LIBS hardoced values replaced by correct pkg-config calls 
   - buildver bumbed to 31
  - added build requires  nss-devel
  - removed build requires mercurial
  - added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS into make call
  - Related: rhbz1038092


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.55-2.4.7.0.el7
changelog:
  - bumped to future icedtea-forest 2.4.7
  - updatever set to 55, buildver se to 13, release reset to 0
  - removed upstreamed patch402 gstackbounds.patch
  - removed Requires: rhino, BuildRequires is enough
  - ppc64 repalced by power64 macro
  - patch111 applied as dry-run (6.6 forward port)
  - nss enabled, but notused as default (6.6 forward port)
  - Resolves: rhbz#1099565


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1.7.0.55-2.4.7.2
changelog:
  - Remove NSS patches. Issues with PKCS11 provider mean it shouldn't be enabled.
  - Always setup nss.cfg and depend on nss-devel at build-time to do so.
  - This allows users who wish to use PKCS11+NSS to just add it to java.security.
  - Patches to PKCS11 provider will be included upstream in 2.4.8 (ETA July 2014)
  - Resolves: rhbz#1099565


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115876


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.65-2.5.3.1
changelog:
  - Bump to 2.5.3 for latest security fixes.
  - Remove obsolete patches.
  - Add hsbootstrap option to pre-build HotSpot when required.
  - Resolves: rhbz#1148893


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.0
changelog:
  - Bump to 2.5.4 using OpenJDK 7u75 b13.
  - Bump AArch64 port to 2.6.0pre17.
  - Remove AArch64-specific patches, following rebase on 2.6.x.
  - Fix abrt_friendly_hs_log_jdk7.patch to apply again.
  - Resolves: rhbz#1180297


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.1
changelog:
  - Fix elliptic curve list as part of fsg.sh
  - Enable abrt_friendly_hs_log_jdk7.patch on all archs
  - Resolves: rhbz#1180297


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.5
changelog:
  - Fix hsbootstrap option on ppc64le where JDK_TO_BUILD_WITH is changed.
  - Print uname to feedback to upstream OpenJDK.
  - Resolves: rhbz#1191652


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.5.0
changelog:
  - Bump to 2.5.5 using OpenJDK 7u79 b14.
  - Update OpenJDK tarball creation comments
  - Remove test case for RH1191652 now fix has been verified.
  - Drop AArch64 version of RH1191652 HotSpot patch as included upstream.
  - Resolves: rhbz#1209072


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Bump to 2.6.0 and u80b32.
  - Drop upstreamed patches and separate AArch64 HotSpot.
  - Add dependencies on pcsc-lite-devel (PR2496) and lksctp-tools-devel (PR2446)
  - Only run -Xshare:dump on JIT archs other than power64 as port lacks support
  - Update remove-intree-libraries script to cover LCMS and PCSC headers and SunEC.
  - Resolves: rhbz#1235158


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Add GConf2-devel dependency for native proxy fallback support.
  - Remove libxslt dependency pulled in from IcedTea builds.
  - Reduce redhat-lsb dependency to redhat-lsb-core (lsb_release)
  - Resolves: rhbz#1235158


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.1
changelog:
  - Pass SYSTEM_GSETTINGS="true" to the OpenJDK build to explicitly enable the GSettings API.
  - Resolves: rhbz#1235158


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.91-2.6.2.0
changelog:
  - Bump to 2.6.2 and u91b00.
  - Disable system LCMS 2 for now until security of it can be verified.
  - Sync minor changes from RHEL 6 spec file.
  - Resolves: rhbz#1271921


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-0.b14
changelog:
  - Add additional fix to Zero patch to properly handle result on 64-bit big-endian
  - Resolves: rhbz#1325422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-0.b14
changelog:
  - Update to u92b14.
  - Remove upstreamed patches for AArch64 byte behaviour and template issue.
  - Remove upstreamed patches for Zero build failures 8087120 & 8143855.
  - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112.
  - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell.
  - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues.
  - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92
  - Replace PR2974/RH1343832 patch with u92 version used in IcedTea 3.
  - Resolves: rhbz#1350036


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-0.b13
changelog:
  - Update to u101b13.
  - Backport REPOS option in generate_source_tarball.sh
  - Drop a leading zero from the priority as the update version is now three digits
  - Resolves: rhbz#1350036


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13
changelog:
  - Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
  - Resolves: rhbz#1350036


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13
changelog:
  - Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
  - Resolves: rhbz#1350036


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13
changelog:
  - Add upstream patch for S8157306, documented & applied on all archs with conditional in patch
  - Resolves: rhbz#1365620


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-5.b15
changelog:
  - Update to aarch64-jdk8u101-b15.
  - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching.
  - Drop additional hunk for 8147771 which is now applied upstream.
  - Resolves: rhbz#1368440


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14
changelog:
  - Update to aarch64-jdk8u102-b14.
  - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102.
  - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31.
  - Move 8158260 to 8u112 section following its backport to 8u.
  - Resolves: rhbz#1368440


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14
changelog:
  - declared check_sum_presented_in_spec and used in prep and check
  - it is checking that latest packed java.security is mentioned in listing
  - Resolves: rhbz#1368440


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14
changelog:
  - Update to aarch64-jdk8u111-b14.
  - Add latest md5sum for java.security file due to jar signing property addition.
  - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111.
  - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b15
changelog:
  - Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591.
  - Swap java.security md5sum for 7.2.z version with ECC patch.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15
changelog:
  - Update to aarch64-jdk8u101-b15.
  - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching.
  - Drop additional hunk for 8147771 which is now applied upstream.
  - Resolves: rhbz#1359857


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14
changelog:
  - Update to aarch64-jdk8u102-b14.
  - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102.
  - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31.
  - Move 8158260 to 8u112 section following its backport to 8u.
  - Resolves: rhbz#1359857


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14
changelog:
  - @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005)
  - Resolves: rhbz#1295754


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14
changelog:
  - declared check_sum_presented_in_spec and used in prep and check
  - it is checking that latest packed java.security is mentioned in listing
  - Resolves: rhbz#1295754


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14
changelog:
  - Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750)
  - Resolves: rhbz#1359857


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14
changelog:
  - Runtime native library requirements need to match the architecture of the JDK
  - Resolves: rhbz#1375224


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14
changelog:
  - Update to aarch64-jdk8u111-b14.
  - Add latest md5sum for java.security file due to jar signing property addition.
  - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111.
  - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy.
  - Resolves: rhbz#1350037


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15
changelog:
  - Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it.
  - Resolves: rhbz#1382736


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18
changelog:
  - Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes
  - Replace our correct version of 8159244 with the amendment to the 8u version from 8160122.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18
changelog:
  - Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-0.b16
changelog:
  - Update to aarch64-jdk8u112-b16.
  - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
  - Re-generate size_t and key size (RH1163501) patches against u112.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-0.b13
changelog:
  - Update to aarch64-jdk8u121-b13.
  - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted)
  - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13
changelog:
  - Add backports from 8u131 and 8u152 ahead of April CPU.
  - Apply backports before local RPM fixes so they will be the same as when applied upstream
  - Adjust RH1022017 following application of 8173783
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11
changelog:
  - Update to aarch64-jdk8u131-b11.
  - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
  - Update generate_source_tarball.sh to remove patch remnants.
  - Cleanup tarball creation documentation to avoid duplication.
  - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing)
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b13
changelog:
  - Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command"
  - Resolves: rhbz#1442162


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b12
changelog:
  - Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix
  - Resolves: rhbz#1449258


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14
changelog:
  - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  - Update jstack tapset to handle AArch64
  - Resolves: rhbz#1373848


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14
changelog:
  - Move unprocessed nss.cfg to nss.cfg.in and add missing substitution to create nss.cfg for install
  - Resolves: rhbz#1429774


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11
changelog:
  - Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11.
  - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
  - Update generate_source_tarball.sh to remove patch remnants.
  - Cleanup Shenandoah tarball referencing and document how to create it.
  - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing)
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11
changelog:
  - Update tapset tarball to include the better error handling in PR3348
  - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3
  - Resolves: rhbz#1438514


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11
changelog:
  - Rename SystemTap tapset tarball to avoid conflicts with previous version.
  - Resolves: rhbz#1438514


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12
changelog:
  - Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix
  - Resolves: rhbz#1443417


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b12
changelog:
  - Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-0.b15
changelog:
  - Update to aarch64-jdk8u141-b15.
  - Update location of OpenJDK system library source code in remove-intree-libraries.sh
  - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
  - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
  - Add MD5 checksum for the new java.security file (SHA1 disabled for server-side certificates in jdkCA)
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b16
changelog:
  - Update to aarch64-jdk8u141-b16.
  - Revert change to remove-intree-libraries.sh following backout of 8173207
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12
changelog:
  - Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
  - Resolves: rhbz#1319875


author: Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12
changelog:
  - Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
  - Resolves: rhbz#1448880


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12
changelog:
  - make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
  - 1183793 is missing blocker
  - Resolves: rhbz#1448880


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15
changelog:
  - Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
  - Update location of OpenJDK system library source code in remove-intree-libraries.sh
  - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
  - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16
changelog:
  - Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
  - Revert change to remove-intree-libraries.sh following backout of 8173207
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-0.b01
changelog:
  - Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
  - Exclude 8175887 from Shenandoah builds as it has been included in that repo.
  - Resolves: rhbz#1481947


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12.
  - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
  - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028).
  - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support).
  - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output)
  - Update RH1163501 to accomodate 8181048 (crypto refactoring)
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
  - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162.
  - Resolves: rhbz#1499207


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - repack policies adapted to new counts and paths
  - note that also c-j-c is needed to make this apply in next update
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
  - Resolves: rhbz#1499207


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-5.b12
changelog:
  - Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
  - Resolves: rhbz#1515212


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-0.b12
changelog:
  - Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
  - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
    8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
    8175887 and 8180048 (RH1449870).(mbalao)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-0.b12
changelog:
  - Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-0.b12
changelog:
  - Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-0.b13
changelog:
  - Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13
changelog:
  - Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13.
  - Drop upstreamed patch for 8075484.
  - Resolves: rhbz#1508017


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16
changelog:
  - Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16.
  - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC)
  - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
  - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226,
  -    8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and
  -    8164293/PR3412/RH1459641
  - Resolves: rhbz#1508017


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16
changelog:
  - Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version.
  - Resolves: rhbz#1508017


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16
changelog:
  - Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7)
  - Resolves: rhbz#1512647


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12
changelog:
  - Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
  - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
    8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
    8175887 and 8180048 (RH1449870).(mbalao)
  - drop more of usptreamed patches 565,566,567,568
    ( 8184673-pr3475-rh1487266.patch  8191840-pr3503-rh1512647.patch  8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12
changelog:
  - Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
  - Remove upstreamed patches for 8181055/PR3394/RH1448880,
  -  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
  -  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
  -  8181810/PR3466/RH1498319.
  - Resolves: rhbz#1559766


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-1.b10
changelog:
  - Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10
changelog:
  - Cleanup from previous commit.
  - Remove unused upstream patch 8167200.hotspotAarch64.patch.
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10
changelog:
  - Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10
changelog:
  - Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-7.b10
changelog:
  - Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11
changelog:
  - Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
  - Resolves: rhbz#1593737


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-0.b03
changelog:
  - Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
  - Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b04
changelog:
  - Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04
changelog:
  - Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13
changelog:
  - Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
  - Remove 8187577/PR3578 now applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0
changelog:
  - Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
  - Update to aarch64-shenandoah-jdk8u181-b15.
  - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
  - Move buildver to where it should be in the OpenJDK version.
  - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
  - Update pr3539-rh1548475.patch to apply after 8187045.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0
changelog:
  - Update to aarch64-shenandoah-jdk8u181-b16.
  - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b10.
  - Drop 8146115/PR3508/RH1463098 applied upstream.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0
changelog:
  - Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
  - Update to aarch64-shenandoah-jdk8u181-b15.
  - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
  - Move buildver to where it should be in the OpenJDK version.
  - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
  - Update pr3539-rh1548475.patch to apply after 8187045.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0
changelog:
  - Update to aarch64-shenandoah-jdk8u181-b16.
  - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream.
  - Resolves: rhbz#1633822


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-0
changelog:
  - Note why PR1834/RH1022017 is not suitable to go upstream in its current form.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-0
changelog:
  - Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b13.
  - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
  - Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b14.
  - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1
changelog:
  - Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-0
changelog:
  - Update to aarch64-shenandoah-jdk8u192-b12.
  - Remove patches included upstream
    - JDK-8031668/PR2842
    - JDK-8148351/PR2842
    - JDK-6260348/PR3066
    - JDK-8061305/PR3335/RH1423421
    - JDK-8188030/PR3459/RH1484079
    - JDK-8205104/PR3539/RH1548475
    - JDK-8185723/PR3553
    - JDK-8186461/PR3557
    - JDK-8201509/PR3579
    - JDK-8075942/PR3602
    - JDK-8203182/PR3603
    - JDK-8206406/PR3610/RH1597825
    - JDK-8206425
    - JDK-8036003
    - JDK-8201495/PR2415
    - JDK-8150954/PR2866/RH1176206
  - Re-generate patches (mostly due to upstream build changes)
    - JDK-8073139/PR1758/RH1191652
    - JDK-8143245/PR3548 (due to JDK-8202600)
    - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
    - JDK-8199936/PR3533
    - JDK-8199936/PR3591
    - JDK-8207057/PR3613
    - JDK-8210761/RH1632174 (due to JDK-8207402)
    - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
    - PR3593 (due to JDK-8081202)
    - RH1566890/CVE-2018-3639 (due to JDK-8189170)
    - RH1649664 (due to JDK-8196516)
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-0
changelog:
  - Add port of 8189170 to AArch64 which is missing from upstream 8u version.
  - Resolves: rhbz#1661577


author: Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2
changelog:
  - Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
  - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-3
changelog:
  - Update patch for RH1566890.
    - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
      rh1566890-CVE_2018_3639-speculative_store_bypass.patch
    - Added dependent patch,
      rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-0
changelog:
  - Update to aarch64-shenandoah-jdk8u201-b13.
  - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream.
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u202-b08.
  - Remove patches included upstream
    - JDK-8211387/PR3559
    - JDK-8207057/PR3613
    - JDK-8165852/PR3468
    - JDK-8073139/PR1758/RH1191652
    - JDK-8044235
    - JDK-8172850/RH1640127
    - JDK-8209639/RH1640127
    - JDK-8131048/PR3574/RH1498936
    - JDK-8164920/PR3574/RH1498936
  - Re-generate patches
    - JDK-8210647/RH1632174
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-0
changelog:
  - Update to aarch64-shenandoah-jdk8u212-b02.
  - Remove patches included upstream
    - JDK-8197429/PR3546/RH153662{2,3}
    - JDK-8184309/PR3596
    - JDK-8210647/RH1632174
  - Re-generate patches
    - JDK-8203030
  - Add casts to resolve s390 ambiguity in calls to log2_intptr
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1
changelog:
  - Update to aarch64-shenandoah-jdk8u212-b02.
  - Remove patches included upstream
    - JDK-8197429/PR3546/RH153662{2,3}
    - JDK-8184309/PR3596
    - JDK-8210647/RH1632174
    - JDK-8029661/PR3642/RH1477159
  - Re-generate patches
    - JDK-8203030
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1
changelog:
  - Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions
  - Yet another cast to resolve s390 ambiguity in call to log2_intptr
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b01.
  - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575.
  - Drop 8171000, 8197546 & PR3634 as applied upstream.
  - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b02.
  - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100).
  - Resolves: rhbz#1705328


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b03-0.1.ea
changelog:
  - Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
  - Don't perform a bootcycle build for the debug variant build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-0.1.ea
changelog:
  - Provide Javadoc debug subpackages for now, but populate them from the normal build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-0.1.ea
changelog:
  - Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b04.
  - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b08.
  - Adjust PR3083/RH134640 to apply after JDK-8182999
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b04.
  - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b01.
  - Switch to EA mode.
  - Drop JDK-8210761/RH1632174 as now upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05.
  - Drop upstreamed patch JDK-8141570/PR3548.
  - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
  - Update version logic to handle -shenandoah* tag suffix.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b09.
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1
changelog:
  - Remove CVE-2018-3639 mitigation due to performance regression and
      OpenJDK position on speculative execution vulnerabilities.
      https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea
changelog:
  - Revert SSBD removal for now, until appropriate messaging has been decided.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b05.
  - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
  - Revise b05 snapshot to include JDK-8236178.
  - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b07.
  - Switch to GA mode for final release.
  - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3
changelog:
  - Mark net.properties as a config file (based on Fedora patch by James Cassell)
  - Resolves: rhbz#1710928


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4
changelog:
  - Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve.
  - Regenerate source tarball using the updated script and add the -'4curve' suffix.
  - Resolves: rhbz#1746874


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5
changelog:
  - Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints.
  - Resolves: rhbz#1785753


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26
changelog:
  - Add patches for PPC zero build.
  - Fixes stack overflow problem. See RHBZ#1015432.
  - Fixes missing memory barrier in Atomic::xchg*
  - Fixes missing PPC32/PPC64 defines for Zero builds on power.
  - Resolves: rhbz#1125260


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26
changelog:
  - Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in
    the bytecode verifier on ppc/ppc64.
  - Resolves: rhbz#1125260


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26
changelog:
  - Remove LIBDIR and funny definition of _libdir.
  - Fix rpmlint warnings about macros in comments.
  - Resolves: rhbz#1125260


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17
changelog:
  - added patch12,removeSunEcProvider-RH1154143
  - xdump excluded from ppc64le (rh1156151)
  - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com)
  - Resolves: rhbz#1125260


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u252-b01.
  - Switch to EA mode.
  - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change
  - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u252-b03.
  - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea
changelog:
  - Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds
  - Sync stapinstall handling with RHEL 8 implementation
  - Need to support noarch for creating source RPMs for non-scratch builds.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b07.
  - Require tzdata 2020a so system tzdata matches resource updates in b07
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b09.
  - With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u262 release.
  - Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
  - Split JDK-8042159 patch into per-repo patches as upstream.
  - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea
changelog:
  - With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea
changelog:
  - Restructure the build so a minimal initial build is then used for the final build (with docs)
  - This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  - Introduce jfr_arches for architectures which support JFR.
  - Introduce sa_arches for architectures which support the serviceability agent.
  - Introduce share_arches for architectures which support class sharing (-Xshare:dump).
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u262 release.
  - Split JDK-8042159 patch into per-repo patches as upstream.
  - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0
changelog:
  - Update to aarch64-shenandoah-jdk8u265-b01.
  - Update release notes for 8u265 release.
  - Resolves: rhbz#1860456


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1
changelog:
  - ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs
  - Resolves: rhbz#1861222


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b05.
  - Fix context in JDK-8186464/RH1433262 patch, following JDK-8078334 @randomness tag addition.
  - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
  - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea
changelog:
  - Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b06.
  - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea
changelog:
  - Include a test in the RPM to check the build has the correct vendor information.
  - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
  - Improve quoting of vendor name
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u272 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - Delay tzdata 2020b dependency until tzdata update has shipped.
  - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
  - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1
changelog:
  - Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0
changelog:
  - Update to aarch64-shenandoah-jdk8u275-b01 (GA)
  - Update release notes for 8u275.
  - Resolves: rhbz#1895062


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b01 (EA)
  - Update release notes for 8u282-b01.
  - Switch to EA mode.
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - Remove PR3601, covered upstream by JDK-8062808.
  - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727.
  - Resolves: rhbz#1903903


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea
changelog:
  - Added patch600: rh1750419-redhat_alt_java.patch
  - Replaced alt-java placeholder with real patched alt-java
  - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
  - Both surpassed by new patch
  - Resolves: rhbz#1901690


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea
changelog:
  - Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
  - Resolves: rhbz#1901690


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b02 (EA)
  - Update release notes for 8u282-b02.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b03 (EA)
  - Update release notes for 8u282-b03.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b04 (EA)
  - Update release notes for 8u282-b04.
  - Remove upstreamed patch PR3519
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b05 (EA)
  - Update release notes for 8u282-b05 and make some minor corrections.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b06 (EA)
  - Update release notes for 8u282-b06.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b07 (EA)
  - Update release notes for 8u282-b07.
  - Fix placement issue in release notes, caught by comparing with vanilla version.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b08 (GA)
  - Update release notes for 8u282-b08.
  - This tarball is embargoed until 2021-01-19 @ 1pm PT.
  - Resolves: rhbz#1908963


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b03 (EA)
  - Update release notes for 8u292-b03.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b04 (EA)
  - Update release notes for 8u292-b04.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b05 (EA)
  - Update release notes for 8u292-b05.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea
changelog:
  - Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
  - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
  - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
  - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
  - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b06 (EA)
  - Update release notes for 8u292-b06.
  - Require tzdata 2020f due to JDK-8259048
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b07 (EA)
  - Update release notes for 8u292-b07.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b08 (EA)
  - Update release notes for 8u292-b08.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b09 (EA)
  - Update release notes for 8u292-b09.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b10 (GA)
  - Update release notes for 8u292-b10.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b01 (EA)
  - Update release notes for 8u302-b01.
  - Switch to EA mode.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b02 (EA)
  - Update release notes for 8u302-b02.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b03 (EA)
  - Update release notes for 8u302-b03.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
  - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b04 (EA)
  - Update release notes for 8u302-b04.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b05 (EA)
  - Update release notes for 8u302-b05.
  - Remove JDK-8266929/RH1960024 as now upstream.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b06 (EA)
  - Update release notes for 8u302-b06.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b07 (EA)
  - Update release notes for 8u302-b07.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b08 (EA)
  - Update release notes for 8u302-b08.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-07-20 @ 1pm PT.
  - Resolves: rhbz#1972395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Fix configure script to use ppc64le, not ppc64.
  - Add ppc64le support to LIBJSOUND_CFLAGS.
  - Add a jvm.cfg for ppc64le
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Print contents of spec.gmk to see what is being passed to the HotSpot build.
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build.
  - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7.
  - Print contents of hotspot-spec.gmk
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build.
  - Add property test case from java-1.7.0-openjdk build.
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13
changelog:
  - Adjust ppc64le HotSpot patch for OpenJDK 8.
  - Enable AArch64 configure/JDK patch on all archs to minimise patching issues.
  - Adjust ppc64le patches to apply after the enableAArch64 patch.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b01 (EA)
  - Update release notes for 8u312-b01.
  - Switch to EA mode.
  - Remove "-clean" suffix as no 8u312 builds are unclean.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b02 (EA)
  - Update release notes for 8u312-b02.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b03 (EA)
  - Update release notes for 8u312-b03.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b04 (EA)
  - Update release notes for 8u312-b04.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05 (EA)
  - Update release notes for 8u312-b05.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
  - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
  - Resolves: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.ea
changelog:
  - Add patch to improve performance of common separators in Scanner.useLocale
  - Move alt-java patch to correct section.
  - Resolves: rhbz#1862929


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b07 (EA)
  - Update release notes for 8u312-b07.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2011826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
  - Update release notes for 8u322-b04.
  - Require tzdata 2021c as of JDK-8274407.
  - Switch to EA mode.
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Related: rhbz#2022809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b06 (EA)
  - Update release notes for 8u322-b06.
  - Switch to GA mode for final release.
  - Require tzdata 2021e as of JDK-8275766.
  - Update tarball generation script to use git following shenandoah-jdk8u's move to github
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u332-b01 (EA)
  - Update release notes for shenandoah-8u332-b01.
  - Switch to EA mode.
  - Related: rhbz#2047529


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u332-b06 (EA)
  - Update release notes for shenandoah-8u332-b06.
  - Resolves: rhbz#2047529


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1
changelog:
  - Update to shenandoah-jdk8u332-b09 (GA)
  - Update release notes for 8u332-b09.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2022-04-19 @ 1pm PT.
  - Resolves: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1
changelog:
  - Update to shenandoah-jdk8u342-b07
  - Update release notes for shenandoah-8u342-b07.
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Remove redundant "REPOS" variable from tarball script
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Rebase JDK-8186464 patch so it applies after JDK-8190753
  - Resolves: rhbz#2106502


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2112383


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Related: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Switch to EA mode for 8u362 pre-release builds.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150191


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1
changelog:
  - Update to shenandoah-jdk8u372-b07 (GA)
  - Update release notes for shenandoah-8u372-b07.
  - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2159458


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u382-b01 (EA)
  - Update release notes for shenandoah-8u382-b01.
  - Switch to EA mode.
  - Remove JDK-8271199 patch which is now upstream.
  - Related: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ea
changelog:
  - Update to shenandoah-jdk8u382-b04 (EA)
  - Update release notes for shenandoah-8u382-b04.
  - Related: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1
changelog:
  - Update to shenandoah-jdk8u372-b05 (GA)
  - Update release notes for shenandoah-8u372-b05.
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1
changelog:
  - Update to shenandoah-jdk8u382-b05 (GA)
  - Update release notes for shenandoah-8u382-b05.
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2221106


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1
changelog:
  - For non debug subpackages, ghosted all alternatives (rhbz1649776)
  - For non system JDKs, if-outed versionless provides.
  - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
  - Related: RHEL-11319


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1
changelog:
  - Update to shenandoah-jdk8u392-b08 (GA)
  - Update release notes for shenandoah-8u392-b08.
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Regenerate PR2462 patch following JDK-8315135
  - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
  - Add missing JFR alternative ghost
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12212
  - Resolves: RHEL-13574
  - Resolves: RHEL-13575
  - Resolves: RHEL-13576
  - Resolves: RHEL-11319
  - Resolves: RHEL-13577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3
changelog:
  - Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
  - Resolves: RHEL-19630


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u402-b01 (EA)
  - Update release notes for shenandoah-8u402-b01.
  - Switch to EA mode.
  - Sync NEWS with vanilla branch version.
  - Related: RHEL-17914


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u402-b06 (GA)
  - Update release notes for shenandoah-8u402-b06.
  - Drop local copy of JDK-8312489 which is now included upstream
  - Switch to GA mode.
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-17914
  - Resolves: RHEL-20965


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u412-b01 (EA)
  - Update release notes for shenandoah-8u412-b01.
  - Switch to EA mode.
  - Related: RHEL-30926


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Remove -T0 argument from systemtap tar invocation
  - Related: RHEL-30926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.ea
changelog:
  - Turn off xz multi-threading on i686 as it fails with an out of memory error
  - Normalise whitespace
  - Move to upstream tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
  - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
  - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
  - generate_source_tarball.sh: Adapt version logic to work with 8u
  - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
  - jconsole.desktop.in: Restored by running icedtea_sync.sh
  - policytool.desktop.in: Likewise.
  - Restore IcedTea sources correctly in spec file
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Handle an existing checkout
  - generate_source_tarball.sh: Sync indentation with java-21-openjdk version
  - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
  - Related: RHEL-30926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.ea
changelog:
  - Update to shenandoah-jdk8u412-b07 (EA)
  - Update release notes for shenandoah-8u412-b07.
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Resolves: RHEL-30926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1
changelog:
  - Update to shenandoah-jdk8u412-b08 (GA)
  - Update release notes for shenandoah-8u412-b08.
  - Complete release note for Certainly roots
  - Switch to GA mode.
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Related: RHEL-30926


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1
changelog:
  - Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs:
  - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler
  - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution
  - CVE-2024-20921: Range check loop optimization issue
  - CVE-2024-20926: Arbitrary Java code execution in Nashorn
  - CVE-2024-20945: Logging of digital signature private keys
  - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS
  - Remove JDK-8312489 patch which is already in the sources


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1
changelog:
  - Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs:
  - CVE-2024-21011: Denial of service due to long Exception message logging
  - CVE-2024-21085: Pack200 excessive memory allocation
  - CVE-2024-21068: Integer overflow in C1 compiler address generation
  - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure
    with "Exceeded _node_regs array"


author: Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:1.8.0.422.b05-1.tuxcare.els1
changelog:
  - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs:
  - CVE-2024-21131: UTF8 size overflow
  - CVE-2024-21138: Infinite loop vunlerability in SymbolTable
  - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE)
  - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time
  - CVE-2024-21145: Out-of-bounds access in MaskFill
  - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE)


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13
changelog:
  - updated to security u45
  - minor sync with 7.2
   - generate_source_tarball.sh
   - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch
   - reworked (synced) zero patches (removed 103,11 added 204, 400-403)
   - family of 5XX patches renamed to 6XX
   - added upstreamed patch 501 and 505
   - included removeSunEcProvider-RH1154143.patch
  - returned java (jre only) provides
  - repacked policies (source20)
  - removed duplicated NVR provides
  - added automated test for priority (length7)
  - Resolves: RHBZ#1209076


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-7.b13
changelog:
  - Re-add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Remove ppc64le test case now fix has been verified.
  - Resolves: rhbz#1194378


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> 1:1.8.0.452.b09-1.tuxcare.els1
changelog:
  - Upgrade openjdk-shenandoah-jdk8u-shenandoah-jdk8u452-b09. That fixes the following CVE:
    CVE-2025-21587, CVE-2025-30691 and CVE-2025-30698


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1:1.8.0.462.b08-1.tuxcare.els1
changelog:
  - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u462-b08 (GA). That fixes following CVEs:
  - CVE-2025-30749: better Glyph drawing
  - CVE-2025-30754: enhance TLS protocol support
  - CVE-2025-30761: improve scripting supports
  - CVE-2025-50106: glyph out-of-memory access and crash


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.482.b03-1.tuxcare.els1
changelog:
  - Update to openjdk-shenandoah-jdk8u-shenandoah-jdk8u482-b03.
  - CVE-2026-21945: Security component vulnerability allowing unauthenticated
    attacker with network access to cause hang or crash (DoS).


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 1:1.8.0.492.b09-1.tuxcare.els1
changelog:
  - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u492-b09 (GA). That
    fixes following CVEs:
  - CVE-2026-22003: hotspot DoS via sandboxed Java Web Start/applets with
    untrusted code (resource exhaustion)
  - CVE-2026-22007: Security component, local high-complexity low-impact
    info disclosure
  - CVE-2026-22013: JGSS, remote (user-interaction) high-confidentiality
    info disclosure
  - CVE-2026-22016: JAXP, remote unauth high-confidentiality info disclosure
  - CVE-2026-22018: Libraries, remote high-complexity DoS (low impact)
  - CVE-2026-22021: JSSE/HTTPS, remote unauth DoS (low impact)
  - CVE-2026-34268: Security component, local high-complexity low-impact
    info disclosure
  - CVE-2026-34282: Networking, remote unauth DoS (high availability impact)


author: Viktor Borzov <vborzov@cloudlinux.com> - 1:1.8.0.502.b07-1.tuxcare.els1
changelog:
  - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u502-b07 (GA). That
    fixes following CVEs:
  - CVE-2026-46968: JSSE, remote high-complexity high-integrity compromise via
    TLS (enhance TLS certificate handling)
  - CVE-2026-47010: ImageIO, remote high-complexity low-impact integrity
    compromise (enhance JPEG handling)
  - CVE-2026-47021: 2D, remote unauthenticated DoS with low availability
    impact (enhance XBM image support)
  - CVE-2026-47057: Scripting, improve Nashorn index handling
  - CVE-2026-47058: Scripting, enhance DataView implementation
  - CVE-2026-47063: Libraries, enhance Jar handling
  - The same upstream release also closes the remaining CVEs of the Oracle
    July 2026 CPU, tracked under separate ELS tickets:
  - CVE-2026-47027: Libraries, enhance Jar file processing
  - CVE-2026-47059: 2D, enhance AWT ImagingLib
  - CVE-2026-60147: Security, improve certification checking
  - CVE-2026-41254: bundled Little CMS updated to 2.19.1


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16
changelog:
  - July 2015 security update to u51b16.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60.
  - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea.
  - Re-generate EC disablement patch following CPU DH changes.
  - Resolves: rhbz#1235162


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16
changelog:
  - Add md5sum for January 2015 java.security update so it gets updated this time.
  - Resolves: rhbz#1235162


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17
changelog:
  - October 2015 security update to u65b17.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Update RH1191652 patch to build against current AArch64 tree.
  - Use appropriate source ID to avoid unpacking both tarballs on AArch64.
  - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs.
  - Resolves: rhbz#1257656


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13
changelog:
  - Correctly fix system timezone data issue by depending on correct tzdata version.
  - Remove reference to tz.properties which is no longer used.
  - Resolves: rhbz#1212571


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16
changelog:
  - July 2015 security update to u51b16.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60.
  - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea.
  - Re-generate EC disablement patch following CPU DH changes.
  - Resolves: rhbz#1235163


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16
changelog:
  - Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version.
  - Resolves: rhbz#1235163


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17
changelog:
  - October 2015 security update to u65b17.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Update RH1191652 patch to build against current AArch64 tree.
  - Use appropriate source ID to avoid unpacking both tarballs on AArch64.
  - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs.
  - Resolves: rhbz#1257657


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17
changelog:
  - moved to integration forest 
  - sync with fedora (all but extracted luas and family)
  - Resolves: rhbz#1295753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-0.b15
changelog:
  - January 2016 security update to u71b15.
  - Improve verbosity and helpfulness of tarball generation script.
  - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32.
  - Update patch documentation using version originally written for Fedora.
  - Drop prelink requirement as we no longer use execstack.
  - Drop ifdefbugfix patch as this is fixed upstream.
  - Provide optional boostrap build and turn it off by default.
  - Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed.
  - Add patch for size_t formatting on s390 as size_t != intptr_t there.
  - Resolves: rhbz#1295753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15
changelog:
  - Restore upstream version of system LCMS patch removed by 'sync with Fedora'
  - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
  - Resolves: rhbz#1295753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03
changelog:
  - Update to u77b03.
  - Drop 8146566 which is applied upstream.
  - Replace s390 Java options patch with general version from IcedTea.
  - Apply s390 patches unconditionally to avoid arch-specific patch failures.
  - Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
  - Remove aarch64-specific suffix as update/build version are now the same as for other archs.
  - Only use z format specifier on s390, not s390x.
  - Adjust tarball generation script to allow ecc_impl.h to be included.
  - Correct spelling mistakes in tarball generation script.
  - Synchronise minor changes from Fedora.
  - Use a simple backport for PR2462/8074839.
  - Don't backport the crc check for pack.gz. It's not tested well upstream.
  - Resolves: rhbz#1320664


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03
changelog:
  - Remove what remains of the SunEC sources in the remove-intree-libraries script.
  - Resolves: rhbz#1320664


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-0.b14
changelog:
  - Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway.
  - Resolves: rhbz#1325422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-0.b14
changelog:
  - Add 8132051 port to Zero.
  - Turn on bootstrap build for all to ensure we are now good to go.
  - Resolves: rhbz#1325422


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.22-6
changelog:
  - Add patch, JDK-8210416-RHBZ-1624122-fdlibm-opt-fix.patch, so as to
    optimize compilation of fdlibm library.
  - Add patch, JDK-8210425-RHBZ-1624122-sharedRuntimeTrig-opt-fix.patch, so
    as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
  - Add patch, JDK-8210647-RHBZ-1624122-libsaproc-opt-fix.patch, so as to
    optimize compilation of libsaproc (extra c flags won't override
    optimization).
  - Add patch, JDK-8210703-RHBZ-1624122-vmStructs-opt-fix.patch, so as to
    optimize compilation of vmStructs.cpp (part of libjvm.so).
  - No longer filter -O flags from C flags coming from
    redhat-rpm-config.
  - Resolves: RHBZ#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-5
changelog:
  - Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
    so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
    JDK-8210461.
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-6
changelog:
  - Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
    so as to disable log math intrinsic on aarch64. Work-around for
    JDK-8210858
  - Resolves: rhbz#1570856


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.28-8
changelog:
  - removed version less provides
  - javadocdir moved to arched dir as it is no longer noarch
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-9
changelog:
  - Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
    RHBZ-1624122.
  - Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
    optimize compilation of fdlibm library.
  - Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
    as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
  - Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
    optimize compilation of libsaproc (extra c flags won't override
    optimization).
  - Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
    optimize compilation of libjsig.
  - Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
    optimize compilation of vmStructs.cpp (part of libjvm.so).
  - Reinstate filtering of opt flags coming from redhat-rpm-config.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.0.28-1
changelog:
  - Identify as GA version and no longer as early access (EA).
  - JDK 11 has been released for GA on 2018-09-25.


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-5
changelog:
  - Redefined linux -> __linux__ and __x86_64 -> __x86_64__ in RH1750419 patch
  - Resolves: rhbz#1901695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5
changelog:
  - Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
  - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
  - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
  - Resolves: rhbz#1901695


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea
changelog:
  - Update to jdk-11.0.10.0+1
  - Update release notes to 11.0.10.0+1
  - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
  - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
  - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
  - Cleanup debug package descriptions and version number placement.
  - Switch to EA mode for 11.0.10 pre-release builds.
  - Drop JDK-8222286 & JDK-8254177 as applied upstream
  - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
  - Resolves: rhbz#1903907


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea
changelog:
  - Update to jdk-11.0.10.0+2
  - Update release notes to 11.0.10.0+2
  - Update tarball generation script to use PR3818 which handles JDK-8171279 changes
  - Drop JDK-8250861 as applied upstream.
  - Resolves: rhbz#1903907


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea
changelog:
  - Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
  - Resolves: rhbz#1903907


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea
changelog:
  - Update to jdk-11.0.10.0+5
  - Update release notes to 11.0.10.0+5
  - Drop JDK-8222527 as applied upstream.
  - Resolves: rhbz#1903907


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea
changelog:
  - Update to jdk-11.0.10.0+8
  - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
  - Resolves: rhbz#1903907


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0
changelog:
  - Update to jdk-11.0.10.0+9
  - Update release notes to 11.0.10.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-01-19 @ 1pm PT.
  - Resolves: rhbz#1908970


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.0.ea
changelog:
  - Update to jdk-11.0.11.0+2
  - Update release notes to 11.0.11.0+2
  - Remove local backport of JDK-8258836 which is now available upstream.
  - Resolves: rhbz#1938082


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea
changelog:
  - Perform static library build on a separate source tree with bundled image libraries
  - Make static library build optional
  - Based on initial work by Severin Gehwolf
  - Resolves: rhbz#1930527


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea
changelog:
  - Debug builds need to find their documentation from the release build.
  - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
  - Resolves: rhbz#1930527


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea
changelog:
  - Fix issue where CheckVendor.java test erroneously passes when it should fail.
  - Add proper quoting so '&' is not treated as a special character by the shell.
  - Resolves: rhbz#1938082


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0
changelog:
  - Update to jdk-11.0.11.0+9
  - Update release notes to 11.0.11.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1940228


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+1
  - Update release notes to 11.0.12.0+1
  - Switch to EA mode for 11.0.12 pre-release builds.
  - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
  - Remove local JDK-8187450 backport as now included upstream.
  - Resolves: rhbz#1967811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+4
  - Update release notes to 11.0.12.0+4
  - Correct bug ID JDK-8264846 to intended ID of JDK-8264848
  - Resolves: rhbz#1967811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+6
  - Update release notes to 11.0.12.0+6
  - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
  - Resolves: rhbz#1967811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0
changelog:
  - Update to jdk-11.0.12.0+7
  - Update release notes to 11.0.12.0+7
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-07-20 @ 1pm PT.
  - Resolves: rhbz#1972395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3
changelog:
  - Restructure the build so a minimal initial build is then used for the final build (with docs)
  - This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  - Related: rhbz#1999936


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.13.0+1
  - Update release notes to 11.0.13.0+1
  - Update tarball generation script to use git following OpenJDK 11u's move to github
  - Switch to EA mode for 11.0.13 pre-release builds.
  - Remove non-Free test from source tarball.
  - Related: rhbz#1999936


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1
changelog:
  - Update to jdk-11.0.12.0+8
  - Update release notes to 11.0.12.0+8
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2012332


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.ea
changelog:
  - Replaced hardcoded 11 by featurever where appropriate
  - Fixed comment of `for slowdebug` to correct `any debug`
  - Related: rhbz#2022810


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.ea
changelog:
  - Update to jdk-11.0.14.0+8
  - Update release notes to 11.0.14.0+8
  - Switch to EA mode for 11.0.14 pre-release builds.
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Rename blacklisted.certs to blocked.certs following JDK-8253866
  - Resolves: rhbz#2022810


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1
changelog:
  - Update to jdk-11.0.14.0+9
  - Update release notes to 11.0.14.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2022-01-18 @ 1pm PT.
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.15.0+1
  - Update release notes to 11.0.15.0+1
  - Switch to EA mode for 11.0.15 pre-release builds.
  - Related: rhbz#2047531


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1
changelog:
  - Update to jdk-11.0.15.0+9
  - Update release notes to 11.0.15.0+9
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
  - Resolves: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2
changelog:
  - Remove security items from release notes that were only in 17u and N/A for 11u
  - Related: rhbz#2073422


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2106510


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8284920 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2106510


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119512


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.17+1
  - Update release notes to 11.0.17+1
  - Switch to EA mode for 11.0.17 pre-release builds.
  - Related: rhbz#2130373


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.ea
changelog:
  - Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
  - Related: rhbz#2130373


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.ea
changelog:
  - Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
  - Related: rhbz#2130373


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
  - Related: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Related: rhbz#2150192


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150192


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
  - Related: rhbz#2150192


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-9
changelog:
  - Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
    RHBZ-1624122.
  - Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
    optimize compilation of fdlibm library.
  - Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
    as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
  - Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
    optimize compilation of libsaproc (extra c flags won't override
    optimization).
  - Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
    optimize compilation of libjsig.
  - Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
    optimize compilation of vmStructs.cpp (part of libjvm.so).
  - Reinstate filtering of opt flags coming from redhat-rpm-config.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.1.13-3
changelog:
  - Use upstream's version of Aarch64 intrinsics disable patch:
    - Removed:
      RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
      RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    - Superceded by:
      jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.1.13-4
changelog:
  - Update to shenandoah-jdk-11.0.1+13-20190101
  - Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
  - Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
  - Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
  - Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
  - Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.2.7-0
changelog:
  - Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
  - Make tagsuffix optional and comment it out while unused.
  - Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
  - Drop JDK-8209639/RH1640127 applied upstream.
  - Re-generate JDK-8210416/RH1632174 following JDK-8209786
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.20+1 (EA)
  - Update release notes to 11.0.20+1
  - Switch to EA mode
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Add missing Swing release note
  - Related: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Update release notes to 11.0.20.1+1
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise runtime and buildtime tzdata requirements
  - Update README.md to match the version in later RHEL releases
  - Resolves: rhbz#2236229


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1
changelog:
  - For non debug subpackages, ghosted all alternatives (rhbz1649776)
  - For non system JDKs, if-outed versionless provides.
  - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
  - Related: RHEL-11320


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1
changelog:
  - Update to jdk-11.0.21+9 (GA)
  - Update release notes to 11.0.21+9
  - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Apply all patches using -p1
  - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
  - Add missing JFR alternative ghost
  - Move jcmd to the headless package
  - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12217
  - Resolves: RHEL-12910
  - Resolves: RHEL-12913
  - Resolves: RHEL-11320
  - Resolves: RHEL-13227
  - Resolves: RHEL-13217


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2
changelog:
  - Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
  - Resolves: RHEL-19642


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.ea
changelog:
  - Update to jdk-11.0.22+6 (EA)
  - Update release notes to 11.0.22+6
  - Switch to EA mode
  - Drop local copy of JDK-8312489 which is now included upstream
  - Resolves: RHEL-21031


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1
changelog:
  - Update to jdk-11.0.22+7 (GA)
  - Update release notes to 11.0.22+7
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20966


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.23+1 (EA)
  - Update release notes to 11.0.23+1
  - Switch to EA mode
  - Speed up PPC build by removing ppc64le --with-jobs=1 workaround


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1
changelog:
  - Update to jdk-11.0.23+9 (GA)
  - Update release notes to 11.0.23+9
  - Switch to GA mode for release
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-30914


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2
changelog:
  - Fix 11.0.22 release date in NEWS
  - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.3.6-0
changelog:
  - Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
  - Drop JDK-8210416/RH1632174 applied upstream.
  - Drop JDK-8210425/RH1632174 applied upstream.
  - Drop JDK-8210647/RH1632174 applied upstream.
  - Drop JDK-8210761/RH1632174 applied upstream.
  - Drop JDK-8210703/RH1632174 applied upstream.
  - Add cast to resolve s390 ambiguity in call to log2_intptr
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.1.13-8
changelog:
  - Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
  - Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.2.7-4
changelog:
  - Replace pcsc-lite-devel with pcsc-lite-libs so deps can be resolved without optional repository
  - Add JDK-8009550/RH910107 patch so OpenJDK checks for libpcsclite.so.1 (in pcsc-lite-libs)
  - Add missing ISA to cups-libs requirement
  - Remove duplicate lksctp-tools requirement
  - Resolves: rhbz#1684617


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.3.6-1
changelog:
  - Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
  - Drop JDK-8210416/RH1632174 applied upstream.
  - Drop JDK-8210425/RH1632174 applied upstream.
  - Drop JDK-8210647/RH1632174 applied upstream.
  - Drop JDK-8210761/RH1632174 applied upstream.
  - Drop JDK-8210703/RH1632174 applied upstream.
  - Resolves: rhbz#1677516


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.4.11-0
changelog:
  - Update to shenandoah-jdk-11.0.4+11 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.1-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.5+1 (EA)
  - Switch to EA mode for 11.0.5 pre-release builds.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.10-0
changelog:
  - Update to shenandoah-jdk-11.0.5+10 (GA)
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.1-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.6+1 (EA)
  - Switch to EA mode for 11.0.6 pre-release builds.
  - Add support for jfr binary.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-0
changelog:
  - Update to shenandoah-jdk-11.0.6+10 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-3
changelog:
  - Add JDK-8237396 backport to resolve Shenandoah TCK breakage in traversal mode.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.7.10-0
changelog:
  - Update to shenandoah-jdk-11.0.7+10 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.4-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+4 (EA)
  - Require tzdata 2020a due to resource changes in JDK-8243541
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.7-0.1.ea
changelog:
  - java-11-openjdk doesn't have a JRE tree, so don't try and copy alt-java there...
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.9-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+9 (EA)
  - Update release notes for 11.0.8 release.
  - This tarball is embargoed until 2020-07-14 @ 1pm PT.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-0
changelog:
  - Update to shenandoah-jdk-11.0.8+10 (GA)
  - Switch to GA mode for final release.
  - Update release notes with last minute fix (JDK-8248505).
  - This tarball is embargoed until 2020-07-14 @ 1pm PT.
  - Resolves: rhbz#1838811


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.8.5-0.2.ea
changelog:
  - Disable stripping of debug symbols for static libraries part of
    the -static-libs sub-package.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea
changelog:
  - Update to jdk-11.0.9+6 (EA)
  - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea
changelog:
  - Update to jdk-11.0.9+8 (EA)
  - Remove JDK-8252258/RH1868406 now applied upstream.
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Moved vendor_version_string to a better place
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0
changelog:
  - Update to jdk-11.0.9+11
  - Update release notes for 11.0.9 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1
changelog:
  - Move all license files to NVR-specific JVM directory.
  - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
  - Resolves: rhbz#1896609


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1
changelog:
  - Update to jdk-11.0.9.1+1
  - RPM version stays at 11.0.9.11 so as to not break upgrade path.
  - Adds a single patch for JDK-8250861.
  - Resolves: rhbz#1895275


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2
changelog:
  - Add backport of JDk-8222537 so the Host header is sent when using proxies.
  - Resolves: rhbz#1869530


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.22-5
changelog:
  - Initial Load
  - removed -fno-lifetime-dse; rhel7 gcc to old (4.8.5)
  - lib/classlist do not exists s390, ifarch-ed via jit_arches out
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.22-8
changelog:
  - Adjust system NSS patch, RHBZ-1565658-system-nss-SunEC.patch, so
    as to filter -Wl,--as-needed from linker flags. Fixes FTBFS issue.
  - Resolves: rhbz#1570856


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.28-2
changelog:
  - jfr/*jfc files listed for all arches
  - lib/classlist do not exists s390, ifarch-ed via jit_arches out
  - specfile slightly improved to allow srpm rebuild on rhel8/fedoras
  - Resolves: rhbz#1570856


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-5
changelog:
  - Moving from rpmfusion-free to Fedora because it will be free of known patents
    in all countries from 2012-04-04 onwards
  - Changed license from GPL to GPLv2+ and included up-to-date license file


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.0.0-1
changelog:
  - New upstream release
  - Updated no_pprof patch to match new release
  - Updated s390 patch to match new relase
  - Added make check
  - Added new script jemalloc.sh
  - Added a patch for atomic operations on epel5/ppc


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.5.1-1
changelog:
  - New upstream release
  - Updated nopprof patch to match new release
  - Fixed a few bogus changelog entries


author: Colin Walters <walters@verbum.org> - 1:1.8.5-6
changelog:
  - Include mozjs185.pc, clean up build
  - Based on work from Christopher Aillon <caillon@redhat.com>
  - Switch to using make install DESTDIR=, instead of hardcoding build rules.
  - Add DESTDIR= patch from GNOME 3.2 jhbuild
  - Make mozjs185 the canonical target for both libmozjs and libmozjs185.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1:1.8.5-11
changelog:
  - Thanks to Ville Skyttä (bz#875343) build against libedit instead of readline
  	what simplify licensing apparently without any loss of functionality


author: Sebastien Willmann <sebastien.willmann@gmail.com> - 0.6.0-0.3.rc2
changelog:
  - Removed static package
  - Preserving timestamp on installed files
  - Added guard grep to the sed expression
  - Removed duplicated doc files
  - Removed dependency on pkgconfig
  - Changed base package group


author: Björn Esser <fedora@besser82.io> - 0.10.5-1
changelog:
  - Update to version 0.10.5
  - Use %license and %doc properly
  - Add generated CMake-target
  - Move %check after %install
  - Remove Group-tag, needed for el <= 5, only
  - Drop Patch0, not needed anymore
  - Disabled Werror
  - Add disttag
  - Use cmake instead of scons


author: Sébastien Willmann <sebastien.willmann@gmail.com> - 0.6.0-0.11.rc2
changelog:
  - https://bugzilla.redhat.com/show_bug.cgi?id=998149 : applied Michael Schwendt's
    patch to fix duplicated documentation


author: Christina Fu <cfu@redhat.com> - 4.2.6-23
changelog:
  - Bugzilla Bug #797351 - JSS - HSM token name was mistaken for manufacturer
    identifier (cfu)
  - Bugzilla Bug #804840 - [RFE] ECC encryption keys cannot be archived
    ECC phase2 work - support for ECC encryption key archival and recovery (cfu)
  - Bugzilla Bug #783007 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . (mharmsen)
  - Dogtag TRAC Task #109 (https://fedorahosted.org/pki/ticket/109) - add
    benign JNI jar file symbolic link from JNI libdir to JNI jar file (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.2.6-24
changelog:
  - Bugzilla Bug #783007 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . BadPaddingException (mharmsen)


author: Christina Fu <cfu@redhat.com> - 4.2.6-35
changelog:
  - Bugzilla Bug #1040640 - Incorrect OIDs for SHA2 algorithms
    (cfu for jnimeh@gmail.com)
  - Bugzilla Bug #1133718 - Key strength validation is not performed for RC4
    algorithm (nkinder)
  - Bugzilla Bug #816396 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS (cfu)


author: Christina Fu <cfu@redhat.com> - 4.2.6-40
changelog:
  - Bugzilla 1074208 - pass up exact JSS certificate validation errors from NSS
    (edewata)
  - Bugzilla 1331596 - Key archival fails when KRA is configured with lunasa.
    (cfu)
  - PKI ticket 801 - Merge pki-symkey into jss (phase 1)
    (jmagne)


author: Christina Fu <cfu@redhat.com> - 4.2.6-42
changelog:
  - Sync up patches from both Fedora and RHEL; adding one patch
    (cfu, edewata, mharmsen) from RHEL:
  - Bugzilla Bug #1289799 - JSS build failure on F23 and Rawhide (edewata)


author: Elio Maldonado <emaldona@redhat.com> - 4.4.0-1
changelog:
  - Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
  - ## JSS 4.4.0 includes the following patches ported from downstream:
  - Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
  - Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
  - Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
    CS interface
  - Mozilla Bugzilla #1307993 - Expose updated certificate verification function
    in JSS
  - Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
    pointer arithmetic
  - Mozilla Bugzilla #1308001 - Verification should fail when a revoked
    certificate is added
  - Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
  - Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
    (HSM + NSS)
  - Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
  - Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
  - Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
    unwrapping keys should be done in the token
  - Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
    manufacturer identifier
  - Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
    JSS 4.2.6
  - Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS
  - Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
    error from NSS
  - Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
  - Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
  - Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
  - Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
    PKCS#11 bypass support
  - Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
  - Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
    in FIPS Mode and ECC algorithms
  - Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
    functions
  - Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
  - ## JSS 4.4.0 includes the following changes for building and testing:
  - Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
  - Mozilla Bugzilla #1346420 - Document steps required to use the proper
    libjss4.so when running certain HMAC Algorithms tests


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-4
changelog:
  - Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
  - Updated build requirements for NSPR
  - Updated build and runtime requirements for NSS
  - ## 'jss-post-rebase.patch' resolves the following issues ported from
    - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
    code for RFC5272+ (cfu)
  - Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
  - Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
    class. (edewata)
  - Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
  - Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
  - Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
    (edewata)
  - Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
  - Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
  - Mozilla Bugzilla #1350130 - Missing
    CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-5
changelog:
  - Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
    idm-console-framework < 1.1.17-4
  - Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-6
changelog:
  - Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
    release tag (mharmsen)
  - Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
    exporting EncryptedPrivateKeyInfo (ftweedal)
  - Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
    (ftweedal)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-7
changelog:
  - Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
    Mozilla Bugzilla #1360207 - Fix incorrect if (ss->...) in SSL_ReconfigFD


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-8
changelog:
  - Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
    (jmagne)
  - Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
    [RHEL-7.4.z] (ftweedal)
  - Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
    export fails [rhel-7.4.z] (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-9
changelog:
  - Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
    FIPSMODE [rhel-7.4.z] (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-10
changelog:
  - Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
    (edewata)
  - Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
    producing signatures (especially for EC) (cfu,dstutzman)


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-11
changelog:
  - Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
    producing signatures (especially for EC) (cfu,dstutzman)
  - Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
    types (cfu,dstutzman)
  - Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
    resulting structure (cfu,dstutzman)


author: Dogtag Team <pki-devel@redhat.com> 4.4.2-12
changelog:
  - Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
    AlgorithmIdentifier [rhel-7.5.z] (cfu)


author: Dogtag Team <pki-devel@redhat.com> 4.4.2-13
changelog:
  - Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
    decode/encode process alters original data [rhel-7.5.z] (cfu)
  - Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
    [rhel-7.5.z] (cfu)


author: Christina Fu <cfu@redhat.com> - 4.2.6-42
changelog:
  - Sync up patches from both Fedora and RHEL; adding two patches
    (cfu, edewata, mharmsen) from RHEL:
  - Bugzilla Bug #1238450 - UnsatisfiedLinkError on Windows (cfu)
  - make it compile on Windows platforms (cfu for nhosoi)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-3
changelog:
  - Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
    decode/encode process alters original data (cfu)
  - Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-4
changelog:
  - Bugzilla #1671244 - x25519 allowed in FIPS mode [rhel-7.6.z] (ascheel)
  - Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
    chain [rhel-7.6.z] (jmagne)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-5
changelog:
  - Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
    chain [rhel-7.6.z] (jmagne)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.6-2
changelog:
  - Bugzilla #1747966 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.7-2
changelog:
  - Bugzilla #1747967 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.7-3
changelog:
  - Bugzilla #1710105 - JSS: add RSA PSS support (jmagne)
  - Bugzilla #1796642 - JSS -- remove hardcoded native library
    /usr/lib{64}/jss/libjss4.so (ascheel)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-1
changelog:
  - Update to kbd-1.15.5 (removed kbd-1.15-resizecon-x86_64.patch,
    kbd-1.15-defkeymap.patch, kbd-1.15.3-fix-es-translation.patch,
    kbd-1.15.3-loadkeys-d.patch)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-3
changelog:
  - Include xkb layouts from xkeyboard-config converted to console keymaps
  - Add version to vlock provides
    Resolves: #902564


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8
changelog:
  - Fix vlock doesn't perform PAM account management or credential reinitialization
    Resolves: #1032140


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14
changelog:
  - Replace CtrlL_Lock with Caps_Lock in generated us.map
    Resolves: #1441411
  - Improve man pages and usage messages quality and consistency
    Resolves: #949015


author: Rex Dieter <rdieter@fedoraproject.org> 0.5.3-5
changelog:
  - kcm-gtk : "GTK+ Appearance" in systemsettings->lost and found (#628381)
  - Requires: kdebase-runtime


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 0.5.3-8
changelog:
  - add support for GTK+ 3 (backported from upstream bzr gtk3 branch)
  - drop ancient Fedora < 13 env_script conditional, now always in kde-settings


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 0.5.3-10
  - update kcm_category patch
  - kubuntu_01_xsettings_kipc.patch
  - drop old Obsoletes: gtk-qt-engine


author: Ryan Rix <ry@n.rix.si> - 0.3.1-3
changelog:
  - Update the category to adhere to new SC 4.5 systemsettings layout. Will now
    appear under the "input devices" section.


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.3.1-6
changelog:
  - Merge bugfixes from Kubuntu, fixes circular scrolling and more (#633353)
  - Drop default kcmtouchpadrc, use driver defaults (#611611)
  - Make the Scrolling tab use a vertical scrollbar if needed (#600121)


author: Jan Grulich <jgrulich@redhat.com> 0.9.0.8-2
changelog:
  - remove mobile-broadband-mobile-provider-devel as BR
  - add ModemManager as runtime dependency
  - add mobile-broadband-mobile-provider as runtime dependency


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-10
changelog:
  - Avoid duplicates in solid device automounter kcm
    Resolves: bz#1084191
  - Enable automount overrides even when automatic mounting is disabled
    Resolves: bz#1084497


author: Than Ngo <than@redhat.com> - 4.10.5-20
changelog:
  - Resolves: bz#1040678 - cannot assign custom keyboard shortcut for Show Desktop Grid
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-21
changelog:
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed (fixed patch)
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays (fixed patch)


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-8
changelog:
  - Powerdevil: do not notify about a non existent action
    Resolves: bz#1289149
  - Plasma taskmanager: close context menu when task is closed
    Resolves: bz#1262603


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-10
changelog:
  - Fix grouping of tasks in taskmanager applet
    Resolves: bz#1348917
  - Fix unlocking of kscreenlocker, unlock it just once
    Resolves: bz#1333441


author: Jan Grulich <jgrulich@redhat.com> - 4.11-19-13
changelog:
  - Sanitise notification HTML
    Resolves: bz#1568853

  - Increase cpu buffer size in ksysguard
    Resolves: bz#1611762


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-14
changelog:
  - Do not show disabled buttons in Plastik decoration theme
    Resolves: bz#1677641

  - Taskmanager: dismiss group when application is closed and there is enough space
    Resolve: bz#1698048


author: Rex Dieter <rdieter@fedoraproject.org> - 6:4.10.3-2
changelog:
  - pull in a few upstream fixes, including a couple minor security issues
  - Crash in DialogShadows::Private::freeX11Pixmaps() (kde#319137)


author: Martin Briza <mbriza@redhat.com> - 4.10.5-3
changelog:
  - make kpac_dhcp_helper full relro
  - set the variables in the generated cmake files to contain both 64b and 32b paths
  - hide "command not found" for one pkg-config invocation in the spec
  - fix macro expansion in the spec changelog
  - Resolves: #884052


author: Martin Briza <mbriza@redhat.com> - 4.10.5-4
changelog:
  - use a better way to figure out if lib or lib64 should be used
  - use -fno-strict-aliasing for type punned source files
  - Resolves: #884052


author: Jan Grulich <jgrulich@redhat.com> - 6:4.14.8-9
changelog:
  - Do not fork konsole process when opening terminal from apps using dolphin-part
    Resolves: bz#1710362


author: Jan Grulich <jgrulich@redhat.com> - 6:4.14.8-6
changelog:
  - KAuth: verify that whoever is calling us is actually who he says he is (CVE-2017-8422)
    Resolves: CVE-2017-8422


author: Ryan O'Hara <rohara@redhat.com> - 1.2.7-3
changelog:
  - Update spec file.
  - Add option to prevent respawn of child processes.
  - Remove duplicate command-line option code.
  - Use popt to generate usage message.
  - Fix pointer arithmetic for VRRP packets.
  - Fix comparison of primary IP address.
  - Fix loading of SSL certificate.
  - Fix typo in error message.
  - Update FSF address in GPLv2 license.
  - Remove debug message from if_get_by_ifname.


author: Jarod Wilson <jarod@redhat.com> [3.10.0-121.el7]
changelog:
  - [virt] vhost/net: fix total length when packets are too short ("Michael S. Tsirkin") [1064446] {CVE-2014-0077}
  - [virt] vhost/net: validate vhost_get_vq_desc return value ("Michael S. Tsirkin") [1070940] {CVE-2014-0055}


author: Jarod Wilson <jarod@redhat.com> [3.10.0-122.el7]
changelog:
  - [security] device_cgroup: check if exception removal is allowed (Aristeu Rozanski) [1086057]
  - [security] device_cgroup: rework device access check and rule checking (Aristeu Rozanski) [1086057]
  - [fs] autofs: fix lockref lookup (Ian Kent) [1083815]
  - [mei] me: do not load the driver if the FW doesn't support MEI interface (Prarit Bhargava) [1082789]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-123.el7]
changelog:
  - [mm] rmap: try_to_unmap_cluster() should lock_page() before mlocking (Larry Woodman) [1078349] {CVE-2014-3122}
  - [mm] huge_memory: Fix cpuset cgroups so all pages for a task remain on correct node (Larry Woodman) [1076613]
  - [mm] mprotect: fix oops in change_pmd_range called from task_numa_work (Rik van Riel) [1085050]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.1.1.el7]
changelog:
  - [tty] n_tty: Fix n_tty_write crash when echoing in raw mode (Aristeu Rozanski) [1094241 1094242] {CVE-2014-0196}


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.2.1.el7]
changelog:
  - [net] filter: prevent nla extensions to peek beyond the end of the message (Jiri Benc) [1096780 1096781] {CVE-2014-3144 CVE-2014-3145}
  - [block] floppy: don't write kernel-only members to FDRAWCMD ioctl output (Denys Vlasenko) [1094316 1094318] {CVE-2014-1737 CVE-2014-1738}
  - [block] floppy: ignore kernel-only members in FDRAWCMD ioctl input (Denys Vlasenko) [1094316 1094318] {CVE-2014-1737 CVE-2014-1738}
  - [net] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors (Jiri Pirko) [1091345 1079014] {CVE-2014-2568}
  - [net] ipv4: current group_info should be put after using (Jiri Benc) [1087415 1087416] {CVE-2014-2851}
  - [fs] dcache: make prepend_name() work correctly when called with negative *buflen (Mikulas Patocka) [1099048 1092746]
  - [fs] dcache: __dentry_path() fixes (Mikulas Patocka) [1099048 1092746]
  - [fs] dcache: prepend_path() needs to reinitialize dentry/vfsmount/mnt on restarts (Mikulas Patocka) [1099048 1092746]
  - [target] tcm_fc: Fix use-after-free of ft_tpg (Andy Grover) [1088110 1071340]
  - [s390] af_iucv: wrong mapping of sent and confirmed skbs (Hendrik Brueckner) [1103064 1098513]
  - [s390] kernel: avoid page table walk on user space access (Hendrik Brueckner) [1103062 1097687]
  - [s390] crypto: fix aes, des ctr mode concurrency finding (Hendrik Brueckner) [1103060 1097686]
  - [net] openvswitch: fix a possible deadlock and lockdep warning (Flavio Leitner) [1103318 1094867]
  - [mm] filemap: update find_get_pages_tag() to deal with shadow entries (Johannes Weiner) [1103065 1091795]
  - [mm] page-writeback: fix divide by zero in pos_ratio_polynom (Rik van Riel) [1103067 1091784]
  - [mm] page-writeback: add strictlimit feature (Rik van Riel) [1103067 1091784]
  - [fs] xfs: log vector rounding leaks log space (Brian Foster) [1103059 1091136]
  - [fs] xfs: truncate_setsize should be outside transactions (Brian Foster) [1103059 1091136]
  - [fs] gfs2: Fix uninitialized VFS inode in gfs2_create_inode (Abhijith Das) [1097407 1087995]
  - [kernel] futex: Fix pthread_cond_broadcast() to wake up all threads (Larry Woodman) [1103066 1084757]
  - [net] ip: generate unique IP identificator if local fragmentation is allowed (Jiri Pirko) [1090490 1076106]
  - [kernel] cputime: Fix jiffies based cputime assumption on steal accounting (Frederic Weisbecker) [1090974 1047732]
  - [kernel] cputime: Bring cputime -> nsecs conversion (Frederic Weisbecker) [1090974 1047732]
  - [kernel] cputime: Default implementation of nsecs -> cputime conversion (Frederic Weisbecker) [1090974 1047732]
  - [x86] irq, pic: Probe for legacy PIC and set legacy_pic appropriately (Vivek Goyal) [1094973 1037957]
  - [virt] hyperv/vmbus: Negotiate version 3.0 when running on ws2012r2 hosts (Vivek Goyal) [1094973 1037957]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.3.1.el7]
changelog:
  - [kernel] mutexes: Give more informative mutex warning in the !lock->owner case (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [kernel] mutex: replace CONFIG_HAVE_ARCH_MUTEX_CPU_RELAX with simple ifdef (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [kernel] locking/mutexes: Introduce cancelable MCS lock for adaptive spinning (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [kernel] locking/mutexes: Modify the way optimistic spinners are queued (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [kernel] locking/mutexes: Return false if task need_resched() in mutex_can_spin_on_owner() (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [kernel] Restructure the MCS lock defines and locking & Move mcs_spinlock.h into kernel/locking/ (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [misc] arch: Introduce smp_load_acquire(), smp_store_release() (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [kernel] locking/mutex: Fix debug_mutexes (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [kernel] locking/mutex: Fix debug checks (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [kernel] locking/mutexes: Unlock the mutex without the wait_lock (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.4.1.el7]
changelog:
  - [kernel] futex: Make lookup_pi_state more robust (Larry Woodman) [1104519 1104520] {CVE-2014-3153}
  - [kernel] futex: Always cleanup owner tid in unlock_pi (Larry Woodman) [1104519 1104520] {CVE-2014-3153}
  - [kernel] futex: Validate atomic acquisition in futex_lock_pi_atomic() (Larry Woodman) [1104519 1104520] {CVE-2014-3153}
  - [kernel] futex: prevent requeue pi on same futex (Larry Woodman) [1104519 1104520] {CVE-2014-3153}
  - [ethernet] qlcnic: Fix ethtool statistics length calculation (Michal Schmidt) [1104972 1099634]
  - Revert: [kernel] cputime: Default implementation of nsecs -> cputime conversion (Frederic Weisbecker) [1090974 1047732]
  - Revert: [kernel] cputime: Bring cputime -> nsecs conversion (Frederic Weisbecker) [1090974 1047732]
  - Revert: [kernel] cputime: Fix jiffies based cputime assumption on steal accounting (Frederic Weisbecker) [1090974 1047732]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.5.1.el7]
changelog:
  - [net] ipv4/tunnels: fix an oops when using ipip/sit with IPsec (Jiri Pirko) [1114957 1108857]
  - [scsi] Add timeout to avoid infinite command retry (Ewan Milne) [1114468 1061871]
  - [net] filter: let bpf_tell_extensions return SKF_AD_MAX (Jiri Benc) [1114404 1079524]
  - [net] filter: introduce SO_BPF_EXTENSIONS (Jiri Benc) [1114404 1079524]
  - [net] sctp: Fix sk_ack_backlog wrap-around problem (Daniel Borkmann) [1113971 1112726] {CVE-2014-4667}
  - [tty] Set correct tty name in 'active' sysfs attribute (Denys Vlasenko) [1113467 1066403]
  - [powerpc] tm: Disable IRQ in tm_recheckpoint (Larry Woodman) [1113150 1088224]
  - [scsi] qla2xxx: Update version number to 8.06.00.08.07.0-k3 (Chad Dupuis) [1112389 1090378]
  - [scsi] qla2xxx: Reduce the time we wait for a command to complete during SCSI error handling (Chad Dupuis) [1112389 1090378]
  - [scsi] qla2xxx: Clear loop_id for ports that are marked lost during fabric scanning (Chad Dupuis) [1112389 1090378]
  - [scsi] qla2xxx: Avoid escalating the SCSI error handler if the command is not found in firmware (Chad Dupuis) [1112389 1090378]
  - [scsi] qla2xxx: Don't check for firmware hung during the reset context for ISP82XX (Chad Dupuis) [1112389 1090378]
  - [scsi] qla2xxx: Issue abort command for outstanding commands during cleanup when only firmware is alive (Chad Dupuis) [1112389 1090378]
  - [fs] nfs: Apply NFS_MOUNT_CMP_FLAGMASK to nfs_compare_remount_data() (Scott Mayhew) [1109407 1103805]
  - [ethernet] bnx2x: Fix kernel crash and data miscompare after EEH recovery (Michal Schmidt) [1107721 1101808]
  - [net] gro: restore frag0 optimization (and fix crash) (Michal Schmidt) [1099950 1069741]
  - [watchdog] hpwdt: display informative string (Nigel Croxon) [1096961 1074038]
  - [net] Use netlink_ns_capable to verify the permisions of netlink messages (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [net] netlink: Add variants of capable for use on netlink messages (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [net] diag: Move the permission check in sock_diag_put_filterinfo to packet_diag_dump (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [net] diag: Fix ns_capable check in sock_diag_put_filterinfo (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [kernel] cputime: Fix jiffies based cputime assumption on steal accounting (Frederic Weisbecker) [1090974 1047732]
  - [kernel] cputime: Bring cputime -> nsecs conversion (Frederic Weisbecker) [1090974 1047732]
  - [kernel] cputime: Default implementation of nsecs -> cputime conversion (Frederic Weisbecker) [1090974 1047732]
  - [net] mac80211: fix crash due to AP powersave TX vs. wakeup race (Jacob Tanenbaum) [1083533 1083534] {CVE-2014-2706}
  - [wireless] ath9k: tid->sched race in ath_tx_aggr_sleep() (Jacob Tanenbaum) [1083251 1083252] {CVE-2014-2672}
  - [powerpc] tm: Fix crash when forking inside a transaction (Radomir Vrbovsky) [1083214 1083215] {CVE-2014-2673}
  - [fs] aio: fix plug memory disclosure and fix reqs_active accounting backport (Jeff Moyer) [1094604 1094605] {CVE-2014-0206}
  - [fs] aio: plug memory disclosure and fix reqs_active accounting (Mateusz Guzik) [1094604 1094605] {CVE-2014-0206}


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.6.1.el7]
changelog:
  - [x86] ptrace: force IRET path after a ptrace_stop() (Oleg Nesterov) [1115934 1115935] {CVE-2014-4699}


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.7.1.el7]
changelog:
  - [scsi] set DID_TIME_OUT correctly (Ewan Milne) [1122575 1103881]
  - [scsi] fix invalid setting of host byte (Ewan Milne) [1122575 1103881]
  - [scsi] More USB deadlock fixes (Ewan Milne) [1122575 1103881]
  - [scsi] Fix USB deadlock caused by SCSI error handling (Ewan Milne) [1122575 1103881]
  - [scsi] Fix command result state propagation (Ewan Milne) [1122575 1103881]
  - [scsi] Fix spurious request sense in error handling (Ewan Milne) [1122575 1103881]
  - [input] synaptics: fix resolution for manually provided min/max (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: change min/max quirk table to pnp-id matching (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add a matches_pnp_id helper function (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: T540p - unify with other LEN0034 models (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add min/max quirk for the ThinkPad W540 (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add min/max quirk for ThinkPad Edge E431 (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add min/max quirk for ThinkPad T431s, L440, L540, S1 Yoga and X1 (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: report INPUT_PROP_TOPBUTTONPAD property (Benjamin Tissoires) [1122559 1093449]
  - [input] Add INPUT_PROP_TOPBUTTONPAD device property (Benjamin Tissoires) [1122559 1093449]
  - [input] i8042: add firmware_id support (Benjamin Tissoires) [1122559 1093449]
  - [input] serio: add firmware_id sysfs attribute (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add manual min/max quirk for ThinkPad X240 (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add manual min/max quirk (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: fix incorrect placement of __initconst (Benjamin Tissoires) [1122559 1093449]
  - [ethernet] be2net: Fix invocation of be_close() after be_clear() (Ivan Vecera) [1122558 1066644]
  - [ethernet] be2net: enable interrupts in EEH resume (Ivan Vecera) [1121712 1076682]
  - [ethernet] sfc: PIO:Restrict to 64bit arch and use 64-bit writes (Nikolay Aleksandrov) [1119725 1089024]
  - [kernel] ftrace: Hardcode ftrace_module_init() call into load_module() (Takahiro MUNEDA) [1119721 1061553]
  - [kernel] trace: Make register/unregister_ftrace_command __init (Takahiro MUNEDA) [1119721 1061553]
  - [block] nvme: Initialize device reference count earlier (David Milburn) [1119720 1081734]
  - [ata] ahci: accommodate tag ordered controller (David Milburn) [1117154 1083746]
  - [s390] af_iucv: recvmsg problem for SOCK_STREAM sockets (Hendrik Brueckner) [1115585 1109703]
  - [s390] af_iucv: correct cleanup if listen backlog is full (Hendrik Brueckner) [1115584 1109033]
  - [mm] Revert: vmscan: do not swap anon pages just because free+file is low (Johannes Weiner) [1114938 1102991]
  - [drm] nouveau/bios: fix a bit shift error introduced by recent commit (Ulrich Obergfell) [1114869 1089936]
  - [ethernet] bnx2x: Adapter not recovery from EEH error injection (Michal Schmidt) [1107722 1067154]
  - [kernel] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102708 1102710] {CVE-2014-3917}
  - [block] mtip32xx: mtip_async_complete() bug fixes (Jeff Moyer) [1125776 1102281]
  - [block] mtip32xx: Unmap the DMA segments before completing the IO request (Jeff Moyer) [1125776 1102281]
  - [net] l2tp: don't fall back on UDP [get|set]sockopt (Petr  Matousek) [1119465 1119466] {CVE-2014-4943}
  - [s390] ptrace: correct insufficient sanitization when setting psw mask (Hendrik Brueckner) [1114090 1113673] {CVE-2014-3534}


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.8.1.el7]
changelog:
  - [scsi] fnic: fix broken FIP discovery by initializing multicast address (Chris Leech) [1119727 1100078]
  - [scsi] libfcoe: Make fcoe_sysfs optional / fix fnic NULL exception (Chris Leech) [1119727 1100078]
  - [fs] nfs: Don't mark the data cache as invalid if it has been flushed (Scott Mayhew) [1115817 1114054]
  - [fs] nfs: Clear NFS_INO_REVAL_PAGECACHE when we update the file size (Scott Mayhew) [1115817 1114054]
  - [fs] nfs: Fix cache_validity check in nfs_write_pageuptodate() (Scott Mayhew) [1115817 1114054]
  - [mm] hugetlb: ensure hugepage access is denied if hugepages are not supported (David Gibson) [1122115 1081671]
  - [kernel] hrtimer: Prevent all reprogramming if hang detected (Prarit Bhargava) [1113175 1094732]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-113.el7]
changelog:
  - [security] selinux: fix broken peer recv check (Paul Moore) [1043165]
  - [md] dm-raid: Fix possibility of skipping device recovery (Jonathan E Brassow) [1069927]
  - [fs] xfs: avoid AGI/AGF deadlock scenario for inode chunk allocation (Brian Foster) [1052789]
  - [md] dm-cache: fix access beyond end of origin device (Mike Snitzer) [1074606]
  - [md] dm-cache: fix truncation bug when copying a block to/from >2TB fast device (Mike Snitzer) [1075709]
  - [ethernet] bna: don't disable VLAN tag stripping in promisc mode (Ivan Vecera) [1057842]
  - [kernel] posix-timers: Spare workqueue if there is no full dynticks CPU to kick (Frederic Weisbecker) [1074168]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-114.el7]
changelog:
  - [net] netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages (Jiri Pirko) [1077351] {CVE-2014-2523}
  - [net] ipv6: don't set DST_NOCOUNT for remotely added routes (Jiri Pirko) [1075060] {CVE-2014-2309}
  - [net] skbuff: skb_segment: orphan frags before copying ("Michael S. Tsirkin") [1056934] {CVE-2014-0131}
  - [net] skbuff: skb_segment: s/fskb/list_skb/ ("Michael S. Tsirkin") [1056934] {CVE-2014-0131}
  - [net] skbuff: skb_segment: s/skb/head_skb/ ("Michael S. Tsirkin") [1056934] {CVE-2014-0131}
  - [net] skbuff: skb_segment: s/skb_frag/frag/ ("Michael S. Tsirkin") [1056934] {CVE-2014-0131}
  - [net] skbuff: skb_segment: s/frag/nskb_frag/ ("Michael S. Tsirkin") [1056934] {CVE-2014-0131}
  - [net] use kfree_skb_list() helper ("Michael S. Tsirkin") [1056934] {CVE-2014-0131}
  - [net] veth: fix veth vlan features (Flavio Leitner) [1076077]
  - [net] sunrpc/xprtrdma: add separate Kconfig options for NFSoRDMA client and server support (Jeff Layton) [1077957]
  - [virt] kvm/x86: emulate MOVAPD (Igor Mammedov) [1052090]
  - [virt] kvm/x86: emulate MOVAPS (Igor Mammedov) [1052090]
  - [mm] x86: Wrong page freed on preallocate_pmds() failure exit (Larry Woodman) [1073641]
  - [mm] x86: do not leak page->ptl for pmd page tables (Larry Woodman) [1073641]
  - [virt] kvm/x86: fix emulator buffer overflow (Andrew Jones) [1071836] {CVE-2014-0049}
  - [virt] hyperv: Change the receive buffer size for legacy hosts (Jason Wang) [1075279]
  - [x86] quirks: Update DH8900CC Unsupported Device ID (Prarit Bhargava) [1076137]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-115.el7]
changelog:
  - [block] free q->flush_rq in blk_init_allocated_queue error paths (Mike Snitzer) [1078522]
  - [x86] fpu: Clear exceptions in AMD FXSAVE workaround (Phillip Lougher) [1053596] {CVE-2014-1438}
  - [mm] page_alloc: spill to remote nodes before waking kswapd (Johannes Weiner) [1076546]
  - [mm] vmscan: do not swap anon pages just because free+file is low (Johannes Weiner) [1076546]
  - [fs] sunrpc: Ensure call_connect_status() deals correctly with SOFTCONN tasks (Steve Dickson) [1071532]
  - [fs] nfs: Ensure we respect soft mount timeouts during trunking discovery (Steve Dickson) [1071532]
  - [fs] nfs: Schedule recovery if nfs40_walk_client_list() is interrupted (Steve Dickson) [1071532]
  - [fs] sunrpc: Ensure that call_bind times out correctly (Steve Dickson) [1071532]
  - [fs] sunrpc: Ensure that call_connect times out correctly (Steve Dickson) [1071532]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-116.el7]
changelog:
  - [s390] qeth: postpone freeing of qdio memory (Hendrik Brueckner) [1077650]
  - [kernel] rh_taint: Remove taint and update unsupported hardware message (Prarit Bhargava) [1076974]
  - [fs] proc/vmcore: continue vmcore initialization if PT_NOTE is found empty (Chao WANG) [1077535]
  - [net] ipv6: ip6_append_data_mtu do not handle the mtu of the second fragment properly (Jiri Pirko) [1079873]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-117.el7]
changelog:
  - [md] dm-thin: fix dangling bio in process_deferred_bios error path (Mike Snitzer) [1081781]
  - [md] dm: take care to copy the space map roots before locking the superblock (Mike Snitzer) [1081781]
  - [md] dm-transaction-manager: fix corruption due to non-atomic transaction commit (Mike Snitzer) [1081781]
  - [md] dm-era: fixes for issues identified upstream (Mike Snitzer) [1081781]
  - [md] dm-cache: remove remainder of distinct discard block size (Mike Snitzer) [1062679]
  - [md] dm-cache: prevent corruption caused by discard_block_size > cache_block_size (Mike Snitzer) [1062679]
  - [ipc] change kern_ipc_perm.deleted type to bool (Phillip Lougher) [1043807] {CVE-2013-7026}
  - [ipc] introduce ipc_valid_object() helper to sort out IPC_RMID races (Phillip Lougher) [1043807] {CVE-2013-7026}
  - [ipc] shm: fix shm_file deletion races (Phillip Lougher) [1043807] {CVE-2013-7026}
  - [drm] udl: take reference to device struct for dma-bufs (Dave Airlie) [1077774]
  - [security] keys: Allow special keys (eg. DNS results) to be invalidated by CAP_SYS_ADMIN (David Howells) [1074240]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-118.el7]
changelog:
  - [wireless] ath9k: Fix LNA gpio for AR9485 (John Green) [1082017]
  - [infiniband] core: Don't resolve passive side RoCE L2 address in cma req handler (Amir Vadai) [1075852]
  - [fs] xfs: fix buffer use after free on IO error (Eric Sandeen) [924301]
  - [scsi] be2iscsi: Bump the driver version (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix DMA Out of SW-IOMMU space error (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix scsi_cmnd leakage in driver (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix the session cleanup when reboot/shutdown happens (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix doorbell format for EQ/CQ/RQ s per SLI spec (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix port speed typo in driver (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix handling timed out MBX completion from FW (Rob Evers) [1052416]
  - [fs] nfs: Fix a use-after-free problem in open() (Steve Dickson) [1062809]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-119.el7]
changelog:
  - [net] bonding: remove bond_resend_igmp_join_requests read_unlock leftover (Veaceslav Falico) [1080924]
  - [ethernet] mlx4: Support shutdown() interface (Amir Vadai) [1046216]
  - [zram] fix invalid memory access (Jerome Marchand) [1081936]
  - [zram] protect zram_reset_device() call (Jerome Marchand) [1081936]
  - [zram] remove zram_sysfs file (Jerome Marchand) [1081936]
  - [zram] use atomic64_xxx() to replace zram_stat64_xxx() (Jerome Marchand) [1081936]
  - [zram] optimize memory operations with clear_page()/copy_page() (Jerome Marchand) [1081936]
  - [zram] kill unused zram_get_num_devices() (Jerome Marchand) [1081936]
  - [zram] simplify and optimize dev_to_zram() (Jerome Marchand) [1081936]
  - [kernel] futex: revert back to the explicit waiter counting code (Larry Woodman) [1081100]
  - [kernel] audit: Allow login in non-init namespaces (Richard Guy Briggs) [1082597]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-120.el7]
changelog:
  - [net] netfilter: fix panic when oom during rule replacement (Florian Westphal) [985657]
  - [net] netfilter: x_tables: fix ordering of jumpstack allocation and table update (Florian Westphal) [985657]
  - [virt] kvm/ioapic: try to recover if pending_eoi goes out of range (Paolo Bonzini) [1036478]
  - [virt] kvm/ioapic: fix assignment of ioapic->rtc_status.pending_eoi (Paolo Bonzini) [1036478 1081590] {CVE-2014-0155}
  - [virt] kvm/ioapic: reinject pending interrupts on KVM_SET_IRQCHIP (Paolo Bonzini) [1036478]
  - [virt] kvm/ioapic: extract body of kvm_ioapic_set_irq (Paolo Bonzini) [1036478]
  - [virt] kvm/ioapic: clear IRR for edge-triggered interrupts at delivery (Paolo Bonzini) [1036478]
  - [virt] kvm/ioapic: merge ioapic_deliver into ioapic_service (Paolo Bonzini) [1036478]
  - [virt] kvm: ignore ioapic polarity (Paolo Bonzini) [1036478]
  - [core] device: Create 'device_driver_rh' KABI shadowing structure (Myron Stowe) [1083692]
  - [core] device: Create 'device_rh' KABI shadowing structure (Myron Stowe) [1083692]
  - [scsi] Reserve space in structures for future XCOPY support (Ewan Milne) [1080430]
  - [fs] xfs: fix bad hash ordering (Brian Foster) [1083206]
  - [fs] xfs: always do log forces via the workqueue (Brian Foster) [1052004]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-229.7.2.vz7.8.6]
changelog:
  - ms/fuse: break infinite loop in fuse_fill_write_pages() (Maxim Patlasov)
  - ploop: release io_context on ploop_thread() exit (Maxim Patlasov) [PSBM-39956]
  - ms/cfq-iosched: remove @gfp_mask from cfq_find_alloc_queue() (Maxim Patlasov) [PSBM-39956]
  - ve: mark SYSFS and IPGRE features deprecated (Konstantin Khorenko) [PSBM-33687]
  - ms/lockd: create NSM handles per net namespace (Andrey Ryabinin) [PSBM-39721]
  - ms/SUNRPC: NULL utsname dereference on NFS umount during namespace cleanup (Trond Myklebust) [PSBM-39721, although this is]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-229.7.2.vz7.8.7]
changelog:
  - config.OpenVZ: enable TAP accounting (Konstantin Khorenko) [PSBM-27713]
  - ve/net: introduce TAP accounting (Vladimir Sementsov-Ogievskiy) [PSBM-27713]
  - oom: resurrect berserker mode (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-17930]
  - oom: pass points and overdraft to oom_kill_process (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: rework logic behind memory.oom_guarantee (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-37915]
  - oom: drop OOM_SCAN_ABORT (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: introduce oom timeout (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-38581]
  - oom: rework locking design (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - memcg: add lock for protecting memcg->oom_notify list (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - memcg: add mem_cgroup_get/put helpers (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - ms/mm: oom_kill: clean up victim marking and exiting interfaces (Vladimir Davydov) [PSBM-26973]
  - ms/oom: thaw the OOM victim if it is frozen (Vladimir Davydov) [PSBM-26973]
  - ms/oom: add helpers for setting and clearing TIF_MEMDIE (Vladimir Davydov) [PSBM-26973]
  - ms/oom: make sure that TIF_MEMDIE is set under task_lock (Vladimir Davydov) [PSBM-26973]
  - ms/oom: don't count on mm-less current process (Vladimir Davydov) [PSBM-26973]
  - ms/mm, oom: remove unnecessary exit_state check (Vladimir Davydov) [PSBM-26973]
  - ms/make default ->i_fop have ->open() fail with ENXIO (Andrew Vagin) [PSBM-39834]
  - ms/shm: wait for pins to be released when sealing (Andrew Vagin) [PSBM-39834]
  - ms/selftests: add memfd/sealing page-pinning tests (Andrew Vagin) [PSBM-39834]
  - ms/selftests: add memfd_create() + sealing tests (Andrew Vagin) [PSBM-39834]
  - ms/shm: add memfd_create() syscall (Andrew Vagin) [PSBM-39834]
  - ms/shm: add sealing API (Andrew Vagin) [PSBM-39834]
  - ms/mm: allow drivers to prevent new writable mappings (Andrew Vagin) [PSBM-39834]
  - ms/mm: mmap_region: kill correct_wcount/inode, use allow_write_access() (Andrew Vagin) [PSBM-39834]
  - ms/sched: add cond_resched_rcu() helper (Andrew Vagin) [PSBM-39834]
  - ms/aio: Make it possible to remap aio ring (Andrew Vagin) [PSBM-39834]
  - ms/prctl: PR_SET_MM -- introduce PR_SET_MM_MAP operation (Andrew Vagin) [PSBM-39834]
  - ms/prctl: PR_SET_MM -- factor out mmap_sem when updating mm::exe_file (Andrew Vagin) [PSBM-39834]
  - ms/mm: introduce check_data_rlimit helper (Andrew Vagin) [PSBM-39834]
  - ve: Strip unset options in ve.mount_opts (Kirill Tkhai)


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-229.7.2.vz7.8.9]
changelog:
  - memcg: allow to disable cleancache per memcg (Vladimir Davydov) [PSBM-34163]
  - oom: Revert "oom: do not dump all tasks info on each oom kill" (Konstantin Khorenko)
  - ve/device_cgroup: fake allowing all devices for docker inside VZCT (Pavel Tikhomirov) [PSBM-34529 PSBM-38691]
  - ms/prctl: avoid using mmap_sem for exe_file serialization (Davidlohr Bueso) [PSBM-39834]
  - ms/prctl: more prctl(PR_SET_MM_*) checks (Alexey Dobriyan) [PSBM-39834]
  - ms/mm: use may_adjust_brk helper (Cyrill Gorcunov) [PSBM-39834]
  - ve/fs: allow to remount from ve user ns (Pavel Tikhomirov)
  - ve/quota: allow to manage quota in top CT user ns (Konstantin Khorenko) [PSBM-40281]
  - ve/tun: Make config to dep on TUN (Cyrill Gorcunov)
  - ve/vtty: Make indices to match pcs6 scheme (Cyrill Gorcunov) [PSBM-40088]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-229.7.2.vz7.9.1]
changelog:
  - ms/veth: add netpoll support (Andrew Vagin) [PSBM-34959]
  - ms/fsnotify: Make fdinfo to always success (Cyrill Gorcunov) [PSBM-40337]
  - ve/xfs: add missing ub_io_account_dirty in set_page_dirty (Vladimir Davydov)
  - ms/x86/xsaves: Detect xsaves/xrstors feature (Fenghua Yu) [PSBM-33638]
  - arch: mask cpuid 0x00000007 features in /proc/cpuinfo (Vladimir Davydov) [PSBM-30880 PSBM-33638]
  - arch/x86: assure cpuinfo inside ct is subset of host's one (Vladimir Davydov) [PSBM-30688 PSBM-33638]
  - arch/x86: disable cpuid faulting on reboot and cpu offline (Vladimir Davydov) [PSBM-30548 PSBM-33638]
  - arch/x86: only enable cpuid faulting for containers (Vladimir Davydov) [PSBM-30516 PSBM-33638]
  - arch/x86: report cpuid:0000000d_1 in cpuinfo (Vladimir Davydov) [PSBM-30577 PSBM-33638]
  - arch/x86: check if cpuid level exists while reporting cpuinfo (Vladimir Davydov) [PSBM-33638]
  - arch/x86: take into account cpuid override while reporting cpuinfo (Vladimir Davydov) [PSBM-28682 PSBM-33638]
  - arch/x86: introduce cpuid override (Vladimir Davydov) [PSBM-28682 PSBM-33638]
  - cpuinfo: obtain cpuflags for the current cpu too (Vladimir Davydov) [PSBM-33638]
  - cpuinfo: zero all bits in cap mask (Vladimir Davydov) [PSBM-33638]
  - ubc: proc show stats in ve user ns (Pavel Tikhomirov) [PSBM-40433]
  - ve/proc: Use ve_capable() in oom_score_adj_write() (Kirill Tkhai) [PSBM-40359]
  - venet: remove per-net hooks and related code (Stanislav Kinsburskiy) [PSBM-23441 PSBM-23441]
  - venet: add newlink and dellink callbacks to rtnetlink operations (Stanislav Kinsburskiy) [PSBM-23441 PSBM-23441]
  - venet: fix false positive return code in case of error in venet_init() (Stanislav Kinsburskiy) [PSBM-23441]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-229.7.2.vz7.9.2]
changelog:
  - ms/net/[regression]: do not allow to reopen socket (Dmitry Monakhov) [PSBM-40500]
  - cbt/blkdev.h: fix compilation in case CONFIG_BLK_DEV_CBT is not set (Stanislav Kinsburskiy)


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-229.7.2.vz7.9.3]
changelog:
  - ve/nf_conntrack: expose "nf_conntrack_events*" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_acct" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: export nf_conntrack_hide_sysctl() helper (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_max" in containers (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: allow expose of priviledged sysctl inside containers (Stanislav Kinsburskiy) [PSBM-40044]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-229.7.2.vz7.9.4]
changelog:
  - ms/seccomp: add ptrace options for suspend/resume (Andrew Vagin) [PSBM-39517]
  - x86/vdso: Fix build failure with GCC5 (Andrey Ryabinin)
  - ve/fs/namei: fix capabilities check in sys_renameat2 () to support Containers (Stanislav Kinsburskiy)
  - ve/fs/namei: check containers capabilities in may_linkat() (Stanislav Kinsburskiy) [PSBM-40567]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-229.7.2.vz7.9.7]
changelog:
  - ve/mm,oom: print information about ve of killed task (Andrey Ryabinin) [PSBM-40610]
  - ms/mm: introduce idle page tracking (Vladimir Davydov) [PSBM-32460]
  - ms/mm/mm_init.c: make creation of the mm_kobj happen earlier than device_initcall (Vladimir Davydov) [PSBM-32460]
  - ms/sysfs: create bin_attributes under the requested group (Vladimir Davydov) [PSBM-32460]
  - ms/mmu-notifier: add clear_young callback (Vladimir Davydov) [PSBM-32460]
  - ms/proc: add kpagecgroup file (Vladimir Davydov) [PSBM-32460]
  - ms/memcg: add page_cgroup_ino helper (Vladimir Davydov) [PSBM-32460]
  - Revert "ms/memcg: add page_cgroup_ino helper" (Vladimir Davydov) [PSBM-32460]
  - Revert "ms/memcg/proc: add kpagecgroup file" (Vladimir Davydov) [PSBM-32460]
  - Revert "ms/mm/proc: add kpageidle file" (Vladimir Davydov) [PSBM-32460]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.5.1.el7]
changelog:
  - [net] vsock: Fix lockdep issue (Dave Anderson) [1292372 1253971]
  - [net] vsock: sock_put wasn't safe to call in interrupt context (Dave Anderson) [1292372 1253971]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.7.1.el7]
changelog:
  - [scsi] scsi_sysfs: protect against double execution of __scsi_remove_device() (Vitaly Kuznetsov) [1292075 1273723]
  - [powerpc] mm: Recompute hash value after a failed update (Gustavo Duarte) [1289452 1264920]
  - [misc] genwqe: get rid of atomic allocations (Hendrik Brueckner) [1289450 1270244]
  - [mm] use only per-device readahead limit (Eric Sandeen) [1287550 1280355]
  - [net] ipv6: update ip6_rt_last_gc every time GC is run (Hannes Frederic Sowa) [1285370 1270092]
  - [kernel] tick: broadcast: Prevent livelock from event handler (Prarit Bhargava) [1284043 1265283]
  - [kernel] clockevents: Serialize calls to clockevents_update_freq() in the core (Prarit Bhargava) [1284043 1265283]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.8.1.el7]
changelog:
  - [md] dm: fix AB-BA deadlock in __dm_destroy() (Mike Snitzer) [1296566 1292481]
  - [md] revert "dm-mpath: fix stalls when handling invalid ioctls" (Mike Snitzer) [1287552 1277194]
  - [cpufreq] intel_pstate: Fix limits->max_perf rounding error (Prarit Bhargava) [1296276 1279617]
  - [cpufreq] intel_pstate: Fix limits->max_policy_pct rounding error (Prarit Bhargava) [1296276 1279617]
  - [cpufreq] revert "intel_pstate: fix rounding error in max_freq_pct" (Prarit Bhargava) [1296276 1279617]
  - [crypto] nx: 842 - Add CRC and validation support (Gustavo Duarte) [1289451 1264905]
  - [powerpc] eeh: More relaxed condition for enabled IO path (Steve Best) [1289101 1274731]
  - [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275929 1273465] {CVE-2015-7872}
  - [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275929 1273465] {CVE-2015-7872}
  - [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275929 1273465] {CVE-2015-7872}
  - [x86] paravirt: Replace the paravirt nop with a bona fide empty function (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Fix a paravirt stack-clobbering bug in the NMI code (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Use DF to avoid userspace RSP confusing nested NMI detection (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Reorder nested NMI checks (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Improve nested NMI comments (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Switch stacks on userspace NMI entry (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.9.1.el7]
changelog:
  - [security] keys: Fix keyring ref leak in join_session_keyring() (David Howells) [1298931 1298036] {CVE-2016-0728}


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.10.1.el7]
changelog:
  - [of] return NUMA_NO_NODE from fallback of_node_to_nid() (Thadeu Lima de Souza Cascardo) [1300614 1294398]
  - [net] openvswitch: do not allocate memory from offline numa node (Thadeu Lima de Souza Cascardo) [1300614 1294398]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.10.1.vz7.12.1]
changelog:
  - ms/kvm/x86: Pass return code of kvm_emulate_hypercall (Andrey Smetanin) [PSBM-44419]
  - ms/kvm/x86: Hyper-V VMBus hypercall userspace exit (Andrey Smetanin) [PSBM-44419]
  - ms/kvm/x86: Reject Hyper-V hypercall continuation (Andrey Smetanin) [PSBM-44419]
  - ms/drivers/hv: Move VMBus hypercall codes into Hyper-V UAPI header (Andrey Smetanin) [PSBM-44419]
  - ms/kvm/x86: Rename Hyper-V long spin wait hypercall (Andrey Smetanin) [PSBM-44419]
  - tcache/proc/meminfo: add tcache pages to MemAvailable (Vladimir Davydov)
  - ve: move ve-related checks to separated function from ve_can_attach() (Stanislav Kinsburskiy) [PSBM-44143]
  - ve: move task-related checks to separated function from ve_can_attach() (Stanislav Kinsburskiy) [PSBM-44143]
  - ve: remove is_locked check from ve_can_attach() (Stanislav Kinsburskiy)
  - tcache: improve reclaim fairness (Vladimir Davydov) [PSBM-41239]
  - tcache: store tcache_node in page->mapping instead of page->private (Vladimir Davydov) [PSBM-41239]
  - ms/mm/balloon_compaction: redesign ballooned pages management (Konstantin Khlebnikov) [PSBM-41239]
  - mm: vmscan: don't drop global slab caches at once if root cgroup is empty (Vladimir Davydov) [PSBM-41239]
  - ve/aio: Enumerate ioctl numbers right (Kirill Tkhai) [PSBM-42488]
  - ms/KVM: x86: set TMR when the interrupt is accepted (Paolo Bonzini) [PSBM-41387]
  - ve/fs/sync: don't skip dirty metadata on filtered sync (Andrey Ryabinin) [PSBM-39583 PSBM-44125]
  - ve: Add a handle to checkpoint/restore AIO context (Kirill Tkhai) [PSBM-42488 PSBM-41425]
  - tcache/tswap: enable by default (Vladimir Davydov)
  - ms/fs/pnode.c: treat zero mnt_group_id-s as unequal (Maxim Patlasov) [PSBM-43834]
  - kvm: do not SetPageDirty for file mappings (Maxim Patlasov) [PSBM-43243]
  - ms/kvm/x86: Hyper-V SynIC timers tracepoints (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V SynIC tracepoints (Andrey Smetanin)
  - ms/kvm/x86: Update SynIC timers on guest entry only (Andrey Smetanin)
  - ms/kvm/x86: Skip SynIC vector check for QEMU side (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V fix SynIC timer disabling condition (Andrey Smetanin)
  - ms/kvm/x86: Reorg stimer_expiration() to better control timer restart (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Andrey Smetanin)
  - ms/kvm/x86: Drop stimer_stop() function (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V timers fix incorrect logical operation (Andrey Smetanin)
  - ms/kvm/x86: Remove Hyper-V SynIC timer stopping (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V SynIC timers (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V internal helper to read MSR HV_X64_MSR_TIME_REF_COUNT (Andrey Smetanin)
  - ms/kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Andrey Smetanin)
  - ms/kvm/x86: Rearrange func's declarations inside Hyper-V header (Andrey Smetanin)
  - ms/drivers/hv: Move struct hv_timer_message_payload into UAPI Hyper-V x86 header (Andrey Smetanin)
  - ms/drivers/hv: Move struct hv_message into UAPI Hyper-V x86 header (Andrey Smetanin)
  - ms/drivers/hv: Move HV_SYNIC_STIMER_COUNT into Hyper-V UAPI x86 header (Andrey Smetanin)
  - ms/drivers/hv: replace enum hv_message_type by u32 (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V kvm exit (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V synthetic interrupt controller (Andrey Smetanin)
  - ms/kvm/x86: per-vcpu apicv deactivation support (Andrey Smetanin)
  - ms/kvm/irqchip: kvm_arch_irq_routing_update renaming split (Andrey Smetanin)
  - ms/drivers/hv: share Hyper-V SynIC constants with userspace (Andrey Smetanin)
  - ms/kvm/irqchip: allow only multiple irqchip routes per GSI (Andrey Smetanin)
  - ms/kvm/eventfd: add arch-specific set_irq (Andrey Smetanin)
  - ms/kvm/eventfd: factor out kvm_notify_acked_gsi() (Andrey Smetanin)
  - ms/kvm/eventfd: avoid loop inside irqfd_update() (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V HV_X64_MSR_VP_RUNTIME support (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V HV_X64_MSR_VP_INDEX export for QEMU. (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V HV_X64_MSR_RESET msr (Andrey Smetanin)
  - kvm/x86: Align logging messages to MS one (Andrey Smetanin)
  - kvm/x86: get(set)_msr_hyperv() -> kvm_hv_get(set)_msr() rename (Andrey Smetanin)
  - kvm/x86: Coding style fixes (Andrey Smetanin) [PSBM-32435]
  - ve/ext4: treat panic_on_errors as remount-ro_on_errors in CTs (Dmitry Monakhov)
  - vziolimit/fs/ext4: allow to throttle due to iolimit while reading directory blocks (Vladimir Davydov)
  - cbt: fix blk_cbt_set endless loop (Dmitry Monakhov) [PSBM-43936]
  - ub: zap unused task_beancounter fields (Vladimir Davydov)
  - ve: Use @real_start_timespec in uptime_proc_show (Cyrill Gorcunov) [PSBM-41406]
  - ve: Add interface for @start_timespec and @real_start_timespec adjustmen (Cyrill Gorcunov) [PSBM-41311 PSBM-41406]
  - ms/ipv6: don't disable interface if last ipv6 address is removed (Kirill Tkhai) [PSBM-43870]
  - ve/fs/sync: per containter sync and syncfs (Andrey Ryabinin) [PSBM-39583]
  - ve/fs/writeback: filter per-container inodes earlier (Andrey Ryabinin) [PSBM-39583]
  - ms/KVM: x86: Reload pit counters for all channels when restoring state (Andrew Honig)
  - ms/KVM: x86: removing unused variable (Saurabh Sengar)
  - ms/keys: Fix race between read and revoke (Vasily Averin) [PSBM-43800]
  - ve/coredump: virtualize kernel.core_pattern sysctl (Pavel Tikhomirov) [PSBM-43596]
  - ve/sysctl: add macro sysctl_virtual to unify sysctl's virtualization (Pavel Tikhomirov) [PSBM-43596]
  - config.OpenVZ: disable RH_KABI_SIZE_ALIGN_CHECKS (Andrey Ryabinin)
  - ve/cpuset: revert changes allowing to attach to empty cpusets (Vladimir Davydov) [PSBM-34089 PSBM-42087]
  - ms/tty: Invert tty_lock/ldisc_sem lock order (Cyrill Gorcunov) [PSBM-43454]
  - tty: Fix task hang if one of peers is sitting in read (Cyrill Gorcunov) [PSBM-43454]
  - oom: resurrect berserker mode (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-17930]
  - oom: pass points and overdraft to oom_kill_process (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: rework logic behind memory.oom_guarantee (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-37915]
  - oom: drop OOM_SCAN_ABORT (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: introduce oom timeout (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-38581]
  - oom: rework locking design (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - ve/nfsd: do not print nfscld warning in a container (Stanislav Kinsburskiy) [PSBM-43468]
  - ve/nfsd: disable legacy recovery tracking for containers (Stanislav Kinsburskiy) [PSBM-43468]
  - ve/tty: Revert custom virtualization (Cyrill Gorcunov) [PSBM-41804]
  - ve/kernel: allow to increase rlimit from inside container (Vladimir Davydov) [PSBM-43410]
  - ve/fs/writeback: use redirty_tail to skip inodes (Andrey Ryabinin) [PSBM-43375]
  - ve/net/dummy: enable support in a container (Vasily Averin) [PSBM-43329]
  - ms/unix: avoid use-after-free in ep_remove_wait_queue (Rainer Weikusat)
  - ve/net_core: fix build error with owner_ve->ve_netns (Dmitry Safonov)
  - ve/binfmt_misc: fix compilation outside CONFIG_BINFMT_MISC (Dmitry Safonov)
  - rh/sysfs/blk-sysfs: fix uninitialized var usage (Dmitry Safonov)
  - ve/kmod: fix build without CONFIG_VE_IPTABLES (Dmitry Safonov)
  - ve/fs: Print a message if a VE reaches its limit on mounts (Evgenii Shatokhin) [PSBM-42825]
  - Revert "mm: vmscan: do not scan lruvec if it seems to be unreclaimable" (Vladimir Davydov) [PSBM-35155]
  - memcg: never fail kmem allocations (Vladimir Davydov)
  - ms/autofs: show pipe inode in mount options (Stanislav Kinsburskiy) [PSBM-41217 PSBM-41961]
  - ub: drop unused UB_DIRTY_EXCEEDED (Andrey Ryabinin)
  - ve/mm/page-writeback: Introduce per-CT dirty memory limit (Andrey Ryabinin) [PSBM-33841]
  - ve/fs/writeback: per-CT fs writeback (Andrey Ryabinin) [PSBM-33841]
  - ve/xattr: allow set/remove security.capability inside CT (Pavel Tikhomirov) [PSBM-43294 PSBM-43267 OVZ-6657]
  - ms/ixgbe: on recv increment rx.ring->stats.yields (Pavel Tikhomirov)
  - Revert "ve/cgroup: add VE mark to each user cgroup name on mount" (Konstantin Khorenko) [PSBM-43169]
  - ve/lib/nlattr: use ve_pr_warn_ratelimited instead pr_warn_ratelimited (Dmitry Safonov) [PSBM-42313]
  - ve_prink: introduce ve_pr_<level>_ratelimited (Dmitry Safonov) [PSBM-42313]
  - ve/fs: Use comparison of signed integers in ve_mount_allowed() (Evgenii Shatokhin) [PSBM-42825]
  - ms/sched/core: Fix unserialized r-m-w scribbling stuff (Kirill Tkhai)
  - ve/sched/core: Set task_struct::woken_while_running under rq lock (Kirill Tkhai)
  - ve/cgroup: Add pseudosuper state for restore sake (Cyrill Gorcunov) [PSBM-34299 PSBM-43169 PSBM-42573]
  - ve/kvm: Allow scheduler throttling in __vcpu_run() (Kirill Tkhai) [PSBM-42358]
  - ve/sched: introduce cond_resched_may_throttle (Kirill Tkhai) [PSBM-18888 PSBM-42358]
  - ve/kmod: list of allowed to autoload in CT modules (Dmitry Safonov) [PSBM-41216]
  - ve/cgroup: add VE mark to each user cgroup name on mount (Stanislav Kinsburskiy) [PSBM-42573]
  - rh/mm: PTE isn't dirty when _PAGE_SOFT_DIRTY bit set (Dmitry Safonov) [PSBM-42094]
  - ms/ovl: fix permission checking for setattr (Cyrill Gorcunov)
  - ploop: rename extent maps management funtions (Alexey V. Vissarionov)
  - ve/userns: allow unprivileged creation of the mount namespace. (Andrey Ryabinin) [OVZ-6646 PSBM-42760]
  - ve/userns: don't TAINT kernel with 'tech preview' (Andrey Ryabinin)
  - ve/fs: drop useless d_root_check() (Andrey Ryabinin) [PSBM-41919]
  - ms/ixgbe: Refactor busy poll socket code to address multiple issues (Pavel Tikhomirov) [PSBM-40330]
  - tcache: fix use-after-free in tcache_invalidate_node_pages() (Andrey Ryabinin) [PSBM-42104]
  - ms/ipv6/addrlabel: fix ip6addrlbl_get() (Andrey Ryabinin) [PSBM-42457]
  - ve/vtty: Don't close unread master peer if slave is nonzero (Cyrill Gorcunov) [PSBM-41985 PSBM-41672]
  - ve/ptrace: don't change the upstream logic which affects criu (Andrew Vagin) [PSBM-42216]
  - ms/ses: fix additional element traversal bug (James Bottomley) [PSBM-40330]
  - ve/vmscan: do not throttle kthreads due to too_many_isolated (Vladimir Davydov) [PSBM-41410]
  - ploop: disable WRITE SAME for io_kaio (Maxim Patlasov) [PSBM-41965]
  - ve/fs: add per-VE limit of mount points (Evgenii Shatokhin) [PSBM-34438]
  - kernel: check the JOBCTL_TRAPPING_BIT bit correctly (Andrew Vagin) [PSBM-42052]
  - ms/xfs_qm: lost hunk from "ms/list_lru: add helpers to isolate items" (Vladimir Davydov) [PSBM-42319]
  - ms/xfs_qm: lost hunk from "ms/list_lru: introduce list_lru_shrink_{count,walk}" (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: fix dquot isolation hang (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: convert dquot cache lru to list_lru fix (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: convert dquot cache lru to list_lru (Vladimir Davydov) [PSBM-42319]
  - ext4: ext4_split_extent_at should not cache tail extent (Dmitry Monakhov) [PSBM-40580]
  - ms/vhost/net: extend device allocation to vmalloc (Michael S. Tsirkin) [PSBM-42199]
  - ms/rmap: rmap_walk: move VM_BUG_ON to rmap_walk_file (Vladimir Davydov) [PSBM-42214]
  - mm: page_idle: look up page anon_vma carefully when checking references (Vladimir Davydov) [PSBM-42015 PSBM-42015]
  - ms/mm/rmap: extend rmap_walk_xxx() to cope with different cases (Vladimir Davydov) [PSBM-42015]
  - ms/mm/rmap: make rmap_walk to get the rmap_walk_control argument (Vladimir Davydov) [PSBM-42015]
  - ms/mm/rmap: factor lock function out of rmap_walk_anon() (Vladimir Davydov) [PSBM-42015]
  - ext4: fix race aio-dio vs freeze_fs (Dmitry Monakhov) [PSBM-39352]
  - ve/l2tp: Drop VE_FEATURE_PPP feature test (Cyrill Gorcunov)
  - ve/vtty: Register devices in sysfs (Cyrill Gorcunov) [PSBM-41628 PSBM-41804]
  - bc/mm: mmap_region: uncharge UB_LOCKEDPAGES if vma cannot be locked (Vladimir Davydov) [PSBM-39435]
  - ve/fanotify: Use ve-capable instead of plain capable test (Cyrill Gorcunov) [PSBM-41409]
  - tswap: exert equal pressure on tmem and lru pages (Vladimir Davydov)
  - tcache: exert equal pressure on tmem and lru pages (Vladimir Davydov)
  - vmscan: fix slab vs lru balance (Vladimir Davydov)
  - rh7/user_ns: enable user namespaces by default (Konstantin Khorenko)
  - ve/tun: expose "owner", "group" and "tun_flags" attributes in container (Stanislav Kinsburskiy) [PSBM-39726]
  - x86: "pages zeroing on free" option introduced (Stanislav Kinsburskiy) [PSBM-33071]
  - ms/net: avoid reference counter overflows on fib_rules in multicast forwarding (Hannes Frederic Sowa) [PSBM-41453]
  - kernel/freezer: don't freeze stopped & about to be ptraced task (Andrey Ryabinin) [PSBM-40683]
  - ms/ipmr,ip6mr: call ip6mr_free_table() on failure path (WANG Cong)
  - ve/memcg: enable kmem accounting for all cgroups (Vladimir Davydov)
  - ms/netfilter: Restore xt_connlimit version 0 (Kirill Tkhai) [PSBM-40186]
  - ms/cfq-iosched: fix oom cfq_queue ref leak in cfq_set_request() (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: fix async oom queue handling (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: simplify control flow in cfq_get_queue() (Tejun Heo) [PSBM-41334]
  - ms/fsnotify: fix check in inotify fdinfo printing (Cyrill Gorcunov)
  - ms/vmscan: do not force-scan file lru if its absolute size is small (Vladimir Davydov)
  - ve/mm: allow container's root to ignore mlock limit (Andrey Ryabinin) [PSBM-41405]
  - ve/vtty: n_tty -- Allow write on sole slave vtty peer (Cyrill Gorcunov) [PSBM-40740]
  - config.OpenVZ: enable netfilter module xt_match_wdog_tmo (Konstantin Khorenko) [PSBM-40736]
  - ms/kasan: fix kmemleak false-positive in kasan_module_alloc() (Andrey Ryabinin) [PSBM-41328]
  - ms/include/linux/kmemleak.h: needs slab.h (Andrew Morton)
  - ms/epoll: Make fdinfo to always success (Cyrill Gorcunov) [PSBM-41386]
  - tcache: account reclaimed pages to scan_control->nr_reclaimed (Vladimir Davydov)
  - signal/ve: allow to send signal from another ve namespace (Andrey Ryabinin) [PSBM-40896 PSBM-17903]
  - config.OpenVZ: enable fencing watchdog for HA cluster support (Konstantin Khorenko) [PSBM-40736]
  - fence-watchdog: Port: diff-fence-watchdog-netfilter-add-aliases-for-module-wdog_tmo (Pavel Tikhomirov)
  - fence-watchdog: Port: diff-fence-watchdog-arptables-add-ability-to-filter-by-watchdog-timeout-v5 (Pavel Tikhomirov) [PSBM-23253]
  - fence-watchdog: Port: diff-fence-watchdog-add-wdog_tmo-match (Pavel Tikhomirov) [PSBM-23253]
  - fence-watchdog: Port: diff-fence-watchdog-add-netfilter-action (Pavel Tikhomirov) [PSBM-23253 PSBM-23253]
  - fence-watchdog: Port: diff-fence-watchdog-schedule-work-in-case-of-halt-action (Pavel Tikhomirov) [PSBM-20034]
  - fence-watchdog: Port: diff-fence-watchdog-rename-action-to-halt (Pavel Tikhomirov) [PSBM-18395]
  - fence-watchdog: Port: diff-fence-watchdog-write-log-message-when-timer-elapses (Pavel Tikhomirov) [PSBM-18312 PSBM-18312]
  - fence-watchdog: Port: diff-fence-watchdog-add-support-of-crash (Pavel Tikhomirov) [PSBM-13631 PSBM-13631]
  - fence-watchdog: Port: diff-fence-watchdog-introduce-fencing-watchdog-for-HA-cluster-3 (Pavel Tikhomirov) [PSBM-40736 PSBM-13631 PSBM-13631]
  - ms/x86/mm, kasan: Silence KASAN warnings in get_wchan() (Andrey Ryabinin)
  - ms/compiler, atomics, kasan: Provide READ_ONCE_NOCHECK() (Andrey Ryabinin)
  - ms/x86/process: Unify 32bit and 64bit implementations of get_wchan() (Thomas Gleixner)
  - ms/x86/process: Add proper bound checks in 64bit get_wchan() (Thomas Gleixner)
  - ms/x86/asm/entry: Create and use a 'TOP_OF_KERNEL_STACK_PADDING' macro (Andrey Ryabinin)
  - Makefile: properly generate KERNELRELEASE value (Konstantin Khorenko) [PSBM-34957]
  - config.OpenVZ: enable CONFIG_LOCALVERSION_AUTO (Konstantin Khorenko) [PSBM-34957]
  - ve/vznetstat: fix RCU-protected "info_V{4, 6}" pointers initialization (Stanislav Kinsburskiy)
  - ve/vtty: Don't zap termios fields on slave peer (Cyrill Gorcunov) [PSBM-41057]
  - ms/pvpanic: Set high notifier priority (Takashi Iwai) [PSBM-41189]
  - fuse: allow to mount fuse filesystems inside CT (Andrey Ryabinin) [PSBM-41075]
  - ve: introduce ve_init_user_ns() helper (Andrey Ryabinin) [PSBM-41075]
  - ve/net: fix userspace if_tun.h compilation (Vladimir Sementsov-Ogievskiy) [PSBM-40629]
  - ve/autofs: allow /dev/autofs ioctl's in a Container (Stanislav Kinsburskiy) [PSBM-26968]
  - ve/acct: Allow process accounting in containers (Evgenii Shatokhin) [PSBM-40587]
  - sched: disable dumping cfs info on sysrq trigger (Vladimir Davydov) [PSBM-41140]
  - ve/net: fix tap ve shaping (Vladimir Sementsov-Ogievskiy) [PSBM-40888 PSBM-40888]
  - ve/mm,oom: print information about ve of killed task (Andrey Ryabinin) [PSBM-40610]
  - ms/mm: introduce idle page tracking (Vladimir Davydov) [PSBM-32460]
  - ms/mm/mm_init.c: make creation of the mm_kobj happen earlier than device_initcall (Vladimir Davydov) [PSBM-32460]
  - ms/sysfs: create bin_attributes under the requested group (Vladimir Davydov) [PSBM-32460]
  - ms/mmu-notifier: add clear_young callback (Vladimir Davydov) [PSBM-32460]
  - ms/proc: add kpagecgroup file (Vladimir Davydov) [PSBM-32460]
  - ms/memcg: add page_cgroup_ino helper (Vladimir Davydov) [PSBM-32460]
  - ve/cgroups: Allow to attach a single threaded task only into a container (Cyrill Gorcunov)
  - ms/seccomp: add ptrace options for suspend/resume (Andrew Vagin) [PSBM-39517]
  - x86/vdso: Fix build failure with GCC5 (Andrey Ryabinin)
  - ve/fs/namei: fix capabilities check in sys_renameat2 () to support Containers (Stanislav Kinsburskiy)
  - ve/fs/namei: check containers capabilities in may_linkat() (Stanislav Kinsburskiy) [PSBM-40567]
  - ve/nf_conntrack: expose "nf_conntrack_events*" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_acct" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: export nf_conntrack_hide_sysctl() helper (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_max" in containers (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: allow expose of priviledged sysctl inside containers (Stanislav Kinsburskiy) [PSBM-40044]
  - cbt/blkdev.h: fix compilation in case CONFIG_BLK_DEV_CBT is not set (Stanislav Kinsburskiy)
  - ms/veth: add netpoll support (Andrew Vagin) [PSBM-34959]
  - ms/fsnotify: Make fdinfo to always success (Cyrill Gorcunov) [PSBM-40337]
  - ve/xfs: add missing ub_io_account_dirty in set_page_dirty (Vladimir Davydov)
  - arch: mask cpuid 0x00000007 features in /proc/cpuinfo (Vladimir Davydov) [PSBM-30880 PSBM-33638]
  - arch/x86: assure cpuinfo inside ct is subset of host's one (Vladimir Davydov) [PSBM-30688 PSBM-33638]
  - arch/x86: disable cpuid faulting on reboot and cpu offline (Vladimir Davydov) [PSBM-30548 PSBM-33638]
  - arch/x86: only enable cpuid faulting for containers (Vladimir Davydov) [PSBM-30516 PSBM-33638]
  - arch/x86: report cpuid:0000000d_1 in cpuinfo (Vladimir Davydov) [PSBM-30577 PSBM-33638]
  - arch/x86: check if cpuid level exists while reporting cpuinfo (Vladimir Davydov) [PSBM-33638]
  - arch/x86: take into account cpuid override while reporting cpuinfo (Vladimir Davydov) [PSBM-28682 PSBM-33638]
  - arch/x86: introduce cpuid override (Vladimir Davydov) [PSBM-28682 PSBM-33638]
  - cpuinfo: obtain cpuflags for the current cpu too (Vladimir Davydov) [PSBM-33638]
  - cpuinfo: zero all bits in cap mask (Vladimir Davydov) [PSBM-33638]
  - ubc: proc show stats in ve user ns (Pavel Tikhomirov) [PSBM-40433]
  - ve/proc: Use ve_capable() in oom_score_adj_write() (Kirill Tkhai) [PSBM-40359]
  - venet: remove per-net hooks and related code (Stanislav Kinsburskiy) [PSBM-23441 PSBM-23441]
  - venet: add newlink and dellink callbacks to rtnetlink operations (Stanislav Kinsburskiy) [PSBM-23441 PSBM-23441]
  - venet: fix false positive return code in case of error in venet_init() (Stanislav Kinsburskiy) [PSBM-23441]
  - memcg: allow to disable cleancache per memcg (Vladimir Davydov) [PSBM-34163]
  - ve/device_cgroup: fake allowing all devices for docker inside VZCT (Pavel Tikhomirov) [PSBM-34529 PSBM-38691]
  - ms/prctl: avoid using mmap_sem for exe_file serialization (Davidlohr Bueso) [PSBM-39834]
  - ms/prctl: more prctl(PR_SET_MM_*) checks (Alexey Dobriyan) [PSBM-39834]
  - ms/mm: use may_adjust_brk helper (Cyrill Gorcunov) [PSBM-39834]
  - ve/fs: allow to remount from ve user ns (Pavel Tikhomirov)
  - ve/quota: allow to manage quota in top CT user ns (Konstantin Khorenko) [PSBM-40281]
  - ve/tun: Make config to dep on TUN (Cyrill Gorcunov)
  - ve/vtty: Make indices to match pcs6 scheme (Cyrill Gorcunov) [PSBM-40088]
  - config.OpenVZ: enable TAP accounting (Konstantin Khorenko) [PSBM-27713]
  - ve/net: introduce TAP accounting (Vladimir Sementsov-Ogievskiy) [PSBM-27713]
  - memcg: add lock for protecting memcg->oom_notify list (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - memcg: add mem_cgroup_get/put helpers (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - ms/mm: oom_kill: clean up victim marking and exiting interfaces (Vladimir Davydov) [PSBM-26973]
  - ms/oom: thaw the OOM victim if it is frozen (Vladimir Davydov) [PSBM-26973]
  - ms/oom: add helpers for setting and clearing TIF_MEMDIE (Vladimir Davydov) [PSBM-26973]
  - ms/oom: make sure that TIF_MEMDIE is set under task_lock (Vladimir Davydov) [PSBM-26973]
  - ms/oom: don't count on mm-less current process (Vladimir Davydov) [PSBM-26973]
  - ms/mm, oom: remove unnecessary exit_state check (Vladimir Davydov) [PSBM-26973]
  - ms/make default ->i_fop have ->open() fail with ENXIO (Andrew Vagin) [PSBM-39834]
  - ms/shm: wait for pins to be released when sealing (Andrew Vagin) [PSBM-39834]
  - ms/selftests: add memfd/sealing page-pinning tests (Andrew Vagin) [PSBM-39834]
  - ms/selftests: add memfd_create() + sealing tests (Andrew Vagin) [PSBM-39834]
  - ms/shm: add memfd_create() syscall (Andrew Vagin) [PSBM-39834]
  - ms/shm: add sealing API (Andrew Vagin) [PSBM-39834]
  - ms/mm: allow drivers to prevent new writable mappings (Andrew Vagin) [PSBM-39834]
  - ms/mm: mmap_region: kill correct_wcount/inode, use allow_write_access() (Andrew Vagin) [PSBM-39834]
  - ms/sched: add cond_resched_rcu() helper (Andrew Vagin) [PSBM-39834]
  - ve: Strip unset options in ve.mount_opts (Kirill Tkhai)
  - ms/fuse: break infinite loop in fuse_fill_write_pages() (Maxim Patlasov)
  - ploop: release io_context on ploop_thread() exit (Maxim Patlasov) [PSBM-39956]
  - ms/cfq-iosched: remove @gfp_mask from cfq_find_alloc_queue() (Maxim Patlasov) [PSBM-39956]
  - ve: mark SYSFS and IPGRE features deprecated (Konstantin Khorenko) [PSBM-33687]
  - ms/lockd: create NSM handles per net namespace (Andrey Ryabinin) [PSBM-39721]
  - ploop: do not use fiemap beyond eof (Maxim Patlasov) [PSBM-26762 PSBM-39251]
  - vecalls: fix VZCTL_GET_CPU_STAT uptime_jif scale (Vladimir Davydov) [PSBM-28811]
  - tcache: do not try to create node if we are not going to store page (Vladimir Davydov)
  - ub stat: sync memcg contents with beancounter if required (Stanislav Kinsburskiy)
  - ub stat: commnad check helper introduced (Stanislav Kinsburskiy)
  - ub statd: move header file from include/ to uapi/ (Stanislav Kinsburskiy)
  - ub statd: move struct ub_stat_notify declaration to source (Stanislav Kinsburskiy)
  - ub statd: small optimisations and clean ups (Stanislav Kinsburskiy)
  - ub statd: fix new_notify structure allocation (Stanislav Kinsburskiy)
  - ve/nfsd: Add VE_FEATURE_NFS check during nfsd mount (Kirill Tkhai) [PSBM-33687]
  - ve/nfs,nfsd: Allow to mount fs from initial VE's user_ns (Kirill Tkhai) [PSBM-40047]
  - ve/proc: fix mangling cgroup mount source path in container (Pavel Tikhomirov) [PSBM-34295]
  - ve/tty: Use ve_capable in vhangup syscall (Cyrill Gorcunov) [PSBM-40053]
  - ve: vznetstat and dummy Makefiles altered for Kpatch build (Evgenii Shatokhin) [PSBM-40069]
  - ms/mm/page-writeback.c: fix divide by zero in bdi_dirty_limits() (Maxim Patlasov) [PSBM-40116]
  - ve/sched: Hide steal time from inside CT (Kirill Tkhai) [PSBM-26588 PSBM-23431]
  - ve/fs: don't add MNT_NODEV for ve mounts (Andrew Vagin) [PSBM-40096]
  - ve/devmptfs: Use current_user_ns_initial() in dev_mount() (Kirill Tkhai)
  - ve/fs: Allow to mount ext4 and binfmt_misc under non-root ns (Kirill Tkhai) [PSBM-40100]
  - ve: Implement current_user_ns_initial() helper (Kirill Tkhai)
  - config.OpenVZ.debug: Enable audit subsystem in config" (Konstantin Khorenko) [PSBM-38898]
  - Revert "config.OpenVZ/audit: Disable audit subsystem in config" (Konstantin Khorenko) [PSBM-38898]
  - config.OpenVZ: enable NBD module (Konstantin Khorenko) [PSBM-31858]
  - ms/kvm/x86: add sending hyper-v crash notification to user space (Andrey Smetanin)
  - ms/KVM: Add KVM_EXIT_SYSTEM_EVENT to user space API header (Anup Patel)
  - ms/kvm/x86: added hyper-v crash msrs into kvm hyperv context (Andrey Smetanin)
  - ms/kvm/x86: Move Hyper-V specific fields into new per vm/vcpu Hyper-V structures (Andrey Smetanin)
  - ms/kvm: introduce vcpu_debug = kvm_debug + vcpu context (Andrey Smetanin)
  - ms/kvm/x86: move Hyper-V MSR's/hypercall code into hyperv.c file (Andrey Smetanin)
  - ms/kvm: add hyper-v crash msrs values (Andrey Smetanin)
  - pfcache/ext4: drop pfcache csum on fallocate (Dmitry Monakhov) [PSBM-33644]
  - config.OpenVZ: enable cbt - changed block tracking (Konstantin Khorenko) [PSBM-34156]
  - cbt: introduce changed block tracking (Dmitry Monakhov) [PSBM-34156]
  - ve: rework veid handling (Vladimir Davydov) [PSBM-39338]
  - sched/fair: Optimize is_top_cfs_rq() (Kirill Tkhai) [PSBM-35251]
  - ms/sched/fair: Track cgroup depth (Kirill Tkhai)
  - fuse: virtualize file system (Stanislav Kinsburskiy) [OVZ-6498]
  - RDS: verify the underlying transport exists before creating a connection (Vasily Averin)
  - memcg: do not allow to disable oom from inside a container (Vladimir Davydov)
  - ms/memcg: change oom_info_lock to mutex (Michal Hocko)
  - ms/memcg, oom: lock mem_cgroup_print_oom_info (Michal Hocko)
  - memcg: do not loop in mem_cgroup_reclaim if killed (Vladimir Davydov)
  - kexec, kasan: increase KEXEC_AUTO_RESERVED_SIZE under CONFIG_KASAN=y (Andrey Ryabinin) [PSBM-39339]
  - kasan: introduce single-shot mode and enable it by default (Andrey Ryabinin) [PSBM-39339]
  - kasan: always taint kernel on report. (Andrey Ryabinin) [PSBM-39339]
  - mm, slub, kasan: enable user tracking by default. (Andrey Ryabinin) [PSBM-39339]
  - kasan: update reported bug types for not user nor kernel memory accesses (Andrey Konovalov) [PSBM-39339]
  - ms/freezer: Do not freeze tasks killed by OOM killer (Cong Wang) [PSBM-38758]
  - Revert "ve: caps: ignore setting wrong caps with CAP_SETPCAP" (Konstantin Khorenko) [PSBM-39077]
  - Remove CAP_VE_* from "ve/ns: Port diff-ve-ns-allow-create-new-pid-ipc-and-utc-namespaces" (Andrew Vagin) [PSBM-39077]
  - Revert "ve/proc/ipc: allow mount proc and mqueue inside container" (Andrew Vagin) [PSBM-39077]
  - Remove CAP_VE_* from "Initial patch commit + compilation fixes" (Andrew Vagin) [PSBM-39077]
  - net: remove CAP_VE_NET_ADMIN from "ve/netfilter: Basic ve transformations" (Andrew Vagin) [PSBM-39077]
  - Revert "ve/rtnl: allow move network devices into network namespace in CT" (Andrew Vagin) [PSBM-39077]
  - Revert "ve/net/ioctl: allow change net-device name with CAP_VE_NET_ADMIN" (Andrew Vagin) [PSBM-39077]
  - Revert "ve/net: allow containers create bridges with CAP_VE_NET_ADMIN" (Andrew Vagin) [PSBM-39077]
  - ve: revise permissions to allow mount smth (Andrew Vagin) [PSBM-39077]
  - cred: add ve_capable to check capabilities relative to the current VE (v2) (Andrew Vagin) [PSBM-39077]
  - quota: missing lock in dqcache_shrink_scan() (Niu Yawei)
  - ve/tty: vt -- Implement per VE support for console and terminals (Cyrill Gorcunov) [PSBM-34533 PSBM-34532 PSBM-34107 PSBM-32686 PSBM-32685]
  - arch: x86: charge page tables to memcg/kmem (Vladimir Davydov) [PSBM-33840]
  - gfp: add __get_free_kmem_pages helper (Vladimir Davydov)
  - Revert "mm: account all page tables for mm" (Vladimir Davydov)
  - fs: account anon pipe buffers to memcg/kmem (Vladimir Davydov) [PSBM-39052]
  - vmalloc: account to memcg/kmem (Vladimir Davydov) [PSBM-33839]
  - sched/fair: only update current task boost (Vladimir Davydov)
  - mm: vmscan: do not scan lruvec if it seems to be unreclaimable (Vladimir Davydov) [PSBM-35155]
  - mm: vmscan: fix do_try_to_free_pages() livelock (Lisa Du) [PSBM-35155]
  - mm: vmscan: fix the page state calculation in too_many_isolated (Vinayak Menon) [PSBM-35155]
  - oom: do not dump all tasks info on each oom kill (Vladimir Davydov)
  - oom: zap oom_report_invocation proto (Vladimir Davydov)
  - Revert "ve/mm: ignore oom_score_adj of containerized tasks on global OOM" (Vladimir Davydov)
  - memcg: count all oom kills (Vladimir Davydov)
  - config.OpenVZ: add KASan support for debug kernels (Konstantin Khorenko) [PSBM-39339]
  - ms/x86/kasan: Add message about KASAN being initialized (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Fix boot crash on AMD processors (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Flush TLBs after switching CR3 (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Fix KASAN shadow region page tables (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/init: Clear 'init_level4_pgt' earlier (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: Makefile: shut up warnings if CONFIG_COMPILE_TEST=y (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/mempool.c: kasan: poison mempool elements (Andrey Ryabinin) [PSBM-26429]
  - ms/mm, mempool: poison elements backed by slab allocator (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan, module: move MODULE_ALIGN macro into <linux/moduleloader.h> (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan, module, vmalloc: rework shadow allocation for modules (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: enable instrumentation of global variables (Andrey Ryabinin) [PSBM-26429]
  - ms/module: fix types of device tables aliases (Andrey Ryabinin) [PSBM-26429]
  - ms/kernel: add support for .init_array.* constructors (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: vmalloc: pass additional vm_flags to __vmalloc_node_range() (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: vmalloc: add flag preventing guard hole allocation (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: enable stack instrumentation (Andrey Ryabinin) [PSBM-26429]
  - ms/x86_64: kasan: add interceptors for memset/memmove/memcpy functions (Andrey Ryabinin) [PSBM-26429]
  - ms/lib: add kasan test module (Andrey Ryabinin) [PSBM-26429]
  - ms/kmemleak: disable kasan instrumentation for kmemleak (Andrey Ryabinin) [PSBM-26429]
  - ms/fs: dcache: manually unpoison dname after allocation to shut up kasan's reports (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: add kernel address sanitizer support for slub allocator (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: introduce metadata_access_enable()/metadata_access_disable() (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: share object_err function (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: introduce virt_to_obj function (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: page_alloc: add kasan hooks on alloc and free paths (Andrey Ryabinin) [PSBM-26429]
  - ms/x86_64: add KASan support (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: disable memory hotplug (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: add kernel address sanitizer infrastructure (Andrey Ryabinin) [PSBM-26429]
  - ms/compiler: introduce __alias(symbol) shortcut (Andrey Ryabinin) [PSBM-26429]
  - ms/MODULE_DEVICE_TABLE: fix some callsites (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: SLUB_DEBUG=n: use the same alloc/free hooks as for SLUB_DEBUG=y (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: move slab related stuff from util.c to slab_common.c (Andrey Ryabinin) [PSBM-26429]
  - ms/MIPS: Use NUMA_NO_NODE instead of -1 for node ID. (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/arch: use NUMA_NO_NODE (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/vmalloc: use wrapper function get_vm_area_size to caculate size of vm area (Andrey Ryabinin) [PSBM-26429]
  - ms/lib/idr.c: fix out-of-bounds pointer dereference (Andrey Ryabinin) [PSBM-26429]
  - ms/sched/numa: Fix initialization of sched_domain_topology for NUMA (Andrey Ryabinin) [PSBM-26429]
  - ms/compiler-gcc: integrate the various compiler-gcc[345].h files (Andrey Ryabinin) [PSBM-26429]
  - ms/kernel: use the gnu89 standard explicitly (Andrey Ryabinin) [PSBM-26429]
  - ploop: use GFP_NOIO in ploop_make_request (Vladimir Davydov) [PSBM-38842]
  - ub: rename private_data2 to iolimit (Vladimir Davydov)
  - ub: zap ub_dirty_pages (Vladimir Davydov)
  - ub: fix typo: s/ub_dirty_radio/ub_dirty_ratio (Vladimir Davydov)
  - ub: zap ub_tmpfs_respages (Vladimir Davydov)
  - ub: drop swapin/swapout stats (Vladimir Davydov) [PSBM-39327]
  - ub: zap unused socket accounting bits (Vladimir Davydov)
  - ve/writeback: revert ub dirty limit related stuff (Vladimir Davydov) [PSBM-33841]
  - Revert diff-writeback-throttle-writer-when-local-BDI-threshold-is-hit bits (Vladimir Davydov) [PSBM-39167]
  - ms/crypto/ghash-intel: specify context size for ghash async algorithm (Andrey Ryabinin) [PSBM-38669]
  - net: udpv6: release memcg on destroy (Vladimir Davydov) [PSBM-39084]
  - ve/fs: allow to mount devtmpfs in a non-root userns (Andrew Vagin) [PSBM-39077]
  - ve/sysfs: propagate access to all sub-directories hierarchically (Pavel Tikhomirov) [PSBM-34523]
  - ve/fs/inotify: do not impose limit on the number of instances by default (Vladimir Davydov) [PSBM-39048]
  - ve/cgroup: do not virtualize output of cgroup_path (Vladimir Davydov) [PSBM-34852]
  - ve/kmod: allow to autoload nf_log_ipv[46] (Vladimir Davydov) [PSBM-38573]
  - ve/bridge: Revert diff-ve-net-bridge-fix-deliver-vs-close-seq (Vladimir Davydov) [PSBM-12955 PSBM-38924]
  - ve/sched: Fix double put_prev_task_fair() because of trigger_cpulimit_balance() (Kirill Tkhai) [PSBM-35082]
  - ms/sched: Fix schedule_tail() to disable preemption (Kirill Tkhai)
  - mmap: call mmap prep only for regular files (Vladimir Davydov) [PSBM-23133 PSBM-25031]
  - ve/cgroup: fix mangle root in CT (Pavel Tikhomirov) [PSBM-38634]
  - pfcache/ext4: fix automatic csum calculation (Dmitry Monakhov) [PSBM-23774 PSBM-39233]
  - ve/fs/aio: aio_nr & aio_max_nr variables virtualization (Andrey Ryabinin) [PSBM-29017]
  - ve/sysctl: Introduce proc_doulongvec_minmax_virtual() (Andrey Ryabinin) [PSBM-29017]
  - ms/mm/vmscan: Do not wait for page writeback for GFP_NOFS allocations (Michal Hocko)
  - config.OpenVZ: show Odin's logo on boot (Konstantin Khorenko) [PSBM-34430]
  - ve/video/logo: show Odin's logo on boot (Andrey Ryabinin) [PSBM-34430]
  - ve/kmod: fix out-of-bounds access in call_modprobe() (Andrey Ryabinin) [PSBM-38666]
  - ms/mm: memcontrol: reclaim at least once for __GFP_NORETRY (Johannes Weiner)
  - ve/tty: vt -- Fix nil dereference due to race (Cyrill Gorcunov) [PSBM-37929]
  - cgroup: remove now unused css_depth() (Tejun Heo)
  - ploop: fix race on prealloc request (Maxim Patlasov) [PSBM-35095]
  - ve/net: Fix vlan NETIF_F_VIRTUAL feature initialization (Kirill Tkhai) [PSBM-35266]
  - ms/mm/vmscan: never isolate more pages than necessary (Vladimir Davydov) [PSBM-35275]
  - ve/radix-tree: do not account radix_tree_nodes to memcg (Vladimir Davydov) [PSBM-35205]
  - memcg: fix swap_max calculation for nested cgroups (Vladimir Davydov)
  - ve/pty: create ptmx device per ve namespace (Vladimir Davydov)
  - Revert "pty: split Unix98 init routines" (Vladimir Davydov)
  - Revert "ve/pty: containerize Unix98 driver" (Vladimir Davydov)
  - Revert "ve/pty: containerize Unix98 pty drivers" (Vladimir Davydov)
  - ve/binfmt_misc: destroy all nodes on ve stop (Vladimir Davydov) [PSBM-39154]
  - ve/binfmt_misc: do not use s_ns (Vladimir Davydov) [PSBM-39154]
  - ve/binfmt_misc: do not use sb->s_fs_info (Vladimir Davydov) [PSBM-39154]
  - Revert "nfsd/sunrpc/mqueue: use sb->s_ns instead of data in fill_super" (Vladimir Davydov) [PSBM-39154]
  - Revert "ve/sunrpc: use correct pointer to net_namespace in auth_gss.c" (Vladimir Davydov) [PSBM-39154]
  - Revert "VE/VFS: use sb->s_ns member to store namespace for mount_ns() calls" (Vladimir Davydov) [PSBM-39154]
  - ve/devtmpfs: lightweight virtualization (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "devtmpfs: per-VE mounts introduced" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "fs: add data pointer to mount_ns()" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "devtmpfs: containerize it with new obj ns operation" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "ve/devtmpfs: pass proper options string" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "ve/devtmpfs: Create required devices on container startup" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - ms/cgroup: switch to new percpu_ref API (Vladimir Davydov)
  - ms/cgroup: use percpu refcnt for cgroup_subsys_states (Vladimir Davydov) [PSBM-34174]
  - ms/cgroup: split cgroup destruction into two steps (Vladimir Davydov) [PSBM-34174]
  - ms/cgroup: reorder the operations in cgroup_destroy_locked() (Vladimir Davydov) [PSBM-34174]
  - ve/vznetstat: Fix potential exit race (Cyrill Gorcunov) [PSBM-35178]
  - ms/memcg: issue memory.high reclaim after refilling percpu stock (Vladimir Davydov)
  - ploop: dio_fastmap() must refresh bvec_merge_data (Maxim Patlasov)
  - ve/devpts: Assign containers @devpts_sb on first mount (Cyrill Gorcunov) [PSBM-34931]
  - ve/devpts: Revert 2c27d20125f5 (Cyrill Gorcunov) [PSBM-34931]
  - ve/net: Add VE_NF_CONNTRACK check in resolve_normal_ct() (Kirill Tkhai) [PSBM-35154]
  - ve: Add a ability to show ve.mount_opts (Kirill Tkhai) [PSBM-34291 PSBM-34291]
  - net/sched: restore "mpu xxx" handling (Kirill Tkhai) [PSBM-34874]
  - ve/vznetstat: Don't destroy statistics until explicitly asked (Cyrill Gorcunov) [PSBM-35178]
  - ve/vznetstat: Move VE networks statistics allocation into a common place (Cyrill Gorcunov) [PSBM-35011]
  - config.OpenVZ: limit number of legacy ptys (Konstantin Khorenko) [PSBM-34741]
  - ms/net/drivers: missing rtnl_unlock in igb_sriov_reinit() (Vasily Averin)
  - ve/drivers: Do not forget to release mismatched device found (Cyrill Gorcunov) [PSBM-34777]
  - vznetstat: Make sure the statistics is allocated for VE (Cyrill Gorcunov) [PSBM-34837]
  - tcache: allow to allocate highmem pages (Vladimir Davydov)
  - tcache: do not populate on global reclaim (Vladimir Davydov)
  - tcache: invalidate page on unsuccessful put (Vladimir Davydov)
  - tswap: do not populate on global reclaim (Vladimir Davydov) [PSBM-34876]
  - ve/net: Exclude foreign CT sockets from /proc/net/tcp{,6} (Kirill Tkhai) [PSBM-34875]
  - ve/block: Show CT allowed partitions in /proc/partitions (Kirill Tkhai) [PSBM-34805]
  - ve/net: Add ipt_mask checks into ip6table_nat (Kirill Tkhai) [PSBM-34748]
  - ms/netlabel: fix the netlbl_catmap_setlong() dummy function (Paul Moore)
  - ve/ipset: prohibit ipset from the inside CT (Kirill Tkhai) [PSBM-27793 PSBM-27792]
  - ve/net: netfilter: clear xt_table on net exit (Vladimir Davydov) [PSBM-34657]
  - ext4: ext4_ext_drop_refs ignode null path (Dmitry Monakhov)
  - ve/sysfs: do not inherit ve permissions from parent (Vladimir Davydov) [PSBM-34682]
  - tcache: teach tcache_get_node() to handle cleancache_get_page/cleancache_invalidate_inode races (Vladimir Davydov) [PSBM-34620]
  - ve/tty: call device_destroy_namespace only for containerized drivers (Andrew Vagin) [PSBM-33971]
  - ve/proc/ipc: allow mount proc and mqueue inside container (Pavel Tikhomirov) [PSBM-33304 PSBM-34523]
  - ve/rtnl: allow move network devices into network namespace in CT (Pavel Tikhomirov) [PSBM-33304 PSBM-34523]
  - ve/vfs: allow mount/umount, pivot_root with CAP_VE_SYS_ADMIN (Pavel Tikhomirov) [PSBM-33304 PSBM-34523]
  - ve/veth: fix skb leak in veth_xmit (Vladimir Davydov)
  - ve: cgroup: initialize odirect_enable, features and _randomize_va_space (Pavel Tikhomirov) [PSBM-34286 PSBM-34285]
  - ve/iptables: fix mask initialization and changing (Pavel Tikhomirov) [PSBM-34286 PSBM-34285]
  - ve: initialize fsync_enable also for non ve0 environment (Pavel Tikhomirov) [PSBM-34286 PSBM-34285 PSBM-34286]
  - ve: remove sysctl_fsync_enable and use ve_fsync_behavior instead (Pavel Tikhomirov) [PSBM-34286 PSBM-34285]
  - ve: zap ve_allow_kthreads (Vladimir Davydov)
  - ve: zap ve_glob_meminfo (Vladimir Davydov)
  - ms/netfilter: ipt_CLUSTERIP: use proper net namespace to operate CLUSTERIP (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: create proc entry under proper ipt_CLUSTERIP directory (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: add parameter net in clusterip_config_find_get (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: make clusterip_lock per net namespace (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: make clusterip_list per net namespace (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: make proc directory per net namespace (Gao feng)
  - ub: remove sock acct related resources from cgroup params (Vladimir Davydov)
  - ve/kernel: drop broken audit virtualization (Vladimir Davydov)
  - ve: Use ve_name() in devperms ioctl (Kirill Tkhai) [PSBM-34497]
  - memcg/ub: fix limit > RESOURCE_MAX case (Vladimir Davydov)
  - net/packet: cleanup packet_sk_charge (Vladimir Davydov)
  - memcg: disarm memcg_socket_limit_enabled key per each active udp proto (Vladimir Davydov)
  - memcg: fix a type in memcg_charge_kmem_nofail (Vladimir Davydov)
  - ve/caps/compilation: typo fix (Konstantin Khorenko)
  - ve/vt: Drop debug vars from console code (Cyrill Gorcunov)
  - ve/tty: vt -- Add dummy stubs (Cyrill Gorcunov) [PSBM-34324]
  - ve: caps: ignore setting wrong caps with CAP_SETPCAP (Pavel Tikhomirov) [PSBM-33693]
  - ploop: fix processing sync bios (Maxim Patlasov) [PSBM-33630]
  - ms/ext4: fix lazytime optimization (Dmitry Monakhov)
  - ms/fs: add dirtytime_expire_seconds sysctl (Dmitry Monakhov)
  - ms/fs: make sure the timestamps for lazytime inodes eventually get written (Dmitry Monakhov)
  - ms/ext4: add optimization for the lazytime mount option (Dmitry Monakhov)
  - ms/vfs: add find_inode_nowait() function (Dmitry Monakhov)
  - ms/vfs: add support for a lazytime mount option (Dmitry Monakhov) [PSBM-20411]
  - jbd2: raid amnesia protection for the journal (Dmitry Monakhov) [PSBM-15484]
  - ve/fs: check container odirect and fsync settings in __dentry_open (Dmitry Monakhov) [PSBM-17157]
  - venet: forbid assigning veip to ve w/o id (Vladimir Davydov) [PSBM-34450]
  - ve: forbid to attach to a ve cgroup w/o id (Vladimir Davydov) [PSBM-34450]
  - vznetstat: Use kzalloc instead of kmalloc plus memset (Cyrill Gorcunov)
  - ve/vdso: x86 -- Disable virtualization in native x86-32 mode (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86 -- Eliminate race in vdso allocation, v2 (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86-32 -- Implement kernel version virtualization (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86-64 -- Implement kernel version virtualization (Cyrill Gorcunov) [PSBM-30093]
  - ve/fs: Port diff-ve-fs-security-check-for-mount (Vladimir Davydov) [PSBM-33650]
  - ve/fs: Port diff-ve-fs-allow-to-remove-swapfile-hardlinks (Vladimir Davydov) [PSBM-25310 PSBM-33650]
  - ms/futex: Add another early deadlock detection check (Thomas Gleixner) [PSBM-33650]
  - ms/futex: Prevent attaching to kernel threads (Thomas Gleixner) [PSBM-33650]
  - ve/lockdep: Port diff-lockdep-taint-kernel-on-circular-locking-complains (Vladimir Davydov) [PSBM-22010 PSBM-33650]
  - ve/kernel/taint: Port diff-taint-message-enhanced-with-dump (Vladimir Davydov) [PSBM-25867 PSBM-33650]
  - ve/proc/time: Port diff-ve-proc-report-real_start_time-in-_proc_PID_stat-if-CONFIG_VE (Vladimir Davydov) [PSBM-22925 PSBM-22925 PSBM-33650]
  - ve/mm/kstat: Port diff-ve-kstat-disable-interrupts-around-seqcount-write-lock (Vladimir Davydov) [PSBM-33650]
  - ve/proc: Port diff-ve-proc-add-buffers-field-to-meminfo (Vladimir Davydov) [PSBM-19448 PSBM-34444 PSBM-33650]
  - ve: Port diff-ve-allow-taskstats-netlink-in-netns (Vladimir Davydov) [PSBM-33650]
  - vznetstat: Port diff-vznetstat-support-of-resetting-of-traffic-statistics-on-running-CTs (Vladimir Davydov) [PSBM-21243 PSBM-21243 PSBM-33650]
  - vznetstat: Port diff-vznetstat-fix-ip_vznetstat-module-load (Vladimir Davydov) [PSBM-33650]
  - vzstat: Port diff-vzstat-mem_free_areas_show-fix-nr_free-per-order-computation (Vladimir Davydov) [PSBM-26984 PSBM-33650]
  - ve/ns: Port diff-ve-ns-allow-create-new-pid-ipc-and-utc-namespaces (Vladimir Davydov) [PSBM-33650]
  - ext4: fallocate mode - convert and extend (Dmitry Monakhov) [PSBM-22381]
  - kmapset: Fix NULL pointer derefference in kmapset_set_value() (Kirill Tkhai) [PSBM-34437]
  - dummy: remove redundant dummy modules (Konstantin Khorenko) [PSBM-31333]
  - ve/net: Delete nf_frags_hdr and ct_frags (Kirill Tkhai)
  - config.OpenVZ: remove DSA option (Konstantin Khorenko)
  - ve: introduce ve.veid for setting id from userspace (Vladimir Davydov) [PSBM-34422]
  - mm/fs: Port diff-mm-debug-memallocation-caused-fs-reentrance (Vladimir Davydov) [PSBM-34112]
  - ve: Print ve_name instead of veid to the kernel log (Vladimir Davydov)
  - ve/fs: drop LOOKUP_STRICT (Vladimir Davydov)
  - ve/net: drop net->uevent_sock (Vladimir Davydov)
  - ve/printk: allow to access syslog with CAP_VE_ADMIN (Vladimir Davydov)
  - ve/ioprio: confine ioprio_{set, get}(IOPRIO_WHO_USER) to current ve (Vladimir Davydov)
  - ve/nsproxy: drop INIT_NSPROXY_COUNT (Vladimir Davydov)
  - ms/ext4: use ext4_ext_next_allocated_block instead of mext_next_extent (Dmitry Monakhov)
  - ext4: update defragmentation codebase (Dmitry Monakhov)
  - backport jbd2: jbd2_cleanup_journal_tail fix gfp allocation context (Dmitry Monakhov)
  - ms ext4: fix online resize with very large inode tables (Theodore Ts'o) [PSBM-24924]
  - ext4: Add ioctl EXT4_IOC_SET_RSV_BLOCKS V2 (Dmitry Monakhov) [PSBM-25929]
  - ext4: add mfsync support (Dmitry Monakhov) [PSBM-18567 PSBM-34909 PSBM-34910]
  - ext4: Fix error handling after filesystem abort (Dmitry Monakhov)
  - jbd2: make shure that we do not miss aborted state (Dmitry Monakhov)
  - ext4: add prepare_mmap API (Dmitry Monakhov) [PSBM-23133 PSBM-34112]
  - tswap: do not writeback pages on reclaim (Vladimir Davydov) [PSBM-34269]
  - tswap: use global lock to protect lru lists (Vladimir Davydov) [PSBM-34269]
  - tswap: shrink tswap page if swapcache page is uptodate (Vladimir Davydov) [PSBM-34269]
  - tswap: introduce tswap_delete_page helper (Vladimir Davydov) [PSBM-34269]
  - tswap: do not allocate a page on store if there is already one (Vladimir Davydov) [PSBM-34269]
  - tswap: enable exclusive gets (Vladimir Davydov) [PSBM-34269 PSBM-34269]
  - mm/frontswap: invalidate expired data on a dup-store failure (Vladimir Davydov) [PSBM-34269 PSBM-34269]
  - ve/tty: console -- Enhance container console to support per VE ops (Cyrill Gorcunov) [PSBM-34357]
  - Revert "x86/NMI: introduce dumps via nmi" (Vladimir Davydov) [PSBM-17989]
  - Revert "ms/nmi: do not call unblank_screen() from nmi_show_regs()" (Vladimir Davydov)
  - ve/net: allow to rename devices in non-ve namespaces (Kirill Tkhai) [PSBM-29810 PSBM-33645]
  - ve/net: allow containers create bridges with CAP_VE_NET_ADMIN (Kirill Tkhai) [PSBM-29808]
  - ve/net/ioctl: allow change net-device name with CAP_VE_NET_ADMIN (Kirill Tkhai) [PSBM-29808 PSBM-31819 PSBM-29808]
  - ve/net/sysfs: Porting diff-ve-net-sysfs-drop-redundant-net_ipv4_route_path and diff-ve-net-route-bring-back-route_src_check (Kirill Tkhai) [PSBM-31818]
  - ve/tty: vzcon -- Add container dummy console support (Cyrill Gorcunov) [PSBM-32686]
  - ms/vfs: Remove second variable named error in __dentry_path (Pavel Tikhomirov) [PSBM-34245]
  - ms/vfs: reinitialize error for resetart in prepend_path as in ms (Pavel Tikhomirov) [PSBM-34245]
  - net/packet: use try_get_mem_cgroup_from_mm (Vladimir Davydov)
  - ve/net/packet: do not account sock buffer to cg if kmem acct is off (Vladimir Davydov)
  - ve/net/tcp: add missing tcp_orphan_count destruction (Vladimir Davydov) [PSBM-34215]
  - ve/cgroup: Temporarily allow to mount cgroups from VE (Cyrill Gorcunov) [PSBM-34291]
  - ve/net: drop sk_buff->accounted (Vladimir Davydov)
  - ub: sync exec_ub on fork (Vladimir Davydov)
  - tswap: fix panic on store if page exists (Vladimir Davydov)
  - ve/net: Delete get_exec_env() from venet_init_net() (Kirill Tkhai)
  - Revert "mm/fs: Port diff-mm-debug-memallocation-caused-fs-reentrance" (Konstantin Khorenko) [PSBM-34112]
  - ub/fs: resurrect sync accounting (Vladimir Davydov) [PSBM-34007]
  - ub/fs: access dirtied_ub under rcu lock in __writeback_single_inode (Vladimir Davydov) [PSBM-34007]
  - ub: do not include block/blk-cgroup.h from io_prio.c (Vladimir Davydov) [PSBM-34007]
  - ub/fs: account writeback io (Vladimir Davydov) [PSBM-34007]
  - ub: ressurrect iostat and ioprio reporting (Vladimir Davydov) [PSBM-34007]
  - ub: ressurrect ioprio_set IOPRIO_WHO_UBC (Vladimir Davydov) [PSBM-34007]
  - ub: export ub_get_{mem,blkio}_css (Vladimir Davydov) [PSBM-34007]
  - ub: zap ub_{init,fini}_ioprio (Vladimir Davydov) [PSBM-34007]
  - fs/ioprio: move IOPRIO_WHO_UBC handling out of rcu section (Vladimir Davydov) [PSBM-34007]
  - ve/iptable_raw: Don't reuse VE_IP_IPTABLES bit (Kirill Tkhai) [PSBM-34192]
  - ve/net/tun: don't loose NETIF_F_VIRTUAL device feature (Pavel Tikhomirov) [PSBM-34066]
  - config.OpenVZ.debug: OpenVZ related config options are added (Konstantin Khorenko)
  - debugfs: drop set_exec_ub in file create (Vladimir Davydov)
  - ub: drop ub_cachep (Vladimir Davydov)
  - ub: hide dcachesize and oomguarpages in ub cgroup (Vladimir Davydov)
  - ve/net: Track netfilter modules per net-namespace-v3 (Kirill Tkhai) [PSBM-31451]
  - ms/bridge: superfluous skb->nfct check in br_nf_dev_queue_xmit (Kirill Tkhai)
  - ve/ip_gre: containerize per-net devices (Kirill Tkhai) [PSBM-24331]
  - venet: prevent to change network namespaces (Kirill Tkhai)
  - ve/netfilter: Add permittion check in iptable_raw pernet (Kirill Tkhai) [PSBM-27181]
  - ve/net/iptables: Add ipv6 bits into VE_IP_DEFAULT (Kirill Tkhai)
  - ve/net: CAP_VE_NET_ADMIN must be a subset of CAP_NET_ADMIN (Kirill Tkhai) [PSBM-23514]
  - netfilter: MARK -- drop off @table entity to support rhel5 containers, v2 (Kirill Tkhai) [PSBM-30390]
  - ub: Makefile: drop net.o (Vladimir Davydov)
  - cgroup: unexport css_refcnt (Vladimir Davydov)
  - ub: drop ub_debug* macros (Vladimir Davydov)
  - ub: drop CONFIG_BC_DEBUG_ITEMS (Vladimir Davydov)
  - ub: drop /proc/bc/BCID/debug (Vladimir Davydov)
  - timers: Port diff-ve-timers-convert-ve-monotonic-to-abs-time-when-setting-timerfd-2 (Pavel Tikhomirov) [PSBM-34017 PSBM-18284 PSBM-18284]
  - fs: unexport filp_cachep (Vladimir Davydov)
  - ub: introduce ub_total_pages (Vladimir Davydov) [PSBM-34035]
  - ve/memcg: pass struct mem_cgroup instead of cgroup to ub-related methods (Vladimir Davydov) [PSBM-34035]
  - ub: rework connection between ub and mem/blkio cgroups (Vladimir Davydov) [PSBM-34035]
  - ub: rename functions for reading/writing cgroup resources (Vladimir Davydov) [PSBM-34035]
  - cgroup: make cgroup_kernel_attach safe against cgroup removal (Vladimir Davydov) [PSBM-34035]
  - cgroup: add function to lookup a cgroup by pathname (Vladimir Davydov) [PSBM-34035]
  - ve/kobj: Send events per VE instead of all net-namespaces broadcasting (Cyrill Gorcunov)
  - pfcache: fix path refcounting hazzard (Dmitry Monakhov)
  - ve/veth: don't drop skb->mark if NETIF_F_VENET is set (Andrew Vagin) [PSBM-32277]
  - ve/veth: filter packages accoding with mac addresses (Andrew Vagin) [PSBM-32276]
  - ve/veth: add ability to prevent changing of a mac address from a container (Andrew Vagin) [PSBM-32276]
  - ve/veth: add ability to enable vz-specific features (Andrew Vagin) [PSBM-32276]
  - vz/veth: remove vzethdev (Andrew Vagin)
  - ve/mm: enable oom grouping rules on OOM (Vladimir Davydov) [PSBM-33849]
  - ve/oom: do not impose grouping rules if process score is adjusted (Vladimir Davydov) [PSBM-33849]
  - ve/proc: allow to set oom_score_adj from inside a container (Vladimir Davydov) [PSBM-33849]
  - ve/mm: ignore oom_score_adj of containerized tasks on global OOM (Vladimir Davydov) [PSBM-33849]
  - ve/proc: use memcg limits for showing oom_score inside CT (Vladimir Davydov) [PSBM-33849]
  - ve/memcg: add function to get max mem+swap (Vladimir Davydov) [PSBM-33849]
  - ve/net/packet: fix possible return of uninitialized var (Konstantin Khorenko)
  - net/packet: Pre-account maximum socket buffer into cg memory (v3) (Pavel Emelyanov) [PSBM-33584]
  - netlink: Make all in-cg memory be kmem accounted (Pavel Emelyanov) [PSBM-33584]
  - udp: Charge ingress buffers into cg memory (Pavel Emelyanov) [PSBM-33584]
  - tcp: Limit orphan sockets per-cg (Pavel Emelyanov) [PSBM-33584]
  - tcp: Charge socket buffers into cg memory (v3) (Pavel Emelyanov) [PSBM-33584]
  - proc: drop proc_dentry_of_dead_task (Vladimir Davydov)
  - ve/mm: print OOM info to VE log (Vladimir Davydov)
  - ub: account shmem in cached in meminfo (Vladimir Davydov) [PSBM-28682 PSBM-31006 PSBM-33637]
  - mm/bc: Port diff-bc-shmem-fix-accounting-on-error-path (Vladimir Davydov) [PSBM-22198 PSBM-33637]
  - mm: Port diff-mm-add-sysctl-vm.force_scan_thresh (Vladimir Davydov) [PSBM-29968 PSBM-33640]
  - mm: Port diff-mm-vmscan-disable-fs-related-activity-for-direct-direct-reclaim (Vladimir Davydov) [PSBM-20210 PSBM-33640]
  - ms/pagemap: Port diff-ms-pagemap-do-not-leak-physical-addresses-to-non-privileged-userspace (Vladimir Davydov) [PSBM-32308 PSBM-33640]
  - mm/fs: Port diff-mm-debug-memallocation-caused-fs-reentrance (Vladimir Davydov) [PSBM-33640]
  - ploop: added into pvd header new close signatures (Andrey Smetanin) [PSBM-33882]
  - ve/headers: Do not include uapi in exported header (Cyrill Gorcunov) [PSBM-34030]
  - ms/headers: Support GCC 5 (Cyrill Gorcunov)
  - ms/netfilter: Add {ipt,ip6t}_osf aliases for xt_osf (Kirill Tkhai) [PSBM-33929]
  - ve/net/tcp: Kill tcp_v4_kill_ve_sockets() (Kirill Tkhai) [PSBM-33755 PSBM-33926]
  - sched: Port diff-sched-make-nr_cpus-limit-support-hierarchies (Vladimir Davydov) [PSBM-33642]
  - sched: Port diff-fairsched-cpuset-add-fake-cpuset-for-containers (Vladimir Davydov) [PSBM-30878 PSBM-33642]
  - ve: zap legacy_veid_to_name (Vladimir Davydov)
  - ve: do_env_create: zap unused ve_name variable (Vladimir Davydov)
  - ve: zap legacy_name_to_veid (Vladimir Davydov)
  - ve: zap __find_ve_by_id (Vladimir Davydov)
  - sched: Port cpustat related patches (Vladimir Davydov) [PSBM-26714 PSBM-28403 PSBM-28500 PSBM-26587 PSBM-23431 PSBM-28277 PSBM-33642]
  - sched: use cpuacct->cpustat for showing cpu stats (Vladimir Davydov) [PSBM-33642]
  - sched: Revert "SCHED: rework cputime accounting (v2)" (Vladimir Davydov) [PSBM-33642]
  - sched: Port diff-sched-return-only-virtual-cpus-in-sched_getaffinity (Vladimir Davydov) [PSBM-25367 PSBM-27200 PSBM-33642]
  - sched: Port diff-sched-clear-prev-entity-if-curr-is-dequeued (Vladimir Davydov) [PSBM-33642]
  - ms/sched: Port diff-sched-increase-SCHED_LOAD_SCALE-resolution (Vladimir Davydov) [PSBM-33642]
  - sched: Port diff-sched-initialize-runtime-to-non-zero-on-cfs-bw-set (Vladimir Davydov) [PSBM-17658 PSBM-17658 PSBM-33642]
  - sched/vziolimit: Port diff-fairsched-do-not-account-iothrottled-tasks-in-loadavg-core (Vladimir Davydov) [PSBM-33642]
  - ub/netfilter: account x_tables to ub (Vladimir Davydov) [PSBM-20089]
  - cgroup: Mangle cgroups root from inside of VE view (Cyrill Gorcunov) [PSBM-33757]
  - cgroup: mount -- Disable mounting from inside of VE context (Cyrill Gorcunov) [PSBM-33664]
  - fairsched: Port diff-fairsched-optimize-sys_fairsched_mvpr (Vladimir Davydov) [PSBM-33642]
  - ve: remove fairsched node only in the legacy mode (Vladimir Davydov) [PSBM-33833]
  - ms/memcg: do not call high reclaim if !__GFP_WAIT (Vladimir Davydov)
  - fairsched: fix output of /proc/fairsched[2] (Vladimir Davydov) [PSBM-33806]
  - ub: ub_dirty_limits: obtain ram size from memcg (Vladimir Davydov)
  - shmem: fix tmpfs_ram_pages (Vladimir Davydov)
  - memcg: add function to get container's ram size (Vladimir Davydov)
  - ve/kmod: Add rules for new {ip, ip6, x}table modules (Kirill Tkhai) [PSBM-33631]
  - ve/kmod: Add rules for autoloading (new) nf_tables (Kirill Tkhai) [PSBM-33631]
  - ms/memcg: port memory.high (Vladimir Davydov)
  - ms/memcg: use CFTYPE_NOT_ON_ROOT for memory.low and memory.oom_guarantee (Vladimir Davydov)
  - ms/memcg: rename memory.low_limit_in_bytes to memory.low (Vladimir Davydov)
  - ub: reset UB_OOMGUARPAGES.held on css free (Vladimir Davydov) [PSBM-20089]
  - memcg/bc: sync UB_OOMGUARPAGES (Vladimir Davydov) [PSBM-20089]
  - memcg: count oom kills (Vladimir Davydov) [PSBM-20089]
  - memcg: add oom_guarantee (Vladimir Davydov) [PSBM-20089]
  - ub: cleanup cgroup attaching code (Vladimir Davydov)
  - fairsched: add cpu.proc.loadavg to the cpu cgroup (Vladimir Davydov) [PSBM-32284]
  - fairsched: switch methods showing stats from numeric id to name (Vladimir Davydov) [PSBM-32284]
  - venet: Cleanup ip address on ve exit (Cyrill Gorcunov)
  - bc: initialize all beancounters as unlimited (Vladimir Davydov)
  - ms/idr: print a stack dump after ida_remove warning (Vasily Averin)
  - ve/cgroup: Guard @features and @iptables with test if VE is inactive (Cyrill Gorcunov)
  - memcg/bc: sync UB_DCACHESIZE (Vladimir Davydov) [PSBM-20089]
  - memcg/bc: account dcache size (Vladimir Davydov) [PSBM-20089]
  - bc/mm: zap pte_ptrs and same_ub macros (Vladimir Davydov)
  - ub: zap ub_reclaim_rate_limit (Vladimir Davydov)
  - mm/shmem: unexport shmem_file_operations (Vladimir Davydov)
  - bc/mm: zap page->{slab_ubs,kmem_ub} (Vladimir Davydov)
  - ub: zap /proc/bc/ID/dcacheinfo (Vladimir Davydov) [PSBM-33760]
  - ub: zap /proc/bc/ID/slabinfo (Vladimir Davydov)
  - ub: get rid of pincount (Vladimir Davydov)
  - ub: do not show dead beancounters under /proc/bc (Vladimir Davydov)
  - ub: kill ub_dcache_threshold sysctl knob (Vladimir Davydov)
  - ub: drop ubc_ioprio knob (Vladimir Davydov)
  - ub: sync memcg before setting limit via sys_setublimit (Vladimir Davydov)
  - ub: do not apply memcg limits on attaching via sys_setluid (Vladimir Davydov)
  - ub: simplify memcg synchronization (Vladimir Davydov)
  - ub: zap show_ub_mem in Alt+SysRQ+m (Vladimir Davydov)
  - ub: remove some dead code (Vladimir Davydov)
  - bc: deprecate kmemsize limit (Vladimir Davydov) [PSBM-20089]
  - bc/memcg: assure swap->held/maxheld < swap->limit for beancounters (Vladimir Davydov) [PSBM-20089]
  - bc/memcg: show correct mem/swap failcnt for beancounters (Vladimir Davydov) [PSBM-20089]
  - bc/memcg: show correct swap max for beancounters (Vladimir Davydov) [PSBM-20089]
  - ploop: fix busyloop on secondary discard bio (Andrey Smetanin) [PSBM-30451]
  - ploop: add a separate queue for discard bio-s (v2) (Andrey Smetanin) [PSBM-27676]
  - bc/oom: zap oom kill related stuff (Vladimir Davydov) [PSBM-33732]
  - proc/oom: fix oom_score output (Vladimir Davydov)
  - bc/sysinfo: remove dead code (Vladimir Davydov)
  - ub/dcache: get rid of dcache accounting related stuff (Vladimir Davydov) [PSBM-33729]
  - ub: remove CONFIG_BC_RSS_ACCOUNTING (Vladimir Davydov)
  - ve/cgroups: Align ve_cftypes assignments (Cyrill Gorcunov)
  - ve/cgroup: Temporary allow writting cgroups files inside container (Cyrill Gorcunov) [PSBM-33664]
  - ve/cgroup: Allow mounting existing cgroups inside container (Cyrill Gorcunov) [PSBM-33664]
  - Revert "ploop: add a separate queue for discard bio-s (v2)" (Konstantin Khorenko) [PSBM-33633]
  - Revert "ploop: fix busyloop on secondary discard bio" (Konstantin Khorenko) [PSBM-33633]
  - ve/net: Fix unbalanced double spin_unlock() in tcp_v4_kill_ve_sockets() (Kirill Tkhai) [PSBM-33585]
  - ub: properly charge and uncharge shmem (Andrew Perepechko)
  - ve/net_ns: Don't forget to put_ve on error path (Cyrill Gorcunov)
  - ve: Add support of iptables mask (Cyrill Gorcunov) [PSBM-32737]
  - ve: Add support of features mask (Cyrill Gorcunov) [PSBM-32737]
  - config.OpenVZ: enable idle memory tracking (Konstantin Khorenko) [PSBM-32460]
  - ploop: added printk of function, line, backtrace before ploop_set_error (Andrey Smetanin)
  - ploop: force FUA of nullified blocks for BAT grow (Andrey Smetanin) [PSBM-31969]
  - ploop: mark reloc reqs to force FUA/fsync(kaio) for index update I/O (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: mark reloc reqs to force FUA before write of relocated data (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: make image fsync at I/O complete if it's required by FUA/fsync force flag or by req->req_rw (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: do preflush or postfua according force FUA/flush flags, and delay FUA if possible but add force FLUSH to req if so (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: direct: to support truly FLUSH/FUA of req we need mark first bio FLUSH, write all bios and mark last bio as FLUSH/FUA (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: define struct ploop_request->state flags to force pre FLUSH before write IO and FUA/fsync at I/O complete (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: added ploop_req_delay_fua_possible() func that detects possible delaying of upcoming FUA to index update stage (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: fix busyloop on secondary discard bio (Andrey Smetanin) [PSBM-30451]
  - ploop: notify blktrace about bio completions (Andrey Smetanin)
  - ploop: add a separate queue for discard bio-s (v2) (Andrey Smetanin) [PSBM-27676]
  - ploop: warning on "disk full" condition (Andrey Smetanin)
  - ploop: make manual abort transition verbose (Andrey Smetanin)
  - ploop: zero blocks on reuse (Andrey Smetanin) [PSBM-25391]
  - ploop: roll back alloc_head on ENOSPC (Andrey Smetanin) [PSBM-24694]
  - ploop: put top-delta back if merge failed (Andrey Smetanin) [PSBM-25252]
  - ploop: fix spurious hole complains (Andrey Smetanin)
  - ploop: expose open_count to sysfs (Andrey Smetanin) [PSBM-24754]
  - ploop: ensure non-empty delta list on running ploop (Andrey Smetanin) [PSBM-25102]
  - ploop: bug on bad fiemap (v2) (Andrey Smetanin) [PSBM-26762]
  - ploop: add ioctl to limit size of top delta (v2) (Andrey Smetanin) [PSBM-22002]
  - ploop: prioritize BAT operations (Andrey Smetanin)
  - ploop: fix race in ploop_tracker_init() (Andrey Smetanin) [PSBM-22993]
  - ploop: fix check_zero optimization v2 (Andrey Smetanin) [PSBM-23452]
  - ploop: fix a race condition on relocation of blocks (Andrey Smetanin) [PSBM-23905]
  - ploop: support 4K block-size of host block-device (Andrey Smetanin) [PSBM-21989]
  - ploop: skip writes of zeroes to unallocated blocks by default (Andrey Smetanin) [PSBM-22506 PSBM-22381]
  - ploop: reverse order of fdatawait and fsync fop (Andrey Smetanin)
  - ploop: fix sync delay for sync requests (Andrey Smetanin) [PSBM-22381]
  - ploop: fix iblk-to-sector calculations (Andrey Smetanin) [PSBM-22961]
  - ploop: rework accounting images_size (Andrey Smetanin) [PSBM-20432]
  - ploop: report holes in pio_direct (v2) (Andrey Smetanin) [PSBM-20770]
  - ploop: prevent disclosure 4 bytes of the stack kernel (Andrey Smetanin)
  - ploop: prevent dangerous ploop-umount (Andrey Smetanin) [PSBM-21474]
  - ploop: check new size of block device on ioctl(GROW) (Andrey Smetanin) [PSBM-21027]
  - ploop: fix dio_fsync wait (Andrey Smetanin) [PSBM-18049]
  - ploop: fix accounting ploop_io_images_size (Andrey Smetanin) [PSBM-19906]
  - ve/cgroups: Allow to attach non-self into ve cgroups, v3 (Cyrill Gorcunov) [PSBM-33561]
  - ve: device cgroup -- Implement devcgroup_seq_show_ve (Cyrill Gorcunov) [PSBM-33555]
  - mm/vmalloc: do not account vmap_area to memcg (Vladimir Davydov)
  - mm/tswap/tcache: enable tcache and tswap by default (Vladimir Davydov) [PSBM-31757 PSBM-32063]
  - ve/cgroups: fake num_cgroups in /proc/cgroups output (Vasily Averin) [PSBM-33400]
  - ve/uts_ns: Implement cgroup interface to configure ve's os_release (Kirill Tkhai) [PSBM-32273]
  - ve/fs/devmnt: process mount options (Kirill Tkhai) [PSBM-32273]
  - ve/devmnt: Introduce ve::devmnt list (Kirill Tkhai) [PSBM-32273]
  - ve/netns: Set null only for nets ve is a keeper of (Cyrill Gorcunov) [PSBM-33480]
  - ve/netfilter: ve_printk for "nf_conntrack: table full" (Vasily Averin)
  - ve/net/printk: net_veboth_ratelimited introduced (Vasily Averin)
  - ub: drop host node (Vladimir Davydov) [PSBM-33487]
  - ve/fairsched: drop host node (Vladimir Davydov) [PSBM-33487]
  - ve/cgroups: Drop virtualization code, v5 (Cyrill Gorcunov)
  - bc/ioprio: ub_set_ioprio() declaration if !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - vzstat: KSTAT_PERF_ENTER redefinition fixed when !CONFIG_VE (Kir Kolyshkin)
  - ve/ppc: remove vdso32_pages declaration from ppc elf.h (Kir Kolyshkin)
  - ub/kernel: use get_task_ub() - fix compile for !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - ve/proc/meminfo.c: use mm_ub() macro (Kir Kolyshkin)
  - ve/printk/ppc: fix asm modifier in DEFINE_STRUCT_MEMBER_ALIAS (Vladimir Davydov)
  - ve/ppc: wire OpenVZ-specific syscalls (Kir Kolyshkin)
  - ve/ppc: include OpenVZ-specific Kconfigs for ppc (Kir Kolyshkin)
  - ms/ppc: define TIOSAK (fix tty_ioctl() compilation) (Kir Kolyshkin)
  - ve/ppc: include ve.h in process.c (Kir Kolyshkin)
  - ve/netfilter: put appropriate part under CONFIG_VE_IPTABLES (Kir Kolyshkin)
  - bc/mm/shmem.c: use mm_ub() macro to avoid compilation errors if !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - bc/mm/oom: put UB_OOM_MANUAL_SCORE_ADJ bit check under CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - bc/mm/{memory.c,mprotect.c}: use mm_ub() macro (Kir Kolyshkin)
  - ve/mm/filemap.c: include virtinfo.h for !CONFIG_BC_IO_ACCOUNTING case (Kir Kolyshkin)
  - ve/mm: include virtinfo.h for !CONFIG_BC_IO_ACCOUNTING case (Kir Kolyshkin)
  - ve/sched: put move_task_groups() under CONFIG_CFS_CPULIMIT (Kir Kolyshkin)
  - ve/kernel: fix kernel_thread() compilation for !CONFIG_VE (Kir Kolyshkin)
  - bc/dcache: add parameter names to ub_dcache_reclaim() declaration for !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - fs/nfs/direct.c: include virtinfo.h (Kir Kolyshkin)
  - bc/io_acct: define get_io_ub() for !CONFIG_BC_IO_ACCOUNTING case (Kir Kolyshkin)
  - ve/sched: cpu_cgroup_get_stat() declaration in !CONFIG_VZ_FAIRSCHED case (Kir Kolyshkin)
  - bc: add struct seq_file declaration - fix virtinfo.h compile warning (Kir Kolyshkin)
  - bc: add {,un}charge_beancounter_fast define for !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - bc: for_each_beancounter() definition for !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - ms/sysfs: do not account sysfs_ino_ida allocations to memcg (Vladimir Davydov)
  - ms/gfp: add __GFP_NOACCOUNT (Vladimir Davydov)
  - ve/cgroup: devices -- Modify exception list for docker sake (Cyrill Gorcunov)
  - ve/tty: Prevent iteration with NULL dev in device_destroy_namespace() (Kirill Tkhai) [PSBM-33239]
  - venet: Don't kill venet0 on the node (Cyrill Gorcunov) [PSBM-33281]
  - vziolimit: add bc cgroup control (Dmitry Monakhov) [PSBM-32281]
  - ms/exit: pidns: alloc_pid() leaks pid_namespace if child_reaper is exiting (Oleg Nesterov)
  - config.OpenVZ: add "vziolimit" module (Konstantin Khorenko) [PSBM-20104]
  - vziolimit: correct copyright info (Konstantin Khorenko)
  - vziolimit: add blktrace hooks (Dmitry Monakhov) [PSBM-20104]
  - cfq: add virtinfo hook for vziolimits (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: compilation fix (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-iostat-wire-vziolimit-into-deadline-io_scheduler (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-introduce-atomic-flags-bit-field-shadow (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-vziolimit-charge-fuse-requests-into-iops-throttler (Dmitry Monakhov) [PSBM-10626 PSBM-20104]
  - vziolimit: port diff-vziolimit-dont-change-state-at-speed-change (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-vziolimit-fix-rounding-error-in-throttler (Dmitry Monakhov) [PSBM-13302 PSBM-20104]
  - vziolimit: port diff-ubc-iolimit-rework-async-iops-limit (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-iolimit-precharge-dirty-pages-opensource (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-iolimit-keep-charge-in-throttler (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-implement-the-iops-limiting (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-vziolimit-set-GPL-license (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-vziolimit-no-top-bc (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-wakup-at-kill-and-limit-change (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-dont-throttle-flushers (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-vzctl-api (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-handle-virtinfo-events (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-plain-throttler (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-initial-skeleton-opensource (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: remove dummy module (Dmitry Monakhov) [PSBM-20104]
  - ve: add config options for vzlist and vznetstat modules (Kirill Tkhai) [PSBM-19217]
  - ms/mm/memcg: do not use vmalloc for mem_cgroup allocations (Vladimir Davydov)
  - ms/mm/memcg: fix memcg_size() calculation (Vladimir Davydov)
  - ve: Make get_ve_by_id() lockless (Kirill Tkhai)
  - mm/memcg: remove memcg from kmemcg_sharers list on css free (Vladimir Davydov)
  - ve: Revert "ve/pid_ns: reap zombies with external parent on container's init exit" (Kirill Tkhai) [PSBM-33254]
  - venet: Dont create venet-s in sub net namespaces (v2) (Cyrill Gorcunov) [PSBM-29811]
  - bc: Drop redundant put_beancounter in ubstat_get_list (Cyrill Gorcunov)
  - bc: Add missing put_beancounter call (Cyrill Gorcunov) [PSBM-29895]
  - ms/mm/vmscan.c: don't forget to free shrinker->nr_deferred (Vladimir Davydov)
  - mm: transcendent swap cache (Vladimir Davydov) [PSBM-32063]
  - mm/tcache: change API to conform to tswap (Vladimir Davydov) [PSBM-31915]
  - ve/net/ppp: oops in oops in ppp_register_net_channel() (Vasily Averin) [PSBM-29975]
  - ve/netfilter: Check for permittions while looking for target and match (Kirill Tkhai) [PSBM-28910]
  - ve/netfilter: Add autoloading of sockopt modules (Kirill Tkhai) [PSBM-28910]
  - ve/kmod: Port autoloading from CT (Kirill Tkhai) [PSBM-28910]
  - ve/kmod: Move check of VE permitions from __call_usermodehelper_exec() to upper functions (Kirill Tkhai) [PSBM-28910]
  - ms/sched: Remove lockdep check in sched_move_task() (Kirill Tkhai)
  - iolimits: fix double I/O accounting for iolimits (Andrew Perepechko)
  - ve/tty: Don't WARN_ONCE on /dev/console disabling (Cyrill Gorcunov) [PSBM-32728]
  - ve/tty: Disable /dev/console in VE environment (Cyrill Gorcunov) [PSBM-32686]
  - mm/tcache: update to use new cleancache API (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: remove limit on the number of cleancache enabled filesystems (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: forbid overriding cleancache_ops (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: zap uuid arg of cleancache_init_shared_fs (Vladimir Davydov) [PSBM-31915]
  - ms/fs/ocfs2: copy fs uuid to superblock (Vladimir Davydov) [PSBM-31915]
  - mm: introduce transcendent file cache (Vladimir Davydov) [PSBM-31757]
  - ms/memcg: port low limit (Vladimir Davydov) [PSBM-31752]
  - ve/headers: Export VE headers (Cyrill Gorcunov) [PSBM-31973]
  - ms/slub: make dead caches discard free slabs immediately (Vladimir Davydov) [PSBM-25018]
  - ms/slub: never fail to shrink cache (Vladimir Davydov) [PSBM-25018]
  - ms/slub: fix off by one in number of slab tests (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: reparent list_lrus and free kmemcg_id on css offline (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: add helpers to isolate items (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: free memcg_caches slot on css offline (Vladimir Davydov) [PSBM-25018]
  - ms/slab: use css id for naming per memcg caches (Vladimir Davydov) [PSBM-25018]
  - ms/slab: link memcg caches of the same kind into a list (Vladimir Davydov) [PSBM-25018]
  - ms/slab: embed memcg_cache_params to kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab_common: move kmem_cache definition to internal header (Vladimir Davydov) [PSBM-25018]
  - ms/fs: make shrinker memcg aware (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: introduce per-memcg lists (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: organize all list_lrus to list (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: get rid of ->active_nodes (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: add rwsem to synchronize against memcg_caches arrays relocation (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: rename some cache id related variables (Vladimir Davydov) [PSBM-25018]
  - ms/vmscan: per memory cgroup slab shrinkers (Vladimir Davydov) [PSBM-25018]
  - ms/fs: consolidate {nr,free}_cached_objects args in shrink_control (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: introduce list_lru_shrink_{count,walk} (Vladimir Davydov) [PSBM-25018]
  - ms/mm: vmscan: invoke slab shrinkers from shrink_zone() (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_slab_caches and memcg_slab_mutex (Vladimir Davydov) [PSBM-25018]
  - ms/slub: use sysfs'es release mechanism for kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/slub: fix memcg_propagate_slab_attrs (Vladimir Davydov) [PSBM-25018]
  - ms/slub: do not drop slab_mutex for sysfs_slab_add (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_name argument of memcg_create_kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap __memcg_{charge,uncharge}_slab (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: fix possible use-after-free in memcg_kmem_get_cache() (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: use generic slab iterators for showing slabinfo (Vladimir Davydov) [PSBM-25018]
  - ms/slab: print slabinfo header in seq show (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab: Give s_next and s_stop slab-specific names (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab: Sharing s_next and s_stop between slab and slub (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_can_account_kmem (Vladimir Davydov) [PSBM-25018]
  - ploop: fixed deadlock by interrupts off inside lookup_extent_mapping (Andrey Smetanin) [PSBM-32614]
  - config.OpenVZ/audit: Disable audit subsystem in config (Cyrill Gorcunov) [PSBM-32261]
  - ploop: fix deadlock inside dio_alloc_sync - lock inside while() but unlock outside (Andrey Smetanin)
  - net/vznetstat: remove redirection remains (Konstantin Khorenko) [PSBM-32912]
  - vznetstat: alloc ve->stat if necessary (Kirill Tkhai) [PSBM-32072]
  - Revert "VE: export more headers to userspace" (Konstantin Khorenko) [PSBM-31973]
  - VE: export more headers to userspace (Konstantin Khorenko)
  - Makefile: make VZVERSION evaluated dynamically (Konstantin Khorenko)
  - dummy: add dummy modules for service vz init script (Konstantin Khorenko) [PSBM-31333]
  - vzstat: port vzstat module from rh6 (Vladimir Davydov)
  - vzlist: return second pid in container's namespace (Dmitry Guryanov) [PSBM-20095]
  - vzlist: fix get_vepids function (Dmitry Guryanov) [PSBM-20095]
  - vzlist: fix obvious compilation errors (Dmitry Guryanov) [PSBM-20095]
  - vzlist: add vzlist from 2.6.32-x as is (Dmitry Guryanov) [PSBM-20095]
  - vznetstat: don't use vehooks (Dmitry Guryanov) [PSBM-20094]
  - vznetstat: fix compilation (Konstantin Khorenko) [PSBM-20094]
  - vznetstat: apply vznetstat patches from 2.6.32 as is (Dmitry Guryanov) [PSBM-20094]
  - ms/memcg: move memcg_update_cache_size to slab_common.c (Vladimir Davydov)
  - ms/memcg: don't call memcg_update_all_caches if new cache id fits (Vladimir Davydov)
  - ms/memcg: move memcg_{alloc,free}_cache_params to slab_common.c (Vladimir Davydov)
  - ms/mm: vmscan: remove shrink_control arg from do_try_to_free_pages() (Vladimir Davydov)
  - ms/mm: vmscan: move call to shrink_slab() to shrink_zones() (Vladimir Davydov)
  - ms/mm: vmscan: respect NUMA policy mask when shrinking slab on direct reclaim (Vladimir Davydov)
  - ms/mm: vmscan: call NUMA-unaware shrinkers irrespective of nodemask (Vladimir Davydov)
  - ms/slab: delete cache from list after __kmem_cache_shutdown succeeds (Vladimir Davydov)
  - ms/memcg: cleanup kmem cache creation/destruction functions naming (Vladimir Davydov)
  - ms/memcg: memcg_kmem_create_cache: make memcg_name_buf statically allocated (Vladimir Davydov)
  - ms/memcg: get rid of memcg_create_cache_name (Vladimir Davydov)
  - ms/memcg, slab: simplify synchronization scheme (Vladimir Davydov)
  - ms/memcg, slab: merge memcg_{bind,release}_pages to memcg_{un}charge_slab (Vladimir Davydov)
  - ms/memcg, slab: do not schedule cache destruction when last page goes away (Vladimir Davydov)
  - ms/mm: get rid of __GFP_KMEMCG (Vladimir Davydov)
  - ms/mm/sl[aou]b: Move kmallocXXX functions to common code (Christoph Lameter)
  - ms/slob: Rework #ifdeffery in slab.h (Christoph Lameter)
  - ms/sl[au]b: charge slabs to kmemcg explicitly (Vladimir Davydov)
  - ms/slub: rework sysfs layout for memcg caches (Vladimir Davydov)
  - ms/slub: adjust memcg caches when creating cache alias (Vladimir Davydov)
  - ms/memcg, slab: do not destroy children caches if parent has aliases (Vladimir Davydov)
  - ms/memcg, slab: unregister cache from memcg before starting to destroy it (Vladimir Davydov)
  - ms/memcg, slab: separate memcg vs root cache creation paths (Vladimir Davydov)
  - ms/memcg, slab: never try to merge memcg caches (Vladimir Davydov)
  - ms/memcg, slab: cleanup memcg cache creation (Vladimir Davydov)
  - ms/memcg: fix mutex not unlocked on memcg_create_kmem_cache fail path (Vladimir Davydov)
  - ms/memcg: remove unused code from kmem_cache_destroy_work_func (Vladimir Davydov)
  - ms/memcg: rework memcg_update_kmem_limit synchronization (Vladimir Davydov)
  - ms/memcg: do not account memory used for cache creation (Glauber Costa)
  - ms/memcg: also test for skip accounting at the page allocation level (Glauber Costa)
  - ms/memcg: remove KMEM_ACCOUNTED_ACTIVATED flag (Vladimir Davydov)
  - ms/memcg, slab: RCU protect memcg_params for root caches (Vladimir Davydov)
  - ms/memcg: get rid of kmem_cache_dup() (Vladimir Davydov)
  - ms/memcg, slab: fix races in per-memcg cache creation/destruction (Vladimir Davydov)
  - ms/memcg: fix possible NULL deref while traversing memcg_slab_caches list (Vladimir Davydov)
  - ms/memcg, slab: fix barrier usage when accessing memcg_caches (Vladimir Davydov)
  - ms/memcg, slab: clean up memcg cache initialization/destruction (Vladimir Davydov)
  - ms/memcg, kmem: use cache_from_memcg_idx instead of hard code (Qiang Huang)
  - ms/memcg, kmem: rename cache_from_memcg to cache_from_memcg_idx (Qiang Huang)
  - ms/memcg, kmem: use is_root_cache instead of hard code (Qiang Huang)
  - ms/memcg, slab: kmem_cache_create_memcg(): fix memleak on fail path (Vladimir Davydov)
  - ms/slab: clean up kmem_cache_create_memcg() error handling (Vladimir Davydov)
  - ms/memcg: don't need to free memcg via RCU or workqueue (Li Zefan)
  - ms/memcg: kill memcg refcnt (Li Zefan)
  - ms/memcg: don't need to get a reference to the parent (Li Zefan)
  - ms/memcg: use css_get/put for swap memcg (Li Zefan)
  - ms/memcg: use css_get/put when charging/uncharging kmem (Li Zefan)
  - ms/memcg: don't use mem_cgroup_get() when creating a kmemcg cache (Li Zefan)
  - ms/memcg: use css_get() in sock_update_memcg() (Li Zefan)
  - ms/vfs: fix dentry LRU list handling and nr_dentry_unused accounting (Linus Torvalds)
  - vmscan: don't retry shrink_slab if current is dying (Vladimir Davydov)
  - ms/fs/super.c: fix lru_list leak for real (Al Viro)
  - ms/super: fix for destroy lrus (Glauber Costa)
  - ms/list_lru: dynamically adjust node arrays (Glauber Costa) [PSBM-42319]
  - mm: workingset: convert shrinker to count/scan API (Vladimir Davydov)
  - ms/fs: convert inode and dentry shrinking to be node aware (Dave Chinner)
  - ms/list_lru: remove special case function list_lru_dispose_all. (Glauber Costa)
  - ms/dcache: convert to use new lru list infrastructure (Dave Chinner)
  - ms/shrinker: Kill old ->shrink API. (Dave Chinner)
  - ms/shrinker: convert remaining shrinkers to count/scan API (Dave Chinner)
  - ms/hugepage: convert huge zero page shrinker to new shrinker API (Glauber Costa)
  - ms/drivers: convert shrinkers to new count/scan API (Vladimir Davydov) [PSBM-34838 PSBM-42317]
  - ms/fs: convert fs shrinkers to new scan/count API (Vladimir Davydov) [PSBM-34838]
  - ms/xfs: rework buffer dispose list tracking (Dave Chinner)
  - ms/xfs-convert-buftarg-lru-to-generic-code-fix (Andrew Morton)
  - ms/xfs: convert buftarg LRU to generic code (Dave Chinner)
  - ms/vmscan: per-node deferred work (Glauber Costa)
  - ms/shrinker: add node awareness (Dave Chinner)
  - ms/inode: move inode to a different list inside lock (Glauber Costa)
  - ms/inode: convert inode lru list to generic lru list code. (Dave Chinner)
  - ms/shrinker: convert superblock shrinkers to new API (Dave Chinner) [OVZ-6646 PSBM-42760]
  - ms/mm: new shrinker API (Dave Chinner)
  - ms/dcache: remove dentries from LRU before putting on dispose list (Dave Chinner)
  - ms/dentry: move to per-sb LRU locks (Dave Chinner)
  - ms/dcache: convert dentry_stat.nr_unused to per-cpu counters (Dave Chinner)
  - ms/super: fix calculation of shrinkable objects for small numbers (Glauber Costa)
  - ms/fs: bump inode and dentry counters to long (Glauber Costa)
  - bc: Allocate beancounters without limits when cgroup interface is used (Cyrill Gorcunov)
  - ve/nsproxy: Allow to unshare network namespace (Cyrill Gorcunov)
  - ve/cgroup: Fix missing cgroup::cgroup_ve assignment (Cyrill Gorcunov)
  - ve/cgroup: devices -- Fix memory leaking in sysfs_perms_open (Cyrill Gorcunov)
  - ve/signal: Fix NULL dereference in sig_ve_ignored (Cyrill Gorcunov)
  - ve/dcache: Allow to read proc links if new mount namespace is used (Cyrill Gorcunov)
  - ve/cgroup: Fix systemd virtualization (Cyrill Gorcunov)
  - ve/cgroup: Allow non-virtualized hierarchies in containers (Cyrill Gorcunov) [PSBM-30052]
  - ms/sched/fair: Fix division by zero sysctl_numa_balancing_scan_size (Kirill Tkhai)
  - ms/sched/numa: fix unsafe get_task_struct() in task_numa_assign() (Kirill Tkhai)
  - ms/sched: Fix race between task_group and sched_task_group (Kirill Tkhai)
  - Revert "ve: Port task_struct:vetask_list and while_each_thread_ve() etc" compilation fix (Konstantin Khorenko)
  - ve/proc: vestat_seq_show: Fix kernel OOPs (Cyrill Gorcunov)
  - ms/mm: softdirty: keep bit when zapping file pte (Peter Feiner)
  - rh/mm: Drop off Live Kernel Self Migration (TRACK_DIRTY_PAGES) (Cyrill Gorcunov)
  - ve/devtmpfs: Create required devices on container startup (Cyrill Gorcunov) [PSBM-29214]
  - ve: Use own uevent_seqnum for every VE (Kirill Tkhai) [PSBM-17903]
  - bc/proc: fix sleep in atomic bug in ub_{start,next,stop} (Vladimir Davydov)
  - ve/fs: Use ve_printk in fs/binfmt_aout.c (Kirill Tkhai) [PSBM-17903]
  - ve: Ignore signals from wrong ve (Kirill Tkhai) [PSBM-17903]
  - ve/fs: Port fs.fsync-enable and fs.odirect_enable sysctls (Kirill Tkhai) [PSBM-17903]
  - ve/mm/swap: do not uncharge on reuse_swap_page (Vladimir Davydov)
  - ms/fs/notify: don't show f_handle if exportfs_encode_inode_fh failed (Andrey Vagin)
  - ms/fsnotify/fdinfo: use named constants instead of hardcoded values (Andrey Vagin)
  - ms/kcmp: fix standard comparison bug (Rasmus Villemoes)
  - ms/cbq: now_rt removal (Vasily Averin)
  - ms/cbq: incorrectly low bandwidth setting blocks limited traffic (Vasily Averin)
  - ms/tty: Fix potential use after free in release_one_tty (Cyrill Gorcunov)
  - ploop: purge plo->map on merge (Maxim Patlasov) [PSBM-27891]
  - ploop: set PLOOP_MAP_IDENTICAL bit on merge (Maxim Patlasov) [PSBM-24408]
  - ploop: update i_size on preallocation (Maxim Patlasov)
  - ploop: support of explicit unplug: unplug callback (Maxim Patlasov) [PSBM-18168]
  - ploop: support of explicit unplug: start and stop plugging (Maxim Patlasov) [PSBM-18168]
  - ploop: check ENOSPC callback (Maxim Patlasov) [PSBM-18168]
  - ploop: port io_kaio module (Maxim Patlasov) [PSBM-18168]
  - ploop: congestion detection (Maxim Patlasov) [PSBM-18168 PSBM-11585]
  - ploop: generic support of writeback control (Maxim Patlasov) [PSBM-18168 PSBM-11585]
  - ploop: check error from freeze_bdev (Maxim Patlasov) [PSBM-28460]
  - ploop: fix file->f_count leak in raw_complete_snapshot() (Kirill Tkhai)
  - ub: show dead beancounters in procfs v3 (Vladimir Davydov)
  - ub: convert to cgroup (Vladimir Davydov)
  - ub: decouple from alien cgroups (Vladimir Davydov)
  - ub: (partial) fix for meminfo (Vladimir Davydov)
  - ub: introduce ub_page_stat (Vladimir Davydov)
  - ub: do not sync ubparms with memory cgroup (Vladimir Davydov)
  - ub: add ub_name to safely store CT name (Vladimir Davydov)
  - ub: drop CONFIG_BC_KEEP_UNUSED (Vladimir Davydov)
  - ub: get rid of get/put_beancounter_longterm (Vladimir Davydov) [PSBM-20089]
  - ub: rm include/bc/kmem.h (Vladimir Davydov) [PSBM-20089]
  - ve/bc/mm: port UB_PRIVVMPAGES, UB_SHMPAGES, and UB_LOCKEDPAGES accounting (Vladimir Davydov) [PSBM-20089]
  - ve/netfilter: Implement pernet net->ct.max / virtualize "nf_conntrack_max" sysctl (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Implement pernet expect_max / virtualize "net.netfilter.nf_conntrack_expect_max" sysctl (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Add pernet permission checks in ip_tables (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Implement net_ipt_permitted() etc (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Implement ip_conntrack_disable_ve0 module option (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "conntrack" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "owner" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "connmark" match / "CONNMARK" target support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "TOS" target support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "tos" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "mark" match and "MARK" target support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "iprange" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Basic ve transformations (Kirill Tkhai) [PSBM-18322]
  - ms/hrtimer: Set expiry time before switch_hrtimer_base() (Viresh Kumar)
  - ms/hrtimer: Prevent remote enqueue of leftmost timers (Leon Ma)
  - ms/module: remove rmmod --wait option. (Rusty Russell) [PSBM-27580 PSBM-27580]
  - ms/bluetooth: never linger on process exit (Vladimir Davydov)
  - bc/io: put beancounter before free (Maxim Patlasov)
  - ve/net/pppoe: fix nil dereference if no VE_FEATURE_PPP present (Cyrill Gorcunov)
  - ve/cgroups: hide toplevel cgroup entry from in /proc/pid/cgroup output (Cyrill Gorcunov) [PSBM-28377]
  - ve/cgroups: don't explicitly remove self destructable ve cgroups (Cyrill Gorcunov)
  - mm: make task with TIF_MEMDIE die faster (Kirill Tkhai)
  - ms/nmi: do not call unblank_screen() from nmi_show_regs() (Kirill Tkhai)
  - mm: add independed bio pool for swapout (Kirill Tkhai) [PSBM-14619]
  - vfs: call statfs on mnt's sb (Kirill Tkhai)
  - fs: add fadvise file_operation (Kirill Tkhai)
  - vfs: take stat's dev from mnt->sb (Kirill Tkhai)
  - vfs: add set_flags wrapper (Kirill Tkhai)
  - ms: unwind changes on shift_arg_pages error path (Kirill Tkhai)
  - ms: skip "relatime" in shmem_parse_options() (Kirill Tkhai)
  - ms: FIGETBSZ ioctl safety checks (Kirill Tkhai)
  - ext4: make data=writeback mode safe (Kirill Tkhai)
  - ext4: quarantee rename atomic behavior (Kirill Tkhai)
  - ms/fs: introduce "fs.relatime_interval" sysctl (Kirill Tkhai)
  - ve/vfs: introduce "odirect_enable" sysctl and disable it by default (Kirill Tkhai)
  - ext4: resplit block_page_mkwrite: fix get-host convention (Kirill Tkhai) [PSBM-16485]
  - blk/ploop: Add BLKPG_GET_PARTITION operation (Kirill Tkhai)
  - ext4/ploop: ask ploop about ENOSPC condition (Kirill Tkhai)
  - Subject: ve/futex/timeout: adjust futex timeout to absolule (Kirill Tkhai) [PSBM-14471]
  - ve/posix-timers: reference ve monotonic clock from ve start (v2) (Kirill Tkhai) [PSBM-13860]
  - x86: vdso: add sysctl to disable vdso for gettime monotonic (Kirill Tkhai) [PSBM-13860]
  - ve/posix-timers: reference ve monotonic clock from start in clock_nanosleep (Kirill Tkhai)
  - bc/io: set and release ioc->ioc_ub (Maxim Patlasov) [PSBM-15568]
  - oom: Show writeback_temp stats in oom message (Maxim Patlasov)
  - fuse: fix erroneous unlock_page() in fuse_send_writepages() (Maxim Patlasov)
  - fuse: release cleanup (Maxim Patlasov)
  - fuse: fix deadlock in fuse_flush() (Maxim Patlasov) [PSBM-29381]
  - fuse: invalidate_files backward compatibility mode (Maxim Patlasov)
  - fuse: fix writeback/release race (Maxim Patlasov) [PSBM-26148]
  - fuse: report details of aio failure (Maxim Patlasov) [PSBM-23696]
  - fuse: fail lost-lease notification if async_read (Maxim Patlasov)
  - fuse: skip waiting for fuse writeback (Maxim Patlasov)
  - fuse: prevent queueing new requests after (Maxim Patlasov)
  - fuse: kill requests on "lost-lease" event (Maxim Patlasov)
  - fuse: pass "fc" to fuse_invalidate_files() (Maxim Patlasov)
  - fuse: add "killed" bit to fuse request (Maxim Patlasov)
  - fuse: add page_cache bit to fuse request (Maxim Patlasov)
  - fuse: the list of all opened files (Maxim Patlasov)
  - fuse: do not flush files opened ro (Maxim Patlasov) [PSBM-20562]
  - fuse: add mount option to disable close_wait (Maxim Patlasov)
  - fuse: make umount synchronous (Maxim Patlasov) [PSBM-19305]
  - fuse: print initialized flag in conn info (Maxim Patlasov)
  - fuse: extend report on pstorage errors (Maxim Patlasov)
  - fuse: do not use RELEASE on directory (Maxim Patlasov) [PSBM-17195]
  - fuse: add missed fuse_file_put() (Maxim Patlasov)
  - fuse: cleanups in fuse writeback (Maxim Patlasov) [PSBM-16442 PSBM-16442]
  - fuse: implement invalidate_files notification (Maxim Patlasov) [PSBM-16105]
  - fuse: report size from server if no openers exist (Maxim Patlasov) [PSBM-15941]
  - fuse: write_begin() should wait for writeback (Maxim Patlasov)
  - fuse: account read/write requests into iopslimit (Maxim Patlasov)
  - fuse: improve bdi dirty memory limits for fuse (Maxim Patlasov) [PSBM-13700]
  - fuse: enable async_dio for pcs (Maxim Patlasov)
  - fuse: optimize fuse_vma_close() (Maxim Patlasov)
  - fuse: do not oops in fuse writepage (Maxim Patlasov) [PSBM-10752]
  - fuse: increment BDI_WRITEOUT for each page (Maxim Patlasov)
  - fuse: remove extra write_update (Maxim Patlasov) [PSBM-18167]
  - fuse: account directio requests into ioacct (Maxim Patlasov)
  - fuse: wire iolimit sleep-hook into directio path. (Maxim Patlasov)
  - fuse: account read/write requests into iostat (Maxim Patlasov)
  - fuse: set num_openers on create (Maxim Patlasov) [PSBM-13820]
  - fuse: i_size to be updated on first open (Maxim Patlasov) [PSBM-13636]
  - fuse: reimplement synchronous close (Maxim Patlasov)
  - fuse: Wait for real writeback to finish on file (Maxim Patlasov)
  - fuse: Dcache is always invalid (Maxim Patlasov)
  - fuse: virtualize context pid (Maxim Patlasov)
  - fuse: some fairness in handling writeback (Maxim Patlasov)
  - fuse: Fuse ctl file with connection info (Maxim Patlasov)
  - fuse: Show open files in fusectl (Maxim Patlasov)
  - fuse: Show active requests in fusectl files (Maxim Patlasov)
  - fuse: fuse-ve-odirect sysctl (Maxim Patlasov) [PSBM-18167]
  - fuse: direct_enable mount option (Maxim Patlasov) [PSBM-18167]
  - fuse: set req->background flag for fuse_writepages (Maxim Patlasov) [PSBM-18167]
  - fuse: kaio support (Maxim Patlasov) [PSBM-18167]
  - fuse: fix compilation for __fuse_readpage() (Maxim Patlasov)
  - fuse: Turn writeback cache on (Maxim V. Patlasov)
  - fuse: Fix O_DIRECT operations vs cached writeback misorder - v2 (Maxim V. Patlasov)
  - fuse: fuse_flush() should wait on writeback (Maxim V. Patlasov)
  - fuse: fuse_writepage_locked() should wait on writeback (Maxim V. Patlasov)
  - fuse: Implement writepages and write_begin/write_end callbacks (Maxim V. Patlasov)
  - fuse: Flush files on wb close (Maxim V. Patlasov)
  - fuse: Trust kernel i_mtime only (Maxim V. Patlasov)
  - fuse: Trust kernel i_size only (Maxim V. Patlasov)
  - fuse: Connection bit for enabling writeback (Maxim V. Patlasov)
  - fuse: Prepare to handle multiple pages in writeback (Maxim V. Patlasov)
  - fuse: Prepare to handle short reads (Maxim V. Patlasov)
  - fuse: Getting file for writeback helper (Maxim V. Patlasov)
  - fuse: Linking file to inode helper (Maxim V. Patlasov)
  - ms/sched: fix_small_imbalance: Fix local->avg_load > busiest->avg_load case (Vladimir Davydov) [PSBM-27697]
  - ms/sched: calculate_imbalance: Fix local->avg_load > sds->avg_load case (Vladimir Davydov) [PSBM-27697]
  - nfs/ioacounting: ported skipped code for read/write io accounting (Andrey Smetanin) [PSBM-27695]
  - ve/printk: define some log_* symbols for kdump (Vladimir Davydov)
  - mm: don't forget to set softdirty on file mapped fault (Cyrill Gorcunov)
  - mm: softdirty: clear VM_SOFTDIRTY flag inside clear_refs_write() instead of clear_soft_dirty() (Cyrill Gorcunov)
  - mm: softdirty: don't forget to save file map softdiry bit on unmap (Cyrill Gorcunov)
  - mm: softdirty: make freshly remapped file pages being softdirty unconditionally (Cyrill Gorcunov)
  - idr: fix overflow bug during maximum ID calculation at maximum height (Lai Jiangshan)
  - ve/idr: correctly alloc/release ve->veid from ve_idr (Andrey Smetanin) [PSBM-28031]
  - ub: use d_set_d_op to init ub ops (Vladimir Davydov)
  - ve/devtmpfs: pass proper options string (Cyrill Gorcunov)
  - ve/idr: fix WARN_ON(1) at ve_list_del: move idr_remove(&ve_idr, ve->veid) from ve_offline to ve_destroy (Andrey Smetanin)
  - mm/vps_dumpable: naming and description for task->mm->vps_dumpable values (Andrey Smetanin) [PSBM-20666]
  - vzstat: export symbols KSTAT_LAT_*_UPDATE funcs to be usable by our private vzmodules (Andrey Smetanin)
  - ubc/net: remove unused variable from neigh_periodic_work() (Konstantin Khorenko)
  - epoll: fix use-after-free in eventpoll_release_file (Konstantin Khlebnikov)
  - radix-tree/filemap: fix prev tag not set after deleting direct slot (Vladimir Davydov)
  - radix-tree/filemap: clear prev tag when deleting page from page cache (Vladimir Davydov)
  - fs/ceph: add BUG_ON to iov_iter access (Maxim Patlasov) [PSBM-34911]
  - fs/ceph: honor kernel direct aio changes (Konstantin Khorenko)
  - fs: kernel direct aio (Dmitry Monakhov) [PSBM-18169 PSBM-42312]
  - ploop/fairsched/io_prio: compilation fixes (Cyrill Gorcunov)
  - all: compilation fixes (Konstantin Khorenko)
  - VE/VFS: use sb->s_ns member to store namespace for mount_ns() calls (Konstantin Khorenko)
  - radix-tree: hunks left from initial combined patch added (Vladimir Davydov) [PSBM-18056 PSBM-27696]
  - quota/compat: move compat stuff from quota.h to compat.h (Konstantin Khorenko)
  - ubc/net: recharge skb in tcp_fragment() only (Konstantin Khorenko)
  - config.OpenVZ: OpenVZ related config options are added (Konstantin Khorenko)
  - config.OpenVZ: added symlinks to kernel config and debug config (Konstantin Khorenko)
  - bc/memcontrol: fix per-bc memcg pages output (Stanislav Kinsbursky) [PSBM-26039]
  - fairsched: add missing close in sys_fairsched_mknod (Vladimir Davydov)
  - drivers/core/sysfs: respect ns when removing sys dev link (Vladimir Davydov) [PSBM-25801]
  - nfsd/sunrpc/mqueue: use sb->s_ns instead of data in fill_super (Vladimir Davydov) [PSBM-25107]
  - ve/cgroups: add missing list_del(cgroup_ve_list) on error path (Vladimir Davydov) [PSBM-24622]
  - ve: get rid of get_ve_by_name() (Vladimir Davydov) [PSBM-24622]
  - ve: allocate ids on cgroup create (Vladimir Davydov) [PSBM-24622]
  - ve: get rid of __ve_name (Vladimir Davydov) [PSBM-24622]
  - venet: fix compilation (Vladimir Davydov) [PSBM-24622]
  - Revert "VE/NET: replace veid with ve_name in veip_struct" (Vladimir Davydov) [PSBM-24622]
  - mm: ignore VM_SOFTDIRTY on VMA merging (Cyrill Gorcunov)
  - ve/cgroups: use cgroup subsystem names only if in vz compat mode (Vladimir Davydov) [PSBM-22882]
  - ve/pid_ns: do not panic on kthreads when reaping external tasks on zap pid_ns (Vladimir Davydov)
  - fairsched: fix nasty typos (Dmitry Guryanov)
  - kmod: add header inclusion (Stanislav Kinsbursky)
  - stat: add header inclusion (Stanislav Kinsbursky)
  - vzstat: move code to source file (Stanislav Kinsbursky)
  - ve/proc: add empty "partitions" entry (Stanislav Kinsbursky) [PSBM-18889]
  - ve/devpts: cleanup per-VE creation (Stanislav Kinsbursky)
  - ve: containerize tty and console devices (Stanislav Kinsbursky) [PSBM-20100]
  - ve/tty: containerize ttys and console devices (Stanislav Kinsbursky)
  - tty: split tty's and console init routines (Stanislav Kinsbursky)
  - ve/pid_ns: reap zombies with external parent on container's init exit (Stanislav Kinsbursky)
  - ve/umh: make it ve-stopping safe (Stanislav Kinsbursky)
  - ve: remove ve_mutex (Stanislav Kinsbursky)
  - sched: use LBF_SOME_PINNED to balance tasks among vcpus (Vladimir Davydov)
  - ve/umh: fix NULL pointer dereference in VE0 (Stanislav Kinsbursky)
  - ve/pty: containerize Unix98 pty drivers (Stanislav Kinsbursky) [PSBM-20100]
  - ve/pty: containerize Unix98 driver (Stanislav Kinsbursky)
  - pty: split Unix98 init routines (Stanislav Kinsbursky)
  - ve/pty: containerize legacy pty drivers (Stanislav Kinsbursky) [PSBM-20100]
  - ve/pty: containerize legacy driver (Stanislav Kinsbursky)
  - pty: split legacy init routines (Stanislav Kinsbursky)
  - devtmpfs: containerize it with new obj ns operation (Stanislav Kinsbursky)
  - fs: add data pointer to mount_ns() (Stanislav Kinsbursky)
  - ve/tty: register containerized tty drivers only on global VE (Stanislav Kinsbursky)
  - ve/tty: add tty_cdev_del helper (Stanislav Kinsbursky)
  - ve/tty: make tty_class VE-namespace aware (Stanislav Kinsbursky)
  - ve: do not set VE_MEMINFO_DEFAULT to VE0 on ve_create (Vladimir Davydov)
  - fairsched: mount cpuacct together with cpu (Dmitry Guryanov)
  - bc: mount mem and blkio subsystems separately (Dmitry Guryanov)
  - bc: create separate cgroup for mem and blkio hierarchies (Dmitry Guryanov)
  - fairsched: mount cpu and cpuset separately (Dmitry Guryanov)
  - fairsched: don't use common root cgroup in fairsched.c (Dmitry Guryanov)
  - ve: split beancounter hierarchy (Dmitry Guryanov)
  - ve/cgroups: don't use common root cgroup in vecalls.c (Dmitry Guryanov)
  - ve/cgroups: don't mount freezer subsystem (Dmitry Guryanov)
  - ve/cgroups: add functions ve_cgroup_open and ve_cgroup_remove (Dmitry Guryanov)
  - ve/sunrpc: use correct pointer to net_namespace in auth_gss.c (Dmitry Guryanov)
  - tty: don't try to free termios if TTY_DRIVER_DEVPTS_MEM is set (Stanislav Kinsbursky)
  - ve/sysfs: make dev/char/ directory tagged with VE tag (Stanislav Kinsbursky)
  - ve/sysfs: allow symlinks between tagged and generic directories (Stanislav Kinsbursky)
  - ve/kobject: new type for VE-aware object introduced (Stanislav Kinsbursky)
  - ve/kobject: introduce new namespace tag and operations for VE (Stanislav Kinsbursky)
  - ve/vzstat: move code to source file and cleanup headers (Stanislav Kinsbursky)
  - ve/vzstat: port vzstat bits from rh6 (Vladimir Davydov)
  - ve/sysctl: allow to change mqueue sysctl-s (Andrew Vagin) [PSBM-20102]
  - ve/sysctl: allow to write kernel/hostname and kernel/domainname entries in container (Cyrill Gorcunov) [PSBM-20102]
  - ve/sysctl: allow to write /proc/sys/kernel/$next$ entries in container (Cyrill Gorcunov)
  - devtmpfs: per-VE mounts introduced (Stanislav Kinsbursky) [PSBM-17915]
  - pid: export symbol nex_pidmap (Dmitry Guryanov) [PSBM-20095]
  - dcache: d_root_check: allow to proceed on disconnected entries (Kirill Gorkunov)
  - ve/fs: remove ve_proto.h header from super.c (Stanislav Kinsbursky)
  - mm: /proc/pid/pagemap: inspect _PAGE_SOFT_DIRTY only on present pages (Cyrill Gorcunov)
  - mm: track vma changes with VM_SOFTDIRTY bit (Cyrill Gorcunov)
  - VE/sysrq-trigger: make it VE-namespace aware (Stanislav Kinsbursky) [PSBM-20664]
  - ve/sched: port boosting hacks against prio inversion (Vladimir Davydov) [PSBM-15441]
  - ve/sched: port vcpu hotslice (Vladimir Davydov) [PSBM-16913 PSBM-16913 PSBM-17399]
  - ve/sched: port nr cpus limit (Vladimir Davydov) [PSBM-16856]
  - venet: add venet_free_stat callback (Dmitry Guryanov)
  - sched: calc_load_ve: do not account rt tasks (Vladimir Davydov) [PSBM-22149]
  - config.OpenVZ: enable options required for CRIU (Konstantin Khorenko)
  - mm: do not loose soft dirty bit if page is in migration state (Kirill Gorkunov)
  - Revert "ve: set vps_dumpable for a process, which writes start in ve.state" (Andrew Vagin)
  - VE: don't clear vps_dumpable if ve isn't running (Andrew Vagin)
  - ve: allow to start CT by external processes (v2) (Andrew Vagin)
  - ve: show content of /proc/cgroups if CT isn't running yet (Andrew Vagin)
  - ve: skip d_root_check() for CT0 (Andrew Vagin)
  - kmemcg: don't allocate extra memory for root memcg_cache_params (Andrey Vagin)
  - mm: move_ptes -- Set soft dirty bit depending on pte type (Cyrill Gorcunov)
  - mm: save soft-dirty bits on file pages (Cyrill Gorcunov)
  - mm: save soft-dirty bits on swapped pages (Cyrill Gorcunov)
  - proc-net: mark all files in proc-net directories as virtualized (Vladimir Davydov)
  - proc: mark only net dirs as virtualized by default (Vladimir Davydov)
  - ve: use proc_mkdir for proc dir creation (Vladimir Davydov)
  - fairsched: use proc_mkdir for proc dir creation (Vladimir Davydov)
  - net: remove include/net/netlink_sock.h (Vladimir Davydov)
  - cgroup/cpuset/fairsched: get rid of cgroup_lock (Vladimir Davydov)
  - cgroup: cgroup->top_cgroup => &cgroup->root->top_cgroup (Vladimir Davydov)
  - ve/cgroup: fix compilation (Vladimir Davydov)
  - cpuset: remove unused stuff and fix compilation (Vladimir Davydov)
  - bc/proc: fix compilation (Vladimir Davydov)
  - khleper: fix compilation (Vladimir Davydov)
  - sched: move declaration of cgroup related functions to global header (Vladimir Davydov)
  - all: trivial compilation fixes (Vladimir Davydov)
  - Initial OpenVZ config for 3.10.x branch added, based on kernel-3.10.10-200.fc19 Fedora 19 kernel. (Konstantin Khorenko)
  - veth: Make it carry NETIF_F_VIRTUAL (Cyrill Gorcunov)
  - ve/cgroup: delete VE cgroup on the error path (Andrew Vagin) [PSBM-21953]
  - pfcache: do not ignore TTU_MUNLOCK in try_to_unmap_file() (Maxim Patlasov)
  - pfcache: iterate peer list only for shared pages (Maxim Patlasov)
  - pfcache: release path if dentry_open() failed (Maxim Patlasov)
  - pfcache: check root path in ext4_open_pfcache() (Maxim Patlasov)
  - ve/devcgroup: fix mknod permissions - allow to create any dev inside a CT (Vladimir Davydov) [PSBM-21979]
  - pfcache: add hashed peers for ext4 (Konstantin Khlebnikov) [PSBM-20098]
  - pfcache: add generic mapping peers (Konstantin Khlebnikov) [PSBM-20098]
  - mpi: export arithmetic functions required for in-kernel DSA implementation (Konstantin Khorenko)
  - ve/pidns: allow to change ns_last_pid from containers (Andrew Vagin)
  - VENET: add netlink interface for venet (Dmitry Guryanov)
  - mpi: fix compilation (Konstantin Khlebnikov)
  - ms/mpi: revert "Revert "crypto: GnuPG based MPI lib - (Dmitry Kasatkin)
  - ms/mpi: revert "Remove unused code from MPI library" (Dmitry Kasatkin)
  - ve: convert get/put_ve to non-gpl functions (Konstantin Khlebnikov)
  - ve: return back 'down_at' ve_struct field (Konstantin Khlebnikov)
  - VE: add function legacy_name_to_veid (Dmitry Guryanov)
  - VE: fix couple compilation warnings (Konstantin Khlebnikov)
  - ve: set vps_dumpable for a process, which writes start in ve.state (Andrew Vagin)
  - ms/pagemap: prepare to reuse constant bits with page-shift (Pavel Emelyanov)
  - ms/mm: soft-dirty bits for user memory changes tracking (Pavel Emelyanov)
  - ms/pagemap: introduce pagemap_entry_t without pmshift bits (Pavel Emelyanov)
  - ms/clear_refs: introduce private struct for mm_walk (Pavel Emelyanov)
  - ms/proc/clear_refs: sanitize accepted commands declaration (Pavel Emelyanov)
  - ve/sysfs: drop full access for all containers (Konstantin Khlebnikov) [PSBM-20892]
  - ve/sysfs: remove xattr interface to ve permissions (Konstantin Khlebnikov)
  - ve/sysfs: add new interface to control sysfs (Konstantin Khlebnikov)
  - ve: move unlinking ve_sysfs_perms into right function (Konstantin Khlebnikov)
  - nfsd: enable UMH client tracker in a container (Stanislav Kinsbursky)
  - ve: khelper kthread in a container introduced (Stanislav Kinsbursky)
  - ve: introduce kthread_run_ve() helper (Stanislav Kinsbursky)
  - nfsd: containerize kthreads (Stanislav Kinsbursky)
  - ve: kthreads creation facility introduced (Stanislav Kinsbursky)
  - kthread: make of a new kthread's queuing code to a callback (Stanislav Kinsbursky)
  - fs: virtualize devtmpfs file system (Stanislav Kinsbursky)
  - cpuset: do not remove tasks from empty cpusets (Vladimir Davydov)
  - SCHED: rework cputime accounting (v2) (Vladimir Davydov) [PSBM-18113 PSBM-20541]
  - ve/nfsd: virtualize nfsd file system (Stanislav Kinsbursky)
  - ext4: pfcache_csum mount option (Konstantin Khlebnikov)
  - ve: permit full access in sysfs for all containers (Konstantin Khlebnikov)
  - venet: unregister ve cgroup cftypes (Konstantin Khlebnikov)
  - ext4: fix balloon_ino mount option (Konstantin Khlebnikov)
  - VE: add __find_ve_by_name() function (Dmitry Guryanov)
  - misc: remove redundant security check from mmap_min_addr_handler (Konstantin Khlebnikov) [PSBM-18031]
  - VE: use ve environtment for sysctl restrictions (Konstantin Khlebnikov) [PSBM-18032 PSBM-18030]
  - VE: use ve environtment for proc restrictions (Konstantin Khlebnikov) [PSBM-18021]
  - VE: virtualize cgroups (Konstantin Khlebnikov) [PSBM-20665 PSBM-20540]
  - VE/NET: port diff-net-substitute-ve_hook-by-pernet_operations-in-veth (v2) (Vladimir Davydov) [PSBM-20668 PSBM-18176]
  - VE/NET: port diff-net-substitute-ve_hook-by-pernet_operations-in-venet (v2) (Vladimir Davydov) [PSBM-20668 PSBM-18176]
  - VE: uncomment ve_log_init, ve_log_destroy (Vladimir Davydov)
  - VE/PRINTK: rework printk virtualization (v2) (Vladimir Davydov) [PSBM-20669 PSBM-17899]
  - ve: mark /proc/self as virtualized (Konstantin Khlebnikov)
  - mntns: allow changes in init namespace (Konstantin Khlebnikov)
  - devpts: don't require newinstance (Konstantin Khlebnikov)
  - devcgroup: fix default behaviour (Konstantin Khlebnikov)
  - ve: plug broken printk changes (Konstantin Khlebnikov)
  - ve: allow user ns in chroot (Konstantin Khlebnikov)
  - device_cgroup: fix compilation (Konstantin Khlebnikov)
  - oom_groups: fix user-ns uid mangling (Konstantin Khlebnikov)
  - ubc: fix user-ns uid mangling (Konstantin Khlebnikov)
  - UBC: fix compilation (Konstantin Khlebnikov)
  - FS/NAMESPACE: fix compilation (Konstantin Khlebnikov)
  - VENETDEV: fix compilation (Konstantin Khlebnikov)
  - NFSD: fix compilation (Konstantin Khlebnikov)
  - QUOTA: fix compilation (Konstantin Khlebnikov)
  - KMAPSET: fix compilation (Konstantin Khlebnikov)
  - SYSCTL: fix compilation (Konstantin Khlebnikov)
  - SYSFS: fix compilation (Konstantin Khlebnikov)
  - TUN: fix compilation (Konstantin Khlebnikov)
  - NET/PROC: fix compilation (Konstantin Khlebnikov)
  - CGROUPS: fix compilation (Konstantin Khlebnikov)
  - NET/VLAN: fix compilation (Konstantin Khlebnikov)
  - MM: fix compilation (Konstantin Khlebnikov)
  - VE: fix compilation (Konstantin Khlebnikov)
  - UBC/STATD: fix compilation (Konstantin Khlebnikov)
  - COMMON: fix compilation (Konstantin Khlebnikov)
  - CGROUP/FREEZER: revert changes (Konstantin Khlebnikov)
  - VE/DEVICE_CGROUP: fix compilation (Konstantin Khlebnikov) [PSBM-20663]
  - ploop: add ploop to the tree (Maxim V. Patlasov)
  - mm: Account for WRITEBACK_TEMP in balance_dirty_pages (Maxim V. Patlasov)
  - ext4: Provide a balloon nipple for management (Maxim V. Patlasov) [PSBM-41222]
  - ext4: Don't show the active balloon to user (Maxim V. Patlasov)
  - ext4: Teach statfs to report reduced disk usage (Maxim V. Patlasov)
  - ext4: Teach the fs where the balloon inode is (Maxim V. Patlasov)
  - block: export put_io_context_active() (Maxim V. Patlasov)
  - VE/NET: add ip_list file to ve controller (Dmitry Guryanov)
  - VE/NET: provide cgroup interface for venet ip management (Dmitry Guryanov)
  - VE/NET: replace veid with ve_name in veip_struct (Dmitry Guryanov)
  - VE: add __ve_name function (Dmitry Guryanov)
  - VE: add legacy_veid_to_name function (Dmitry Guryanov)
  - VE/PRINTK: check syslog capability in user ns (Vladimir Davydov) [PSBM-17980]
  - VE/MM: show_signal_msg: print vma addr to VE_LOG (Vladimir Davydov)
  - VE: add cgroup attribute ve.legacy_veid (Konstantin Khlebnikov)
  - VE/NET: don't oops in net_generic() on disabled features (Konstantin Khlebnikov)
  - UBC: kill BC_DEBUG_KMEM (Konstantin Khlebnikov)
  - VE/SYSFS: add xattrs to control ve-permissions (Konstantin Khlebnikov)
  - VE/SYSFS: hide forbidden entries in container (Konstantin Khlebnikov)
  - VE/SYSFS: implement ve-based permissions (Konstantin Khlebnikov)
  - KMAPSET: set of key-value mappings with build-in (Konstantin Khlebnikov)
  - VE: implement get_ve_by_name() (Konstantin Khlebnikov)
  - VE: more veid to ve_name conversion (Konstantin Khlebnikov)
  - VE: cgroup interface for starging container (Konstantin Khlebnikov)
  - VE: kill vzmond (Konstantin Khlebnikov)
  - VE: drop devpts superblock in ve_exit_ns (Konstantin Khlebnikov)
  - VE: manage namespaces in ve-cgroup (Konstantin Khlebnikov)
  - VE: manage list of running container in ve-cgroup (Konstantin Khlebnikov)
  - VE: praparation for non-numeric veid (Konstantin Khlebnikov)
  - VE: forbid cgroup attach during starting or (Konstantin Khlebnikov)
  - VE: allocate log buffer together with ve_struct (Konstantin Khlebnikov)
  - VE: fix error path in do_env_create() (Konstantin Khlebnikov)
  - VE: implement ve_start_container() (Konstantin Khlebnikov)
  - VE: simplify hooks in zap_pid_ns_processes() (Konstantin Khlebnikov)
  - VE: cleanup setup_iptables_mask() (Konstantin Khlebnikov)
  - VE: remove ve_init_task (Konstantin Khlebnikov)
  - VE: forbid nested containers (Konstantin Khlebnikov)
  - VE: forbids threads in ve_can_attach() (Konstantin Khlebnikov)
  - VE/VZETHDEV: pass ve_struct in veth_dev_start (Andrew Vagin)
  - VE: fix filesystem type permition check (Konstantin Khlebnikov)
  - VE: mark virtual filesystems as virtualized (Konstantin Khlebnikov)
  - VE: cleanup credentials handling (Konstantin Khlebnikov)
  - VE/PROC: mark content of /proc/self/net as virtualized (Konstantin Khlebnikov)
  - VE/BINFTM: fix destruction ordering (Konstantin Khlebnikov)
  - VE/NSPROXY: fix refcounting of init_nsproxy (Andrew Vagin) [PSBM-17904]
  - VE/CPUSET: make [cpus|mems]_allowed be subset of cpuset_[cpus|mems]_allowed (Vladimir Davydov) [PSBM-18531]
  - VE/CPUSET: remove lock in cgroup_set_[cpumask|nodemask] (Vladimir Davydov)
  - VE: export headers to userspace (Dmitry Guryanov)
  - VE: export switch_task_namespaces() (Konstantin Khlebnikov)
  - VE: export nr_threads_ve() (Konstantin Khlebnikov)
  - VE: convert khelper_wq to kthread_worker (Konstantin Khlebnikov)
  - VE: add kthread into container (Konstantin Khlebnikov)
  - VE: convert to cgroup (Konstantin Khlebnikov)
  - VE: move fairsched creation out of op_sem (Konstantin Khlebnikov)
  - VE: cleanup include/linux/ve.h (Konstantin Khlebnikov)
  - VE: remove ve.h from sched.h (Konstantin Khlebnikov)
  - VE: collect basic interface in ve_proto.h (Konstantin Khlebnikov)
  - VE: remove task->owner_env (Konstantin Khlebnikov)
  - VE: remove pcounter (Konstantin Khlebnikov)
  - VE: rework shutdown sequence (Konstantin Khlebnikov)
  - VE: remove set_exec_env() (Konstantin Khlebnikov)
  - VE: remove set_exec_env from vc_screen (Konstantin Khlebnikov)
  - VE: remove set_exec_env() from venet_set_features() (Konstantin Khlebnikov)
  - PIDNS: add proc mount option 'hidepidns=0|1' (Konstantin Khlebnikov)
  - PIDNS: remove sysctl kernel.pid_ns_hide_child (Konstantin Khlebnikov)
  - PIDNS: Make the pidns proc mount/umount logic (Konstantin Khlebnikov)
  - PIDNS: general revert and cleanup (Konstantin Khorenko)
  - PIDNS: implement change_pid_ns() (Konstantin Khlebnikov)
  - VE/CALLS: allow CAP_[SYS|NET]_ADMIN if CAP_VE_[SYS|NET]_ADMIN set (Vladimir Davydov)
  - VE/AUTOFS: port 71-diff-autofs-combined (Dmitry Guryanov)
  - VE/NFS: check VE_FEATURE_NFS is set on mount (Stanislav Kinsbursky)
  - VE/BINFTM: virtualization (Konstantin Khlebnikov)
  - VE/BINFTM: move all internal data to structure (Stanislav Kinsbursky)
  - VE/BINFTM: remove all old containerization code (Stanislav Kinsbursky)
  - VE/NFS: mark NFS as containerized (Stanislav Kinsbursky) [PSBM-18170]
  - VE/SUNRPC: mark SUNRPC PipeFS as containerized (Stanislav Kinsbursky) [PSBM-18170]
  - VE/FS: containerize filesystems access (Stanislav Kinsbursky)
  - VFS: revert changes around vfsmount namespaces (Konstantin Khlebnikov)
  - VE/FS: allow mountpoint operations for CAP_VE_SYS_ADMIN (Konstantin Khlebnikov)
  - VE/FS: allow to mknod inside ct (Vladimir Davydov)
  - config.OpenVZ: enable in-kernel crypto DSA code (Konstantin Khorenko)
  - config.OpenVZ: enable CONFIG_LEGACY_PTY_COUNT and CONFIG_NETLINK_DIAG (Konstantin Khorenko)
  - config.OpenVZ: enable CONFIG_LEGACY_PTYS (Konstantin Khorenko)
  - config.OpenVZ: remove CONFIG_BC_DEBUG_KMEM and CONFIG_VZ_CHECKPOINT (Konstantin Khorenko)
  - Initial OpenVZ config added, based on kernel-3.6.11-5.fc17 Fedora 17 kernel. (Konstantin Khorenko)
  - FAIRSCHED: allow writing to cpus_allowed and mems_allowed (Dmitry Guryanov)
  - VE/SCHED: remove sched stats from ve_task_info (Vladimir Davydov)
  - SCHED: account forks per task group (Vladimir Davydov) [PSBM-18113 PSBM-18113]
  - SCHED: account ctxsw per task group (Vladimir Davydov) [PSBM-18113 PSBM-18113]
  - FAIRSCHED: get rid of cgorup cpuacct subsys (Vladimir Davydov) [PSBM-18113]
  - SCHED: fix nr_sleeping accounting (Vladimir Davydov) [PSBM-18113]
  - SCHED: fix nr_iowait accounting (Vladimir Davydov) [PSBM-18113]
  - DEVPTS: handle early ptmx open (Konstantin Khlebnikov)
  - VE/PTRACE: simplify pid-ns hack (Konstantin Khlebnikov)
  - VE: allow reboot in container (Konstantin Khlebnikov)
  - VE: cleanup hacks in signal handling (Konstantin Khlebnikov)
  - VE: use pid-ns reboot event (Konstantin Khlebnikov)
  - VE: remove switching context in irq_enter/leave (Konstantin Khlebnikov)
  - VE/USERNS: setup equal uid mapping (Konstantin Khlebnikov)
  - VE: fix lockdep warning in ve_task_ppid_nr_ns() (Konstantin Khlebnikov)
  - VE: filter zap_ve_processes() (Konstantin Khlebnikov)
  - VECALLS: simplify legacy-devpts virtualization (Konstantin Khlebnikov)
  - VE/SYSCTL: ignore writes to sysctl vm.mmap_min_addr by (Konstantin Khlebnikov)
  - VE/SYSCTL: fixup virtualized sysctls (Konstantin Khlebnikov)
  - VE/SYSCTL: implement virtualized methods (Konstantin Khlebnikov)
  - VE/SYSCTL/IPC: mark as virtualized (Konstantin Khlebnikov)
  - VE/PROC/SYSCTL: show real permissions in stat (Konstantin Khlebnikov)
  - VE/SYSCTL: write permission restriction (Konstantin Khlebnikov) [PSBM-18022]
  - VE/PROC/UPTIME: fix task_cgroup() usage out of rcu protection (Konstantin Khlebnikov)
  - VE/PROC: show /proc/filesystems in container (Konstantin Khlebnikov)
  - VE/PROC: unblock more proc entries (Konstantin Khlebnikov) [PSBM-18889]
  - VE/PROC: unblock sysvipc interface (Konstantin Khlebnikov)
  - VE/PROC: fix bug in proc_readdir_de() (Konstantin Khlebnikov)
  - VE/PROC: replace glob_proc_root with S_ISVTX (Konstantin Khlebnikov)
  - VE/PROC: resticted proc-entries scope (Konstantin Khlebnikov) [PSBM-18019]
  - VE/DCACHE: reimplement d_root_check (Konstantin Khlebnikov)
  - VE/KOBJ: add function for send uevent in a currect exec_env only (Andrey Vagin)
  - VZPRIVNET: cache filtering result on dst (Pavel Emelyanov)
  - MISC: port of diff-misc-bits-2 (Dmitry Guryanov)
  - FS/QUOTA: Compatibility with older quotactl interface (Dmitry Guryanov)
  - UBC/SHMEM: remove beancounter (Konstantin Khlebnikov)
  - UBC/MEMCG: fix typo in mem_cgroup_apply_beancounter (Dmitry Guryanov)
  - UBC/MEMCG: change memsw before and after chaing memory (Konstantin Khlebnikov)
  - UBC/MEMCG: reset memsw limit before setting mem limit (Vladimir Davydov)
  - UBC: remove beancounter from struct pid (Konstantin Khlebnikov)
  - UBC: link with kmem controller (Konstantin Khlebnikov)
  - UBC: fix lost retval in memcg-ub link layer (Vladimir Davydov)
  - UBC: cleanup permission checks (Konstantin Khlebnikov)
  - UBC: tie beancounter and memory-cgroup together (Konstantin Khlebnikov)
  - UBC: link memcg with beancounter (Konstantin Khlebnikov)
  - VE/UBC/MM: enable memcg (Konstantin Khlebnikov)
  - mm: account all page tables for mm (Konstantin Khlebnikov)
  - simfs: to be substituted by bindmounts (Maxim V. Patlasov) [PSBM-18885 PSBM-18885 PSBM-34494 PSBM-20810]
  - MS/SIMFS: export statfs_by_dentry (Konstantin Khlebnikov)
  - VE/PRINTK: make log_from_idx, log_next use non-virtualized log_buf (Vladimir Davydov)
  - VE/PRINTK: printk virtualization (Vladimir Davydov) [PSBM-17899]
  - VE/NET: unblock net-namespaces (Konstantin Khlebnikov)
  - VE/NET: Allow userns root to control ppp device (Vladimir Davydov)
  - VE/NET: more get_exec_env() cleanups (Konstantin Khlebnikov)
  - VE/NET: hold ve ref until net is destroyed (Vladimir Davydov)
  - VE/NET: drop tcp_time_stamp fixup (Konstantin Khlebnikov)
  - VENET: cleanup owner_env references (Konstantin Khlebnikov)
  - VZETH: cleanup owner_env references (Konstantin Khlebnikov)
  - VE/NET: switch vz_security_*_check to netns (Konstantin Khlebnikov)
  - VE/NET: remove sysfs-related hacks for netdev (Konstantin Khlebnikov)
  - VE/NET: port of VZ VENET device (Stanislav Kinsbursky)
  - VE/NET: port of VZ VETH device (Stanislav Kinsbursky)
  - MS/PIDNS: don't force SIGKILL to tasks on child reaper death (Stanislav Kinsbursky)
  - MS/CGROUP: port kernel api (Vladimir Davydov) [PSBM-17927 PSBM-16529]
  - MS/CGROUP: self-destruction (without userspace helpers) (Konstantin Khlebnikov)
  - MS/CGROUP: export cgroup_kernel_close (Konstantin Khlebnikov)
  - cgroup: forbid mounting cgroups inside ve (Vladimir Davydov)
  - cgroup: adds kernel api stubs (Konstantin Khlebnikov)
  - cgroup: kernel api stubs (Konstantin Khlebnikov) [PSBM-17927]
  - x86/SYSCALL: remove sys32 vm86 warning (Dmitry Guryanov)
  - x86/NMI: introduce dumps via nmi (Dmitry Guryanov)
  - Initial patch commit + compilation fixes (Konstantin Khorenko) [PSBM-33584 PSBM-17651 PSBM-17886 PSBM-17909 PSBM-17918 PSBM-17915 PSBM-17917 PSBM-17914 PSBM-17902 PSBM-17924 PSBM-17926 PSBM-17924 PSBM-17918 PSBM-17930 PSBM-17931 PSBM-17945 PSBM-17960 PSBM-17971 PSBM-18875 PSBM-18876 PSBM-18877 PSBM-17908 PSBM-18878 PSBM-18879 PSBM-18056 PSBM-18882 PSBM-18884 PSBM-18899 PSBM-31125 PSBM-12955 PSBM-20089 PSBM-20089 PSBM-12523 PSBM-41530 OVZ-6600 OVZ-5192]
  - LICENSE: introduce COPYING.Parallels (Dmitry Guryanov)
  - MS/KBD: add file kbd_bind in sysfs, which allow unbind keyboard from tty (v2) (Andrey Vagin)
  - MS/DEVICE: input_mutex isn't static now (Andrey Vagin)
  - MS/NET/IPV6: remove duplicate neigh_ifdown (Vladimir Davydov) [PSBM-13449]
  - MS/MM/SLAB: show slab_info core (Dmitry Guryanov)
  - MS/NSPROXY: removing helper for restoring nsproxy (Konstantin Khlebnikov)
  - MS/IDLE: add boot param to forcibly enable intel auto demotion (Vladimir Davydov) [PSBM-11477]
  - MS/TTY: TIOSAK Secure Attention Key ioctl (Konstantin Khlebnikov) [PSBM-11881]
  - MS/FS/PROC: Drop the MS_RDONLY bit in proc_get_sb() (Stanislav Kinsbursky)
  - MS/FS/DCACHE: move vfs caches to headers (Dmitry Guryanov)
  - MS/DRV: move dev helpers to header (Andrey Vagin)
  - KBUILD: build should fail on modpost errors for external modules (Konstantin Khlebnikov)


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.10.1.vz7.12.2]
changelog:
  - ms/fs: Add a missing permission check to do_umount (Pavel Tikhomirov) [PSBM-43294]
  - ms/mnt: Only change user settable mount flags in remount (Pavel Tikhomirov) [PSBM-43294]
  - ms/fs/super.c: fix WARN on alloc_super() fail path (Pavel Tikhomirov) [PSBM-43294]
  - ms/ipv4: Don't do expensive useless work during inetdev destroy. (David Miller) [PSBM-42414]
  - Revert "config.OpenVZ: show Odin's logo on boot" (Konstantin Khorenko) [PSBM-44739]
  - Revert "ve/video/logo: show Odin's logo on boot" (Konstantin Khorenko) [PSBM-44739]
  - ve/fs/sync: fix CT's mountpoints traversal (Andrey Ryabinin) [PSBM-44125 PSBM-44684]
  - ve: remove sync_mutex (Andrey Ryabinin)
  - memcg: ignore memory.low for cgroups w/o tasks (Vladimir Davydov) [PSBM-44192]
  - ms/userns, pidns: Force thread group sharing, not signal handler sharing. (Eric W. Biederman) [PSBM-44152]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.10.1.vz7.12.3]
changelog:
  - ploop: use FALLOC_FL_CONVERT_UNWRITTEN in io_direct (Maxim Patlasov) [PSBM-22381]
  - ploop: replace BLOCK_UNINIT (Maxim Patlasov) [PSBM-22381]
  - ploop: fix direct_io prealloc checks (Maxim Patlasov) [PSBM-22381]
  - ploop: update gendisk disk_stats (Maxim Patlasov) [PSBM-41247]
  - ms/af_unix: Guard against other == sk in unix_dgram_sendmsg (Rainer Weikusat) [PSBM-43080]
  - ms/mm: slab: free kmem_cache_node after destroy sysfs file (Dmitry Safonov) [PSBM-43010]
  - ms/slub: do not assert not having lock in removing freed partial (Steven Rostedt) [PSBM-43010]
  - ms/slub: use lockdep_assert_held (Peter Zijlstra) [PSBM-43010]
  - ext4: rename fallocate(FALLOC_FL_CONVERT_AND_EXTEND) (Maxim Patlasov) [PSBM-22381]
  - ext4: rework fallocate(FALLOC_FL_CONVERT_AND_EXTEND) (Maxim Patlasov) [PSBM-22381]
  - vfs: fix fallocate(FALLOC_FL_CONVERT_AND_EXTEND) (Maxim Patlasov) [PSBM-22381]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.10.1.vz7.12.4]
changelog:
  - ve/cgroup: Allow to write to several safe cgroup files from CT (Pavel Tikhomirov) [PSBM-44981]
  - ve/cgroup: Prohibit access to toplevel cgroups in CT (Pavel Tikhomirov) [PSBM-44981]
  - vzprivnet: Enable module in configs (Pavel Tikhomirov) [PSBM-43685]
  - vzprivnet: Do not execute vzprivnet_hook inside CT (Pavel Tikhomirov) [PSBM-35111]
  - vzprivnet: Set GPL license (Pavel Tikhomirov)
  - vzprivnet: rt cache drop on vzprivnet update (Pavel Tikhomirov) [PSBM-28881]
  - vzprivnet: Incorrect return value in vzprivnet_hook() (Pavel Tikhomirov) [PSBM-28845]
  - vzprivnet: Check that vzprivnet6_lookup() returns not NULL (Pavel Tikhomirov) [PSBM-8734]
  - vzprivnet6: Interpret zero address as internet (Pavel Tikhomirov) [PSBM-8734]
  - vzprivnet6: Legacy mode support (Pavel Tikhomirov)
  - vzprivnet6: Switch to radix tree (Pavel Tikhomirov)
  - vzprivnet6: Remove hash references (Pavel Tikhomirov)
  - vzprivnet: Allow internet access for weak private networks (Pavel Tikhomirov)
  - vzprivnet: Introduce constants for weakness (Pavel Tikhomirov)
  - vzprivnet: Catch v4 conflict on add (Pavel Tikhomirov) [PSBM-6404 PSBM-7345]
  - vzprivnet6: Don't handle neighbor solicit packets in bridge (Pavel Tikhomirov) [PSBM-7078]
  - vzprivnet: Filter VM/CT to Host traffic (Pavel Tikhomirov) [PSBM-6404]
  - vzprivnet6: Mask the jhash value to fit the chain into one page - fix hash access (Pavel Tikhomirov)
  - vzprivnet: Check for bridged skbs in privnet properly (Pavel Tikhomirov) [PSBM-6635]
  - vzprivnet: Handle bridged skbs in ipv4 privnet (Pavel Tikhomirov) [PSBM-6459 PSBM-6448 PSBM-6444]
  - vzprivnet6: Use rh6 kapi (Pavel Tikhomirov)
  - vzprivnet: Hash sets for ipv6 privnet (Pavel Tikhomirov)
  - vzprivnet: Initial implementation of v6 privnets (Pavel Tikhomirov)
  - vzprivnet: Add stuff required for ipv6 support (Pavel Tikhomirov)
  - vzprivnet: Bad retcode on IP add conflict (Pavel Tikhomirov)
  - vzprivnet: Fix privnet object leak (Pavel Tikhomirov)
  - vzprivnet: Weak sparse networks (Pavel Tikhomirov)
  - vzprivnet: Flush rt cache each time rules change (Pavel Tikhomirov)
  - vzprivnet: Add the classifier proc file (Pavel Tikhomirov)
  - vzprivnet: Introduce basic statistics (Pavel Tikhomirov)
  - vzprivnet: Sparse privnets support (Pavel Tikhomirov)
  - vzprivnet: Netmask byte order toss (Pavel Tikhomirov)
  - vzprivnet: Legacy tree core isolation (Pavel Tikhomirov)
  - vzprivnet: Rework proc structure (Pavel Tikhomirov)
  - vzprivnet: Cache filtering result on dst (Pavel Tikhomirov)
  - vzprivnet: Split privnet descriptor into 2 parts (Pavel Tikhomirov)
  - vzprivnet: Include the last IP of the range into checks (Pavel Tikhomirov)
  - vznetfilter/vzprivnet: Combined patch (Pavel Tikhomirov) [PSBM-43685]
  - dcache: zap dentry_lru_del() (Vladimir Davydov)
  - ms/dcache: don't remove from shrink list in select_collect() (Al Viro) [PSBM-44210]
  - ms/dcache: dentry_kill(): don't try to remove from shrink list (Vladimir Davydov) [PSBM-44210]
  - ve/tty: vtty -- Drop TTY_PINNED_BY_OTHER bit (Cyrill Gorcunov)
  - block: suppress hard lockup warning in elv_drain_elevator (Vladimir Davydov) [PSBM-44480]
  - ms/kernel/watchdog.c: touch_nmi_watchdog should only touch local cpu not every one (Ben Zhang)
  - tmpfs: shmem_fallocate must return ERESTARTSYS (Maxim Patlasov) [PSBM-43399]
  - ploop: must acquire write access on space allocation (Maxim Patlasov) [PSBM-20150]
  - exit: clear TIF_MEMDIE after exit_task_work (Vladimir Davydov) [PSBM-44683]
  - ve/memcg: do not ignore oom_guarantee for unlimited cgroups (Vladimir Davydov) [PSBM-44683]
  - debug/scsi: debug Scsi_Host recovery (Maxim Patlasov) [PSBM-44228]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.12]
changelog:
  - ve: drop xattr policy toggle (Stanislav Kinsburskiy) [OVZ-6409]
  - ploop: push_backup: rework lockout machinery (Maxim Patlasov) [PSBM-47680 PSBM-47680]
  - Revert "ploop: push_backup must pass READs intact" (Maxim Patlasov) [PSBM-47680 PSBM-47680 PSBM-46775]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.13]
changelog:
  - net/skbuff: fix skb_clone() (Andrey Ryabinin) [PSBM-38924 PSBM-47290]
  - ve/netfilter/ipset: allow modules autoload (Pavel Tikhomirov) [PSBM-46102]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.14]
changelog:
  - ms/kmod: remove false positive warning "waiting module removal not supported: please upgrade" (Rusty Russell) [PSBM-27580 OVZ-6748 PSBM-47877]
  - ploop: push_backup: PLOOP_PEEK mode of ioctl(PLOOP_IOC_PUSH_BACKUP_IO) (Maxim Patlasov) [PSBM-47764]
  - cbt: blk_cbt_update_size() must return if cbt->block_max not changed (Maxim Patlasov)
  - cbt: blk_cbt_update_size() should not copy uninitialized data (Maxim Patlasov) [PSBM-48120]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.15]
changelog:
  - ve/vtty: Don't free console mapping until no clients left (Cyrill Gorcunov) [PSBM-39463]
  - fs: do not allow rootfs umount (Vasily Averin) [PSBM-46437]
  - ms/kernel/sysrq: restore touch_nmi_watchdog() in show_state_filter() (Andrey Ryabinin) [PSBM-47486]
  - ploop: fix gendisk disk_stats to be seen on partition (Maxim Patlasov) [PSBM-48266]
  - modules: set module author for Virtuozzo modules (Konstantin Khorenko) [PSBM-43847]
  - ploop: "Parallels loopback device" -> "Virtuozzo loopback device" (Konstantin Khorenko) [PSBM-43847]
  - license: put correct copyrights into file headers (Konstantin Khorenko) [PSBM-43847]
  - license: drop COPYING.Parallels file (Konstantin Khorenko) [PSBM-43847]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.16]
changelog:
  - netlink/diag: report flags for netlink sockets (Andrey Vagin) [PSBM-28386]
  - netlink: add an ability to restore messages in a receive queue (Andrey Vagin) [PSBM-28386]
  - netlink: allow to set peeking offset for sockets (Andrey Vagin) [PSBM-28386 PSBM-48484 PSBM-28386]
  - ploop: io_kaio: fix silly bug in kaio_complete_io_state() (Maxim Patlasov)
  - ploop: fix counting bio_qlen (Maxim Patlasov)
  - ve/device_cgroup: kill ACC_QUOTA permission (Andrey Ryabinin) [PSBM-48482]
  - ve/device_cgroup: allow to change device mount permission via cgroup (Andrey Ryabinin) [PSBM-48431]
  - ve/security: device_cgroup -- Allow manage devices in @pseudosuper state (Cyrill Gorcunov) [PSBM-48421]
  - ve/sysctl: remove unused fs.ve-area-access-check, net.ipv4.tcp_max_tw* (Pavel Tikhomirov) [PSBM-47061]


author: Vladimir Davydov <vdavydov@virtuozzo.com> [3.10.0-327.18.2.vz7.14.17]
changelog:
  - cgroup: fix path mangling for ve cgroups (Vladimir Davydov) [PSBM-48629]
  - cgroup: use cgroup_path_ve helper in cgroup_show_path (Vladimir Davydov)
  - Drop fairsched syscalls (Vladimir Davydov)
  - Use ve init task's css instead of opening cgroup via vfs (Vladimir Davydov) [PSBM-48629]
  - Drop VZCTL_ENV_CREATE (Vladimir Davydov)
  - Drop vz_compat boot param (Vladimir Davydov)
  - mm: memcontrol: fix race between kmem uncharge and charge reparenting (Vladimir Davydov) [OVZ-6756]
  - timers should not get negative argument (Vasily Averin) [PSBM-48475]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.18]
changelog:
  - ve: drop not used CAP_VE_ADMIN and CAP_VE_NET_ADMIN (Vladimir Davydov)
  - ploop: fix barriers for ordinary requests (Maxim Patlasov)
  - ms/mm: memcontrol: reclaim when shrinking memory.high below usage (Johannes Weiner) [PSBM-48546]
  - rh/locks: check for fl->fl_owner != filp in show_fd_locks (Stanislav Kinsburskiy) [PSBM-48727]
  - ve/fs: namespace -- Ignore device permissions during restore (Cyrill Gorcunov) [PSBM-48188]
  - ve: mark DEF_PERMS feature deprecated (Evgenii Shatokhin) [PSBM-40280]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.20]
changelog:
  - ve/net: sit: fix crash on newlink if VE_FEATURE_SIT is disabled (Vladimir Davydov)
  - ve/net: ipip: fix crash on newlink if VE_FEATURE_IPIP is disabled (Vladimir Davydov)
  - ve/net: ip_vti: skip per net init in ve (Vladimir Davydov) [PSBM-48698]
  - ve/net: ipip: enable in container (Vladimir Davydov) [PSBM-48608]
  - ve/fs: namespace -- Don't fail on permissions if @ve->devmnt_list is empty (Cyrill Gorcunov) [PSBM-48188]
  - ploop: deadcode cleanup in dio_submit() (Dmitry Monakhov)
  - ploop: skip redundant fsync for REQ_FUA in post_submit (Dmitry Monakhov)
  - ve/net: enable IPPROTO_ICMP inside Containers (Vasily Averin) [OVZ-6744 PSBM-47413]
  - ve/fairsched: Resurrect proc fairsched files (Vladimir Davydov) [PSBM-48824]
  - ve/binfmt_misc: Allow mount if capable(CAP_SYS_ADMIN) (Kirill Tkhai) [PSBM-47737]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.21]
changelog:
  - ploop: push_backup: implement timeout functions (Maxim Patlasov) [PSBM-48082]
  - ploop: push_backup: health monitor thread (Maxim Patlasov) [PSBM-48082]
  - ploop: push_backup: add timeout tunable (Maxim Patlasov)
  - ploop: push_backup: extend pb_set (Maxim Patlasov)
  - ploop: push_backup: factor rb_erase() out (Maxim Patlasov)
  - ploop: push_backup: introduce pb_set structure (Maxim Patlasov) [PSBM-48082 PSBM-48082]
  - ploop: fixup barrier handling during relocation (Maxim Patlasov)
  - ploop: fix barriers for PLOOP_E_RELOC_NULLIFY (Maxim Patlasov)
  - ploop: generalize issue_flush (Dmitry Monakhov)
  - ploop: remove preflush from dio_submit (Maxim Patlasov)
  - ploop: resurrect delay_fua for io_direct (Maxim Patlasov)
  - ploop: minor rework of ->write_page() io method (Dmitry Monakhov)
  - ploop: resurrect delayed_fua for io_kaio (Maxim Patlasov)
  - ploop: minor rework of ploop_req_delay_fua_possible (Maxim Patlasov) [PSBM-47107]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.22]
changelog:
  - Revert "ve/vmscan: do not throttle kthreads due to too_many_isolated" (Vladimir Davydov)
  - mm: vmscan: never wait on writeback pages (Vladimir Davydov) [PSBM-48115]
  - ub: account memory overcommit failures in UB_PRIVVMPAGES.failcnt (Andrey Ryabinin) [PSBM-48891]
  - ms/netfilter: x_tables: check for bogus target offset (Cyrill Gorcunov) [PSBM-49001]
  - ms/netfilter: x_tables: validate e->target_offset early (Cyrill Gorcunov) [PSBM-49001]
  - ms/netfilter: x_tables: make sure e->next_offset covers remaining blob size (Florian Westphal) [PSBM-49001]


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-42
changelog:
  - Fix a deadlock with hpc backup solution
  - CLKRN-92: Megaraid driver panic fixes
  - CLKRN-94: Improve a symlink attack protection by checking nested symlinks
  - CLKRN-95: Reduce high-order allocation impact in filesystem mount code
  - CLKRN-97: Fix race condition in common hashtable implementation


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-51
changelog:
  - CLKRN-125: net: netfilter: use vmalloc for ftp_buffer allocation
  - CLKRN-124: mm/memcg, ub: fix overflow in mem_cgroup_apply_beancounter()


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-59
changelog:
  - Updated version to 714 to avoid problems with migration from RHEL/CentOS
  to CloudLinux
  - Code clean-up on working with the filesystem


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-62
changelog:
  - Improved kernel GRUB entry checking, fixing error when initramfs might
  not be added in kernel GRUB entry


author: Sergey Fokin <sfokin@cloudlinux.com> - 1.4-58
changelog:
  - CLKRN-63: make symlinks in /sys/dev/char be visible
  - CLKRN-138: cleanup a cpufreq_cpu_data to avoid access aftre free situation


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-63
changelog:
  - CLKRN-151: fixup disk errors on HyperV hosts
  - CLKRN-149: tcp: check skb tailroom before collapsing


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-64
changelog:
  - CLKRN-128: fs: introduce flag FS_NOTRAVERSAL_FL
  - CLKRN-145: use kern_path call to find target file
  - CLKRN-153: lockref: move lockref counter from unsigned int to signed int


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-76
changelog:
  - AL-2163: Reworked detection of the GRUB related issues during kernel installation/update
  - CLKRN-175: register events with different number
  - CLKRN-170: take into account stack_guard_gap value
  - KMODLVE-121: the freezer cgroup is released before closed


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-3.1
changelog:
  - KMODLVE-109: don't allow unlinked lves to block lvp cpu limit change
  - KMODLVE-111: need to print error if cgroup rename or rmdir fails


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-5
changelog:
  - AL-2163: Reworked detection of the GRUB related issues during kernel installation/update
  - CLKRN-175: register events with different number
  - CLKRN-170: take into account stack_guard_gap value
  - KMODLVE-96: allow to use self and default commands for lvp info
  - KMODLVE-119: fix potential errors on exit from LVE by using only one namespace
  - KMODLVE-121: fix module panic on exit by closing freezer cgroup first before releasing it
  - KMODLVE-122: fix kernel crash on init if cgroups mount failed


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-7
changelog:
  - CLKRN-147: fix wrong uncharge in UB0
  - CLKRN-187: ext4: handle the rest of ext4_mb_load_buddy() ENOMEM errors
  - CLKRN-194: fix for CVE-2017-8824
  - CLKRN-195: mm: Count list_lru_one::nr_items lockless


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-8
changelog:
  - Added patches for Meltdown and Spectre attacks (CVE-2017-5753, CVE-2017-5715,
    CVE-2017-5754)
  - KMODLVE-142: resync stats before returning IO usage
  - KMODLVE-141: better make distclean cleanup
  - KMODLVE-140: fix panic with module loading
  - KMODLVE-139: add ability to set debug level in load time
  - KMODLVE-138: properly check lve_cgroup_kernel_open return value
  - KMODLVE-134: code cleanup for better test coverage
  - KMODLVE-131: improve failure IDs handling
  - KMODLVE-127: lvp_lve_move implementation


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-10
changelog:
  - CLKRN-210: fix CVE-2017-5715 [branch target injection] aka 'Spectre Variant 2'
  Fixed SPEC_CTRL and IBPB_SUPPORT features setting after microcode update
  - CLEN-61: restore serialized access to TSC through mfence
  - Restored patch to fix regression and cover CLKRN-172


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-12
changelog:
  - AL-2579: Fixed GRUB checks when system uses UEFI
  - CLKRN-153: fix possible race between dentry_kill and RCU-walk
  - KMODLVE-149: check a notifier pointer while unregistering notifiers


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-13
changelog:
  - CLKRN-219: fixed boot on Xen PV instances
  - CLKRN-230: fix ACL issue on XFS
  - Improved Meltdown/Spectre patch, returned missing chunks


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-14
changelog:
  - AL-2620: Use find-debuginfo.sh script from Fedora to reduce kernel binary RPM compile time
  - CLKRN-240: Fix NULL pointer dereference in __rds_rdma_map
  - CLKRN-234: fix a possible deadlock in the sctp socket diagnostic code
  - CLKRN-235: sched/numa: fixed softlockup in scheduler when running stressed workloads
  - CLKRN-239: fix Xen PV boot


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-15
changelog:
  - CLKRN-238: Fixed memory allocation size during procfs access
  - KMODLVE-92: Added lve ftrace events to improve debugging
  - KMODLVE-145: Check admin permissions while deleting an LVE
  - KMODLVE-153: Fixed a deadlock scenario on LVE destroy
  - KMODLVE-154: Fixed lvp mapping error which leads to inaccessible lvp
  - KMODLVE-155: Fixed incorrect IO counter value in lvetop


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-16
changelog:
  - CLKRN-250: solve the conflict between user ptrace switch and process visilibilty
    controlled by the hidepid option.


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-18
changelog:
  - CLKRN-266: x86/entry/64: Dont use IST entry for #BP stack
  - CLKRN-266: kvm/x86: fix icebp instruction handling


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-19.1
changelog:
  - Added fix for the CVE-2018-8781
  - Added fix for the CVE-2018-10675
  - CLKRN-287: Fix a CPU soft lockup during the path lookup
  - CLKRN-272: Fix kernel crashes in ia32 emulation layer


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-19.4
changelog:
  - CLKRN-315: fix an issue with the task scheduling during cond_resched()
  - KMODLVE-198: fixed stable-1.5 build


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-19.6
changelog:
  - KMODLVE-205: avoid lve kernel module crash on cgroup double removal
  - CLKRN-354: Fixed CVE-2018-14634
  - CLKRN-351: fix kernel crashes in bcache
  - CLKRN-348: Fixed CVE-2018-5391


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-19.8
changelog:
  - KMODLVE-205: create 'immutable' cgroups for UBC
  - KMODLVE-208: fix the lvp tree lock deadlock which leads to kernel
  soflockup and reboot.
  - KMODLVE-203: use lvp global tree to simplify ID management
  - KMODLVE-206: fix typo in lvp radix tree initialization


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-24.2
changelog:
  - Datacycle: disabled by default
  - CLKRN-365: fixed protected hardlinks issue
  - KMODLVE-210: add backward compatibility with lve utils


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-24.3
changelog:
  - CLKRN-368: fixed issue with nproc limis during code merge
  - CLKRN-371: NUMPROC precharge is not reliable


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-24.4
changelog:
  - Fixed CVE-2018-3620, CVE-2018-3646, CVE-2018-3693, CVE-2018-5390
    CVE-2017-13215, CVE-2018-10675, CVE-2018-7566
  - CLKRN-362: virtio_balloon: fix another race between migration and ballooning


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-24.5
changelog:
  - AL-3255: Enabled CONFIG_NETLINK_MMAP option to fix network issues in CL 7.6
  - CLKRN-389: restore  memcg_oom_disable sysctl option


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-24.7
changelog:
  - CLKRN-393: fs: I/O throttle on reading directory blocks
  - CLKRN-392: fs: xfs: forcibly convert v1 inodes to v2 inodes
  - CLKRN-386: add /proc/sys to proc whitelist


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-24.9
changelog:
  - CLKRN-421: ext4: handle the rest of ext4_mb_load_buddy() ENOMEM errors
    ext4: use __GFP_NOFAIL in ext4_free_blocks()
  - CLKRN-419: CVE-2018-18559: net/packet: fix a race in packet_bind() and packet_notifier()
  - CLKRN-418: userfaultfd: shmem: UFFDIO_COPY: set the page dirty if VM_WRITE is not set
    userfaultfd: shmem: add i_size checks
    userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas
    userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem
    userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-24.10
changelog:
  - CLKRN-424: IOPS limit support for mq-deadline
  - CLKRN-402: create UB cgroup and related mem, blkio cgroups in EXCL mode
  - ext4 fixes
  - root dentries need RCU-delayed freeing
  - mount: Retest MNT_LOCKED in do_umount
  - mount: Prevent MNT_DETACH from disconnecting locked mounts
  - mm fix reces and clearcache
  - fix mntput/mntput race
  - ipv6: fix possible use-after-free in ip6_xmit()
  - jbd2: don't mark block as modified if the handle is out of credits
  - CLKRN-411: avoid too long stalls in iolimits


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-21
changelog:
  - CLKRN-322: tcp: avoid collapses in tcp_prune_queue() if possible
  - CLKRN-322: tcp: detect malicious patterns in tcp_collapse_ofo_queue()


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-23
changelog:
  - CLKRN-342: Fixed L1TF backport issues which lead to corrupted page tables
  - CLKRN-348: Fixed CVE-2018-5391
  - ipvs: Fixed infinite loop in ipvs when using ipvs in docker env
  - CLKRN-351: fix kernel crashes in bcache
  - CLKRN-354: exec Limit arguments stack to avoid pathological stack usage


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-25.6
changelog:
  - CLKRN-439: libxfs: pack the agfl header structure so XFS_AGFL_SIZE is correct
  - CLKRN-427: Revert "mm/memcontrol: try to free all memcg during offline"


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-25.7
changelog:
  - CLKRN-446: port stable fixes to CL7
  - CLKRN-417: enable kabi check
  - CLKRN-424: IOPS limits support for the noop IO scheduler
  - CLKRN-421: jbd2: do not fail journal because of frozen_buffer allocation failure
  - CLKRN-450: xfs: handle error if xfs_btree_get_bufs fails
  - CLKRN-147: uncharging too much 1 h 0, res numflock ub 0


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-25.8
changelog:
  - CLKRN-457: fix KABI breakage
  - CLKRN-458: CVE-2018-12126: MSBDS Microarchitectural Store Buffer Data Sampling
  - CLKRN-458: CVE-2018-12130: MFBDS Microarchitectural Fill Buffer Data Sampling
  - CLKRN-458: CVE-2018-12127: MLPDS Microarchitectural Load Port Data Sampling
  - CLKRN-458: CVE-2019-11091: MDSUM Microarchitectural Data Sampling Uncacheable Memory


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-25.9
changelog:
  - CLKRN-466: fix Infiniband connectivity
  - CLKRN-464: xfs: Allow user to kill fstrim process
  - xfs: detect agfl count corruption and reset agfl


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-25.11
changelog:
  - CLKRN-421: ratelimit memcg oom message entries to dmesg
  - CLKRN-482: CVE-2019-11477: SACK Panic
  - CLKRN-483: CVE-2019-11478: SACK Slowness  or Excess Resource Usage 
  - CLKRN-485: CVE-2019-11479: Excess Resource Consumption Due to Low MSS Values


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-26.1
changelog:
  - CLKRN-421: fs: ext4: dont't mask __GFP_NOFAIL when working with s_buddy_cache
  - CLKRN-480 xfs don't block a slab shrinker


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-26.2
changelog:
  - CLKRN-479: careful cgroups removal for CL7
  - CLKRN-498: fs: xfs: drain m_buf_workqueue before destroying m_log
  - CLKRN-499: ext4: zero out the unused memory region in the extent tree block


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-26.3
changelog:
  - CLKRN-507: don't export /proc/net{tcp,udp,unix} info
  - KMODLVE-259: do not spam with killer fault messages
  - KMODLVE-263: create vs destroy race


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-26.4
changelog:
  - CLKRN-511: CVE-2019-1125: x86/entry/64: Use JMP instead of JMPQ
  - CLKRN-511: CVE-2019-1125: fix compilation and adjust the code
  - CLKRN-511: CVE-2019-1125: x86/speculation: Enable Spectre v1 swapgs mitigations
  - CLKRN-511: CVE-2019-1125: x86/speculation: Prepare entry code for Spectre v1 swapgs
  - CLKRN-504: fs: NFS: use cond_resched() when restarting walk of delegation list
  - KMODLVE-268 improve message for race
  - KMODLVE-273: stable-1.5 build failure
  - KMODLVE-255: additional debugging for lve integrity


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-26.5
changelog:
  - CLKRN-517: CVE-2019-14835: vhost: make sure log_num < in_num
  - CLKRN-515: hugetlbfs: fix memory leak for resv_map
  - CLKRN-515: tcp: Clear sk_send_head after purging the write queue
  - CLKRN-515: x86/kprobes: Avoid kretprobe recursion bug
  - CLKRN-515: ipv4: Fix raw socket lookup for local traffic
  - CLKRN-515: ipv4: ip_do_fragment: Preserve skb_iif during fragmentation
  - CLKRN-515: scsi: storvsc: Fix calculation of sub-channel count
  - CLKRN-515: ipv6/flowlabel: wait rcu grace period before put_pid()
  - CLKRN-515: ipv6: invert flowlabel sharing check in process and user mode
  - CLKRN-515: ext4: cleanup bh release code in ext4_ind_remove_space()
  - CLKRN-515: scsi: libsas: fix a race condition when smp task timeout


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-26.6
changelog:
  - CLKRN-522: CVE-2019-14821: KVM: coalesced_mmio: add bounds checking
  - CLKRN-521: CVE-2019-5489: mm/mincore.c: make mincore() more conservative
  - CLKRN-521: CVE-2019-11599: fix race condition between mmget_not_zero()/get_task_mm() and core dumping
  - CLKRN-520: KVM: VMX: fixes for vmentry_l1d_flush module parameter
  - CLKRN-514: net: tg3: introduce separate timeout values for NVRAM r/w ops


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-27
changelog:
  - CLKRN-542: x86/msr: Add the IA32_TSX_CTRL MSR
  - CLKRN-542: x86/cpu: Add a helper function x86_read_arch_cap_msr()
  - CLKRN-542: x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
  - CLKRN-542: x86/speculation/taa: Add mitigation for TSX Async Abort
  - CLKRN-542: x86/speculation/taa: Add sysfs reporting for TSX Async Abort
  - CLKRN-542: x86/tsx: Add "auto" option to the tsx= cmdline parameter
  - CLKRN-542: x86/tsx: Add config options to set tsx=on|off|auto
  - CLKRN-542: x86/bugs: Add ITLB_MULTIHIT bug infrastructure
  - CLKRN-542: drm/i915/gen8+: Add RC6 CTX corruption WA
  - CLKRN-539: ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
  - CLKRN-539: x86/speculation/mds: Apply more accurate check on hypervisor platform
  - CLKRN-539: hpet: Fix division by zero in hpet_time_div()
  - CLKRN-539: sched/numa: Move task_numa_free() to __put_task_struct()
  - CLKRN-539: sched/fair: Don't free p->numa_faults with concurrent readers
  - CLKRN-539: tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop
  - CLKRN-539: tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR
  - CLKRN-539: sched/fair: Don't assign runtime for throttled cfs_rq
  - CLKRN-539: signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
  - CLKRN-539: crypto: talitos - check AES key size
  - CLKRN-539: crypto: ghash - fix unaligned memory access in ghash_setkey()
  - CLKRN-539: x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
  - KMODLVE-292: preserve task's original umask when entering LVE


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-28
changelog:
  - CLKRN-554: KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES
  - CLKRN-554: kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
  - CLKRN-554: KVM: x86: use Intel speculation bugs and features as derived in generic x86 code
  - CLKRN-554: KVM: Introduce kvm_get_arch_capabilities()
  - CLKRN-554: kvm: x86: IA32_ARCH_CAPABILITIES is always supported
  - CLKRN-554: KVM: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts
  - CLKRN-554: CVE-2019-19332: KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID
  - CLKRN-554: x86/atomic: Fix smp_mb__{before,after}_atomic()
  - CLKRN-554: filldir[64]: remove WARN_ON_ONCE() for bad directory entries
  - CLKRN-554: Make filldir[64]() verify the directory entry filename is valid
  - CLKRN-554: ext4: add more paranoia checking in ext4_expand_extra_isize handling
  - CLKRN-554: ext4: Introduce ext4_clamp_want_extra_isize()
  - CLKRN-551: mm: do not stall register_shrinker
  - KMODLVE-301: fix lve loading module service
  - KMODLVE-292: fix typo in umask aasignment
  - KMODLVE-288: destroy all lves and lvps before unloading kmodlve
  - KMODLVE-269  don't panic with error UBC init
  - KMODLVE-264 lets protect procfs access with LVP reference.
  - KMODLVE-255: ignore move requests


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-30
changelog:
  - CLKRN-556: bgrt: check BGRT validness on sysfs read access
  - Reverted prviously applied efi bgrt patches since it requirs a lot of changes


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-33
changelog:
  - CLKRN-556: check bgrt pointer to avoid null-ptr dereference
  - CLKRN-574: mm: resolve lock contention issue in get_vmalloc_info()


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-36
changelog:
  - CLKRN-589 xfs: log mount failures don't wait for buffers to be released
  - CLKRN-591: disable CL7 code which duplicate KMODLVE-master functionality


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-37
changelog:
  - CLKRN-597: ext4: wait for existing dio workers in ext4_alloc_file_blocks()
  - CLKRN-597: ext4: check for directory entries too close to block end
  - CLKRN-597: tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK
  - CLKRN-597: vfs: fix do_last() regression
  - CLKRN-597: do_last(): fetch directory ->i_mode and ->i_uid before it's too late
  - CLKRN-597: CVE-2000-1134: CVE-2007-3852: CVE-2008-0525: CVE-2009-0416: CVE-2011-48
  34: CVE-2015-1838: CVE-2015-7442: CVE-2016-7489: namei: allow restricted O_CREAT of FIFOs and regular files
  - CLKRN-601: make CONFIG_CL_* entries visible in "menuconfig"
  - CLKRN-597: mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  - CLKRN-597: jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal
  - CLKRN-597: x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR
  - CLKRN-597: PCI: Don't disable bridge BARs when assigning bus resources
  - CLKRN-597: scsi: qla2xxx: Fix mtcp dump collection failure
  - CLKRN-597: CVE-2020-12114: fs/namespace.c: fix mountpoint reference counter race
  - CLKRN-597: tracing: Fix tracing_stat return values in error handling paths
  - CLKRN-597: tracing: Fix very unlikely race of registering two stat tracers
  - CLKRN-597: ext4, jbd2: ensure panic when aborting with zero errno
  - CLKRN-597: jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record
  - CLKRN-597: KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c
  - CLKRN-597: KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks
  - CLKRN-597: KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks
  - CLKRN-597: KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks
  - CLKRN-597: tcp: clear tp->total_retrans in tcp_disconnect()
  - CLKRN-597: mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
  - CLKRN-597: net_sched: ematch: reject invalid TCF_EM_SIMPLE
  - CLKRN-607: random: always use batched entropy for get_random_u{32,64}
  - CLKRN-607: x86/speculation: Add Ivy Bridge to affected list
  - CLKRN-607: x86/speculation: Add SRBDS vulnerability and mitigation documentation
  - CLKRN-607: x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation
  - CLKRN-607: x86/cpu: Add 'table' argument to cpu_matches()
  - CLKRN-607: x86/cpu: Add a steppings field to struct x86_cpu_id
  - CLKRN-607: x86/cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping
  - CLKRN-600: mm: don't clear __GFP_NOFAIL when matching against mask


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-39
changelog:
  - CLKRN-610: mm: don't use "overdraft" feature if oom_guarantee is zero
  - KMODLVE-345: add do_readlinkat helper
  - CLKRN-621: xfs: set format back to extents if xfs_bmap_extents_to_btree
  - CLKRN-621: ip6_gre: fix null-ptr-deref in ip6gre_init_net()
  - CLKRN-621: mm: fix swap cache node allocation mask
  - CLKRN-621: mm/slab: use memzero_explicit() in kzfree()
  - CLKRN-621: sched/core: Fix PI boosting between RT and DEADLINE tasks
  - CLKRN-621: net: core: reduce recursion limit value
  - CLKRN-621: tcp: grow window for OOO packets only for SACK flows
  - CLKRN-621: tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT
  - KMODLVE-344 generic packet mark
  - CLKRN-619: fix kmodlve srcversion printing
  - KMODLVE-345: prevent "readlink" if symlink is protected
  - KMODLVE-346: iolock vs pagelock deadlock in CL7h/8
  - KMODLVE-339: fix wrong ifdefs for lve sysctl calls
  - KMODLVE-339 cl7: fix cl7 (openvz7) based for master
  - KMODLVE-340 build: fix build with cl8.2
  - KMODLVE-337: limit maximum link count to avoid kernel stack overflow
  - KMODLVE-336: avoid scheduling under radix tree preload
  - KMODLVE-335: a debug patch to get more context info on error
  - KMODLVE-334: properly truncate events output
  - KMODLVE-327: /proc/lve/defaults crashes without .stop handler
  - KMODLVE-331: reset link depth and total limit before lookup a path


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-40
changelog:
  - CLKRN-638 xfs: prevent dropping ioend completions during buftarg wait
  - CLKRN-636: perf probe: Fix memory leakage when the probe point is not found
  - CLKRN-636: xfs: fix inode quota reservation checks
  - CLKRN-636: xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init
  - CLKRN-636: ext4: fix potential negative array index in do_split()
  - CLKRN-636: fix regression in "epoll: Keep a reference on files added to the check list"
  - CLKRN-636: do_epoll_ctl(): clean the failure exits up a bit
  - CLKRN-636: epoll: Keep a reference on files added to the check list
  - CLKRN-636: net: Fix potential wrong skb->protocol in skb_vlan_untag()
  - CLKRN-636: bonding: fix a potential double-unregister
  - CLKRN-636: PCI: Fix pci_create_slot() reference count leak
  - CLKRN-636: netfilter: nf_tables: fix destination register zeroing
  - CLKRN-636: tg3: Fix soft lockup when tg3_reset_task() fails.
  - CLKRN-636: net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init()
  - CLKRN-636: bnxt: don't enable NAPI until rings are ready
  - CLKRN-636: net: disable netpoll on fresh napis
  - CLKRN-636: iommu/vt-d: Serialize IOMMU GCMD register modifications
  - CLKRN-636: mm/hugetlb: fix a race between hugetlb sysctl handlers
  - CLKRN-633: update kernel config for master kmodlve
  - CLKRN-628: fs/binfmt_misc.c: do not allow offset overflow
  - CLKRN-611: fix use-after-free of shm file via remap_file_pages()
  - CLKRN-635: implement an ability to hide /proc/net{tcp,udp,unix}
  - CLKRN-634 get/drop reference to device in revalidate and  check_events
  - KMODLVE-348: limit warnings output
  - KMODLVE-361: disable BUG_ON(1) in LVE removal code
  - KMODLVE-330: BUG: sleeping function called from invalid context
  - KMODLVE-358: CL6h 1.5-39 loading module problem
  - KMODLVE-355: Fix ftrace hooks cleanup path


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-41
changelog:
  - CLKRN-640: use kernel built-in procfs access checks
  - CLKRN-640: enable kernel built-in procfs access checks
  - KMODLVE-366: check link_body properly
  - KMODLVE-363: add ability to account CPU/IO throttling time
  - KMODLVE-354: disallow to disable 'ftrace_enabled' parameter


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-42
changelog:
  - CLKRN-648: xfs: push the AIL in xlog_grant_head_wake
  - KMODLVE-370: lvp creating problem on kmodlve 2.0
  - KMODLVE-367: Investigate issue with unavailability to create LVE
  - KMODLVE-363: whitelist the task_sched_stat
  - KMODLVE-363: make task_sched_stat global, add missing removal code
  - CLKRN-640: enable procfs code only for CL8


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-43
changelog:
  - CLKRN-658: libfs: fix error cast of negative value in simple_attr_write()
  - CLKRN-658: perf lock: Don't free "lock_seq_stat" if read_count isn't zero
  - CLKRN-658: don't dump the threads that had been already exiting when zapped.
  - CLKRN-658: ext4: correctly report "not supported" for {usr,grp}jquota when !CONFIG_QUOTA
  - CLKRN-658: perf: Fix get_recursion_context()
  - CLKRN-658: xfs: fix a missing unlock on error in xfs_fs_map_blocks
  - CLKRN-658: iommu/amd: Increase interrupt remapping table limit to 512 entries
  - CLKRN-658: i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c
  - CLKRN-658: i40e: Wrong truncation from u16 to u8
  - CLKRN-658: perf tools: Add missing swap for ino_generation
  - CLKRN-658: time: Prevent undefined behaviour in timespec64_to_ns()


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-44
changelog:
  - CLKRN-648: xfs: use sync buffer I/O for sync delwri queue submission
  - CLKRN-648: xfs: refactor buffer submission into a common helper
  - CLKRN-648: xfs: push buffer of flush locked dquot to avoid quotacheck deadlock
  - CLKRN-648: xfs: fix use-after-free race in xfs_buf_rele
  - CLKRN-638 xfs: acquire superblock freeze protection on eofblocks scans" into lve
  - CLKRN-667: added CONFIG_CL_PROC_PROTECTION=y to the config for debug kernel
  - KMODLVE-374: remove trace_printk() calls
  - KMODLVE-353: lve_enter_pid_flags() API call
  - KMODLVE-373: do not kill unkillable threads in lve_enter
  - KMODLVE-380: enable sleep in hooks and avoid calling the hooked func
  - KMODLVE-385: prevent jump out of the container's root via procfs symlinks
  - KMODLVE-383: do not cpu-starve in __lve_init
  - CLKRN-659: fix procfs access
  - KMODLVE-377: use module_mutex when resolving names
  - CLKRN-678: Revert "CLKRN-648: xfs: use sync buffer I/O for sync delwri queue submission"
  - CLKRN-678: Revert "CLKRN-648: xfs: refactor buffer submission into a common helper"
  - KMODLVE-382: fix for permissions of /proc/<pid>/task/<pid>/io file
  - KMODLVE-384: reduce memory consumption by lve procfs
  - KMODLVE-379 out of bound access


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-44
changelog:
  - CLKRN-648: xfs: use sync buffer I/O for sync delwri queue submission
  - CLKRN-648: xfs: refactor buffer submission into a common helper
  - CLKRN-648: xfs: push buffer of flush locked dquot to avoid quotacheck deadlock
  - CLKRN-648: xfs: fix use-after-free race in xfs_buf_rele
  - CLKRN-638 xfs: acquire superblock freeze protection on eofblocks scans" into lve
  - CLKRN-667: added CONFIG_CL_PROC_PROTECTION=y to the config for debug kernel
  - KMODLVE-374: remove trace_printk() calls
  - KMODLVE-353: lve_enter_pid_flags() API call
  - KMODLVE-373: do not kill unkillable threads in lve_enter
  - KMODLVE-380: enable sleep in hooks and avoid calling the hooked func
  - KMODLVE-385: prevent jump out of the container's root via procfs symlinks
  - KMODLVE-383: do not cpu-starve in __lve_init
  - CLKRN-659: fix procfs access
  - KMODLVE-377: use module_mutex when resolving names
  - CLKRN-678: Revert "CLKRN-648: xfs: use sync buffer I/O for sync delwri queue submission"
  - CLKRN-678: Revert "CLKRN-648: xfs: refactor buffer submission into a common helper"
  - CLKRN-673: disable THP by default
  - KMODLVE-382: fix for permissions of /proc/<pid>/task/<pid>/io file
  - KMODLVE-384: reduce memory consumption by lve procfs
  - KMODLVE-379 out of bound access


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-46
changelog:
  - CLKRN-686: futex: Provide and use pi_state_update_owner()
  - CLKRN-686: futex: Replace pointless printk in fixup_owner()
  - CLKRN-686: futex: Handle faults correctly for PI futexes
  - CKSIX-269: fix complete_all issue


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-47
changelog:
  - CLKRN-675: restore docker containers compatibility
  - KMODLVE-391: lvp reference is not used
  - KMODLVE-392: loadavg for root should be fully accounted


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-49
changelog:
  - KMODLVE-398: don't use ref-style in RCU-lookup
  - KMODLVE-392: wrong assignment in get_avenrun handler


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-51
changelog:
  - CLKRN-733: CVE-2017-18595: tracing: Fix possible double free on failure of allocating trace buffer
  - CLKRN-733: CVE-2015-9289: cx24116: fix a buffer overflow when checking userspace params
  - CLKRN-733: CVE-2019-15916: net-sysfs: Fix mem leak in netdev_register_kobject
  - CLKRN-733: CVE-2019-12382: drm/edid: Fix a missing-check bug in drm_load_edid_firmware()
  - CLKRN-733: CVE-2018-7191: tun: allow positive return values on dev_get_valid_name() call
  - CLKRN-733: CVE-2018-7191: tun: call dev_get_valid_name() before register_netdevice()
  - CLKRN-733: CVE-2019-15214: ALSA: core: Fix card races between register and disconnect
  - CLKRN-733: CVE-2019-15214: ALSA: info: Fix racy addition/deletion of nodes
  - CLKRN-733: CVE-2019-11884: Bluetooth: hidp: fix buffer overflow
  - CLKRN-733: CVE-2018-19985: USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data
  - CLKRN-733: CVE-2018-19985 CVE-2018-20169: USB: check usb_get_extra_descriptor for proper size
  - CLKRN-719: CVE-2021-20219: n_tty: Fix stall at n_tty_receive_char_special()
  - CLKRN-721: CVE-2021-27365: scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE
  - CLKRN-721: CVE-2021-27363 CVE-2021-27364: scsi: iscsi: Restrict sessions and handles to admin  capabilities


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-52
changelog:
  - CLKRN-673: improve shrinker scalability
  - KMODLVE-407: release path after symlink lookup for CL7 lsm
  - KMODLVE-405: a false fault injection is triggered due to a typo


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-53
changelog:
  - CLKRN-749: CVE-2020-29661: tty: Fix ->pgrp locking in tiocspgrp()
  - CLKRN-749: CVE-2020-28374: scsi: target: Fix XCOPY NAA identifier lookup
  - CLKRN-749: xcopy: loop over devices using idr helper
  - CLKRN-749: CVE-2020-25705: icmp: randomize the global rate limiter
  - CLKRN-749: CVE-2021-20265: af_unix: fix struct pid memory leak
  - CLKRN-749: af_unix: Revert 'lock_interruptible' in stream receive code
  - CLKRN-749: CVE-2020-25656: vt: keyboard, extend func_buf_lock to readers
  - CLKRN-749: CVE-2020-25656: vt: keyboard, simplify vt_kdgkbsent
  - CLKRN-749: CVE-2020-25645: geneve: add transport ports in route lookup for geneve
  - CLKRN-749: CVE-2020-25211: netfilter: ctnetlink: add a range check for l3/l4 protonum
  - CLKRN-749: CVE-2020-14351: perf/core: Fix race in the perf_mmap_close() function
  - CLKRN-749: CVE-2020-7053: drm/i915: Fix use-after-free when destroying GEM context
  - CLKRN-749: CVE-2020-0427: pinctrl: devicetree: Avoid taking direct reference to device name string
  - CLKRN-749: CVE-2019-19532: HID: Fix assumption that devices have inputs
  - KMODLVE-410: properly handle lve_leave_pid() errors
  - CLKRN-736: fix kmod-qa 0102-procfs_protection on CL7h/8
  - KMODLVE-399: move exec handler to the new hook infra
  - CLKRN-741: adapt datacycle fsnotify hook on unlink/rmdir events to 8.2


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-54
changelog:
  - CLKRN-691: mm: don't cap request size based on read-ahead setting
  - CLKRN-691: block: bump BLK_DEF_MAX_SECTORS to 2560" into lve
  - CLKRN-691: mm: don't cap request size based on read-ahead setting" into lve


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-57
changelog:
  - KMODLVE-424: fix incorrect IO throttling accounting for CL7
  - KMODLVE-431: whitelist nf_conntrack_max
  - KMODLVE-430: add missing LVE_API_ENTER/EXIT directives
  - KMODLVE-421: incorrect db_governor/sql start order


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-58
changelog:
  - CLKRN-781: whitelist /proc/lve/task_sched_stat
  - CLKRN-775: net: ipv6: send unsolicited NA on admin up


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-59
changelog:
  - CVE-2021-22555: CLKRN-793: netfilter: x_tables: fix compat match/target pad out-of-bound  write
  - KMODLVE-417: fine-grained options for lve_enter
  - KMODLVE-417: iolimits should be disabled explicitly for CL8


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-61
changelog:
  - CLKRN-801: disable vfs_cache_min_ratio
  - CLKRN-721: CVE-2021-27365: scsi: iscsi: Verify lengths on passthrough PDUs
  - CLKRN-804: datacycle should filter events by fsuid, not euid
  - CLKRN-739: allow access to /proc/sys/net/core/xfrm_acq_expires for ipsec service
  - KMODLVE-438: pump kapi version
  - CLKRN-803: fixed searching for modules to avoid broken weak-modules links


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-62
changelog:
  - CLKRN-836: call iolimits hooks always with mq
  - CLKRN-821: datacycle path names should be mangled
  - CLKRN-823: smartpqi: correct lun reset issues
  - KMODLVE-448: don't load the module if there's no CONFIG_SECURITY_PATH defined
  - KMODLVE-450: datacycle cannot flush ids > 65535


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-63
changelog:
  - CLKRN-827: ext4: add prefetching for block allocation bitmaps
  - CLKRN-838: jbd2: fix deadlock while checkpoint thread waits commit
  - CLKRN-838: jbd2: fold __process_buffer() into jbd2_log_do_checkpoint()


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-64
changelog:
  - CLKRN-863: CVE-2020-36385:  RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
  - CLKRN-863: CVE-2020-36385: RDMA/ucma: Fix locking for ctx->events_reported
  - CLKRN-863: CVE-2020-36385: RDMA/ucma: Fix the locking of ctx->file
  - CLKRN-863: CVE-2020-36385: RDMA/cma: Add missing locking to rdma_accept()
  - KMODLVE-478: add missing LVE_API_* directives into setuid feature
  - CLKRN-859: added CAP_SYS_ADMIN capability allowing ptrace children
  - KMODLVE-470: don't restrict root process from traversing symlinks
  - KMODLVE-461: register usage cleanup
  - KMODLVE-460: unused label removal


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-65
changelog:
  - CLKRN-802: ext2: fix sleeping in atomic bugs on error
  - CLKRN-802: proc/vmcore: fix clearing user buffer by properly using clear_user()
  - CLKRN-802: netlink: annotate data races around nlk->bound
  - CLKRN-802: scsi: ses: Fix unsigned comparison with less than zero
  - CLKRN-802: scsi: core: Put LLD module refcnt after SCSI device is released
  - CLKRN-802: ipv6: tcp: drop silly ICMPv6 packet too big messages
  - CLKRN-802: tcp: annotate data races around tp->mtu_info
  - CLKRN-802: tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop.
  - CLKRN-802: workqueue: fix UAF in pwq_unbound_release_workfn()
  - KMODLVE-485: iolimits are not applied to XFS


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-67
changelog:
  - CLKRN-911: virtio-balloon: fix managed page counts when migrating pages between zones
  - CLKRN-929: CVE-2022-0492: cgroup-v1: Require capabilities to set release_agent
  - KMODLVE-508: replace immutable cgroups with rmdir hooks


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-68
changelog:
  - CLKRN-944: CVE-2022-1016: netfilter: nf_tables: initialize registers in nft_do_chain()
  - CLKRN-943: CVE-2022-1015: netfilter: nf_tables: validate registers coming from userspace.


author: Anatoly Stepanov <astepanov@cloudlinux.com> - 1.5-69
changelog:
  - CLKRN-951: Revert "hide cgroups in /proc/cgroups in order to cheat systemd"
  - CLKRN-955: scsi: aacraid: fix illegal IO beyond last LBA
  - CLKRN-955: scsi: aacraid: fix shutdown crash when init fails
  - CLKRN-955: scsi: aacraid: Prevent crash in case of free interrupt during scsi EH path
  - KMODLVE-515: add missing path_put in lve_namespace_set_root


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-70
changelog:
  - KMODLVE-523: rmdir hooks are not being called
  - KMODLVE-516: network-manager has no access to mtu
  - KMODLVE-591: user_ptrace checks should account CAP_SYS_PTRACE


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-71
changelog:
  - CLKRN-881: backport XFS corruption fix from Centos 7
  - CLKRN-974: drm/vmwgfx: Fix two list_for_each loop exit tests
  - CLKRN-974: drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add
  - CLKRN-974: drm/vmwgfx: Fix double free in vmw_recv_msg()
  - CLKRN-974: drm/vmwgfx: fix memory leak when too many retries have occurred
  - CLKRN-974: drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
  - CLKRN-974: drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read
  - CLKRN-974: drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set
  - CLKRN-974: drm/vmwgfx: Don't double-free the mode stored in par->set_mode
  - CLKRN-974: drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user
  - CLKRN-974: drm/vmwgfx: Fix setting of dma masks
  - CLKRN-974: drm/vmwgfx: Fix 32-bit VMW_PORT_HB_[IN|OUT] macros
  - CLKRN-974: drm/vmwgfx: Fix a buffer object leak
  - CLKRN-974: drm/vmwgfx: Fix a destoy-while-held mutex problem.
  - CLKRN-974: drm/vmwgfx: Potential off by one in vmw_view_add()
  - CLKRN-974: perf/core: Fix address filter parser for multiple filters
  - CLKRN-974: ext4: don't BUG if someone dirty pages without asking ext4 first
  - CLKRN-974: ext4: force overhead calculation if the s_overhead_cluster makes no sense
  - CLKRN-974: ext4: fix overhead calculation to account for the reserved gdt blocks
  - CLKRN-974: ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
  - CLKRN-974: ipv4: drop dst in multicast routing path
  - CLKRN-974: ptrace: Reimplement PTRACE_KILL by always sending SIGKILL
  - CLKRN-974: inotify: show inotify mask flags in proc fdinfo
  - CLKRN-974: ext4: fix bug_on in ext4_writepages
  - CLKRN-974: ext4: fix use-after-free in ext4_rename_dir_prepare
  - CLKRN-974: md: protect md_unregister_thread from reentrancy
  - CLKRN-974: ext4: make variable "count" signed
  - CLKRN-974: ext4: fix bug_on ext4_mb_use_inode_pa
  - CLKRN-974: dm era: commit metadata in postsuspend after worker stops


author: Denis Kirjanov <dkirjanov@cloudlnux.com> - 1.5-74
changelog:
  - CLKRN-1061: introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty()
  - CLKRN-1061: netfilter: nf_tables: disallow non-stateful expression in sets earlier
  - CLKRN-1061: perf: Fix sys_perf_event_open() race against self
  - CLKRN-1061: RDMA/cma: Do not change route.addr.src_addr.ss_family
  - CLKRN-1061: xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate
  - CLKRN-1061: Bluetooth: use correct lock to prevent UAF of hdev object
  - CLKRN-1061: Bluetooth: fix use-after-free error in lock_sock_nested()
  - CLKRN-1061: media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
  - CLKRN-1061: CVE-2021-3564: Bluetooth: fix the erroneous flush_work() order
  - CLKRN-1061: CVE-2020-0465: HID: core: Sanitize event code and type when mapping input
  - CLKRN-1061: [media] firewire: don't break long lines
  - CLKRN-1061: [media] firewire: firedtv-avc: potential buffer overflow
  - CLKRN-1061: perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  - CLKRN-1061: net_sched: cls_route: remove the right filter from hashtable
  - CLKRN-1061: bluetooth: eliminate the potential race condition when removing the HCI controller
  - CLKRN-1061: CVE-2021-29650: netfilter: x_tables: Use correct memory barriers.
  - CLKRN-1061: CVE-2020-8648: vt: selection, close sel_buffer race
  - CLKRN-1061: CVE-2021-29154:  bpf, x86: Validate computation of branch displacements for x86-64
  - CLKRN-1061: CVE-2020-14331: Fix for missing check in vgacon scrollback handling
  - CLKRN-1061: net-sysfs: Call dev_hold always in rx_queue_add_kobject
  - CLKRN-1061: net-sysfs: Call dev_hold always in netdev_queue_add_kobject
  - CLKRN-1061: net-sysfs: call dev_hold if kobject_init_and_add success
  - CLKRN-1061: Bluetooth: A2MP: Fix not initializing all members
  - CLKRN-1061: Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel
  - CLKRN-1061: [usb] USB: core: Fix races in character device registration and deregistraion
  - CLKRN-1061: [usb] usb: cdc-acm: make sure a refcount is taken early enough
  - CLKRN-1061: [usb] USB: adutux: fix use-after-free on disconnect
  - CLKRN-1061: [fs] ext4: fix support for inode sizes > 1024 bytes
  - CLKRN-1061: [fs] ext4: forbid i_extra_isize not divisible by 4
  - CLKRN-1061: [fs] ext4: validate the debug_want_extra_isize mount option at parse time
  - CLKRN-1061: CVE-2019-19062: [crypto] crypto: user - fix memory leak in crypto_report
  - CLKRN-1061: [media] media: v4l: event: Prevent freeing event subscriptions while accessed
  - CLKRN-1061: [wireless] rtlwifi: prevent memory leak in rtl_usb_probe
  - CLKRN-1061: [wireless] iwlwifi: dbg_ini: fix memory leak in alloc_sgtable
  - CLKRN-1061: CVE-2019-19524: [input] Input: ff-memless - kill timer in destroy()
  - CLKRN-1061: CVE-2017-18551: [i2c] i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA
  - CLKRN-1061: [fs] ext4: work around deleting a file with i_nlink == 0 safely
  - CLKRN-1061: [netdrv] can: peak_usb: fix slab info leak
  - CLKRN-1061: [fs] fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
  - CLKRN-1061: [media] media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
  - CLKRN-1061: [scsi] scsi: libsas: delete sas port if expander discover failed
  - CLKRN-1061: CVE-2019-15917: [bluetooth] Bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in hci_uart_set_proto()
  - CLKRN-1061: [netdrv] fjes: Handle workqueue allocation failure
  - CLKRN-1061: [scsi] scsi: qla2xxx: fix a potential NULL pointer dereference
  - CLKRN-1061: CVE-2019-17053: [net] ieee802154: enforce CAP_NET_RAW for raw sockets
  - CLKRN-1061: CVE-2019-16994: [net] sit: fix memory leak in sit_init_net()
  - CLKRN-1061: CVE-2019-17055: [isdn] mISDN: enforce CAP_NET_RAW for raw sockets
  - CLKRN-1061: CVE-2019-18808: [crypto] crypto: ccp - Release all allocated memory if sha type is invalid
  - CLKRN-1061: [fs] nfs: Correct an nfs page array calculation error
  - CLKRN-1061: [security] selinux: properly handle multiple messages in selinux_netlink_send()
  - CLKRN-1061: [scsi] scsi: sg: add sg_remove_request in sg_write
  - CLKRN-1061: CVE-2020-12826: [fs] signal: Extend exec_id to 64bits
  - CLKRN-1061: CVE-2020-10732: [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()
  - CLKRN-1061: CVE-2020-10942: [vhost] vhost: Check docket sk_family instead of call getname
  - CLKRN-1061: [input] Input: add safety guards to input_set_keycode()
  - CLKRN-1061: [x86] kvm: x86: clear stale x86_emulate_ctxt->intercept value
  - CLKRN-1061: [x86] kvm: vmx: check descriptor table exits on instruction emulation
  - CLKRN-1061: [x86] kvm: nvmx: Check IO instruction VM-exit conditions
  - CLKRN-1061: [x86] kvm: nvmx: Refactor IO bitmap checks into helper function
  - CLKRN-1061: [x86] kvm: nvmx: Don't emulate instructions in guest mode
  - CLRKN-1061: [net] ipv6: constify ip6_dst_lookup_{flow|tail}() sock arguments
  - CLKRN-1061: CVE-2020-8649: CVE-2020-8647 [video] vgacon: Fix a UAF in vgacon_invert_region
  - CLKRN-1061: [wireless] mwifiex: Fix mem leak in mwifiex_tm_cmd
  - CLKRN-1061: [block] floppy: check FDC index for errors before assigning it
  - CLKRN-1061: mac80211: drop robust management frames from unknown TA
  - CLKRN-1061: mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()
  - CLKRN-1061: mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv()
  - CLKRN-1061: HID: hiddev: avoid opening a disconnected device
  - CLKRN-1061: CVE-2020-10757: mm: Fix mremap not considering huge pmd devmap
  - CLKRN-1061: vfio-pci: Invalidate mmaps and block MMIO access on disabled memory
  - CLKRN-1061: [scsi] scsi: qedi: remove memset/memcpy to nfunc and use func instead
  - CLKRN-1061: blktrace: Protect q->blk_trace with RCU
  - CLKRN-1061: netlabel: cope with NULL catmap
  - CLKRN-1061: CVE-2019-16746: [net] nl80211: validate beacon head
  - CLKRN-1061: [net] mac80211: Do not send Layer 2 Update frame before authorization
  - CLKRN-1061: cfg80211: Use const more consistently in for_each_element macros
  - CLKRN-1061: ieee80211: fix for_each_element_extid()
  - CLKRN-1061: cfg80211: add and use strongly typed element iteration macros
  - CLKRN-1061: CVE-2019-3901: [kernel] perf/core: Fix perf_event_open() vs. execve() race
  - CLKRN-1061: binfmt_elf: switch to new creds when switching to new mm
  - CLKRN-1061: CVE-2019-10638: [net] inet: switch IP ID generator to siphash
  - CLKRN-1061: CVE-2019-10638: [lib] siphash: add cryptographically secure PRF
  - CLKRN-1061: CVE-2019-10638: [fs] dcache: allow word-at-a-time name hashing with big-endian CPUs
  - CLKRN-1061: CVE-2019-15221: [sound] ALSA: line6: Fix memory leak at line6_init_pcm() error path
  - CLKRN-1061: CVE-2019-15221: [sound] ALSA: line6: Fix write on zero-sized buffer
  - CLKRN-1061: CVE-2019-14283: [block] floppy: fix out-of-bounds read in copy_buffer
  - CLKRN-1061: CVE-2019-10207: [bluetooth] Bluetooth: hci_uart: check for missing tty operations


author: Denis Kirjanov <dkirjanov@cloudlnux.com> - 1.5-74
changelog:
  - CLKRN-1061: introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty()
  - CLKRN-1061: CVE-2022-32250: CVE-2022-1966: netfilter: nf_tables: disallow non-stateful expression in sets earlier
  - CLKRN-1061: perf: Fix sys_perf_event_open() race against self
  - CLKRN-1061: RDMA/cma: Do not change route.addr.src_addr.ss_family
  - CLKRN-1061: xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate
  - CLKRN-1061: Bluetooth: use correct lock to prevent UAF of hdev object
  - CLKRN-1061: Bluetooth: fix use-after-free error in lock_sock_nested()
  - CLKRN-1061: media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
  - CLKRN-1061: CVE-2021-3564: Bluetooth: fix the erroneous flush_work() order
  - CLKRN-1061: CVE-2020-0465: HID: core: Sanitize event code and type when mapping input
  - CLKRN-1061: [media] firewire: don't break long lines
  - CLKRN-1061: [media] firewire: firedtv-avc: potential buffer overflow
  - CLKRN-1061: perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  - CLKRN-1061: net_sched: cls_route: remove the right filter from hashtable
  - CLKRN-1061: bluetooth: eliminate the potential race condition when removing the HCI controller
  - CLKRN-1061: CVE-2021-29650: netfilter: x_tables: Use correct memory barriers.
  - CLKRN-1061: CVE-2020-8648: vt: selection, close sel_buffer race
  - CLKRN-1061: CVE-2021-29154:  bpf, x86: Validate computation of branch displacements for x86-64
  - CLKRN-1061: CVE-2020-14331: Fix for missing check in vgacon scrollback handling
  - CLKRN-1061: net-sysfs: Call dev_hold always in rx_queue_add_kobject
  - CLKRN-1061: net-sysfs: Call dev_hold always in netdev_queue_add_kobject
  - CLKRN-1061: net-sysfs: call dev_hold if kobject_init_and_add success
  - CLKRN-1061: Bluetooth: A2MP: Fix not initializing all members
  - CLKRN-1061: Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel
  - CLKRN-1061: [usb] USB: core: Fix races in character device registration and deregistraion
  - CLKRN-1061: [usb] usb: cdc-acm: make sure a refcount is taken early enough
  - CLKRN-1061: [usb] USB: adutux: fix use-after-free on disconnect
  - CLKRN-1061: [fs] ext4: fix support for inode sizes > 1024 bytes
  - CLKRN-1061: [fs] ext4: forbid i_extra_isize not divisible by 4
  - CLKRN-1061: [fs] ext4: validate the debug_want_extra_isize mount option at parse time
  - CLKRN-1061: CVE-2019-19062: [crypto] crypto: user - fix memory leak in crypto_report
  - CLKRN-1061: [media] media: v4l: event: Prevent freeing event subscriptions while accessed
  - CLKRN-1061: [wireless] rtlwifi: prevent memory leak in rtl_usb_probe
  - CLKRN-1061: [wireless] iwlwifi: dbg_ini: fix memory leak in alloc_sgtable
  - CLKRN-1061: CVE-2019-19524: [input] Input: ff-memless - kill timer in destroy()
  - CLKRN-1061: CVE-2017-18551: [i2c] i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA
  - CLKRN-1061: [fs] ext4: work around deleting a file with i_nlink == 0 safely
  - CLKRN-1061: [netdrv] can: peak_usb: fix slab info leak
  - CLKRN-1061: [fs] fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
  - CLKRN-1061: [media] media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
  - CLKRN-1061: [scsi] scsi: libsas: delete sas port if expander discover failed
  - CLKRN-1061: CVE-2019-15917: [bluetooth] Bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in hci_uart_set_proto()
  - CLKRN-1061: [netdrv] fjes: Handle workqueue allocation failure
  - CLKRN-1061: [scsi] scsi: qla2xxx: fix a potential NULL pointer dereference
  - CLKRN-1061: CVE-2019-17053: [net] ieee802154: enforce CAP_NET_RAW for raw sockets
  - CLKRN-1061: CVE-2019-16994: [net] sit: fix memory leak in sit_init_net()
  - CLKRN-1061: CVE-2019-17055: [isdn] mISDN: enforce CAP_NET_RAW for raw sockets
  - CLKRN-1061: CVE-2019-18808: [crypto] crypto: ccp - Release all allocated memory if sha type is invalid
  - CLKRN-1061: [fs] nfs: Correct an nfs page array calculation error
  - CLKRN-1061: [security] selinux: properly handle multiple messages in selinux_netlink_send()
  - CLKRN-1061: [scsi] scsi: sg: add sg_remove_request in sg_write
  - CLKRN-1061: CVE-2020-12826: [fs] signal: Extend exec_id to 64bits
  - CLKRN-1061: CVE-2020-10732: [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()
  - CLKRN-1061: CVE-2020-10942: [vhost] vhost: Check docket sk_family instead of call getname
  - CLKRN-1061: [input] Input: add safety guards to input_set_keycode()
  - CLKRN-1061: [x86] kvm: x86: clear stale x86_emulate_ctxt->intercept value
  - CLKRN-1061: [x86] kvm: vmx: check descriptor table exits on instruction emulation
  - CLKRN-1061: [x86] kvm: nvmx: Check IO instruction VM-exit conditions
  - CLKRN-1061: [x86] kvm: nvmx: Refactor IO bitmap checks into helper function
  - CLKRN-1061: [x86] kvm: nvmx: Don't emulate instructions in guest mode
  - CLRKN-1061: [net] ipv6: constify ip6_dst_lookup_{flow|tail}() sock arguments
  - CLKRN-1061: CVE-2020-8649: CVE-2020-8647 [video] vgacon: Fix a UAF in vgacon_invert_region
  - CLKRN-1061: [wireless] mwifiex: Fix mem leak in mwifiex_tm_cmd
  - CLKRN-1061: [block] floppy: check FDC index for errors before assigning it
  - CLKRN-1061: mac80211: drop robust management frames from unknown TA
  - CLKRN-1061: mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()
  - CLKRN-1061: mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv()
  - CLKRN-1061: HID: hiddev: avoid opening a disconnected device
  - CLKRN-1061: CVE-2020-10757: mm: Fix mremap not considering huge pmd devmap
  - CLKRN-1061: vfio-pci: Invalidate mmaps and block MMIO access on disabled memory
  - CLKRN-1061: [scsi] scsi: qedi: remove memset/memcpy to nfunc and use func instead
  - CLKRN-1061: blktrace: Protect q->blk_trace with RCU
  - CLKRN-1061: netlabel: cope with NULL catmap
  - CLKRN-1061: CVE-2019-16746: [net] nl80211: validate beacon head
  - CLKRN-1061: [net] mac80211: Do not send Layer 2 Update frame before authorization
  - CLKRN-1061: cfg80211: Use const more consistently in for_each_element macros
  - CLKRN-1061: ieee80211: fix for_each_element_extid()
  - CLKRN-1061: cfg80211: add and use strongly typed element iteration macros
  - CLKRN-1061: CVE-2019-3901: [kernel] perf/core: Fix perf_event_open() vs. execve() race
  - CLKRN-1061: binfmt_elf: switch to new creds when switching to new mm
  - CLKRN-1061: CVE-2019-10638: [net] inet: switch IP ID generator to siphash
  - CLKRN-1061: CVE-2019-10638: [lib] siphash: add cryptographically secure PRF
  - CLKRN-1061: CVE-2019-10638: [fs] dcache: allow word-at-a-time name hashing with big-endian CPUs
  - CLKRN-1061: CVE-2019-15221: [sound] ALSA: line6: Fix memory leak at line6_init_pcm() error path
  - CLKRN-1061: CVE-2019-15221: [sound] ALSA: line6: Fix write on zero-sized buffer
  - CLKRN-1061: CVE-2019-14283: [block] floppy: fix out-of-bounds read in copy_buffer
  - CLKRN-1061: CVE-2019-10207: [bluetooth] Bluetooth: hci_uart: check for missing tty operations


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-76
changelog:
  - CLKRN-1076: substituted ipset allocating memory to kvzalloc
  - CLKRN-1083: CVE-2022-2588: net_sched: cls_route: remove from list when handle is 0


author: Denis Kirjanov <dkirjanov@cloudlnux.com>> - 1.5-77
changelog:
  - CLKRN-1061: fget: check that the fd still exists after getting a ref to it
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: KVM: x86/speculation: Disable Fill buffer clear within guests
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/srbds: Update SRBDS mitigation selection
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: cpu/speculation: Add prototype for cpu_show_srbds()
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/mmio: Enable CPU Fill buffer         clearing on idle
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug


author: Denis Kirjanov <dkirjanov@cloudlnux.com>> - 1.5-79
changelog:
  - KRNTSTNG-292: Fix oom_kill counter in CL7
  - CLKRN-1013: Move CL7 XFS to Centos 7/OpenVZ current implementation


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-80
changelog:
  - CLKRN-1077: disable kmem accounting due to memory leak
  - CVE: mm/rmap: Fix anon_vma->degree ambiguity leading to  double-reuse
  - CVE: mm: rmap: explicitly reset vma->anon_vma in unlink_anon_vmas()
  - CVE: CVE-2022-4378: proc: proc_skip_spaces() shouldn't think it is working on C strings
  - CVE: CVE-2022-4378: proc: avoid integer type confusion in get_proc_long
  - CVE: CVE-2022-2964: net: usb: ax88179_178a: Fix packet receiving
  - CVE: CVE-2022-2964: net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
  - CVE: CVE-2022-2964: net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32
  - CVE: CVE-2022-2964: ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32
  - CVE: CVE-2022-2964: net: usb: ax88179_178a: fix packet alignment padding


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-81
changelog:
  - KMODLVE-589: avoid crashes in os_set_dac_override()
  - CLKRN-1093: allow freezable sleep in kmodlve


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-82
changelog:
  - CVE: Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu
  - CVE: usb: mon: make mmapped memory read only
  - CLKRN-1176: added patch to fix ttypushback vulnerability
  - KMODLVE-596: fix cgroup stat parsing


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-83
changelog:
  - CLKRN-1406: revert some changes related to prod_net_disable2 - made the behaviour obliged
  - CLKRN-1399: improved fs.enforce_symlinksifowner option to close the SecureLink creating vulnerability


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-84
changelog:
  - CLKRN-1532: (CVE-2024-1086) netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - CLKRN-1203: switch back to using rh_reserved for tag links
  - CLKRN-1411: use monotonic clock for iolimits


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-86
changelog:
  - CLKRN-1723: Implement namespace check in __ptrace_may_access
  - [ELSCVE-33860] Squashfs: sanity check symbolic link size by Phillip Lougher
  - [ELSCVE-33999] ath9k: fix use-after-free in ath9k_hif_usb_rx_cb by Pavel Skripkin
  - [ELSCVE-34184] ALSA: pcm: Fix races among concurrent prealloc proc writes by Takashi Iwai
  - [ELSCVE-34184] ALSA: pcm: Add debug print on memory allocation failure by Amadeusz Sławiński
  - [ELSCVE-34184] ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls by Takashi Iwai
  - [ELSCVE-34184] ALSA: pcm: Fix races among concurrent read/write and buffer changes by Takashi Iwai
  - [ELSCVE-34184] ALSA: pcm: Fix races among concurrent hw_params and hw_free calls by Takashi Iwai
  - [ELSCVE-34009] af_key: Do not call xfrm_probe_algs in parallel by Herbert Xu
  - [ELSCVE-34009] af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register by Haimin Zhang
  - [ELSCVE-34035] tcp: Fix data races around icsk->icsk_af_ops. by Kuniyuki Iwashima
  - [ELSCVE-34076] igmp: Add ip_mc_list lock in ip_check_mc_rcu by Liu Jian
  - [ELSCVE-34078] x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit by Wander Lairson Costa
  - [ELSCVE-34078] x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK by Wander Lairson Costa
  - [ELSCVE-34078] x86/elf: Add table to document READ_IMPLIES_EXEC by Wander Lairson Costa
  - [ELSCVE-34080] ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE by Jann Horn
  - [ELSCVE-34092] wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() by Johannes Berg
  - [ELSCVE-34097] wifi: cfg80211: fix BSS refcounting bugs by Johannes Berg
  - [ELSCVE-34097] cfg80211: hold bss_lock while updating nontrans_list by Rameshkumar Sundaram
  - [ELSCVE-34097] cfg80211: save multi-bssid properties by Sara Sharon
  - [ELSCVE-34097] cfg80211: use for_each_element() for multi-bssid parsing by Johannes Berg
  - [ELSCVE-34097] cfg80211: Scan results to also report the per chain signal strength by Sunil Dutt
  - [ELSCVE-34097] cfg80211: Move Multiple BSS info to struct cfg80211_bss to be visible by Sara Sharon
  - [ELSCVE-34097] cfg80211: Properly track transmitting and non-transmitting BSS by Sara Sharon
  - [ELSCVE-34097] cfg80211: Parsing of Multiple BSSID information in scanning by Peng Xu
  - [ELSCVE-34147] Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() by Takashi Iwai
  - [ELSCVE-34216] openvswitch: fix OOB access in reserve_sfa_size() by Paolo Valerio
  - [ELSCVE-34216] openvswitch: fix the incorrect flow action alloc size by zhangliping
  - [ELSCVE-34231] net/packet: fix slab-out-of-bounds access in packet_recvmsg() by Eric Dumazet
  - [ELSCVE-34231] packet: in recvmsg msg_name return at least sizeof sockaddr_ll by Willem de Bruijn
  - [ELSCVE-34266] can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path by Hangyu Hua
  - [ELSCVE-34275] net/sched: cls_u32: fix netns refcount changes in u32_change() by Eric Dumazet
  - [ELSCVE-34275] net: sched: cls_u32: get rid of unused argument of u32_destroy_key() by Al Viro
  - [ELSCVE-34277] netfilter: nf_queue: do not allow packet truncation below transport header offset by Florian Westphal
  - [ELSCVE-33443] net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free by valis
  - [ELSCVE-33442] net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free by valis
  - [ELSCVE-33441] net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free by valis
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free by M A Ramdhan
  - [ELSCVE-33436] net/sched: cls_u32: Fix reference counter leak leading to overflow by Lee Jones
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval by Florian Westphal
  - netfilter: nf_tables: skip deactivated anonymous sets during lookups by Florian Westphal
  - [ELSCVE-25393] netfilter: nf_tables: do not allow SET_ID to refer to another table by Florian Westphal
  - netfilter: nf_tables: deactivate anonymous set from preparation phase by Florian Westphal
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg by Davide Caratti
  - RDMA/i40iw: Prevent zero-length STAG registration by Kamal Heib
  - [ELSCVE-34145] vt: vt_ioctl: fix race in VT_RESIZEX by Eric Dumazet
  - [ELSCVE-34145] VT_RESIZEX: get rid of field-by-field copyin by Al Viro
  - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() by David Marlin
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() by David Marlin
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve by Davide Caratti
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve by Davide Caratti
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). by Guillaume Nault
  - igb: set max size RX buffer when store bad packet is enabled by Radoslaw Tyl
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() by valis
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm by Luiz Augusto von Dentz
  - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM by Luiz Augusto von Dentz
  - [ELSCVE-30788] wifi: mac80211: Avoid address calculations via out of bounds array indexing by Kenton Groombridge
  - [ELSCVE-29571] fuse: fix pipe buffer lifetime for direct_io by Miklos Szeredi
  - [ELSCVE-28406] net: fix __dst_negative_advice() race by Eric Dumazet


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-88
changelog:
  - CLKRN-1963: CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers and posix_cpu_timer_del


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-89
changelog:
  - CVE-2026-43499: rtmutex: use waiter::task instead of current in remove_waiter() (backport 3bfdc63936dd)


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-24.5
changelog:
  - AL-3255: Enabled CONFIG_NETLINK_MMAP option to fix network issues in CL 7.6
  - CLKRN-389: restore  memcg_oom_disable sysctl option
  - CLKRN-390: Backport ptrace access sysctls


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-9
changelog:
  - kdumpctl: bail out earlier in case of no reserved memory
  - kdumpctrl: kdump feasibility should fail if no crash memory
  - kdumpctl: improve "while read" time for /etc/kdump.conf
  - kdumpctl: update check_dump_fs_modified() to use "lsinitrd -f"
  - kdumpctl: improve check_wdt_modified()
  - kdumpctl: remove is_mode_switched()
  - arm64: cmdline: modify to optimize size for memory reservation


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-10
changelog:
  - kdumpctl: call strip_comments only when necessary to speedup
  - Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-12
changelog:
  - kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
  - Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-14
changelog:
  - kdump.conf.5: clarify the fence_kdump_nodes option
  - kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-15
changelog:
  - Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
  - udev rules: mask cpu hotplug rules


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-7
changelog:
  - arm64: Increase the upper limit for RAM segments
  - kdump: Introduce 'force_no_rebuild' option
  - kdump-lib-initramfs.sh: ignore the failure of echo
  - use "systemctl reboot -f" for reboot action


author: Pingfan Liu <piliu@redhat.com> - 2.0.7-52
changelog:
  - kdumpctl: check /etc/fstab modification only when it exists
  - kdumpctl: remove duplicate statement
  - kdumpctl: Kill duplicate code related to file modication check
  - fadump: restore default initrd when fadump mode is disabled
  - kdump/fadump: fix network interface name when switching from fadump to kdump


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-2
changelog:
  - kdumpctl: check the existence of /sys/kernel/security/securelevel
  - kdump.sysconfig.x86_64: Remove 'notsc' from kdump kernel cmdline
  - kdump.sysconfig: add KDUMP_COMMANDLINE_REMOVE for aarch64 and ia64
  - kdump.sysconfig: add KDUMP_COMMANDLINE_REMOVE
  - Document: fix incorrect link in fadump-how.txt
  - kexec-tools.spec: add %doc for fadump-howto.txt


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-3
changelog:
  - arm64: backport latest kdump patches
  - Fix `makedumpfile --mem-usage /proc/kcore`
  - kdump-lib.sh: fix incorrect usage with pipe as input for grep -q in is_pcs_fence_kdump()


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-4
changelog:
  - kdump-emergency: fix "Transaction is destructive" emergency failure
  - x86: Support large number of memory ranges


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-5
changelog:
  - ppc64: Reduce number of ELF LOAD segments
  - kexec-kdump-howto: Include notes about using debug kernel as crash kernel
  - Correct two typos in kdumpctl and kdump.conf


author: Pingfan Liu <piliu@redhat.com> 2.0.15-2
changelog:
  - mkdumprd: fix patterns to modify mount options
  - kexec-tools/ppc64: avoid adding coherent memory regions to crash memory ranges
  - kexec-tools/ppc64: fix command line overflow error
  - kexec-tools/ppc64: fix how RMA top is deduced


author: Pingfan Liu <piliu@redhat.com> 2.0.15-3
changelog:
  - makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
  - makedumpfile: ppc64: get the info of mem reserved for crashkernel
  - makedumpfile: Fix SECTION_MAP_MASK for kernel >= v.13


author: Pingfan Liu <piliu@redhat.com> 2.0.15-5
changelog:
  - Revert "Update kdump anaconda addon"
  - Revert "Update kdump anaconda addon: fix the md5sum in source file"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-7
changelog:
  - mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
  - Change dump_to_rootfs to use "--mount" instead of "root=X"
  - kdumpctl: move is_fadump_capable() to kdump-lib.sh
  - module-setup: fix 99kdumpbase network dependency
  - mkdumprd: change for_each_block_target() to use get_kdump_targets()
  - kdump-lib.sh: introduce get_kdump_targets()
  - kdump-lib.sh: fix improper get_block_dump_target()
  - kdumpctl: remove "root=X" for kdump boot
  - kdumpctl: fix a bug in remove_cmdline_param()


author: Pingfan Liu <piliu@redhat.com> 2.0.15-9
changelog:
  - makedumpfile: Fix 'kernel_version' variable being uninitialized & introduce minor reorganization
  - makedumpfile: Fix segmentation fault when using --split on a vmcore
  - dracut-module-setup.sh: check whether to include multipath-hostonly or not


author: Pingfan Liu <piliu@redhat.com> 2.0.15-10
changelog:
  - kexec-tools.spec: require dracut >= 033-522 to make 99kdump module installed correctly
  - kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
  - Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-11
changelog:
  - dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
  - kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
  - kdumpctl: skip selinux-relabel for dracut_args --mount dump target


author: Pingfan Liu <piliu@redhat.com> 2.0.15-13
changelog:
  * Thu Feb 1 2018 Pingfan Liu <piliu@redhat.com> 2.0.15-12
  - makedumpfile/sadump: Fix a problem of PTI enabled kernel
  - makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'


author: Pingfan Liu <piliu@redhat.com> 2.0.15-14
changelog:
  - kdumpctl: Remove 'netroot' and 'iscsi initiator' entries from kdump cmdline
  - doc: remove btrfs from supported filesystems list
  - Update kdump anaconda addon
  - makedumpfile/arm64: Add '--mem-usage' support
  - Fix warning about persistent device name not found.
  - kdumpctl: Check the modification time of core_collector
  - kdump.sysconfig.x86_64: Remove 'notsc' from KDUMP_COMMANDLINE_REMOVE
  - makedumpfile: fix for hugepages filtering


author: Pingfan Liu <piliu@redhat.com> 2.0.15-15
changelog:
  - dracut-module-setup.sh: pass ip=either6 param for ipv6
  - dracut-module-setup.sh: install /etc/hosts when using fence_kdump
  - update kdump-anaconda-addon-003-29-g4c517c5.tar.gz


author: Pingfan Liu <piliu@redhat.com> 2.0.15-18
changelog:
  kdumpctl: Rebuild initramfs if loaded kernel modules changed
  dracut-module-setup.sh: don't include multipath-hostonly
  Add document to declare FCoE support (V2)
  Revert "Add document to declare FCoE support"
  Add document to declare FCoE support
  makedumpfile: fix makedumpfile Not tainted in 2nd kernel


author: Pingfan Liu <piliu@redhat.com> 2.0.15-20
changelog:
  - makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
  - dracut-module-setup: Fix DRM module inclusion test for hyper-v
  - kdumpctl: remove some cmdline inheritage from 1st kernel
  - kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
  - kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
  - Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
  - dracut-module-setup: Fix test for inclusion of DRM modules


author: Pingfan Liu <piliu@redhat.com> 2.0.15-22
changelog:
  - doc/kdump.conf: Local dump path should be <mnt>/<path>/%HOST_IP-%DATE
  - Update help text to indicate --mem-usage is supported on archs other than x86_64
  - Add missing usage info
  - Rewrite kdump's udev rules, use reload instead of restart
  - kdumpctl: Add reload support


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-23
changelog:
  - kdump: fix an error that can not parse the e820 reserved region
  - Doc: add document to declare atlantic support


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-24
changelog:
  - mkdumprd: use --quiet dracut argument to speedup initramfs build
  - mkdumprd: refine regex on dropping mount options


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-32
changelog:
  - makedumpfile: exclude pages that are logically offline
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-33
changelog:
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
    [Fix the Fix the patch to make sure makedumpfile-1.6.2/ path is used]


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-34
changelog:
  - kdump.sysconfig/x86_64: Disable HEST by default
  - Introduce kdumpctl rebuild command and update document


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-37
changelog:
  - dracut-module-setup: get localhost alias by manual
  - dracut-module-setup: filter out localhost for generic_fence_kdump
  - kdumpctl: distinguish the reason for ssh failure


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43
changelog:
  - module-setup: re-fix 99kdumpbase network dependency
  - kdumpctl: bail out immediately if host key verification failed


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48
changelog:
  - dracut-module-setup.sh: ensure cluster info is ready before query.
  - dracut-module-setup.sh: improve get_alias()


author: WANG Chao <chaowang@redhat.com> - 2.0.4-24
changelog:
  - remove selinux flipping when propagating ssh key
  - add kdump-in-cluster-environment.txt to rpm pkg
  - Secure Boot status check warning
  - Some watchdog driver support


author: WANG Chao <chaowang@redhat.com> - 2.0.4-25
changelog:
  - kdumpctl: Pass disable_cpu_apicid to kexec of capture kernel
  - Relax restriction of dumping on encrypted target
  - ssh dump: create random-seed manually


author: WANG Chao <chaowang@redhat.com> - 2.0.4-27
changelog:
  - mkdumprd: call dracut with --hostonly-cmdline (dracut >= 033-145)
  - warning on secure boot enabled platform


author: WANG Chao <chaowang@redhat.com> - 2.0.4-28
changelog:
  - Document supported/unsupported/unknown list of dump targets
  - Warn user about save vmcore path mounted by another disk


author: WANG Chao <chaowang@redhat.com> - 2.0.7-4
changelog:
  - ppc64: kexec load fails due to elf symbol relocation failure.
  - display a message while waiting for kdump lock


author: WANG Chao <chaowang@redhat.com> - 2.0.7-5
changelog:
  - rework of kdump error handling
  - ppc: add fadump support
  - add static route support
  - systemd will take care of shutdown and unmount filesystems
  - fix an issue that can't bring up correct network device


author: WANG Chao <chaowang@redhat.com> - 2.0.7-9
changelog:
  - Enable ppc64le arch.
  - add sample eppic scripts to kexec-tools-eppic package
  - Restart kdump service on cpu ADD/REMOVE events


author: WANG Chao <chaowang@redhat.com> - 2.0.7-10
changelog:
  - Rebase makedumpfile-1.5.7
  - Fix an issue on iscsi boot environment
  - Disable kvm CMA reservation in kdump kernel


author: WANG Chao <chaowang@redhat.com> - 2.0.7-14
changelog:
  - fix core_collector issue for ssh/raw dump
  - remove sysctl.conf for kdump kernel
  - exclude aarch64 build
  - fix path directive issue
  - remove panic_on_warn kernel parameter


author: WANG Chao <chaowang@redhat.com> - 2.0.7-15
changelog:
  - mount fail if its mount poing doesn't exist in /sysroot
  - rebuild initrd dependency during kdump restart
  - fix a dump path issue


author: Baoquan He <bhe@redhat.com> - 2.0.7-19.2
changelog:
  - dracut-module-setup: Enhance kdump to support the bind mounted feature in Atomic
  - Fix the warning if the target path is bind mount in Atomic
  - Get the mount point correctly, if the device has several mount point
  - kdump-lib: Add new function to judge the system is Atomic or not
  - kdump-lib: Add the new function to enhance bind mounted judgement
  - Remove duplicate slash in save path
  - dracut-module-setup.sh: change the insecure use of /tmp/*$$* filenames


author: Baoquan He <bhe@redhat.com> - 2.0.7-33
changelog:
  mkdumprd: Remove ifcfg from dracut's modules
  arm64: move -fno-exceptions from purgatory code to spec file
  module-setup: Choose the first matched gateway in kdump_static_ip


author: Baoquan He <bhe@redhat.com> - 2.0.7-34
changelog:
  arm64: Overwrite CFLAGS and remove -fno-exceptions from kexec purgatory code
  Fix comment to exclude keyword 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info
  Revert "arm64: move -fno-exceptions from purgatory code to spec file"


author: Baoquan He <bhe@redhat.com> - 2.0.7-40
changelog:
  - kdumpctl: force rebuild in case of file system is modified
  - mkdumprd: move to_dev_name() & get_persistent_dev() to kdump-lib.sh
  - kdumpctl: Move file modification check logic in check_system_modified()
  - kdumpctl: force rebuild in case of dynamic system modification
  - mkdumprd: do not lookup in by-uuid dirs for raw device's persistent name


author: Baoquan He <bhe@redhat.com> - 2.0.7-42
changelog:
  - module-setup: Use get_ifcfg_filename() to get the proper ifcfg file
  - kdump-lib: Add get_ifcfg_filename() to get the proper ifcfg file
  - doc: add nfs to supported filesystems list


author: Baoquan He <bhe@redhat.com> - 2.0.7-43
changelog:
  - kexec/sadump: Back port two patches to fix regression bug of makedumpfile 1.6.0
  - Makedumpfile: Rebase to 1.6.0


author: Baoquan He <bhe@redhat.com> - 2.0.7-44
changelog:
  - Update kdump anaconda addon
  - kdumpctl: Do not rebuild initramfs when $KDUMP_BOOTDIR is read only
  - get_persistent_dev(): fix name contention with dracut's similar function


