# changelog

author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.4-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+4 (EA)
  - Require tzdata 2020a due to resource changes in JDK-8243541
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.7-0.1.ea
changelog:
  - java-11-openjdk doesn't have a JRE tree, so don't try and copy alt-java there...
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.9-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+9 (EA)
  - Update release notes for 11.0.8 release.
  - This tarball is embargoed until 2020-07-14 @ 1pm PT.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-0
changelog:
  - Update to shenandoah-jdk-11.0.8+10 (GA)
  - Switch to GA mode for final release.
  - Update release notes with last minute fix (JDK-8248505).
  - This tarball is embargoed until 2020-07-14 @ 1pm PT.
  - Resolves: rhbz#1838811


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.8.5-0.2.ea
changelog:
  - Disable stripping of debug symbols for static libraries part of
    the -static-libs sub-package.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea
changelog:
  - Update to jdk-11.0.9+6 (EA)
  - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea
changelog:
  - Update to jdk-11.0.9+8 (EA)
  - Remove JDK-8252258/RH1868406 now applied upstream.
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Moved vendor_version_string to a better place
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0
changelog:
  - Update to jdk-11.0.9+11
  - Update release notes for 11.0.9 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1
changelog:
  - Move all license files to NVR-specific JVM directory.
  - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
  - Resolves: rhbz#1896609


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1
changelog:
  - Update to jdk-11.0.9.1+1
  - RPM version stays at 11.0.9.11 so as to not break upgrade path.
  - Adds a single patch for JDK-8250861.
  - Resolves: rhbz#1895275


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2
changelog:
  - Add backport of JDk-8222537 so the Host header is sent when using proxies.
  - Resolves: rhbz#1869530


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.22-5
changelog:
  - Initial Load
  - removed -fno-lifetime-dse; rhel7 gcc to old (4.8.5)
  - lib/classlist do not exists s390, ifarch-ed via jit_arches out
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.22-8
changelog:
  - Adjust system NSS patch, RHBZ-1565658-system-nss-SunEC.patch, so
    as to filter -Wl,--as-needed from linker flags. Fixes FTBFS issue.
  - Resolves: rhbz#1570856


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.28-2
changelog:
  - jfr/*jfc files listed for all arches
  - lib/classlist do not exists s390, ifarch-ed via jit_arches out
  - specfile slightly improved to allow srpm rebuild on rhel8/fedoras
  - Resolves: rhbz#1570856


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-5
changelog:
  - Moving from rpmfusion-free to Fedora because it will be free of known patents
    in all countries from 2012-04-04 onwards
  - Changed license from GPL to GPLv2+ and included up-to-date license file


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.0.0-1
changelog:
  - New upstream release
  - Updated no_pprof patch to match new release
  - Updated s390 patch to match new relase
  - Added make check
  - Added new script jemalloc.sh
  - Added a patch for atomic operations on epel5/ppc


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.5.1-1
changelog:
  - New upstream release
  - Updated nopprof patch to match new release
  - Fixed a few bogus changelog entries


author: Colin Walters <walters@verbum.org> - 1:1.8.5-6
changelog:
  - Include mozjs185.pc, clean up build
  - Based on work from Christopher Aillon <caillon@redhat.com>
  - Switch to using make install DESTDIR=, instead of hardcoding build rules.
  - Add DESTDIR= patch from GNOME 3.2 jhbuild
  - Make mozjs185 the canonical target for both libmozjs and libmozjs185.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1:1.8.5-11
changelog:
  - Thanks to Ville Skyttä (bz#875343) build against libedit instead of readline
  	what simplify licensing apparently without any loss of functionality


author: Sebastien Willmann <sebastien.willmann@gmail.com> - 0.6.0-0.3.rc2
changelog:
  - Removed static package
  - Preserving timestamp on installed files
  - Added guard grep to the sed expression
  - Removed duplicated doc files
  - Removed dependency on pkgconfig
  - Changed base package group


author: Björn Esser <fedora@besser82.io> - 0.10.5-1
changelog:
  - Update to version 0.10.5
  - Use %license and %doc properly
  - Add generated CMake-target
  - Move %check after %install
  - Remove Group-tag, needed for el <= 5, only
  - Drop Patch0, not needed anymore
  - Disabled Werror
  - Add disttag
  - Use cmake instead of scons


author: Sébastien Willmann <sebastien.willmann@gmail.com> - 0.6.0-0.11.rc2
changelog:
  - https://bugzilla.redhat.com/show_bug.cgi?id=998149 : applied Michael Schwendt's
    patch to fix duplicated documentation


author: Christina Fu <cfu@redhat.com> - 4.2.6-23
changelog:
  - Bugzilla Bug #797351 - JSS - HSM token name was mistaken for manufacturer
    identifier (cfu)
  - Bugzilla Bug #804840 - [RFE] ECC encryption keys cannot be archived
    ECC phase2 work - support for ECC encryption key archival and recovery (cfu)
  - Bugzilla Bug #783007 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . (mharmsen)
  - Dogtag TRAC Task #109 (https://fedorahosted.org/pki/ticket/109) - add
    benign JNI jar file symbolic link from JNI libdir to JNI jar file (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.2.6-24
changelog:
  - Bugzilla Bug #783007 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . BadPaddingException (mharmsen)


author: Christina Fu <cfu@redhat.com> - 4.2.6-35
changelog:
  - Bugzilla Bug #1040640 - Incorrect OIDs for SHA2 algorithms
    (cfu for jnimeh@gmail.com)
  - Bugzilla Bug #1133718 - Key strength validation is not performed for RC4
    algorithm (nkinder)
  - Bugzilla Bug #816396 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS (cfu)


author: Christina Fu <cfu@redhat.com> - 4.2.6-40
changelog:
  - Bugzilla 1074208 - pass up exact JSS certificate validation errors from NSS
    (edewata)
  - Bugzilla 1331596 - Key archival fails when KRA is configured with lunasa.
    (cfu)
  - PKI ticket 801 - Merge pki-symkey into jss (phase 1)
    (jmagne)


author: Christina Fu <cfu@redhat.com> - 4.2.6-42
changelog:
  - Sync up patches from both Fedora and RHEL; adding one patch
    (cfu, edewata, mharmsen) from RHEL:
  - Bugzilla Bug #1289799 - JSS build failure on F23 and Rawhide (edewata)


author: Elio Maldonado <emaldona@redhat.com> - 4.4.0-1
changelog:
  - Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
  - ## JSS 4.4.0 includes the following patches ported from downstream:
  - Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
  - Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
  - Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
    CS interface
  - Mozilla Bugzilla #1307993 - Expose updated certificate verification function
    in JSS
  - Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
    pointer arithmetic
  - Mozilla Bugzilla #1308001 - Verification should fail when a revoked
    certificate is added
  - Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
  - Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
    (HSM + NSS)
  - Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
  - Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
  - Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
    unwrapping keys should be done in the token
  - Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
    manufacturer identifier
  - Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
    JSS 4.2.6
  - Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS
  - Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
    error from NSS
  - Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
  - Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
  - Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
  - Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
    PKCS#11 bypass support
  - Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
  - Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
    in FIPS Mode and ECC algorithms
  - Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
    functions
  - Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
  - ## JSS 4.4.0 includes the following changes for building and testing:
  - Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
  - Mozilla Bugzilla #1346420 - Document steps required to use the proper
    libjss4.so when running certain HMAC Algorithms tests


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-4
changelog:
  - Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
  - Updated build requirements for NSPR
  - Updated build and runtime requirements for NSS
  - ## 'jss-post-rebase.patch' resolves the following issues ported from
    - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
    code for RFC5272+ (cfu)
  - Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
  - Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
    class. (edewata)
  - Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
  - Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
  - Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
    (edewata)
  - Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
  - Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
  - Mozilla Bugzilla #1350130 - Missing
    CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-5
changelog:
  - Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
    idm-console-framework < 1.1.17-4
  - Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-6
changelog:
  - Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
    release tag (mharmsen)
  - Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
    exporting EncryptedPrivateKeyInfo (ftweedal)
  - Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
    (ftweedal)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-7
changelog:
  - Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
    Mozilla Bugzilla #1360207 - Fix incorrect if (ss->...) in SSL_ReconfigFD


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-8
changelog:
  - Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
    (jmagne)
  - Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
    [RHEL-7.4.z] (ftweedal)
  - Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
    export fails [rhel-7.4.z] (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-9
changelog:
  - Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
    FIPSMODE [rhel-7.4.z] (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-10
changelog:
  - Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
    (edewata)
  - Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
    producing signatures (especially for EC) (cfu,dstutzman)


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-11
changelog:
  - Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
    producing signatures (especially for EC) (cfu,dstutzman)
  - Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
    types (cfu,dstutzman)
  - Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
    resulting structure (cfu,dstutzman)


author: Dogtag Team <pki-devel@redhat.com> 4.4.2-12
changelog:
  - Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
    AlgorithmIdentifier [rhel-7.5.z] (cfu)


author: Dogtag Team <pki-devel@redhat.com> 4.4.2-13
changelog:
  - Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
    decode/encode process alters original data [rhel-7.5.z] (cfu)
  - Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
    [rhel-7.5.z] (cfu)


author: Christina Fu <cfu@redhat.com> - 4.2.6-42
changelog:
  - Sync up patches from both Fedora and RHEL; adding two patches
    (cfu, edewata, mharmsen) from RHEL:
  - Bugzilla Bug #1238450 - UnsatisfiedLinkError on Windows (cfu)
  - make it compile on Windows platforms (cfu for nhosoi)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-3
changelog:
  - Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
    decode/encode process alters original data (cfu)
  - Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-4
changelog:
  - Bugzilla #1671244 - x25519 allowed in FIPS mode [rhel-7.6.z] (ascheel)
  - Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
    chain [rhel-7.6.z] (jmagne)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-5
changelog:
  - Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
    chain [rhel-7.6.z] (jmagne)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.6-2
changelog:
  - Bugzilla #1747966 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.7-2
changelog:
  - Bugzilla #1747967 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.7-3
changelog:
  - Bugzilla #1710105 - JSS: add RSA PSS support (jmagne)
  - Bugzilla #1796642 - JSS -- remove hardcoded native library
    /usr/lib{64}/jss/libjss4.so (ascheel)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-1
changelog:
  - Update to kbd-1.15.5 (removed kbd-1.15-resizecon-x86_64.patch,
    kbd-1.15-defkeymap.patch, kbd-1.15.3-fix-es-translation.patch,
    kbd-1.15.3-loadkeys-d.patch)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-3
changelog:
  - Include xkb layouts from xkeyboard-config converted to console keymaps
  - Add version to vlock provides
    Resolves: #902564


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8
changelog:
  - Fix vlock doesn't perform PAM account management or credential reinitialization
    Resolves: #1032140


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14
changelog:
  - Replace CtrlL_Lock with Caps_Lock in generated us.map
    Resolves: #1441411
  - Improve man pages and usage messages quality and consistency
    Resolves: #949015


author: Rex Dieter <rdieter@fedoraproject.org> 0.5.3-5
changelog:
  - kcm-gtk : "GTK+ Appearance" in systemsettings->lost and found (#628381)
  - Requires: kdebase-runtime


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 0.5.3-8
changelog:
  - add support for GTK+ 3 (backported from upstream bzr gtk3 branch)
  - drop ancient Fedora < 13 env_script conditional, now always in kde-settings


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 0.5.3-10
  - update kcm_category patch
  - kubuntu_01_xsettings_kipc.patch
  - drop old Obsoletes: gtk-qt-engine


author: Ryan Rix <ry@n.rix.si> - 0.3.1-3
changelog:
  - Update the category to adhere to new SC 4.5 systemsettings layout. Will now
    appear under the "input devices" section.


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.3.1-6
changelog:
  - Merge bugfixes from Kubuntu, fixes circular scrolling and more (#633353)
  - Drop default kcmtouchpadrc, use driver defaults (#611611)
  - Make the Scrolling tab use a vertical scrollbar if needed (#600121)


author: Jan Grulich <jgrulich@redhat.com> 0.9.0.8-2
changelog:
  - remove mobile-broadband-mobile-provider-devel as BR
  - add ModemManager as runtime dependency
  - add mobile-broadband-mobile-provider as runtime dependency


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-10
changelog:
  - Avoid duplicates in solid device automounter kcm
    Resolves: bz#1084191
  - Enable automount overrides even when automatic mounting is disabled
    Resolves: bz#1084497


author: Than Ngo <than@redhat.com> - 4.10.5-20
changelog:
  - Resolves: bz#1040678 - cannot assign custom keyboard shortcut for Show Desktop Grid
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-21
changelog:
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed (fixed patch)
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays (fixed patch)


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-8
changelog:
  - Powerdevil: do not notify about a non existent action
    Resolves: bz#1289149
  - Plasma taskmanager: close context menu when task is closed
    Resolves: bz#1262603


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-10
changelog:
  - Fix grouping of tasks in taskmanager applet
    Resolves: bz#1348917
  - Fix unlocking of kscreenlocker, unlock it just once
    Resolves: bz#1333441


author: Jan Grulich <jgrulich@redhat.com> - 4.11-19-13
changelog:
  - Sanitise notification HTML
    Resolves: bz#1568853

  - Increase cpu buffer size in ksysguard
    Resolves: bz#1611762


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-14
changelog:
  - Do not show disabled buttons in Plastik decoration theme
    Resolves: bz#1677641

  - Taskmanager: dismiss group when application is closed and there is enough space
    Resolve: bz#1698048


author: Rex Dieter <rdieter@fedoraproject.org> - 6:4.10.3-2
changelog:
  - pull in a few upstream fixes, including a couple minor security issues
  - Crash in DialogShadows::Private::freeX11Pixmaps() (kde#319137)


author: Martin Briza <mbriza@redhat.com> - 4.10.5-3
changelog:
  - make kpac_dhcp_helper full relro
  - set the variables in the generated cmake files to contain both 64b and 32b paths
  - hide "command not found" for one pkg-config invocation in the spec
  - fix macro expansion in the spec changelog
  - Resolves: #884052


author: Martin Briza <mbriza@redhat.com> - 4.10.5-4
changelog:
  - use a better way to figure out if lib or lib64 should be used
  - use -fno-strict-aliasing for type punned source files
  - Resolves: #884052


author: Jan Grulich <jgrulich@redhat.com> - 6:4.14.8-9
changelog:
  - Do not fork konsole process when opening terminal from apps using dolphin-part
    Resolves: bz#1710362


author: Jan Grulich <jgrulich@redhat.com> - 6:4.14.8-6
changelog:
  - KAuth: verify that whoever is calling us is actually who he says he is (CVE-2017-8422)
    Resolves: CVE-2017-8422


author: Ryan O'Hara <rohara@redhat.com> - 1.2.7-3
changelog:
  - Update spec file.
  - Add option to prevent respawn of child processes.
  - Remove duplicate command-line option code.
  - Use popt to generate usage message.
  - Fix pointer arithmetic for VRRP packets.
  - Fix comparison of primary IP address.
  - Fix loading of SSL certificate.
  - Fix typo in error message.
  - Update FSF address in GPLv2 license.
  - Remove debug message from if_get_by_ifname.


author: Jarod Wilson <jarod@redhat.com> [3.10.0-121.el7]
changelog:
  - [virt] vhost/net: fix total length when packets are too short ("Michael S. Tsirkin") [1064446] {CVE-2014-0077}
  - [virt] vhost/net: validate vhost_get_vq_desc return value ("Michael S. Tsirkin") [1070940] {CVE-2014-0055}


author: Jarod Wilson <jarod@redhat.com> [3.10.0-122.el7]
changelog:
  - [security] device_cgroup: check if exception removal is allowed (Aristeu Rozanski) [1086057]
  - [security] device_cgroup: rework device access check and rule checking (Aristeu Rozanski) [1086057]
  - [fs] autofs: fix lockref lookup (Ian Kent) [1083815]
  - [mei] me: do not load the driver if the FW doesn't support MEI interface (Prarit Bhargava) [1082789]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-123.el7]
changelog:
  - [mm] rmap: try_to_unmap_cluster() should lock_page() before mlocking (Larry Woodman) [1078349] {CVE-2014-3122}
  - [mm] huge_memory: Fix cpuset cgroups so all pages for a task remain on correct node (Larry Woodman) [1076613]
  - [mm] mprotect: fix oops in change_pmd_range called from task_numa_work (Rik van Riel) [1085050]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.1.1.el7]
changelog:
  - [tty] n_tty: Fix n_tty_write crash when echoing in raw mode (Aristeu Rozanski) [1094241 1094242] {CVE-2014-0196}


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.2.1.el7]
changelog:
  - [net] filter: prevent nla extensions to peek beyond the end of the message (Jiri Benc) [1096780 1096781] {CVE-2014-3144 CVE-2014-3145}
  - [block] floppy: don't write kernel-only members to FDRAWCMD ioctl output (Denys Vlasenko) [1094316 1094318] {CVE-2014-1737 CVE-2014-1738}
  - [block] floppy: ignore kernel-only members in FDRAWCMD ioctl input (Denys Vlasenko) [1094316 1094318] {CVE-2014-1737 CVE-2014-1738}
  - [net] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors (Jiri Pirko) [1091345 1079014] {CVE-2014-2568}
  - [net] ipv4: current group_info should be put after using (Jiri Benc) [1087415 1087416] {CVE-2014-2851}
  - [fs] dcache: make prepend_name() work correctly when called with negative *buflen (Mikulas Patocka) [1099048 1092746]
  - [fs] dcache: __dentry_path() fixes (Mikulas Patocka) [1099048 1092746]
  - [fs] dcache: prepend_path() needs to reinitialize dentry/vfsmount/mnt on restarts (Mikulas Patocka) [1099048 1092746]
  - [target] tcm_fc: Fix use-after-free of ft_tpg (Andy Grover) [1088110 1071340]
  - [s390] af_iucv: wrong mapping of sent and confirmed skbs (Hendrik Brueckner) [1103064 1098513]
  - [s390] kernel: avoid page table walk on user space access (Hendrik Brueckner) [1103062 1097687]
  - [s390] crypto: fix aes, des ctr mode concurrency finding (Hendrik Brueckner) [1103060 1097686]
  - [net] openvswitch: fix a possible deadlock and lockdep warning (Flavio Leitner) [1103318 1094867]
  - [mm] filemap: update find_get_pages_tag() to deal with shadow entries (Johannes Weiner) [1103065 1091795]
  - [mm] page-writeback: fix divide by zero in pos_ratio_polynom (Rik van Riel) [1103067 1091784]
  - [mm] page-writeback: add strictlimit feature (Rik van Riel) [1103067 1091784]
  - [fs] xfs: log vector rounding leaks log space (Brian Foster) [1103059 1091136]
  - [fs] xfs: truncate_setsize should be outside transactions (Brian Foster) [1103059 1091136]
  - [fs] gfs2: Fix uninitialized VFS inode in gfs2_create_inode (Abhijith Das) [1097407 1087995]
  - [kernel] futex: Fix pthread_cond_broadcast() to wake up all threads (Larry Woodman) [1103066 1084757]
  - [net] ip: generate unique IP identificator if local fragmentation is allowed (Jiri Pirko) [1090490 1076106]
  - [kernel] cputime: Fix jiffies based cputime assumption on steal accounting (Frederic Weisbecker) [1090974 1047732]
  - [kernel] cputime: Bring cputime -> nsecs conversion (Frederic Weisbecker) [1090974 1047732]
  - [kernel] cputime: Default implementation of nsecs -> cputime conversion (Frederic Weisbecker) [1090974 1047732]
  - [x86] irq, pic: Probe for legacy PIC and set legacy_pic appropriately (Vivek Goyal) [1094973 1037957]
  - [virt] hyperv/vmbus: Negotiate version 3.0 when running on ws2012r2 hosts (Vivek Goyal) [1094973 1037957]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.3.1.el7]
changelog:
  - [kernel] mutexes: Give more informative mutex warning in the !lock->owner case (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [kernel] mutex: replace CONFIG_HAVE_ARCH_MUTEX_CPU_RELAX with simple ifdef (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [kernel] locking/mutexes: Introduce cancelable MCS lock for adaptive spinning (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [kernel] locking/mutexes: Modify the way optimistic spinners are queued (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [kernel] locking/mutexes: Return false if task need_resched() in mutex_can_spin_on_owner() (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [kernel] Restructure the MCS lock defines and locking & Move mcs_spinlock.h into kernel/locking/ (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [misc] arch: Introduce smp_load_acquire(), smp_store_release() (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [kernel] locking/mutex: Fix debug_mutexes (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [kernel] locking/mutex: Fix debug checks (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]
  - [kernel] locking/mutexes: Unlock the mutex without the wait_lock (Larry Woodman) [1103629 1087655] [1103630 1087919] [1103631 1087922]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.4.1.el7]
changelog:
  - [kernel] futex: Make lookup_pi_state more robust (Larry Woodman) [1104519 1104520] {CVE-2014-3153}
  - [kernel] futex: Always cleanup owner tid in unlock_pi (Larry Woodman) [1104519 1104520] {CVE-2014-3153}
  - [kernel] futex: Validate atomic acquisition in futex_lock_pi_atomic() (Larry Woodman) [1104519 1104520] {CVE-2014-3153}
  - [kernel] futex: prevent requeue pi on same futex (Larry Woodman) [1104519 1104520] {CVE-2014-3153}
  - [ethernet] qlcnic: Fix ethtool statistics length calculation (Michal Schmidt) [1104972 1099634]
  - Revert: [kernel] cputime: Default implementation of nsecs -> cputime conversion (Frederic Weisbecker) [1090974 1047732]
  - Revert: [kernel] cputime: Bring cputime -> nsecs conversion (Frederic Weisbecker) [1090974 1047732]
  - Revert: [kernel] cputime: Fix jiffies based cputime assumption on steal accounting (Frederic Weisbecker) [1090974 1047732]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.5.1.el7]
changelog:
  - [net] ipv4/tunnels: fix an oops when using ipip/sit with IPsec (Jiri Pirko) [1114957 1108857]
  - [scsi] Add timeout to avoid infinite command retry (Ewan Milne) [1114468 1061871]
  - [net] filter: let bpf_tell_extensions return SKF_AD_MAX (Jiri Benc) [1114404 1079524]
  - [net] filter: introduce SO_BPF_EXTENSIONS (Jiri Benc) [1114404 1079524]
  - [net] sctp: Fix sk_ack_backlog wrap-around problem (Daniel Borkmann) [1113971 1112726] {CVE-2014-4667}
  - [tty] Set correct tty name in 'active' sysfs attribute (Denys Vlasenko) [1113467 1066403]
  - [powerpc] tm: Disable IRQ in tm_recheckpoint (Larry Woodman) [1113150 1088224]
  - [scsi] qla2xxx: Update version number to 8.06.00.08.07.0-k3 (Chad Dupuis) [1112389 1090378]
  - [scsi] qla2xxx: Reduce the time we wait for a command to complete during SCSI error handling (Chad Dupuis) [1112389 1090378]
  - [scsi] qla2xxx: Clear loop_id for ports that are marked lost during fabric scanning (Chad Dupuis) [1112389 1090378]
  - [scsi] qla2xxx: Avoid escalating the SCSI error handler if the command is not found in firmware (Chad Dupuis) [1112389 1090378]
  - [scsi] qla2xxx: Don't check for firmware hung during the reset context for ISP82XX (Chad Dupuis) [1112389 1090378]
  - [scsi] qla2xxx: Issue abort command for outstanding commands during cleanup when only firmware is alive (Chad Dupuis) [1112389 1090378]
  - [fs] nfs: Apply NFS_MOUNT_CMP_FLAGMASK to nfs_compare_remount_data() (Scott Mayhew) [1109407 1103805]
  - [ethernet] bnx2x: Fix kernel crash and data miscompare after EEH recovery (Michal Schmidt) [1107721 1101808]
  - [net] gro: restore frag0 optimization (and fix crash) (Michal Schmidt) [1099950 1069741]
  - [watchdog] hpwdt: display informative string (Nigel Croxon) [1096961 1074038]
  - [net] Use netlink_ns_capable to verify the permisions of netlink messages (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [net] netlink: Add variants of capable for use on netlink messages (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [net] diag: Move the permission check in sock_diag_put_filterinfo to packet_diag_dump (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [net] diag: Fix ns_capable check in sock_diag_put_filterinfo (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [kernel] cputime: Fix jiffies based cputime assumption on steal accounting (Frederic Weisbecker) [1090974 1047732]
  - [kernel] cputime: Bring cputime -> nsecs conversion (Frederic Weisbecker) [1090974 1047732]
  - [kernel] cputime: Default implementation of nsecs -> cputime conversion (Frederic Weisbecker) [1090974 1047732]
  - [net] mac80211: fix crash due to AP powersave TX vs. wakeup race (Jacob Tanenbaum) [1083533 1083534] {CVE-2014-2706}
  - [wireless] ath9k: tid->sched race in ath_tx_aggr_sleep() (Jacob Tanenbaum) [1083251 1083252] {CVE-2014-2672}
  - [powerpc] tm: Fix crash when forking inside a transaction (Radomir Vrbovsky) [1083214 1083215] {CVE-2014-2673}
  - [fs] aio: fix plug memory disclosure and fix reqs_active accounting backport (Jeff Moyer) [1094604 1094605] {CVE-2014-0206}
  - [fs] aio: plug memory disclosure and fix reqs_active accounting (Mateusz Guzik) [1094604 1094605] {CVE-2014-0206}


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.6.1.el7]
changelog:
  - [x86] ptrace: force IRET path after a ptrace_stop() (Oleg Nesterov) [1115934 1115935] {CVE-2014-4699}


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.7.1.el7]
changelog:
  - [scsi] set DID_TIME_OUT correctly (Ewan Milne) [1122575 1103881]
  - [scsi] fix invalid setting of host byte (Ewan Milne) [1122575 1103881]
  - [scsi] More USB deadlock fixes (Ewan Milne) [1122575 1103881]
  - [scsi] Fix USB deadlock caused by SCSI error handling (Ewan Milne) [1122575 1103881]
  - [scsi] Fix command result state propagation (Ewan Milne) [1122575 1103881]
  - [scsi] Fix spurious request sense in error handling (Ewan Milne) [1122575 1103881]
  - [input] synaptics: fix resolution for manually provided min/max (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: change min/max quirk table to pnp-id matching (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add a matches_pnp_id helper function (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: T540p - unify with other LEN0034 models (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add min/max quirk for the ThinkPad W540 (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add min/max quirk for ThinkPad Edge E431 (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add min/max quirk for ThinkPad T431s, L440, L540, S1 Yoga and X1 (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: report INPUT_PROP_TOPBUTTONPAD property (Benjamin Tissoires) [1122559 1093449]
  - [input] Add INPUT_PROP_TOPBUTTONPAD device property (Benjamin Tissoires) [1122559 1093449]
  - [input] i8042: add firmware_id support (Benjamin Tissoires) [1122559 1093449]
  - [input] serio: add firmware_id sysfs attribute (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add manual min/max quirk for ThinkPad X240 (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add manual min/max quirk (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: fix incorrect placement of __initconst (Benjamin Tissoires) [1122559 1093449]
  - [ethernet] be2net: Fix invocation of be_close() after be_clear() (Ivan Vecera) [1122558 1066644]
  - [ethernet] be2net: enable interrupts in EEH resume (Ivan Vecera) [1121712 1076682]
  - [ethernet] sfc: PIO:Restrict to 64bit arch and use 64-bit writes (Nikolay Aleksandrov) [1119725 1089024]
  - [kernel] ftrace: Hardcode ftrace_module_init() call into load_module() (Takahiro MUNEDA) [1119721 1061553]
  - [kernel] trace: Make register/unregister_ftrace_command __init (Takahiro MUNEDA) [1119721 1061553]
  - [block] nvme: Initialize device reference count earlier (David Milburn) [1119720 1081734]
  - [ata] ahci: accommodate tag ordered controller (David Milburn) [1117154 1083746]
  - [s390] af_iucv: recvmsg problem for SOCK_STREAM sockets (Hendrik Brueckner) [1115585 1109703]
  - [s390] af_iucv: correct cleanup if listen backlog is full (Hendrik Brueckner) [1115584 1109033]
  - [mm] Revert: vmscan: do not swap anon pages just because free+file is low (Johannes Weiner) [1114938 1102991]
  - [drm] nouveau/bios: fix a bit shift error introduced by recent commit (Ulrich Obergfell) [1114869 1089936]
  - [ethernet] bnx2x: Adapter not recovery from EEH error injection (Michal Schmidt) [1107722 1067154]
  - [kernel] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102708 1102710] {CVE-2014-3917}
  - [block] mtip32xx: mtip_async_complete() bug fixes (Jeff Moyer) [1125776 1102281]
  - [block] mtip32xx: Unmap the DMA segments before completing the IO request (Jeff Moyer) [1125776 1102281]
  - [net] l2tp: don't fall back on UDP [get|set]sockopt (Petr  Matousek) [1119465 1119466] {CVE-2014-4943}
  - [s390] ptrace: correct insufficient sanitization when setting psw mask (Hendrik Brueckner) [1114090 1113673] {CVE-2014-3534}


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.8.1.el7]
changelog:
  - [scsi] fnic: fix broken FIP discovery by initializing multicast address (Chris Leech) [1119727 1100078]
  - [scsi] libfcoe: Make fcoe_sysfs optional / fix fnic NULL exception (Chris Leech) [1119727 1100078]
  - [fs] nfs: Don't mark the data cache as invalid if it has been flushed (Scott Mayhew) [1115817 1114054]
  - [fs] nfs: Clear NFS_INO_REVAL_PAGECACHE when we update the file size (Scott Mayhew) [1115817 1114054]
  - [fs] nfs: Fix cache_validity check in nfs_write_pageuptodate() (Scott Mayhew) [1115817 1114054]
  - [mm] hugetlb: ensure hugepage access is denied if hugepages are not supported (David Gibson) [1122115 1081671]
  - [kernel] hrtimer: Prevent all reprogramming if hang detected (Prarit Bhargava) [1113175 1094732]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-113.el7]
changelog:
  - [security] selinux: fix broken peer recv check (Paul Moore) [1043165]
  - [md] dm-raid: Fix possibility of skipping device recovery (Jonathan E Brassow) [1069927]
  - [fs] xfs: avoid AGI/AGF deadlock scenario for inode chunk allocation (Brian Foster) [1052789]
  - [md] dm-cache: fix access beyond end of origin device (Mike Snitzer) [1074606]
  - [md] dm-cache: fix truncation bug when copying a block to/from >2TB fast device (Mike Snitzer) [1075709]
  - [ethernet] bna: don't disable VLAN tag stripping in promisc mode (Ivan Vecera) [1057842]
  - [kernel] posix-timers: Spare workqueue if there is no full dynticks CPU to kick (Frederic Weisbecker) [1074168]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-114.el7]
changelog:
  - [net] netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages (Jiri Pirko) [1077351] {CVE-2014-2523}
  - [net] ipv6: don't set DST_NOCOUNT for remotely added routes (Jiri Pirko) [1075060] {CVE-2014-2309}
  - [net] skbuff: skb_segment: orphan frags before copying ("Michael S. Tsirkin") [1056934] {CVE-2014-0131}
  - [net] skbuff: skb_segment: s/fskb/list_skb/ ("Michael S. Tsirkin") [1056934] {CVE-2014-0131}
  - [net] skbuff: skb_segment: s/skb/head_skb/ ("Michael S. Tsirkin") [1056934] {CVE-2014-0131}
  - [net] skbuff: skb_segment: s/skb_frag/frag/ ("Michael S. Tsirkin") [1056934] {CVE-2014-0131}
  - [net] skbuff: skb_segment: s/frag/nskb_frag/ ("Michael S. Tsirkin") [1056934] {CVE-2014-0131}
  - [net] use kfree_skb_list() helper ("Michael S. Tsirkin") [1056934] {CVE-2014-0131}
  - [net] veth: fix veth vlan features (Flavio Leitner) [1076077]
  - [net] sunrpc/xprtrdma: add separate Kconfig options for NFSoRDMA client and server support (Jeff Layton) [1077957]
  - [virt] kvm/x86: emulate MOVAPD (Igor Mammedov) [1052090]
  - [virt] kvm/x86: emulate MOVAPS (Igor Mammedov) [1052090]
  - [mm] x86: Wrong page freed on preallocate_pmds() failure exit (Larry Woodman) [1073641]
  - [mm] x86: do not leak page->ptl for pmd page tables (Larry Woodman) [1073641]
  - [virt] kvm/x86: fix emulator buffer overflow (Andrew Jones) [1071836] {CVE-2014-0049}
  - [virt] hyperv: Change the receive buffer size for legacy hosts (Jason Wang) [1075279]
  - [x86] quirks: Update DH8900CC Unsupported Device ID (Prarit Bhargava) [1076137]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-115.el7]
changelog:
  - [block] free q->flush_rq in blk_init_allocated_queue error paths (Mike Snitzer) [1078522]
  - [x86] fpu: Clear exceptions in AMD FXSAVE workaround (Phillip Lougher) [1053596] {CVE-2014-1438}
  - [mm] page_alloc: spill to remote nodes before waking kswapd (Johannes Weiner) [1076546]
  - [mm] vmscan: do not swap anon pages just because free+file is low (Johannes Weiner) [1076546]
  - [fs] sunrpc: Ensure call_connect_status() deals correctly with SOFTCONN tasks (Steve Dickson) [1071532]
  - [fs] nfs: Ensure we respect soft mount timeouts during trunking discovery (Steve Dickson) [1071532]
  - [fs] nfs: Schedule recovery if nfs40_walk_client_list() is interrupted (Steve Dickson) [1071532]
  - [fs] sunrpc: Ensure that call_bind times out correctly (Steve Dickson) [1071532]
  - [fs] sunrpc: Ensure that call_connect times out correctly (Steve Dickson) [1071532]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-116.el7]
changelog:
  - [s390] qeth: postpone freeing of qdio memory (Hendrik Brueckner) [1077650]
  - [kernel] rh_taint: Remove taint and update unsupported hardware message (Prarit Bhargava) [1076974]
  - [fs] proc/vmcore: continue vmcore initialization if PT_NOTE is found empty (Chao WANG) [1077535]
  - [net] ipv6: ip6_append_data_mtu do not handle the mtu of the second fragment properly (Jiri Pirko) [1079873]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-117.el7]
changelog:
  - [md] dm-thin: fix dangling bio in process_deferred_bios error path (Mike Snitzer) [1081781]
  - [md] dm: take care to copy the space map roots before locking the superblock (Mike Snitzer) [1081781]
  - [md] dm-transaction-manager: fix corruption due to non-atomic transaction commit (Mike Snitzer) [1081781]
  - [md] dm-era: fixes for issues identified upstream (Mike Snitzer) [1081781]
  - [md] dm-cache: remove remainder of distinct discard block size (Mike Snitzer) [1062679]
  - [md] dm-cache: prevent corruption caused by discard_block_size > cache_block_size (Mike Snitzer) [1062679]
  - [ipc] change kern_ipc_perm.deleted type to bool (Phillip Lougher) [1043807] {CVE-2013-7026}
  - [ipc] introduce ipc_valid_object() helper to sort out IPC_RMID races (Phillip Lougher) [1043807] {CVE-2013-7026}
  - [ipc] shm: fix shm_file deletion races (Phillip Lougher) [1043807] {CVE-2013-7026}
  - [drm] udl: take reference to device struct for dma-bufs (Dave Airlie) [1077774]
  - [security] keys: Allow special keys (eg. DNS results) to be invalidated by CAP_SYS_ADMIN (David Howells) [1074240]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-118.el7]
changelog:
  - [wireless] ath9k: Fix LNA gpio for AR9485 (John Green) [1082017]
  - [infiniband] core: Don't resolve passive side RoCE L2 address in cma req handler (Amir Vadai) [1075852]
  - [fs] xfs: fix buffer use after free on IO error (Eric Sandeen) [924301]
  - [scsi] be2iscsi: Bump the driver version (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix DMA Out of SW-IOMMU space error (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix scsi_cmnd leakage in driver (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix the session cleanup when reboot/shutdown happens (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix doorbell format for EQ/CQ/RQ s per SLI spec (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix port speed typo in driver (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix handling timed out MBX completion from FW (Rob Evers) [1052416]
  - [fs] nfs: Fix a use-after-free problem in open() (Steve Dickson) [1062809]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-119.el7]
changelog:
  - [net] bonding: remove bond_resend_igmp_join_requests read_unlock leftover (Veaceslav Falico) [1080924]
  - [ethernet] mlx4: Support shutdown() interface (Amir Vadai) [1046216]
  - [zram] fix invalid memory access (Jerome Marchand) [1081936]
  - [zram] protect zram_reset_device() call (Jerome Marchand) [1081936]
  - [zram] remove zram_sysfs file (Jerome Marchand) [1081936]
  - [zram] use atomic64_xxx() to replace zram_stat64_xxx() (Jerome Marchand) [1081936]
  - [zram] optimize memory operations with clear_page()/copy_page() (Jerome Marchand) [1081936]
  - [zram] kill unused zram_get_num_devices() (Jerome Marchand) [1081936]
  - [zram] simplify and optimize dev_to_zram() (Jerome Marchand) [1081936]
  - [kernel] futex: revert back to the explicit waiter counting code (Larry Woodman) [1081100]
  - [kernel] audit: Allow login in non-init namespaces (Richard Guy Briggs) [1082597]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-120.el7]
changelog:
  - [net] netfilter: fix panic when oom during rule replacement (Florian Westphal) [985657]
  - [net] netfilter: x_tables: fix ordering of jumpstack allocation and table update (Florian Westphal) [985657]
  - [virt] kvm/ioapic: try to recover if pending_eoi goes out of range (Paolo Bonzini) [1036478]
  - [virt] kvm/ioapic: fix assignment of ioapic->rtc_status.pending_eoi (Paolo Bonzini) [1036478 1081590] {CVE-2014-0155}
  - [virt] kvm/ioapic: reinject pending interrupts on KVM_SET_IRQCHIP (Paolo Bonzini) [1036478]
  - [virt] kvm/ioapic: extract body of kvm_ioapic_set_irq (Paolo Bonzini) [1036478]
  - [virt] kvm/ioapic: clear IRR for edge-triggered interrupts at delivery (Paolo Bonzini) [1036478]
  - [virt] kvm/ioapic: merge ioapic_deliver into ioapic_service (Paolo Bonzini) [1036478]
  - [virt] kvm: ignore ioapic polarity (Paolo Bonzini) [1036478]
  - [core] device: Create 'device_driver_rh' KABI shadowing structure (Myron Stowe) [1083692]
  - [core] device: Create 'device_rh' KABI shadowing structure (Myron Stowe) [1083692]
  - [scsi] Reserve space in structures for future XCOPY support (Ewan Milne) [1080430]
  - [fs] xfs: fix bad hash ordering (Brian Foster) [1083206]
  - [fs] xfs: always do log forces via the workqueue (Brian Foster) [1052004]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-229.7.2.vz7.8.6]
changelog:
  - ms/fuse: break infinite loop in fuse_fill_write_pages() (Maxim Patlasov)
  - ploop: release io_context on ploop_thread() exit (Maxim Patlasov) [PSBM-39956]
  - ms/cfq-iosched: remove @gfp_mask from cfq_find_alloc_queue() (Maxim Patlasov) [PSBM-39956]
  - ve: mark SYSFS and IPGRE features deprecated (Konstantin Khorenko) [PSBM-33687]
  - ms/lockd: create NSM handles per net namespace (Andrey Ryabinin) [PSBM-39721]
  - ms/SUNRPC: NULL utsname dereference on NFS umount during namespace cleanup (Trond Myklebust) [PSBM-39721, although this is]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-229.7.2.vz7.8.7]
changelog:
  - config.OpenVZ: enable TAP accounting (Konstantin Khorenko) [PSBM-27713]
  - ve/net: introduce TAP accounting (Vladimir Sementsov-Ogievskiy) [PSBM-27713]
  - oom: resurrect berserker mode (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-17930]
  - oom: pass points and overdraft to oom_kill_process (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: rework logic behind memory.oom_guarantee (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-37915]
  - oom: drop OOM_SCAN_ABORT (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: introduce oom timeout (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-38581]
  - oom: rework locking design (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - memcg: add lock for protecting memcg->oom_notify list (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - memcg: add mem_cgroup_get/put helpers (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - ms/mm: oom_kill: clean up victim marking and exiting interfaces (Vladimir Davydov) [PSBM-26973]
  - ms/oom: thaw the OOM victim if it is frozen (Vladimir Davydov) [PSBM-26973]
  - ms/oom: add helpers for setting and clearing TIF_MEMDIE (Vladimir Davydov) [PSBM-26973]
  - ms/oom: make sure that TIF_MEMDIE is set under task_lock (Vladimir Davydov) [PSBM-26973]
  - ms/oom: don't count on mm-less current process (Vladimir Davydov) [PSBM-26973]
  - ms/mm, oom: remove unnecessary exit_state check (Vladimir Davydov) [PSBM-26973]
  - ms/make default ->i_fop have ->open() fail with ENXIO (Andrew Vagin) [PSBM-39834]
  - ms/shm: wait for pins to be released when sealing (Andrew Vagin) [PSBM-39834]
  - ms/selftests: add memfd/sealing page-pinning tests (Andrew Vagin) [PSBM-39834]
  - ms/selftests: add memfd_create() + sealing tests (Andrew Vagin) [PSBM-39834]
  - ms/shm: add memfd_create() syscall (Andrew Vagin) [PSBM-39834]
  - ms/shm: add sealing API (Andrew Vagin) [PSBM-39834]
  - ms/mm: allow drivers to prevent new writable mappings (Andrew Vagin) [PSBM-39834]
  - ms/mm: mmap_region: kill correct_wcount/inode, use allow_write_access() (Andrew Vagin) [PSBM-39834]
  - ms/sched: add cond_resched_rcu() helper (Andrew Vagin) [PSBM-39834]
  - ms/aio: Make it possible to remap aio ring (Andrew Vagin) [PSBM-39834]
  - ms/prctl: PR_SET_MM -- introduce PR_SET_MM_MAP operation (Andrew Vagin) [PSBM-39834]
  - ms/prctl: PR_SET_MM -- factor out mmap_sem when updating mm::exe_file (Andrew Vagin) [PSBM-39834]
  - ms/mm: introduce check_data_rlimit helper (Andrew Vagin) [PSBM-39834]
  - ve: Strip unset options in ve.mount_opts (Kirill Tkhai)


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-229.7.2.vz7.8.9]
changelog:
  - memcg: allow to disable cleancache per memcg (Vladimir Davydov) [PSBM-34163]
  - oom: Revert "oom: do not dump all tasks info on each oom kill" (Konstantin Khorenko)
  - ve/device_cgroup: fake allowing all devices for docker inside VZCT (Pavel Tikhomirov) [PSBM-34529 PSBM-38691]
  - ms/prctl: avoid using mmap_sem for exe_file serialization (Davidlohr Bueso) [PSBM-39834]
  - ms/prctl: more prctl(PR_SET_MM_*) checks (Alexey Dobriyan) [PSBM-39834]
  - ms/mm: use may_adjust_brk helper (Cyrill Gorcunov) [PSBM-39834]
  - ve/fs: allow to remount from ve user ns (Pavel Tikhomirov)
  - ve/quota: allow to manage quota in top CT user ns (Konstantin Khorenko) [PSBM-40281]
  - ve/tun: Make config to dep on TUN (Cyrill Gorcunov)
  - ve/vtty: Make indices to match pcs6 scheme (Cyrill Gorcunov) [PSBM-40088]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-229.7.2.vz7.9.1]
changelog:
  - ms/veth: add netpoll support (Andrew Vagin) [PSBM-34959]
  - ms/fsnotify: Make fdinfo to always success (Cyrill Gorcunov) [PSBM-40337]
  - ve/xfs: add missing ub_io_account_dirty in set_page_dirty (Vladimir Davydov)
  - ms/x86/xsaves: Detect xsaves/xrstors feature (Fenghua Yu) [PSBM-33638]
  - arch: mask cpuid 0x00000007 features in /proc/cpuinfo (Vladimir Davydov) [PSBM-30880 PSBM-33638]
  - arch/x86: assure cpuinfo inside ct is subset of host's one (Vladimir Davydov) [PSBM-30688 PSBM-33638]
  - arch/x86: disable cpuid faulting on reboot and cpu offline (Vladimir Davydov) [PSBM-30548 PSBM-33638]
  - arch/x86: only enable cpuid faulting for containers (Vladimir Davydov) [PSBM-30516 PSBM-33638]
  - arch/x86: report cpuid:0000000d_1 in cpuinfo (Vladimir Davydov) [PSBM-30577 PSBM-33638]
  - arch/x86: check if cpuid level exists while reporting cpuinfo (Vladimir Davydov) [PSBM-33638]
  - arch/x86: take into account cpuid override while reporting cpuinfo (Vladimir Davydov) [PSBM-28682 PSBM-33638]
  - arch/x86: introduce cpuid override (Vladimir Davydov) [PSBM-28682 PSBM-33638]
  - cpuinfo: obtain cpuflags for the current cpu too (Vladimir Davydov) [PSBM-33638]
  - cpuinfo: zero all bits in cap mask (Vladimir Davydov) [PSBM-33638]
  - ubc: proc show stats in ve user ns (Pavel Tikhomirov) [PSBM-40433]
  - ve/proc: Use ve_capable() in oom_score_adj_write() (Kirill Tkhai) [PSBM-40359]
  - venet: remove per-net hooks and related code (Stanislav Kinsburskiy) [PSBM-23441 PSBM-23441]
  - venet: add newlink and dellink callbacks to rtnetlink operations (Stanislav Kinsburskiy) [PSBM-23441 PSBM-23441]
  - venet: fix false positive return code in case of error in venet_init() (Stanislav Kinsburskiy) [PSBM-23441]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-229.7.2.vz7.9.2]
changelog:
  - ms/net/[regression]: do not allow to reopen socket (Dmitry Monakhov) [PSBM-40500]
  - cbt/blkdev.h: fix compilation in case CONFIG_BLK_DEV_CBT is not set (Stanislav Kinsburskiy)


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-229.7.2.vz7.9.3]
changelog:
  - ve/nf_conntrack: expose "nf_conntrack_events*" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_acct" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: export nf_conntrack_hide_sysctl() helper (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_max" in containers (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: allow expose of priviledged sysctl inside containers (Stanislav Kinsburskiy) [PSBM-40044]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-229.7.2.vz7.9.4]
changelog:
  - ms/seccomp: add ptrace options for suspend/resume (Andrew Vagin) [PSBM-39517]
  - x86/vdso: Fix build failure with GCC5 (Andrey Ryabinin)
  - ve/fs/namei: fix capabilities check in sys_renameat2 () to support Containers (Stanislav Kinsburskiy)
  - ve/fs/namei: check containers capabilities in may_linkat() (Stanislav Kinsburskiy) [PSBM-40567]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-229.7.2.vz7.9.7]
changelog:
  - ve/mm,oom: print information about ve of killed task (Andrey Ryabinin) [PSBM-40610]
  - ms/mm: introduce idle page tracking (Vladimir Davydov) [PSBM-32460]
  - ms/mm/mm_init.c: make creation of the mm_kobj happen earlier than device_initcall (Vladimir Davydov) [PSBM-32460]
  - ms/sysfs: create bin_attributes under the requested group (Vladimir Davydov) [PSBM-32460]
  - ms/mmu-notifier: add clear_young callback (Vladimir Davydov) [PSBM-32460]
  - ms/proc: add kpagecgroup file (Vladimir Davydov) [PSBM-32460]
  - ms/memcg: add page_cgroup_ino helper (Vladimir Davydov) [PSBM-32460]
  - Revert "ms/memcg: add page_cgroup_ino helper" (Vladimir Davydov) [PSBM-32460]
  - Revert "ms/memcg/proc: add kpagecgroup file" (Vladimir Davydov) [PSBM-32460]
  - Revert "ms/mm/proc: add kpageidle file" (Vladimir Davydov) [PSBM-32460]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.5.1.el7]
changelog:
  - [net] vsock: Fix lockdep issue (Dave Anderson) [1292372 1253971]
  - [net] vsock: sock_put wasn't safe to call in interrupt context (Dave Anderson) [1292372 1253971]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.7.1.el7]
changelog:
  - [scsi] scsi_sysfs: protect against double execution of __scsi_remove_device() (Vitaly Kuznetsov) [1292075 1273723]
  - [powerpc] mm: Recompute hash value after a failed update (Gustavo Duarte) [1289452 1264920]
  - [misc] genwqe: get rid of atomic allocations (Hendrik Brueckner) [1289450 1270244]
  - [mm] use only per-device readahead limit (Eric Sandeen) [1287550 1280355]
  - [net] ipv6: update ip6_rt_last_gc every time GC is run (Hannes Frederic Sowa) [1285370 1270092]
  - [kernel] tick: broadcast: Prevent livelock from event handler (Prarit Bhargava) [1284043 1265283]
  - [kernel] clockevents: Serialize calls to clockevents_update_freq() in the core (Prarit Bhargava) [1284043 1265283]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.8.1.el7]
changelog:
  - [md] dm: fix AB-BA deadlock in __dm_destroy() (Mike Snitzer) [1296566 1292481]
  - [md] revert "dm-mpath: fix stalls when handling invalid ioctls" (Mike Snitzer) [1287552 1277194]
  - [cpufreq] intel_pstate: Fix limits->max_perf rounding error (Prarit Bhargava) [1296276 1279617]
  - [cpufreq] intel_pstate: Fix limits->max_policy_pct rounding error (Prarit Bhargava) [1296276 1279617]
  - [cpufreq] revert "intel_pstate: fix rounding error in max_freq_pct" (Prarit Bhargava) [1296276 1279617]
  - [crypto] nx: 842 - Add CRC and validation support (Gustavo Duarte) [1289451 1264905]
  - [powerpc] eeh: More relaxed condition for enabled IO path (Steve Best) [1289101 1274731]
  - [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275929 1273465] {CVE-2015-7872}
  - [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275929 1273465] {CVE-2015-7872}
  - [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275929 1273465] {CVE-2015-7872}
  - [x86] paravirt: Replace the paravirt nop with a bona fide empty function (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Fix a paravirt stack-clobbering bug in the NMI code (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Use DF to avoid userspace RSP confusing nested NMI detection (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Reorder nested NMI checks (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Improve nested NMI comments (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}
  - [x86] nmi: Switch stacks on userspace NMI entry (Mateusz Guzik) [1259582 1259583] {CVE-2015-5157}


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.9.1.el7]
changelog:
  - [security] keys: Fix keyring ref leak in join_session_keyring() (David Howells) [1298931 1298036] {CVE-2016-0728}


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.10.1.el7]
changelog:
  - [of] return NUMA_NO_NODE from fallback of_node_to_nid() (Thadeu Lima de Souza Cascardo) [1300614 1294398]
  - [net] openvswitch: do not allocate memory from offline numa node (Thadeu Lima de Souza Cascardo) [1300614 1294398]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.10.1.vz7.12.1]
changelog:
  - ms/kvm/x86: Pass return code of kvm_emulate_hypercall (Andrey Smetanin) [PSBM-44419]
  - ms/kvm/x86: Hyper-V VMBus hypercall userspace exit (Andrey Smetanin) [PSBM-44419]
  - ms/kvm/x86: Reject Hyper-V hypercall continuation (Andrey Smetanin) [PSBM-44419]
  - ms/drivers/hv: Move VMBus hypercall codes into Hyper-V UAPI header (Andrey Smetanin) [PSBM-44419]
  - ms/kvm/x86: Rename Hyper-V long spin wait hypercall (Andrey Smetanin) [PSBM-44419]
  - tcache/proc/meminfo: add tcache pages to MemAvailable (Vladimir Davydov)
  - ve: move ve-related checks to separated function from ve_can_attach() (Stanislav Kinsburskiy) [PSBM-44143]
  - ve: move task-related checks to separated function from ve_can_attach() (Stanislav Kinsburskiy) [PSBM-44143]
  - ve: remove is_locked check from ve_can_attach() (Stanislav Kinsburskiy)
  - tcache: improve reclaim fairness (Vladimir Davydov) [PSBM-41239]
  - tcache: store tcache_node in page->mapping instead of page->private (Vladimir Davydov) [PSBM-41239]
  - ms/mm/balloon_compaction: redesign ballooned pages management (Konstantin Khlebnikov) [PSBM-41239]
  - mm: vmscan: don't drop global slab caches at once if root cgroup is empty (Vladimir Davydov) [PSBM-41239]
  - ve/aio: Enumerate ioctl numbers right (Kirill Tkhai) [PSBM-42488]
  - ms/KVM: x86: set TMR when the interrupt is accepted (Paolo Bonzini) [PSBM-41387]
  - ve/fs/sync: don't skip dirty metadata on filtered sync (Andrey Ryabinin) [PSBM-39583 PSBM-44125]
  - ve: Add a handle to checkpoint/restore AIO context (Kirill Tkhai) [PSBM-42488 PSBM-41425]
  - tcache/tswap: enable by default (Vladimir Davydov)
  - ms/fs/pnode.c: treat zero mnt_group_id-s as unequal (Maxim Patlasov) [PSBM-43834]
  - kvm: do not SetPageDirty for file mappings (Maxim Patlasov) [PSBM-43243]
  - ms/kvm/x86: Hyper-V SynIC timers tracepoints (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V SynIC tracepoints (Andrey Smetanin)
  - ms/kvm/x86: Update SynIC timers on guest entry only (Andrey Smetanin)
  - ms/kvm/x86: Skip SynIC vector check for QEMU side (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V fix SynIC timer disabling condition (Andrey Smetanin)
  - ms/kvm/x86: Reorg stimer_expiration() to better control timer restart (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Andrey Smetanin)
  - ms/kvm/x86: Drop stimer_stop() function (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V timers fix incorrect logical operation (Andrey Smetanin)
  - ms/kvm/x86: Remove Hyper-V SynIC timer stopping (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V SynIC timers (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V internal helper to read MSR HV_X64_MSR_TIME_REF_COUNT (Andrey Smetanin)
  - ms/kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Andrey Smetanin)
  - ms/kvm/x86: Rearrange func's declarations inside Hyper-V header (Andrey Smetanin)
  - ms/drivers/hv: Move struct hv_timer_message_payload into UAPI Hyper-V x86 header (Andrey Smetanin)
  - ms/drivers/hv: Move struct hv_message into UAPI Hyper-V x86 header (Andrey Smetanin)
  - ms/drivers/hv: Move HV_SYNIC_STIMER_COUNT into Hyper-V UAPI x86 header (Andrey Smetanin)
  - ms/drivers/hv: replace enum hv_message_type by u32 (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V kvm exit (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V synthetic interrupt controller (Andrey Smetanin)
  - ms/kvm/x86: per-vcpu apicv deactivation support (Andrey Smetanin)
  - ms/kvm/irqchip: kvm_arch_irq_routing_update renaming split (Andrey Smetanin)
  - ms/drivers/hv: share Hyper-V SynIC constants with userspace (Andrey Smetanin)
  - ms/kvm/irqchip: allow only multiple irqchip routes per GSI (Andrey Smetanin)
  - ms/kvm/eventfd: add arch-specific set_irq (Andrey Smetanin)
  - ms/kvm/eventfd: factor out kvm_notify_acked_gsi() (Andrey Smetanin)
  - ms/kvm/eventfd: avoid loop inside irqfd_update() (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V HV_X64_MSR_VP_RUNTIME support (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V HV_X64_MSR_VP_INDEX export for QEMU. (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V HV_X64_MSR_RESET msr (Andrey Smetanin)
  - kvm/x86: Align logging messages to MS one (Andrey Smetanin)
  - kvm/x86: get(set)_msr_hyperv() -> kvm_hv_get(set)_msr() rename (Andrey Smetanin)
  - kvm/x86: Coding style fixes (Andrey Smetanin) [PSBM-32435]
  - ve/ext4: treat panic_on_errors as remount-ro_on_errors in CTs (Dmitry Monakhov)
  - vziolimit/fs/ext4: allow to throttle due to iolimit while reading directory blocks (Vladimir Davydov)
  - cbt: fix blk_cbt_set endless loop (Dmitry Monakhov) [PSBM-43936]
  - ub: zap unused task_beancounter fields (Vladimir Davydov)
  - ve: Use @real_start_timespec in uptime_proc_show (Cyrill Gorcunov) [PSBM-41406]
  - ve: Add interface for @start_timespec and @real_start_timespec adjustmen (Cyrill Gorcunov) [PSBM-41311 PSBM-41406]
  - ms/ipv6: don't disable interface if last ipv6 address is removed (Kirill Tkhai) [PSBM-43870]
  - ve/fs/sync: per containter sync and syncfs (Andrey Ryabinin) [PSBM-39583]
  - ve/fs/writeback: filter per-container inodes earlier (Andrey Ryabinin) [PSBM-39583]
  - ms/KVM: x86: Reload pit counters for all channels when restoring state (Andrew Honig)
  - ms/KVM: x86: removing unused variable (Saurabh Sengar)
  - ms/keys: Fix race between read and revoke (Vasily Averin) [PSBM-43800]
  - ve/coredump: virtualize kernel.core_pattern sysctl (Pavel Tikhomirov) [PSBM-43596]
  - ve/sysctl: add macro sysctl_virtual to unify sysctl's virtualization (Pavel Tikhomirov) [PSBM-43596]
  - config.OpenVZ: disable RH_KABI_SIZE_ALIGN_CHECKS (Andrey Ryabinin)
  - ve/cpuset: revert changes allowing to attach to empty cpusets (Vladimir Davydov) [PSBM-34089 PSBM-42087]
  - ms/tty: Invert tty_lock/ldisc_sem lock order (Cyrill Gorcunov) [PSBM-43454]
  - tty: Fix task hang if one of peers is sitting in read (Cyrill Gorcunov) [PSBM-43454]
  - oom: resurrect berserker mode (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-17930]
  - oom: pass points and overdraft to oom_kill_process (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: rework logic behind memory.oom_guarantee (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-37915]
  - oom: drop OOM_SCAN_ABORT (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: introduce oom timeout (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-38581]
  - oom: rework locking design (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - ve/nfsd: do not print nfscld warning in a container (Stanislav Kinsburskiy) [PSBM-43468]
  - ve/nfsd: disable legacy recovery tracking for containers (Stanislav Kinsburskiy) [PSBM-43468]
  - ve/tty: Revert custom virtualization (Cyrill Gorcunov) [PSBM-41804]
  - ve/kernel: allow to increase rlimit from inside container (Vladimir Davydov) [PSBM-43410]
  - ve/fs/writeback: use redirty_tail to skip inodes (Andrey Ryabinin) [PSBM-43375]
  - ve/net/dummy: enable support in a container (Vasily Averin) [PSBM-43329]
  - ms/unix: avoid use-after-free in ep_remove_wait_queue (Rainer Weikusat)
  - ve/net_core: fix build error with owner_ve->ve_netns (Dmitry Safonov)
  - ve/binfmt_misc: fix compilation outside CONFIG_BINFMT_MISC (Dmitry Safonov)
  - rh/sysfs/blk-sysfs: fix uninitialized var usage (Dmitry Safonov)
  - ve/kmod: fix build without CONFIG_VE_IPTABLES (Dmitry Safonov)
  - ve/fs: Print a message if a VE reaches its limit on mounts (Evgenii Shatokhin) [PSBM-42825]
  - Revert "mm: vmscan: do not scan lruvec if it seems to be unreclaimable" (Vladimir Davydov) [PSBM-35155]
  - memcg: never fail kmem allocations (Vladimir Davydov)
  - ms/autofs: show pipe inode in mount options (Stanislav Kinsburskiy) [PSBM-41217 PSBM-41961]
  - ub: drop unused UB_DIRTY_EXCEEDED (Andrey Ryabinin)
  - ve/mm/page-writeback: Introduce per-CT dirty memory limit (Andrey Ryabinin) [PSBM-33841]
  - ve/fs/writeback: per-CT fs writeback (Andrey Ryabinin) [PSBM-33841]
  - ve/xattr: allow set/remove security.capability inside CT (Pavel Tikhomirov) [PSBM-43294 PSBM-43267 OVZ-6657]
  - ms/ixgbe: on recv increment rx.ring->stats.yields (Pavel Tikhomirov)
  - Revert "ve/cgroup: add VE mark to each user cgroup name on mount" (Konstantin Khorenko) [PSBM-43169]
  - ve/lib/nlattr: use ve_pr_warn_ratelimited instead pr_warn_ratelimited (Dmitry Safonov) [PSBM-42313]
  - ve_prink: introduce ve_pr_<level>_ratelimited (Dmitry Safonov) [PSBM-42313]
  - ve/fs: Use comparison of signed integers in ve_mount_allowed() (Evgenii Shatokhin) [PSBM-42825]
  - ms/sched/core: Fix unserialized r-m-w scribbling stuff (Kirill Tkhai)
  - ve/sched/core: Set task_struct::woken_while_running under rq lock (Kirill Tkhai)
  - ve/cgroup: Add pseudosuper state for restore sake (Cyrill Gorcunov) [PSBM-34299 PSBM-43169 PSBM-42573]
  - ve/kvm: Allow scheduler throttling in __vcpu_run() (Kirill Tkhai) [PSBM-42358]
  - ve/sched: introduce cond_resched_may_throttle (Kirill Tkhai) [PSBM-18888 PSBM-42358]
  - ve/kmod: list of allowed to autoload in CT modules (Dmitry Safonov) [PSBM-41216]
  - ve/cgroup: add VE mark to each user cgroup name on mount (Stanislav Kinsburskiy) [PSBM-42573]
  - rh/mm: PTE isn't dirty when _PAGE_SOFT_DIRTY bit set (Dmitry Safonov) [PSBM-42094]
  - ms/ovl: fix permission checking for setattr (Cyrill Gorcunov)
  - ploop: rename extent maps management funtions (Alexey V. Vissarionov)
  - ve/userns: allow unprivileged creation of the mount namespace. (Andrey Ryabinin) [OVZ-6646 PSBM-42760]
  - ve/userns: don't TAINT kernel with 'tech preview' (Andrey Ryabinin)
  - ve/fs: drop useless d_root_check() (Andrey Ryabinin) [PSBM-41919]
  - ms/ixgbe: Refactor busy poll socket code to address multiple issues (Pavel Tikhomirov) [PSBM-40330]
  - tcache: fix use-after-free in tcache_invalidate_node_pages() (Andrey Ryabinin) [PSBM-42104]
  - ms/ipv6/addrlabel: fix ip6addrlbl_get() (Andrey Ryabinin) [PSBM-42457]
  - ve/vtty: Don't close unread master peer if slave is nonzero (Cyrill Gorcunov) [PSBM-41985 PSBM-41672]
  - ve/ptrace: don't change the upstream logic which affects criu (Andrew Vagin) [PSBM-42216]
  - ms/ses: fix additional element traversal bug (James Bottomley) [PSBM-40330]
  - ve/vmscan: do not throttle kthreads due to too_many_isolated (Vladimir Davydov) [PSBM-41410]
  - ploop: disable WRITE SAME for io_kaio (Maxim Patlasov) [PSBM-41965]
  - ve/fs: add per-VE limit of mount points (Evgenii Shatokhin) [PSBM-34438]
  - kernel: check the JOBCTL_TRAPPING_BIT bit correctly (Andrew Vagin) [PSBM-42052]
  - ms/xfs_qm: lost hunk from "ms/list_lru: add helpers to isolate items" (Vladimir Davydov) [PSBM-42319]
  - ms/xfs_qm: lost hunk from "ms/list_lru: introduce list_lru_shrink_{count,walk}" (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: fix dquot isolation hang (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: convert dquot cache lru to list_lru fix (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: convert dquot cache lru to list_lru (Vladimir Davydov) [PSBM-42319]
  - ext4: ext4_split_extent_at should not cache tail extent (Dmitry Monakhov) [PSBM-40580]
  - ms/vhost/net: extend device allocation to vmalloc (Michael S. Tsirkin) [PSBM-42199]
  - ms/rmap: rmap_walk: move VM_BUG_ON to rmap_walk_file (Vladimir Davydov) [PSBM-42214]
  - mm: page_idle: look up page anon_vma carefully when checking references (Vladimir Davydov) [PSBM-42015 PSBM-42015]
  - ms/mm/rmap: extend rmap_walk_xxx() to cope with different cases (Vladimir Davydov) [PSBM-42015]
  - ms/mm/rmap: make rmap_walk to get the rmap_walk_control argument (Vladimir Davydov) [PSBM-42015]
  - ms/mm/rmap: factor lock function out of rmap_walk_anon() (Vladimir Davydov) [PSBM-42015]
  - ext4: fix race aio-dio vs freeze_fs (Dmitry Monakhov) [PSBM-39352]
  - ve/l2tp: Drop VE_FEATURE_PPP feature test (Cyrill Gorcunov)
  - ve/vtty: Register devices in sysfs (Cyrill Gorcunov) [PSBM-41628 PSBM-41804]
  - bc/mm: mmap_region: uncharge UB_LOCKEDPAGES if vma cannot be locked (Vladimir Davydov) [PSBM-39435]
  - ve/fanotify: Use ve-capable instead of plain capable test (Cyrill Gorcunov) [PSBM-41409]
  - tswap: exert equal pressure on tmem and lru pages (Vladimir Davydov)
  - tcache: exert equal pressure on tmem and lru pages (Vladimir Davydov)
  - vmscan: fix slab vs lru balance (Vladimir Davydov)
  - rh7/user_ns: enable user namespaces by default (Konstantin Khorenko)
  - ve/tun: expose "owner", "group" and "tun_flags" attributes in container (Stanislav Kinsburskiy) [PSBM-39726]
  - x86: "pages zeroing on free" option introduced (Stanislav Kinsburskiy) [PSBM-33071]
  - ms/net: avoid reference counter overflows on fib_rules in multicast forwarding (Hannes Frederic Sowa) [PSBM-41453]
  - kernel/freezer: don't freeze stopped & about to be ptraced task (Andrey Ryabinin) [PSBM-40683]
  - ms/ipmr,ip6mr: call ip6mr_free_table() on failure path (WANG Cong)
  - ve/memcg: enable kmem accounting for all cgroups (Vladimir Davydov)
  - ms/netfilter: Restore xt_connlimit version 0 (Kirill Tkhai) [PSBM-40186]
  - ms/cfq-iosched: fix oom cfq_queue ref leak in cfq_set_request() (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: fix async oom queue handling (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: simplify control flow in cfq_get_queue() (Tejun Heo) [PSBM-41334]
  - ms/fsnotify: fix check in inotify fdinfo printing (Cyrill Gorcunov)
  - ms/vmscan: do not force-scan file lru if its absolute size is small (Vladimir Davydov)
  - ve/mm: allow container's root to ignore mlock limit (Andrey Ryabinin) [PSBM-41405]
  - ve/vtty: n_tty -- Allow write on sole slave vtty peer (Cyrill Gorcunov) [PSBM-40740]
  - config.OpenVZ: enable netfilter module xt_match_wdog_tmo (Konstantin Khorenko) [PSBM-40736]
  - ms/kasan: fix kmemleak false-positive in kasan_module_alloc() (Andrey Ryabinin) [PSBM-41328]
  - ms/include/linux/kmemleak.h: needs slab.h (Andrew Morton)
  - ms/epoll: Make fdinfo to always success (Cyrill Gorcunov) [PSBM-41386]
  - tcache: account reclaimed pages to scan_control->nr_reclaimed (Vladimir Davydov)
  - signal/ve: allow to send signal from another ve namespace (Andrey Ryabinin) [PSBM-40896 PSBM-17903]
  - config.OpenVZ: enable fencing watchdog for HA cluster support (Konstantin Khorenko) [PSBM-40736]
  - fence-watchdog: Port: diff-fence-watchdog-netfilter-add-aliases-for-module-wdog_tmo (Pavel Tikhomirov)
  - fence-watchdog: Port: diff-fence-watchdog-arptables-add-ability-to-filter-by-watchdog-timeout-v5 (Pavel Tikhomirov) [PSBM-23253]
  - fence-watchdog: Port: diff-fence-watchdog-add-wdog_tmo-match (Pavel Tikhomirov) [PSBM-23253]
  - fence-watchdog: Port: diff-fence-watchdog-add-netfilter-action (Pavel Tikhomirov) [PSBM-23253 PSBM-23253]
  - fence-watchdog: Port: diff-fence-watchdog-schedule-work-in-case-of-halt-action (Pavel Tikhomirov) [PSBM-20034]
  - fence-watchdog: Port: diff-fence-watchdog-rename-action-to-halt (Pavel Tikhomirov) [PSBM-18395]
  - fence-watchdog: Port: diff-fence-watchdog-write-log-message-when-timer-elapses (Pavel Tikhomirov) [PSBM-18312 PSBM-18312]
  - fence-watchdog: Port: diff-fence-watchdog-add-support-of-crash (Pavel Tikhomirov) [PSBM-13631 PSBM-13631]
  - fence-watchdog: Port: diff-fence-watchdog-introduce-fencing-watchdog-for-HA-cluster-3 (Pavel Tikhomirov) [PSBM-40736 PSBM-13631 PSBM-13631]
  - ms/x86/mm, kasan: Silence KASAN warnings in get_wchan() (Andrey Ryabinin)
  - ms/compiler, atomics, kasan: Provide READ_ONCE_NOCHECK() (Andrey Ryabinin)
  - ms/x86/process: Unify 32bit and 64bit implementations of get_wchan() (Thomas Gleixner)
  - ms/x86/process: Add proper bound checks in 64bit get_wchan() (Thomas Gleixner)
  - ms/x86/asm/entry: Create and use a 'TOP_OF_KERNEL_STACK_PADDING' macro (Andrey Ryabinin)
  - Makefile: properly generate KERNELRELEASE value (Konstantin Khorenko) [PSBM-34957]
  - config.OpenVZ: enable CONFIG_LOCALVERSION_AUTO (Konstantin Khorenko) [PSBM-34957]
  - ve/vznetstat: fix RCU-protected "info_V{4, 6}" pointers initialization (Stanislav Kinsburskiy)
  - ve/vtty: Don't zap termios fields on slave peer (Cyrill Gorcunov) [PSBM-41057]
  - ms/pvpanic: Set high notifier priority (Takashi Iwai) [PSBM-41189]
  - fuse: allow to mount fuse filesystems inside CT (Andrey Ryabinin) [PSBM-41075]
  - ve: introduce ve_init_user_ns() helper (Andrey Ryabinin) [PSBM-41075]
  - ve/net: fix userspace if_tun.h compilation (Vladimir Sementsov-Ogievskiy) [PSBM-40629]
  - ve/autofs: allow /dev/autofs ioctl's in a Container (Stanislav Kinsburskiy) [PSBM-26968]
  - ve/acct: Allow process accounting in containers (Evgenii Shatokhin) [PSBM-40587]
  - sched: disable dumping cfs info on sysrq trigger (Vladimir Davydov) [PSBM-41140]
  - ve/net: fix tap ve shaping (Vladimir Sementsov-Ogievskiy) [PSBM-40888 PSBM-40888]
  - ve/mm,oom: print information about ve of killed task (Andrey Ryabinin) [PSBM-40610]
  - ms/mm: introduce idle page tracking (Vladimir Davydov) [PSBM-32460]
  - ms/mm/mm_init.c: make creation of the mm_kobj happen earlier than device_initcall (Vladimir Davydov) [PSBM-32460]
  - ms/sysfs: create bin_attributes under the requested group (Vladimir Davydov) [PSBM-32460]
  - ms/mmu-notifier: add clear_young callback (Vladimir Davydov) [PSBM-32460]
  - ms/proc: add kpagecgroup file (Vladimir Davydov) [PSBM-32460]
  - ms/memcg: add page_cgroup_ino helper (Vladimir Davydov) [PSBM-32460]
  - ve/cgroups: Allow to attach a single threaded task only into a container (Cyrill Gorcunov)
  - ms/seccomp: add ptrace options for suspend/resume (Andrew Vagin) [PSBM-39517]
  - x86/vdso: Fix build failure with GCC5 (Andrey Ryabinin)
  - ve/fs/namei: fix capabilities check in sys_renameat2 () to support Containers (Stanislav Kinsburskiy)
  - ve/fs/namei: check containers capabilities in may_linkat() (Stanislav Kinsburskiy) [PSBM-40567]
  - ve/nf_conntrack: expose "nf_conntrack_events*" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_acct" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: export nf_conntrack_hide_sysctl() helper (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_max" in containers (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: allow expose of priviledged sysctl inside containers (Stanislav Kinsburskiy) [PSBM-40044]
  - cbt/blkdev.h: fix compilation in case CONFIG_BLK_DEV_CBT is not set (Stanislav Kinsburskiy)
  - ms/veth: add netpoll support (Andrew Vagin) [PSBM-34959]
  - ms/fsnotify: Make fdinfo to always success (Cyrill Gorcunov) [PSBM-40337]
  - ve/xfs: add missing ub_io_account_dirty in set_page_dirty (Vladimir Davydov)
  - arch: mask cpuid 0x00000007 features in /proc/cpuinfo (Vladimir Davydov) [PSBM-30880 PSBM-33638]
  - arch/x86: assure cpuinfo inside ct is subset of host's one (Vladimir Davydov) [PSBM-30688 PSBM-33638]
  - arch/x86: disable cpuid faulting on reboot and cpu offline (Vladimir Davydov) [PSBM-30548 PSBM-33638]
  - arch/x86: only enable cpuid faulting for containers (Vladimir Davydov) [PSBM-30516 PSBM-33638]
  - arch/x86: report cpuid:0000000d_1 in cpuinfo (Vladimir Davydov) [PSBM-30577 PSBM-33638]
  - arch/x86: check if cpuid level exists while reporting cpuinfo (Vladimir Davydov) [PSBM-33638]
  - arch/x86: take into account cpuid override while reporting cpuinfo (Vladimir Davydov) [PSBM-28682 PSBM-33638]
  - arch/x86: introduce cpuid override (Vladimir Davydov) [PSBM-28682 PSBM-33638]
  - cpuinfo: obtain cpuflags for the current cpu too (Vladimir Davydov) [PSBM-33638]
  - cpuinfo: zero all bits in cap mask (Vladimir Davydov) [PSBM-33638]
  - ubc: proc show stats in ve user ns (Pavel Tikhomirov) [PSBM-40433]
  - ve/proc: Use ve_capable() in oom_score_adj_write() (Kirill Tkhai) [PSBM-40359]
  - venet: remove per-net hooks and related code (Stanislav Kinsburskiy) [PSBM-23441 PSBM-23441]
  - venet: add newlink and dellink callbacks to rtnetlink operations (Stanislav Kinsburskiy) [PSBM-23441 PSBM-23441]
  - venet: fix false positive return code in case of error in venet_init() (Stanislav Kinsburskiy) [PSBM-23441]
  - memcg: allow to disable cleancache per memcg (Vladimir Davydov) [PSBM-34163]
  - ve/device_cgroup: fake allowing all devices for docker inside VZCT (Pavel Tikhomirov) [PSBM-34529 PSBM-38691]
  - ms/prctl: avoid using mmap_sem for exe_file serialization (Davidlohr Bueso) [PSBM-39834]
  - ms/prctl: more prctl(PR_SET_MM_*) checks (Alexey Dobriyan) [PSBM-39834]
  - ms/mm: use may_adjust_brk helper (Cyrill Gorcunov) [PSBM-39834]
  - ve/fs: allow to remount from ve user ns (Pavel Tikhomirov)
  - ve/quota: allow to manage quota in top CT user ns (Konstantin Khorenko) [PSBM-40281]
  - ve/tun: Make config to dep on TUN (Cyrill Gorcunov)
  - ve/vtty: Make indices to match pcs6 scheme (Cyrill Gorcunov) [PSBM-40088]
  - config.OpenVZ: enable TAP accounting (Konstantin Khorenko) [PSBM-27713]
  - ve/net: introduce TAP accounting (Vladimir Sementsov-Ogievskiy) [PSBM-27713]
  - memcg: add lock for protecting memcg->oom_notify list (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - memcg: add mem_cgroup_get/put helpers (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - ms/mm: oom_kill: clean up victim marking and exiting interfaces (Vladimir Davydov) [PSBM-26973]
  - ms/oom: thaw the OOM victim if it is frozen (Vladimir Davydov) [PSBM-26973]
  - ms/oom: add helpers for setting and clearing TIF_MEMDIE (Vladimir Davydov) [PSBM-26973]
  - ms/oom: make sure that TIF_MEMDIE is set under task_lock (Vladimir Davydov) [PSBM-26973]
  - ms/oom: don't count on mm-less current process (Vladimir Davydov) [PSBM-26973]
  - ms/mm, oom: remove unnecessary exit_state check (Vladimir Davydov) [PSBM-26973]
  - ms/make default ->i_fop have ->open() fail with ENXIO (Andrew Vagin) [PSBM-39834]
  - ms/shm: wait for pins to be released when sealing (Andrew Vagin) [PSBM-39834]
  - ms/selftests: add memfd/sealing page-pinning tests (Andrew Vagin) [PSBM-39834]
  - ms/selftests: add memfd_create() + sealing tests (Andrew Vagin) [PSBM-39834]
  - ms/shm: add memfd_create() syscall (Andrew Vagin) [PSBM-39834]
  - ms/shm: add sealing API (Andrew Vagin) [PSBM-39834]
  - ms/mm: allow drivers to prevent new writable mappings (Andrew Vagin) [PSBM-39834]
  - ms/mm: mmap_region: kill correct_wcount/inode, use allow_write_access() (Andrew Vagin) [PSBM-39834]
  - ms/sched: add cond_resched_rcu() helper (Andrew Vagin) [PSBM-39834]
  - ve: Strip unset options in ve.mount_opts (Kirill Tkhai)
  - ms/fuse: break infinite loop in fuse_fill_write_pages() (Maxim Patlasov)
  - ploop: release io_context on ploop_thread() exit (Maxim Patlasov) [PSBM-39956]
  - ms/cfq-iosched: remove @gfp_mask from cfq_find_alloc_queue() (Maxim Patlasov) [PSBM-39956]
  - ve: mark SYSFS and IPGRE features deprecated (Konstantin Khorenko) [PSBM-33687]
  - ms/lockd: create NSM handles per net namespace (Andrey Ryabinin) [PSBM-39721]
  - ploop: do not use fiemap beyond eof (Maxim Patlasov) [PSBM-26762 PSBM-39251]
  - vecalls: fix VZCTL_GET_CPU_STAT uptime_jif scale (Vladimir Davydov) [PSBM-28811]
  - tcache: do not try to create node if we are not going to store page (Vladimir Davydov)
  - ub stat: sync memcg contents with beancounter if required (Stanislav Kinsburskiy)
  - ub stat: commnad check helper introduced (Stanislav Kinsburskiy)
  - ub statd: move header file from include/ to uapi/ (Stanislav Kinsburskiy)
  - ub statd: move struct ub_stat_notify declaration to source (Stanislav Kinsburskiy)
  - ub statd: small optimisations and clean ups (Stanislav Kinsburskiy)
  - ub statd: fix new_notify structure allocation (Stanislav Kinsburskiy)
  - ve/nfsd: Add VE_FEATURE_NFS check during nfsd mount (Kirill Tkhai) [PSBM-33687]
  - ve/nfs,nfsd: Allow to mount fs from initial VE's user_ns (Kirill Tkhai) [PSBM-40047]
  - ve/proc: fix mangling cgroup mount source path in container (Pavel Tikhomirov) [PSBM-34295]
  - ve/tty: Use ve_capable in vhangup syscall (Cyrill Gorcunov) [PSBM-40053]
  - ve: vznetstat and dummy Makefiles altered for Kpatch build (Evgenii Shatokhin) [PSBM-40069]
  - ms/mm/page-writeback.c: fix divide by zero in bdi_dirty_limits() (Maxim Patlasov) [PSBM-40116]
  - ve/sched: Hide steal time from inside CT (Kirill Tkhai) [PSBM-26588 PSBM-23431]
  - ve/fs: don't add MNT_NODEV for ve mounts (Andrew Vagin) [PSBM-40096]
  - ve/devmptfs: Use current_user_ns_initial() in dev_mount() (Kirill Tkhai)
  - ve/fs: Allow to mount ext4 and binfmt_misc under non-root ns (Kirill Tkhai) [PSBM-40100]
  - ve: Implement current_user_ns_initial() helper (Kirill Tkhai)
  - config.OpenVZ.debug: Enable audit subsystem in config" (Konstantin Khorenko) [PSBM-38898]
  - Revert "config.OpenVZ/audit: Disable audit subsystem in config" (Konstantin Khorenko) [PSBM-38898]
  - config.OpenVZ: enable NBD module (Konstantin Khorenko) [PSBM-31858]
  - ms/kvm/x86: add sending hyper-v crash notification to user space (Andrey Smetanin)
  - ms/KVM: Add KVM_EXIT_SYSTEM_EVENT to user space API header (Anup Patel)
  - ms/kvm/x86: added hyper-v crash msrs into kvm hyperv context (Andrey Smetanin)
  - ms/kvm/x86: Move Hyper-V specific fields into new per vm/vcpu Hyper-V structures (Andrey Smetanin)
  - ms/kvm: introduce vcpu_debug = kvm_debug + vcpu context (Andrey Smetanin)
  - ms/kvm/x86: move Hyper-V MSR's/hypercall code into hyperv.c file (Andrey Smetanin)
  - ms/kvm: add hyper-v crash msrs values (Andrey Smetanin)
  - pfcache/ext4: drop pfcache csum on fallocate (Dmitry Monakhov) [PSBM-33644]
  - config.OpenVZ: enable cbt - changed block tracking (Konstantin Khorenko) [PSBM-34156]
  - cbt: introduce changed block tracking (Dmitry Monakhov) [PSBM-34156]
  - ve: rework veid handling (Vladimir Davydov) [PSBM-39338]
  - sched/fair: Optimize is_top_cfs_rq() (Kirill Tkhai) [PSBM-35251]
  - ms/sched/fair: Track cgroup depth (Kirill Tkhai)
  - fuse: virtualize file system (Stanislav Kinsburskiy) [OVZ-6498]
  - RDS: verify the underlying transport exists before creating a connection (Vasily Averin)
  - memcg: do not allow to disable oom from inside a container (Vladimir Davydov)
  - ms/memcg: change oom_info_lock to mutex (Michal Hocko)
  - ms/memcg, oom: lock mem_cgroup_print_oom_info (Michal Hocko)
  - memcg: do not loop in mem_cgroup_reclaim if killed (Vladimir Davydov)
  - kexec, kasan: increase KEXEC_AUTO_RESERVED_SIZE under CONFIG_KASAN=y (Andrey Ryabinin) [PSBM-39339]
  - kasan: introduce single-shot mode and enable it by default (Andrey Ryabinin) [PSBM-39339]
  - kasan: always taint kernel on report. (Andrey Ryabinin) [PSBM-39339]
  - mm, slub, kasan: enable user tracking by default. (Andrey Ryabinin) [PSBM-39339]
  - kasan: update reported bug types for not user nor kernel memory accesses (Andrey Konovalov) [PSBM-39339]
  - ms/freezer: Do not freeze tasks killed by OOM killer (Cong Wang) [PSBM-38758]
  - Revert "ve: caps: ignore setting wrong caps with CAP_SETPCAP" (Konstantin Khorenko) [PSBM-39077]
  - Remove CAP_VE_* from "ve/ns: Port diff-ve-ns-allow-create-new-pid-ipc-and-utc-namespaces" (Andrew Vagin) [PSBM-39077]
  - Revert "ve/proc/ipc: allow mount proc and mqueue inside container" (Andrew Vagin) [PSBM-39077]
  - Remove CAP_VE_* from "Initial patch commit + compilation fixes" (Andrew Vagin) [PSBM-39077]
  - net: remove CAP_VE_NET_ADMIN from "ve/netfilter: Basic ve transformations" (Andrew Vagin) [PSBM-39077]
  - Revert "ve/rtnl: allow move network devices into network namespace in CT" (Andrew Vagin) [PSBM-39077]
  - Revert "ve/net/ioctl: allow change net-device name with CAP_VE_NET_ADMIN" (Andrew Vagin) [PSBM-39077]
  - Revert "ve/net: allow containers create bridges with CAP_VE_NET_ADMIN" (Andrew Vagin) [PSBM-39077]
  - ve: revise permissions to allow mount smth (Andrew Vagin) [PSBM-39077]
  - cred: add ve_capable to check capabilities relative to the current VE (v2) (Andrew Vagin) [PSBM-39077]
  - quota: missing lock in dqcache_shrink_scan() (Niu Yawei)
  - ve/tty: vt -- Implement per VE support for console and terminals (Cyrill Gorcunov) [PSBM-34533 PSBM-34532 PSBM-34107 PSBM-32686 PSBM-32685]
  - arch: x86: charge page tables to memcg/kmem (Vladimir Davydov) [PSBM-33840]
  - gfp: add __get_free_kmem_pages helper (Vladimir Davydov)
  - Revert "mm: account all page tables for mm" (Vladimir Davydov)
  - fs: account anon pipe buffers to memcg/kmem (Vladimir Davydov) [PSBM-39052]
  - vmalloc: account to memcg/kmem (Vladimir Davydov) [PSBM-33839]
  - sched/fair: only update current task boost (Vladimir Davydov)
  - mm: vmscan: do not scan lruvec if it seems to be unreclaimable (Vladimir Davydov) [PSBM-35155]
  - mm: vmscan: fix do_try_to_free_pages() livelock (Lisa Du) [PSBM-35155]
  - mm: vmscan: fix the page state calculation in too_many_isolated (Vinayak Menon) [PSBM-35155]
  - oom: do not dump all tasks info on each oom kill (Vladimir Davydov)
  - oom: zap oom_report_invocation proto (Vladimir Davydov)
  - Revert "ve/mm: ignore oom_score_adj of containerized tasks on global OOM" (Vladimir Davydov)
  - memcg: count all oom kills (Vladimir Davydov)
  - config.OpenVZ: add KASan support for debug kernels (Konstantin Khorenko) [PSBM-39339]
  - ms/x86/kasan: Add message about KASAN being initialized (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Fix boot crash on AMD processors (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Flush TLBs after switching CR3 (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Fix KASAN shadow region page tables (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/init: Clear 'init_level4_pgt' earlier (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: Makefile: shut up warnings if CONFIG_COMPILE_TEST=y (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/mempool.c: kasan: poison mempool elements (Andrey Ryabinin) [PSBM-26429]
  - ms/mm, mempool: poison elements backed by slab allocator (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan, module: move MODULE_ALIGN macro into <linux/moduleloader.h> (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan, module, vmalloc: rework shadow allocation for modules (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: enable instrumentation of global variables (Andrey Ryabinin) [PSBM-26429]
  - ms/module: fix types of device tables aliases (Andrey Ryabinin) [PSBM-26429]
  - ms/kernel: add support for .init_array.* constructors (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: vmalloc: pass additional vm_flags to __vmalloc_node_range() (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: vmalloc: add flag preventing guard hole allocation (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: enable stack instrumentation (Andrey Ryabinin) [PSBM-26429]
  - ms/x86_64: kasan: add interceptors for memset/memmove/memcpy functions (Andrey Ryabinin) [PSBM-26429]
  - ms/lib: add kasan test module (Andrey Ryabinin) [PSBM-26429]
  - ms/kmemleak: disable kasan instrumentation for kmemleak (Andrey Ryabinin) [PSBM-26429]
  - ms/fs: dcache: manually unpoison dname after allocation to shut up kasan's reports (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: add kernel address sanitizer support for slub allocator (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: introduce metadata_access_enable()/metadata_access_disable() (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: share object_err function (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: introduce virt_to_obj function (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: page_alloc: add kasan hooks on alloc and free paths (Andrey Ryabinin) [PSBM-26429]
  - ms/x86_64: add KASan support (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: disable memory hotplug (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: add kernel address sanitizer infrastructure (Andrey Ryabinin) [PSBM-26429]
  - ms/compiler: introduce __alias(symbol) shortcut (Andrey Ryabinin) [PSBM-26429]
  - ms/MODULE_DEVICE_TABLE: fix some callsites (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: SLUB_DEBUG=n: use the same alloc/free hooks as for SLUB_DEBUG=y (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: move slab related stuff from util.c to slab_common.c (Andrey Ryabinin) [PSBM-26429]
  - ms/MIPS: Use NUMA_NO_NODE instead of -1 for node ID. (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/arch: use NUMA_NO_NODE (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/vmalloc: use wrapper function get_vm_area_size to caculate size of vm area (Andrey Ryabinin) [PSBM-26429]
  - ms/lib/idr.c: fix out-of-bounds pointer dereference (Andrey Ryabinin) [PSBM-26429]
  - ms/sched/numa: Fix initialization of sched_domain_topology for NUMA (Andrey Ryabinin) [PSBM-26429]
  - ms/compiler-gcc: integrate the various compiler-gcc[345].h files (Andrey Ryabinin) [PSBM-26429]
  - ms/kernel: use the gnu89 standard explicitly (Andrey Ryabinin) [PSBM-26429]
  - ploop: use GFP_NOIO in ploop_make_request (Vladimir Davydov) [PSBM-38842]
  - ub: rename private_data2 to iolimit (Vladimir Davydov)
  - ub: zap ub_dirty_pages (Vladimir Davydov)
  - ub: fix typo: s/ub_dirty_radio/ub_dirty_ratio (Vladimir Davydov)
  - ub: zap ub_tmpfs_respages (Vladimir Davydov)
  - ub: drop swapin/swapout stats (Vladimir Davydov) [PSBM-39327]
  - ub: zap unused socket accounting bits (Vladimir Davydov)
  - ve/writeback: revert ub dirty limit related stuff (Vladimir Davydov) [PSBM-33841]
  - Revert diff-writeback-throttle-writer-when-local-BDI-threshold-is-hit bits (Vladimir Davydov) [PSBM-39167]
  - ms/crypto/ghash-intel: specify context size for ghash async algorithm (Andrey Ryabinin) [PSBM-38669]
  - net: udpv6: release memcg on destroy (Vladimir Davydov) [PSBM-39084]
  - ve/fs: allow to mount devtmpfs in a non-root userns (Andrew Vagin) [PSBM-39077]
  - ve/sysfs: propagate access to all sub-directories hierarchically (Pavel Tikhomirov) [PSBM-34523]
  - ve/fs/inotify: do not impose limit on the number of instances by default (Vladimir Davydov) [PSBM-39048]
  - ve/cgroup: do not virtualize output of cgroup_path (Vladimir Davydov) [PSBM-34852]
  - ve/kmod: allow to autoload nf_log_ipv[46] (Vladimir Davydov) [PSBM-38573]
  - ve/bridge: Revert diff-ve-net-bridge-fix-deliver-vs-close-seq (Vladimir Davydov) [PSBM-12955 PSBM-38924]
  - ve/sched: Fix double put_prev_task_fair() because of trigger_cpulimit_balance() (Kirill Tkhai) [PSBM-35082]
  - ms/sched: Fix schedule_tail() to disable preemption (Kirill Tkhai)
  - mmap: call mmap prep only for regular files (Vladimir Davydov) [PSBM-23133 PSBM-25031]
  - ve/cgroup: fix mangle root in CT (Pavel Tikhomirov) [PSBM-38634]
  - pfcache/ext4: fix automatic csum calculation (Dmitry Monakhov) [PSBM-23774 PSBM-39233]
  - ve/fs/aio: aio_nr & aio_max_nr variables virtualization (Andrey Ryabinin) [PSBM-29017]
  - ve/sysctl: Introduce proc_doulongvec_minmax_virtual() (Andrey Ryabinin) [PSBM-29017]
  - ms/mm/vmscan: Do not wait for page writeback for GFP_NOFS allocations (Michal Hocko)
  - config.OpenVZ: show Odin's logo on boot (Konstantin Khorenko) [PSBM-34430]
  - ve/video/logo: show Odin's logo on boot (Andrey Ryabinin) [PSBM-34430]
  - ve/kmod: fix out-of-bounds access in call_modprobe() (Andrey Ryabinin) [PSBM-38666]
  - ms/mm: memcontrol: reclaim at least once for __GFP_NORETRY (Johannes Weiner)
  - ve/tty: vt -- Fix nil dereference due to race (Cyrill Gorcunov) [PSBM-37929]
  - cgroup: remove now unused css_depth() (Tejun Heo)
  - ploop: fix race on prealloc request (Maxim Patlasov) [PSBM-35095]
  - ve/net: Fix vlan NETIF_F_VIRTUAL feature initialization (Kirill Tkhai) [PSBM-35266]
  - ms/mm/vmscan: never isolate more pages than necessary (Vladimir Davydov) [PSBM-35275]
  - ve/radix-tree: do not account radix_tree_nodes to memcg (Vladimir Davydov) [PSBM-35205]
  - memcg: fix swap_max calculation for nested cgroups (Vladimir Davydov)
  - ve/pty: create ptmx device per ve namespace (Vladimir Davydov)
  - Revert "pty: split Unix98 init routines" (Vladimir Davydov)
  - Revert "ve/pty: containerize Unix98 driver" (Vladimir Davydov)
  - Revert "ve/pty: containerize Unix98 pty drivers" (Vladimir Davydov)
  - ve/binfmt_misc: destroy all nodes on ve stop (Vladimir Davydov) [PSBM-39154]
  - ve/binfmt_misc: do not use s_ns (Vladimir Davydov) [PSBM-39154]
  - ve/binfmt_misc: do not use sb->s_fs_info (Vladimir Davydov) [PSBM-39154]
  - Revert "nfsd/sunrpc/mqueue: use sb->s_ns instead of data in fill_super" (Vladimir Davydov) [PSBM-39154]
  - Revert "ve/sunrpc: use correct pointer to net_namespace in auth_gss.c" (Vladimir Davydov) [PSBM-39154]
  - Revert "VE/VFS: use sb->s_ns member to store namespace for mount_ns() calls" (Vladimir Davydov) [PSBM-39154]
  - ve/devtmpfs: lightweight virtualization (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "devtmpfs: per-VE mounts introduced" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "fs: add data pointer to mount_ns()" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "devtmpfs: containerize it with new obj ns operation" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "ve/devtmpfs: pass proper options string" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "ve/devtmpfs: Create required devices on container startup" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - ms/cgroup: switch to new percpu_ref API (Vladimir Davydov)
  - ms/cgroup: use percpu refcnt for cgroup_subsys_states (Vladimir Davydov) [PSBM-34174]
  - ms/cgroup: split cgroup destruction into two steps (Vladimir Davydov) [PSBM-34174]
  - ms/cgroup: reorder the operations in cgroup_destroy_locked() (Vladimir Davydov) [PSBM-34174]
  - ve/vznetstat: Fix potential exit race (Cyrill Gorcunov) [PSBM-35178]
  - ms/memcg: issue memory.high reclaim after refilling percpu stock (Vladimir Davydov)
  - ploop: dio_fastmap() must refresh bvec_merge_data (Maxim Patlasov)
  - ve/devpts: Assign containers @devpts_sb on first mount (Cyrill Gorcunov) [PSBM-34931]
  - ve/devpts: Revert 2c27d20125f5 (Cyrill Gorcunov) [PSBM-34931]
  - ve/net: Add VE_NF_CONNTRACK check in resolve_normal_ct() (Kirill Tkhai) [PSBM-35154]
  - ve: Add a ability to show ve.mount_opts (Kirill Tkhai) [PSBM-34291 PSBM-34291]
  - net/sched: restore "mpu xxx" handling (Kirill Tkhai) [PSBM-34874]
  - ve/vznetstat: Don't destroy statistics until explicitly asked (Cyrill Gorcunov) [PSBM-35178]
  - ve/vznetstat: Move VE networks statistics allocation into a common place (Cyrill Gorcunov) [PSBM-35011]
  - config.OpenVZ: limit number of legacy ptys (Konstantin Khorenko) [PSBM-34741]
  - ms/net/drivers: missing rtnl_unlock in igb_sriov_reinit() (Vasily Averin)
  - ve/drivers: Do not forget to release mismatched device found (Cyrill Gorcunov) [PSBM-34777]
  - vznetstat: Make sure the statistics is allocated for VE (Cyrill Gorcunov) [PSBM-34837]
  - tcache: allow to allocate highmem pages (Vladimir Davydov)
  - tcache: do not populate on global reclaim (Vladimir Davydov)
  - tcache: invalidate page on unsuccessful put (Vladimir Davydov)
  - tswap: do not populate on global reclaim (Vladimir Davydov) [PSBM-34876]
  - ve/net: Exclude foreign CT sockets from /proc/net/tcp{,6} (Kirill Tkhai) [PSBM-34875]
  - ve/block: Show CT allowed partitions in /proc/partitions (Kirill Tkhai) [PSBM-34805]
  - ve/net: Add ipt_mask checks into ip6table_nat (Kirill Tkhai) [PSBM-34748]
  - ms/netlabel: fix the netlbl_catmap_setlong() dummy function (Paul Moore)
  - ve/ipset: prohibit ipset from the inside CT (Kirill Tkhai) [PSBM-27793 PSBM-27792]
  - ve/net: netfilter: clear xt_table on net exit (Vladimir Davydov) [PSBM-34657]
  - ext4: ext4_ext_drop_refs ignode null path (Dmitry Monakhov)
  - ve/sysfs: do not inherit ve permissions from parent (Vladimir Davydov) [PSBM-34682]
  - tcache: teach tcache_get_node() to handle cleancache_get_page/cleancache_invalidate_inode races (Vladimir Davydov) [PSBM-34620]
  - ve/tty: call device_destroy_namespace only for containerized drivers (Andrew Vagin) [PSBM-33971]
  - ve/proc/ipc: allow mount proc and mqueue inside container (Pavel Tikhomirov) [PSBM-33304 PSBM-34523]
  - ve/rtnl: allow move network devices into network namespace in CT (Pavel Tikhomirov) [PSBM-33304 PSBM-34523]
  - ve/vfs: allow mount/umount, pivot_root with CAP_VE_SYS_ADMIN (Pavel Tikhomirov) [PSBM-33304 PSBM-34523]
  - ve/veth: fix skb leak in veth_xmit (Vladimir Davydov)
  - ve: cgroup: initialize odirect_enable, features and _randomize_va_space (Pavel Tikhomirov) [PSBM-34286 PSBM-34285]
  - ve/iptables: fix mask initialization and changing (Pavel Tikhomirov) [PSBM-34286 PSBM-34285]
  - ve: initialize fsync_enable also for non ve0 environment (Pavel Tikhomirov) [PSBM-34286 PSBM-34285 PSBM-34286]
  - ve: remove sysctl_fsync_enable and use ve_fsync_behavior instead (Pavel Tikhomirov) [PSBM-34286 PSBM-34285]
  - ve: zap ve_allow_kthreads (Vladimir Davydov)
  - ve: zap ve_glob_meminfo (Vladimir Davydov)
  - ms/netfilter: ipt_CLUSTERIP: use proper net namespace to operate CLUSTERIP (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: create proc entry under proper ipt_CLUSTERIP directory (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: add parameter net in clusterip_config_find_get (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: make clusterip_lock per net namespace (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: make clusterip_list per net namespace (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: make proc directory per net namespace (Gao feng)
  - ub: remove sock acct related resources from cgroup params (Vladimir Davydov)
  - ve/kernel: drop broken audit virtualization (Vladimir Davydov)
  - ve: Use ve_name() in devperms ioctl (Kirill Tkhai) [PSBM-34497]
  - memcg/ub: fix limit > RESOURCE_MAX case (Vladimir Davydov)
  - net/packet: cleanup packet_sk_charge (Vladimir Davydov)
  - memcg: disarm memcg_socket_limit_enabled key per each active udp proto (Vladimir Davydov)
  - memcg: fix a type in memcg_charge_kmem_nofail (Vladimir Davydov)
  - ve/caps/compilation: typo fix (Konstantin Khorenko)
  - ve/vt: Drop debug vars from console code (Cyrill Gorcunov)
  - ve/tty: vt -- Add dummy stubs (Cyrill Gorcunov) [PSBM-34324]
  - ve: caps: ignore setting wrong caps with CAP_SETPCAP (Pavel Tikhomirov) [PSBM-33693]
  - ploop: fix processing sync bios (Maxim Patlasov) [PSBM-33630]
  - ms/ext4: fix lazytime optimization (Dmitry Monakhov)
  - ms/fs: add dirtytime_expire_seconds sysctl (Dmitry Monakhov)
  - ms/fs: make sure the timestamps for lazytime inodes eventually get written (Dmitry Monakhov)
  - ms/ext4: add optimization for the lazytime mount option (Dmitry Monakhov)
  - ms/vfs: add find_inode_nowait() function (Dmitry Monakhov)
  - ms/vfs: add support for a lazytime mount option (Dmitry Monakhov) [PSBM-20411]
  - jbd2: raid amnesia protection for the journal (Dmitry Monakhov) [PSBM-15484]
  - ve/fs: check container odirect and fsync settings in __dentry_open (Dmitry Monakhov) [PSBM-17157]
  - venet: forbid assigning veip to ve w/o id (Vladimir Davydov) [PSBM-34450]
  - ve: forbid to attach to a ve cgroup w/o id (Vladimir Davydov) [PSBM-34450]
  - vznetstat: Use kzalloc instead of kmalloc plus memset (Cyrill Gorcunov)
  - ve/vdso: x86 -- Disable virtualization in native x86-32 mode (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86 -- Eliminate race in vdso allocation, v2 (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86-32 -- Implement kernel version virtualization (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86-64 -- Implement kernel version virtualization (Cyrill Gorcunov) [PSBM-30093]
  - ve/fs: Port diff-ve-fs-security-check-for-mount (Vladimir Davydov) [PSBM-33650]
  - ve/fs: Port diff-ve-fs-allow-to-remove-swapfile-hardlinks (Vladimir Davydov) [PSBM-25310 PSBM-33650]
  - ms/futex: Add another early deadlock detection check (Thomas Gleixner) [PSBM-33650]
  - ms/futex: Prevent attaching to kernel threads (Thomas Gleixner) [PSBM-33650]
  - ve/lockdep: Port diff-lockdep-taint-kernel-on-circular-locking-complains (Vladimir Davydov) [PSBM-22010 PSBM-33650]
  - ve/kernel/taint: Port diff-taint-message-enhanced-with-dump (Vladimir Davydov) [PSBM-25867 PSBM-33650]
  - ve/proc/time: Port diff-ve-proc-report-real_start_time-in-_proc_PID_stat-if-CONFIG_VE (Vladimir Davydov) [PSBM-22925 PSBM-22925 PSBM-33650]
  - ve/mm/kstat: Port diff-ve-kstat-disable-interrupts-around-seqcount-write-lock (Vladimir Davydov) [PSBM-33650]
  - ve/proc: Port diff-ve-proc-add-buffers-field-to-meminfo (Vladimir Davydov) [PSBM-19448 PSBM-34444 PSBM-33650]
  - ve: Port diff-ve-allow-taskstats-netlink-in-netns (Vladimir Davydov) [PSBM-33650]
  - vznetstat: Port diff-vznetstat-support-of-resetting-of-traffic-statistics-on-running-CTs (Vladimir Davydov) [PSBM-21243 PSBM-21243 PSBM-33650]
  - vznetstat: Port diff-vznetstat-fix-ip_vznetstat-module-load (Vladimir Davydov) [PSBM-33650]
  - vzstat: Port diff-vzstat-mem_free_areas_show-fix-nr_free-per-order-computation (Vladimir Davydov) [PSBM-26984 PSBM-33650]
  - ve/ns: Port diff-ve-ns-allow-create-new-pid-ipc-and-utc-namespaces (Vladimir Davydov) [PSBM-33650]
  - ext4: fallocate mode - convert and extend (Dmitry Monakhov) [PSBM-22381]
  - kmapset: Fix NULL pointer derefference in kmapset_set_value() (Kirill Tkhai) [PSBM-34437]
  - dummy: remove redundant dummy modules (Konstantin Khorenko) [PSBM-31333]
  - ve/net: Delete nf_frags_hdr and ct_frags (Kirill Tkhai)
  - config.OpenVZ: remove DSA option (Konstantin Khorenko)
  - ve: introduce ve.veid for setting id from userspace (Vladimir Davydov) [PSBM-34422]
  - mm/fs: Port diff-mm-debug-memallocation-caused-fs-reentrance (Vladimir Davydov) [PSBM-34112]
  - ve: Print ve_name instead of veid to the kernel log (Vladimir Davydov)
  - ve/fs: drop LOOKUP_STRICT (Vladimir Davydov)
  - ve/net: drop net->uevent_sock (Vladimir Davydov)
  - ve/printk: allow to access syslog with CAP_VE_ADMIN (Vladimir Davydov)
  - ve/ioprio: confine ioprio_{set, get}(IOPRIO_WHO_USER) to current ve (Vladimir Davydov)
  - ve/nsproxy: drop INIT_NSPROXY_COUNT (Vladimir Davydov)
  - ms/ext4: use ext4_ext_next_allocated_block instead of mext_next_extent (Dmitry Monakhov)
  - ext4: update defragmentation codebase (Dmitry Monakhov)
  - backport jbd2: jbd2_cleanup_journal_tail fix gfp allocation context (Dmitry Monakhov)
  - ms ext4: fix online resize with very large inode tables (Theodore Ts'o) [PSBM-24924]
  - ext4: Add ioctl EXT4_IOC_SET_RSV_BLOCKS V2 (Dmitry Monakhov) [PSBM-25929]
  - ext4: add mfsync support (Dmitry Monakhov) [PSBM-18567 PSBM-34909 PSBM-34910]
  - ext4: Fix error handling after filesystem abort (Dmitry Monakhov)
  - jbd2: make shure that we do not miss aborted state (Dmitry Monakhov)
  - ext4: add prepare_mmap API (Dmitry Monakhov) [PSBM-23133 PSBM-34112]
  - tswap: do not writeback pages on reclaim (Vladimir Davydov) [PSBM-34269]
  - tswap: use global lock to protect lru lists (Vladimir Davydov) [PSBM-34269]
  - tswap: shrink tswap page if swapcache page is uptodate (Vladimir Davydov) [PSBM-34269]
  - tswap: introduce tswap_delete_page helper (Vladimir Davydov) [PSBM-34269]
  - tswap: do not allocate a page on store if there is already one (Vladimir Davydov) [PSBM-34269]
  - tswap: enable exclusive gets (Vladimir Davydov) [PSBM-34269 PSBM-34269]
  - mm/frontswap: invalidate expired data on a dup-store failure (Vladimir Davydov) [PSBM-34269 PSBM-34269]
  - ve/tty: console -- Enhance container console to support per VE ops (Cyrill Gorcunov) [PSBM-34357]
  - Revert "x86/NMI: introduce dumps via nmi" (Vladimir Davydov) [PSBM-17989]
  - Revert "ms/nmi: do not call unblank_screen() from nmi_show_regs()" (Vladimir Davydov)
  - ve/net: allow to rename devices in non-ve namespaces (Kirill Tkhai) [PSBM-29810 PSBM-33645]
  - ve/net: allow containers create bridges with CAP_VE_NET_ADMIN (Kirill Tkhai) [PSBM-29808]
  - ve/net/ioctl: allow change net-device name with CAP_VE_NET_ADMIN (Kirill Tkhai) [PSBM-29808 PSBM-31819 PSBM-29808]
  - ve/net/sysfs: Porting diff-ve-net-sysfs-drop-redundant-net_ipv4_route_path and diff-ve-net-route-bring-back-route_src_check (Kirill Tkhai) [PSBM-31818]
  - ve/tty: vzcon -- Add container dummy console support (Cyrill Gorcunov) [PSBM-32686]
  - ms/vfs: Remove second variable named error in __dentry_path (Pavel Tikhomirov) [PSBM-34245]
  - ms/vfs: reinitialize error for resetart in prepend_path as in ms (Pavel Tikhomirov) [PSBM-34245]
  - net/packet: use try_get_mem_cgroup_from_mm (Vladimir Davydov)
  - ve/net/packet: do not account sock buffer to cg if kmem acct is off (Vladimir Davydov)
  - ve/net/tcp: add missing tcp_orphan_count destruction (Vladimir Davydov) [PSBM-34215]
  - ve/cgroup: Temporarily allow to mount cgroups from VE (Cyrill Gorcunov) [PSBM-34291]
  - ve/net: drop sk_buff->accounted (Vladimir Davydov)
  - ub: sync exec_ub on fork (Vladimir Davydov)
  - tswap: fix panic on store if page exists (Vladimir Davydov)
  - ve/net: Delete get_exec_env() from venet_init_net() (Kirill Tkhai)
  - Revert "mm/fs: Port diff-mm-debug-memallocation-caused-fs-reentrance" (Konstantin Khorenko) [PSBM-34112]
  - ub/fs: resurrect sync accounting (Vladimir Davydov) [PSBM-34007]
  - ub/fs: access dirtied_ub under rcu lock in __writeback_single_inode (Vladimir Davydov) [PSBM-34007]
  - ub: do not include block/blk-cgroup.h from io_prio.c (Vladimir Davydov) [PSBM-34007]
  - ub/fs: account writeback io (Vladimir Davydov) [PSBM-34007]
  - ub: ressurrect iostat and ioprio reporting (Vladimir Davydov) [PSBM-34007]
  - ub: ressurrect ioprio_set IOPRIO_WHO_UBC (Vladimir Davydov) [PSBM-34007]
  - ub: export ub_get_{mem,blkio}_css (Vladimir Davydov) [PSBM-34007]
  - ub: zap ub_{init,fini}_ioprio (Vladimir Davydov) [PSBM-34007]
  - fs/ioprio: move IOPRIO_WHO_UBC handling out of rcu section (Vladimir Davydov) [PSBM-34007]
  - ve/iptable_raw: Don't reuse VE_IP_IPTABLES bit (Kirill Tkhai) [PSBM-34192]
  - ve/net/tun: don't loose NETIF_F_VIRTUAL device feature (Pavel Tikhomirov) [PSBM-34066]
  - config.OpenVZ.debug: OpenVZ related config options are added (Konstantin Khorenko)
  - debugfs: drop set_exec_ub in file create (Vladimir Davydov)
  - ub: drop ub_cachep (Vladimir Davydov)
  - ub: hide dcachesize and oomguarpages in ub cgroup (Vladimir Davydov)
  - ve/net: Track netfilter modules per net-namespace-v3 (Kirill Tkhai) [PSBM-31451]
  - ms/bridge: superfluous skb->nfct check in br_nf_dev_queue_xmit (Kirill Tkhai)
  - ve/ip_gre: containerize per-net devices (Kirill Tkhai) [PSBM-24331]
  - venet: prevent to change network namespaces (Kirill Tkhai)
  - ve/netfilter: Add permittion check in iptable_raw pernet (Kirill Tkhai) [PSBM-27181]
  - ve/net/iptables: Add ipv6 bits into VE_IP_DEFAULT (Kirill Tkhai)
  - ve/net: CAP_VE_NET_ADMIN must be a subset of CAP_NET_ADMIN (Kirill Tkhai) [PSBM-23514]
  - netfilter: MARK -- drop off @table entity to support rhel5 containers, v2 (Kirill Tkhai) [PSBM-30390]
  - ub: Makefile: drop net.o (Vladimir Davydov)
  - cgroup: unexport css_refcnt (Vladimir Davydov)
  - ub: drop ub_debug* macros (Vladimir Davydov)
  - ub: drop CONFIG_BC_DEBUG_ITEMS (Vladimir Davydov)
  - ub: drop /proc/bc/BCID/debug (Vladimir Davydov)
  - timers: Port diff-ve-timers-convert-ve-monotonic-to-abs-time-when-setting-timerfd-2 (Pavel Tikhomirov) [PSBM-34017 PSBM-18284 PSBM-18284]
  - fs: unexport filp_cachep (Vladimir Davydov)
  - ub: introduce ub_total_pages (Vladimir Davydov) [PSBM-34035]
  - ve/memcg: pass struct mem_cgroup instead of cgroup to ub-related methods (Vladimir Davydov) [PSBM-34035]
  - ub: rework connection between ub and mem/blkio cgroups (Vladimir Davydov) [PSBM-34035]
  - ub: rename functions for reading/writing cgroup resources (Vladimir Davydov) [PSBM-34035]
  - cgroup: make cgroup_kernel_attach safe against cgroup removal (Vladimir Davydov) [PSBM-34035]
  - cgroup: add function to lookup a cgroup by pathname (Vladimir Davydov) [PSBM-34035]
  - ve/kobj: Send events per VE instead of all net-namespaces broadcasting (Cyrill Gorcunov)
  - pfcache: fix path refcounting hazzard (Dmitry Monakhov)
  - ve/veth: don't drop skb->mark if NETIF_F_VENET is set (Andrew Vagin) [PSBM-32277]
  - ve/veth: filter packages accoding with mac addresses (Andrew Vagin) [PSBM-32276]
  - ve/veth: add ability to prevent changing of a mac address from a container (Andrew Vagin) [PSBM-32276]
  - ve/veth: add ability to enable vz-specific features (Andrew Vagin) [PSBM-32276]
  - vz/veth: remove vzethdev (Andrew Vagin)
  - ve/mm: enable oom grouping rules on OOM (Vladimir Davydov) [PSBM-33849]
  - ve/oom: do not impose grouping rules if process score is adjusted (Vladimir Davydov) [PSBM-33849]
  - ve/proc: allow to set oom_score_adj from inside a container (Vladimir Davydov) [PSBM-33849]
  - ve/mm: ignore oom_score_adj of containerized tasks on global OOM (Vladimir Davydov) [PSBM-33849]
  - ve/proc: use memcg limits for showing oom_score inside CT (Vladimir Davydov) [PSBM-33849]
  - ve/memcg: add function to get max mem+swap (Vladimir Davydov) [PSBM-33849]
  - ve/net/packet: fix possible return of uninitialized var (Konstantin Khorenko)
  - net/packet: Pre-account maximum socket buffer into cg memory (v3) (Pavel Emelyanov) [PSBM-33584]
  - netlink: Make all in-cg memory be kmem accounted (Pavel Emelyanov) [PSBM-33584]
  - udp: Charge ingress buffers into cg memory (Pavel Emelyanov) [PSBM-33584]
  - tcp: Limit orphan sockets per-cg (Pavel Emelyanov) [PSBM-33584]
  - tcp: Charge socket buffers into cg memory (v3) (Pavel Emelyanov) [PSBM-33584]
  - proc: drop proc_dentry_of_dead_task (Vladimir Davydov)
  - ve/mm: print OOM info to VE log (Vladimir Davydov)
  - ub: account shmem in cached in meminfo (Vladimir Davydov) [PSBM-28682 PSBM-31006 PSBM-33637]
  - mm/bc: Port diff-bc-shmem-fix-accounting-on-error-path (Vladimir Davydov) [PSBM-22198 PSBM-33637]
  - mm: Port diff-mm-add-sysctl-vm.force_scan_thresh (Vladimir Davydov) [PSBM-29968 PSBM-33640]
  - mm: Port diff-mm-vmscan-disable-fs-related-activity-for-direct-direct-reclaim (Vladimir Davydov) [PSBM-20210 PSBM-33640]
  - ms/pagemap: Port diff-ms-pagemap-do-not-leak-physical-addresses-to-non-privileged-userspace (Vladimir Davydov) [PSBM-32308 PSBM-33640]
  - mm/fs: Port diff-mm-debug-memallocation-caused-fs-reentrance (Vladimir Davydov) [PSBM-33640]
  - ploop: added into pvd header new close signatures (Andrey Smetanin) [PSBM-33882]
  - ve/headers: Do not include uapi in exported header (Cyrill Gorcunov) [PSBM-34030]
  - ms/headers: Support GCC 5 (Cyrill Gorcunov)
  - ms/netfilter: Add {ipt,ip6t}_osf aliases for xt_osf (Kirill Tkhai) [PSBM-33929]
  - ve/net/tcp: Kill tcp_v4_kill_ve_sockets() (Kirill Tkhai) [PSBM-33755 PSBM-33926]
  - sched: Port diff-sched-make-nr_cpus-limit-support-hierarchies (Vladimir Davydov) [PSBM-33642]
  - sched: Port diff-fairsched-cpuset-add-fake-cpuset-for-containers (Vladimir Davydov) [PSBM-30878 PSBM-33642]
  - ve: zap legacy_veid_to_name (Vladimir Davydov)
  - ve: do_env_create: zap unused ve_name variable (Vladimir Davydov)
  - ve: zap legacy_name_to_veid (Vladimir Davydov)
  - ve: zap __find_ve_by_id (Vladimir Davydov)
  - sched: Port cpustat related patches (Vladimir Davydov) [PSBM-26714 PSBM-28403 PSBM-28500 PSBM-26587 PSBM-23431 PSBM-28277 PSBM-33642]
  - sched: use cpuacct->cpustat for showing cpu stats (Vladimir Davydov) [PSBM-33642]
  - sched: Revert "SCHED: rework cputime accounting (v2)" (Vladimir Davydov) [PSBM-33642]
  - sched: Port diff-sched-return-only-virtual-cpus-in-sched_getaffinity (Vladimir Davydov) [PSBM-25367 PSBM-27200 PSBM-33642]
  - sched: Port diff-sched-clear-prev-entity-if-curr-is-dequeued (Vladimir Davydov) [PSBM-33642]
  - ms/sched: Port diff-sched-increase-SCHED_LOAD_SCALE-resolution (Vladimir Davydov) [PSBM-33642]
  - sched: Port diff-sched-initialize-runtime-to-non-zero-on-cfs-bw-set (Vladimir Davydov) [PSBM-17658 PSBM-17658 PSBM-33642]
  - sched/vziolimit: Port diff-fairsched-do-not-account-iothrottled-tasks-in-loadavg-core (Vladimir Davydov) [PSBM-33642]
  - ub/netfilter: account x_tables to ub (Vladimir Davydov) [PSBM-20089]
  - cgroup: Mangle cgroups root from inside of VE view (Cyrill Gorcunov) [PSBM-33757]
  - cgroup: mount -- Disable mounting from inside of VE context (Cyrill Gorcunov) [PSBM-33664]
  - fairsched: Port diff-fairsched-optimize-sys_fairsched_mvpr (Vladimir Davydov) [PSBM-33642]
  - ve: remove fairsched node only in the legacy mode (Vladimir Davydov) [PSBM-33833]
  - ms/memcg: do not call high reclaim if !__GFP_WAIT (Vladimir Davydov)
  - fairsched: fix output of /proc/fairsched[2] (Vladimir Davydov) [PSBM-33806]
  - ub: ub_dirty_limits: obtain ram size from memcg (Vladimir Davydov)
  - shmem: fix tmpfs_ram_pages (Vladimir Davydov)
  - memcg: add function to get container's ram size (Vladimir Davydov)
  - ve/kmod: Add rules for new {ip, ip6, x}table modules (Kirill Tkhai) [PSBM-33631]
  - ve/kmod: Add rules for autoloading (new) nf_tables (Kirill Tkhai) [PSBM-33631]
  - ms/memcg: port memory.high (Vladimir Davydov)
  - ms/memcg: use CFTYPE_NOT_ON_ROOT for memory.low and memory.oom_guarantee (Vladimir Davydov)
  - ms/memcg: rename memory.low_limit_in_bytes to memory.low (Vladimir Davydov)
  - ub: reset UB_OOMGUARPAGES.held on css free (Vladimir Davydov) [PSBM-20089]
  - memcg/bc: sync UB_OOMGUARPAGES (Vladimir Davydov) [PSBM-20089]
  - memcg: count oom kills (Vladimir Davydov) [PSBM-20089]
  - memcg: add oom_guarantee (Vladimir Davydov) [PSBM-20089]
  - ub: cleanup cgroup attaching code (Vladimir Davydov)
  - fairsched: add cpu.proc.loadavg to the cpu cgroup (Vladimir Davydov) [PSBM-32284]
  - fairsched: switch methods showing stats from numeric id to name (Vladimir Davydov) [PSBM-32284]
  - venet: Cleanup ip address on ve exit (Cyrill Gorcunov)
  - bc: initialize all beancounters as unlimited (Vladimir Davydov)
  - ms/idr: print a stack dump after ida_remove warning (Vasily Averin)
  - ve/cgroup: Guard @features and @iptables with test if VE is inactive (Cyrill Gorcunov)
  - memcg/bc: sync UB_DCACHESIZE (Vladimir Davydov) [PSBM-20089]
  - memcg/bc: account dcache size (Vladimir Davydov) [PSBM-20089]
  - bc/mm: zap pte_ptrs and same_ub macros (Vladimir Davydov)
  - ub: zap ub_reclaim_rate_limit (Vladimir Davydov)
  - mm/shmem: unexport shmem_file_operations (Vladimir Davydov)
  - bc/mm: zap page->{slab_ubs,kmem_ub} (Vladimir Davydov)
  - ub: zap /proc/bc/ID/dcacheinfo (Vladimir Davydov) [PSBM-33760]
  - ub: zap /proc/bc/ID/slabinfo (Vladimir Davydov)
  - ub: get rid of pincount (Vladimir Davydov)
  - ub: do not show dead beancounters under /proc/bc (Vladimir Davydov)
  - ub: kill ub_dcache_threshold sysctl knob (Vladimir Davydov)
  - ub: drop ubc_ioprio knob (Vladimir Davydov)
  - ub: sync memcg before setting limit via sys_setublimit (Vladimir Davydov)
  - ub: do not apply memcg limits on attaching via sys_setluid (Vladimir Davydov)
  - ub: simplify memcg synchronization (Vladimir Davydov)
  - ub: zap show_ub_mem in Alt+SysRQ+m (Vladimir Davydov)
  - ub: remove some dead code (Vladimir Davydov)
  - bc: deprecate kmemsize limit (Vladimir Davydov) [PSBM-20089]
  - bc/memcg: assure swap->held/maxheld < swap->limit for beancounters (Vladimir Davydov) [PSBM-20089]
  - bc/memcg: show correct mem/swap failcnt for beancounters (Vladimir Davydov) [PSBM-20089]
  - bc/memcg: show correct swap max for beancounters (Vladimir Davydov) [PSBM-20089]
  - ploop: fix busyloop on secondary discard bio (Andrey Smetanin) [PSBM-30451]
  - ploop: add a separate queue for discard bio-s (v2) (Andrey Smetanin) [PSBM-27676]
  - bc/oom: zap oom kill related stuff (Vladimir Davydov) [PSBM-33732]
  - proc/oom: fix oom_score output (Vladimir Davydov)
  - bc/sysinfo: remove dead code (Vladimir Davydov)
  - ub/dcache: get rid of dcache accounting related stuff (Vladimir Davydov) [PSBM-33729]
  - ub: remove CONFIG_BC_RSS_ACCOUNTING (Vladimir Davydov)
  - ve/cgroups: Align ve_cftypes assignments (Cyrill Gorcunov)
  - ve/cgroup: Temporary allow writting cgroups files inside container (Cyrill Gorcunov) [PSBM-33664]
  - ve/cgroup: Allow mounting existing cgroups inside container (Cyrill Gorcunov) [PSBM-33664]
  - Revert "ploop: add a separate queue for discard bio-s (v2)" (Konstantin Khorenko) [PSBM-33633]
  - Revert "ploop: fix busyloop on secondary discard bio" (Konstantin Khorenko) [PSBM-33633]
  - ve/net: Fix unbalanced double spin_unlock() in tcp_v4_kill_ve_sockets() (Kirill Tkhai) [PSBM-33585]
  - ub: properly charge and uncharge shmem (Andrew Perepechko)
  - ve/net_ns: Don't forget to put_ve on error path (Cyrill Gorcunov)
  - ve: Add support of iptables mask (Cyrill Gorcunov) [PSBM-32737]
  - ve: Add support of features mask (Cyrill Gorcunov) [PSBM-32737]
  - config.OpenVZ: enable idle memory tracking (Konstantin Khorenko) [PSBM-32460]
  - ploop: added printk of function, line, backtrace before ploop_set_error (Andrey Smetanin)
  - ploop: force FUA of nullified blocks for BAT grow (Andrey Smetanin) [PSBM-31969]
  - ploop: mark reloc reqs to force FUA/fsync(kaio) for index update I/O (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: mark reloc reqs to force FUA before write of relocated data (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: make image fsync at I/O complete if it's required by FUA/fsync force flag or by req->req_rw (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: do preflush or postfua according force FUA/flush flags, and delay FUA if possible but add force FLUSH to req if so (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: direct: to support truly FLUSH/FUA of req we need mark first bio FLUSH, write all bios and mark last bio as FLUSH/FUA (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: define struct ploop_request->state flags to force pre FLUSH before write IO and FUA/fsync at I/O complete (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: added ploop_req_delay_fua_possible() func that detects possible delaying of upcoming FUA to index update stage (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: fix busyloop on secondary discard bio (Andrey Smetanin) [PSBM-30451]
  - ploop: notify blktrace about bio completions (Andrey Smetanin)
  - ploop: add a separate queue for discard bio-s (v2) (Andrey Smetanin) [PSBM-27676]
  - ploop: warning on "disk full" condition (Andrey Smetanin)
  - ploop: make manual abort transition verbose (Andrey Smetanin)
  - ploop: zero blocks on reuse (Andrey Smetanin) [PSBM-25391]
  - ploop: roll back alloc_head on ENOSPC (Andrey Smetanin) [PSBM-24694]
  - ploop: put top-delta back if merge failed (Andrey Smetanin) [PSBM-25252]
  - ploop: fix spurious hole complains (Andrey Smetanin)
  - ploop: expose open_count to sysfs (Andrey Smetanin) [PSBM-24754]
  - ploop: ensure non-empty delta list on running ploop (Andrey Smetanin) [PSBM-25102]
  - ploop: bug on bad fiemap (v2) (Andrey Smetanin) [PSBM-26762]
  - ploop: add ioctl to limit size of top delta (v2) (Andrey Smetanin) [PSBM-22002]
  - ploop: prioritize BAT operations (Andrey Smetanin)
  - ploop: fix race in ploop_tracker_init() (Andrey Smetanin) [PSBM-22993]
  - ploop: fix check_zero optimization v2 (Andrey Smetanin) [PSBM-23452]
  - ploop: fix a race condition on relocation of blocks (Andrey Smetanin) [PSBM-23905]
  - ploop: support 4K block-size of host block-device (Andrey Smetanin) [PSBM-21989]
  - ploop: skip writes of zeroes to unallocated blocks by default (Andrey Smetanin) [PSBM-22506 PSBM-22381]
  - ploop: reverse order of fdatawait and fsync fop (Andrey Smetanin)
  - ploop: fix sync delay for sync requests (Andrey Smetanin) [PSBM-22381]
  - ploop: fix iblk-to-sector calculations (Andrey Smetanin) [PSBM-22961]
  - ploop: rework accounting images_size (Andrey Smetanin) [PSBM-20432]
  - ploop: report holes in pio_direct (v2) (Andrey Smetanin) [PSBM-20770]
  - ploop: prevent disclosure 4 bytes of the stack kernel (Andrey Smetanin)
  - ploop: prevent dangerous ploop-umount (Andrey Smetanin) [PSBM-21474]
  - ploop: check new size of block device on ioctl(GROW) (Andrey Smetanin) [PSBM-21027]
  - ploop: fix dio_fsync wait (Andrey Smetanin) [PSBM-18049]
  - ploop: fix accounting ploop_io_images_size (Andrey Smetanin) [PSBM-19906]
  - ve/cgroups: Allow to attach non-self into ve cgroups, v3 (Cyrill Gorcunov) [PSBM-33561]
  - ve: device cgroup -- Implement devcgroup_seq_show_ve (Cyrill Gorcunov) [PSBM-33555]
  - mm/vmalloc: do not account vmap_area to memcg (Vladimir Davydov)
  - mm/tswap/tcache: enable tcache and tswap by default (Vladimir Davydov) [PSBM-31757 PSBM-32063]
  - ve/cgroups: fake num_cgroups in /proc/cgroups output (Vasily Averin) [PSBM-33400]
  - ve/uts_ns: Implement cgroup interface to configure ve's os_release (Kirill Tkhai) [PSBM-32273]
  - ve/fs/devmnt: process mount options (Kirill Tkhai) [PSBM-32273]
  - ve/devmnt: Introduce ve::devmnt list (Kirill Tkhai) [PSBM-32273]
  - ve/netns: Set null only for nets ve is a keeper of (Cyrill Gorcunov) [PSBM-33480]
  - ve/netfilter: ve_printk for "nf_conntrack: table full" (Vasily Averin)
  - ve/net/printk: net_veboth_ratelimited introduced (Vasily Averin)
  - ub: drop host node (Vladimir Davydov) [PSBM-33487]
  - ve/fairsched: drop host node (Vladimir Davydov) [PSBM-33487]
  - ve/cgroups: Drop virtualization code, v5 (Cyrill Gorcunov)
  - bc/ioprio: ub_set_ioprio() declaration if !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - vzstat: KSTAT_PERF_ENTER redefinition fixed when !CONFIG_VE (Kir Kolyshkin)
  - ve/ppc: remove vdso32_pages declaration from ppc elf.h (Kir Kolyshkin)
  - ub/kernel: use get_task_ub() - fix compile for !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - ve/proc/meminfo.c: use mm_ub() macro (Kir Kolyshkin)
  - ve/printk/ppc: fix asm modifier in DEFINE_STRUCT_MEMBER_ALIAS (Vladimir Davydov)
  - ve/ppc: wire OpenVZ-specific syscalls (Kir Kolyshkin)
  - ve/ppc: include OpenVZ-specific Kconfigs for ppc (Kir Kolyshkin)
  - ms/ppc: define TIOSAK (fix tty_ioctl() compilation) (Kir Kolyshkin)
  - ve/ppc: include ve.h in process.c (Kir Kolyshkin)
  - ve/netfilter: put appropriate part under CONFIG_VE_IPTABLES (Kir Kolyshkin)
  - bc/mm/shmem.c: use mm_ub() macro to avoid compilation errors if !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - bc/mm/oom: put UB_OOM_MANUAL_SCORE_ADJ bit check under CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - bc/mm/{memory.c,mprotect.c}: use mm_ub() macro (Kir Kolyshkin)
  - ve/mm/filemap.c: include virtinfo.h for !CONFIG_BC_IO_ACCOUNTING case (Kir Kolyshkin)
  - ve/mm: include virtinfo.h for !CONFIG_BC_IO_ACCOUNTING case (Kir Kolyshkin)
  - ve/sched: put move_task_groups() under CONFIG_CFS_CPULIMIT (Kir Kolyshkin)
  - ve/kernel: fix kernel_thread() compilation for !CONFIG_VE (Kir Kolyshkin)
  - bc/dcache: add parameter names to ub_dcache_reclaim() declaration for !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - fs/nfs/direct.c: include virtinfo.h (Kir Kolyshkin)
  - bc/io_acct: define get_io_ub() for !CONFIG_BC_IO_ACCOUNTING case (Kir Kolyshkin)
  - ve/sched: cpu_cgroup_get_stat() declaration in !CONFIG_VZ_FAIRSCHED case (Kir Kolyshkin)
  - bc: add struct seq_file declaration - fix virtinfo.h compile warning (Kir Kolyshkin)
  - bc: add {,un}charge_beancounter_fast define for !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - bc: for_each_beancounter() definition for !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - ms/sysfs: do not account sysfs_ino_ida allocations to memcg (Vladimir Davydov)
  - ms/gfp: add __GFP_NOACCOUNT (Vladimir Davydov)
  - ve/cgroup: devices -- Modify exception list for docker sake (Cyrill Gorcunov)
  - ve/tty: Prevent iteration with NULL dev in device_destroy_namespace() (Kirill Tkhai) [PSBM-33239]
  - venet: Don't kill venet0 on the node (Cyrill Gorcunov) [PSBM-33281]
  - vziolimit: add bc cgroup control (Dmitry Monakhov) [PSBM-32281]
  - ms/exit: pidns: alloc_pid() leaks pid_namespace if child_reaper is exiting (Oleg Nesterov)
  - config.OpenVZ: add "vziolimit" module (Konstantin Khorenko) [PSBM-20104]
  - vziolimit: correct copyright info (Konstantin Khorenko)
  - vziolimit: add blktrace hooks (Dmitry Monakhov) [PSBM-20104]
  - cfq: add virtinfo hook for vziolimits (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: compilation fix (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-iostat-wire-vziolimit-into-deadline-io_scheduler (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-introduce-atomic-flags-bit-field-shadow (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-vziolimit-charge-fuse-requests-into-iops-throttler (Dmitry Monakhov) [PSBM-10626 PSBM-20104]
  - vziolimit: port diff-vziolimit-dont-change-state-at-speed-change (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-vziolimit-fix-rounding-error-in-throttler (Dmitry Monakhov) [PSBM-13302 PSBM-20104]
  - vziolimit: port diff-ubc-iolimit-rework-async-iops-limit (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-iolimit-precharge-dirty-pages-opensource (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-iolimit-keep-charge-in-throttler (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-implement-the-iops-limiting (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-vziolimit-set-GPL-license (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-vziolimit-no-top-bc (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-wakup-at-kill-and-limit-change (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-dont-throttle-flushers (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-vzctl-api (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-handle-virtinfo-events (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-plain-throttler (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-initial-skeleton-opensource (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: remove dummy module (Dmitry Monakhov) [PSBM-20104]
  - ve: add config options for vzlist and vznetstat modules (Kirill Tkhai) [PSBM-19217]
  - ms/mm/memcg: do not use vmalloc for mem_cgroup allocations (Vladimir Davydov)
  - ms/mm/memcg: fix memcg_size() calculation (Vladimir Davydov)
  - ve: Make get_ve_by_id() lockless (Kirill Tkhai)
  - mm/memcg: remove memcg from kmemcg_sharers list on css free (Vladimir Davydov)
  - ve: Revert "ve/pid_ns: reap zombies with external parent on container's init exit" (Kirill Tkhai) [PSBM-33254]
  - venet: Dont create venet-s in sub net namespaces (v2) (Cyrill Gorcunov) [PSBM-29811]
  - bc: Drop redundant put_beancounter in ubstat_get_list (Cyrill Gorcunov)
  - bc: Add missing put_beancounter call (Cyrill Gorcunov) [PSBM-29895]
  - ms/mm/vmscan.c: don't forget to free shrinker->nr_deferred (Vladimir Davydov)
  - mm: transcendent swap cache (Vladimir Davydov) [PSBM-32063]
  - mm/tcache: change API to conform to tswap (Vladimir Davydov) [PSBM-31915]
  - ve/net/ppp: oops in oops in ppp_register_net_channel() (Vasily Averin) [PSBM-29975]
  - ve/netfilter: Check for permittions while looking for target and match (Kirill Tkhai) [PSBM-28910]
  - ve/netfilter: Add autoloading of sockopt modules (Kirill Tkhai) [PSBM-28910]
  - ve/kmod: Port autoloading from CT (Kirill Tkhai) [PSBM-28910]
  - ve/kmod: Move check of VE permitions from __call_usermodehelper_exec() to upper functions (Kirill Tkhai) [PSBM-28910]
  - ms/sched: Remove lockdep check in sched_move_task() (Kirill Tkhai)
  - iolimits: fix double I/O accounting for iolimits (Andrew Perepechko)
  - ve/tty: Don't WARN_ONCE on /dev/console disabling (Cyrill Gorcunov) [PSBM-32728]
  - ve/tty: Disable /dev/console in VE environment (Cyrill Gorcunov) [PSBM-32686]
  - mm/tcache: update to use new cleancache API (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: remove limit on the number of cleancache enabled filesystems (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: forbid overriding cleancache_ops (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: zap uuid arg of cleancache_init_shared_fs (Vladimir Davydov) [PSBM-31915]
  - ms/fs/ocfs2: copy fs uuid to superblock (Vladimir Davydov) [PSBM-31915]
  - mm: introduce transcendent file cache (Vladimir Davydov) [PSBM-31757]
  - ms/memcg: port low limit (Vladimir Davydov) [PSBM-31752]
  - ve/headers: Export VE headers (Cyrill Gorcunov) [PSBM-31973]
  - ms/slub: make dead caches discard free slabs immediately (Vladimir Davydov) [PSBM-25018]
  - ms/slub: never fail to shrink cache (Vladimir Davydov) [PSBM-25018]
  - ms/slub: fix off by one in number of slab tests (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: reparent list_lrus and free kmemcg_id on css offline (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: add helpers to isolate items (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: free memcg_caches slot on css offline (Vladimir Davydov) [PSBM-25018]
  - ms/slab: use css id for naming per memcg caches (Vladimir Davydov) [PSBM-25018]
  - ms/slab: link memcg caches of the same kind into a list (Vladimir Davydov) [PSBM-25018]
  - ms/slab: embed memcg_cache_params to kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab_common: move kmem_cache definition to internal header (Vladimir Davydov) [PSBM-25018]
  - ms/fs: make shrinker memcg aware (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: introduce per-memcg lists (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: organize all list_lrus to list (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: get rid of ->active_nodes (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: add rwsem to synchronize against memcg_caches arrays relocation (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: rename some cache id related variables (Vladimir Davydov) [PSBM-25018]
  - ms/vmscan: per memory cgroup slab shrinkers (Vladimir Davydov) [PSBM-25018]
  - ms/fs: consolidate {nr,free}_cached_objects args in shrink_control (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: introduce list_lru_shrink_{count,walk} (Vladimir Davydov) [PSBM-25018]
  - ms/mm: vmscan: invoke slab shrinkers from shrink_zone() (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_slab_caches and memcg_slab_mutex (Vladimir Davydov) [PSBM-25018]
  - ms/slub: use sysfs'es release mechanism for kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/slub: fix memcg_propagate_slab_attrs (Vladimir Davydov) [PSBM-25018]
  - ms/slub: do not drop slab_mutex for sysfs_slab_add (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_name argument of memcg_create_kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap __memcg_{charge,uncharge}_slab (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: fix possible use-after-free in memcg_kmem_get_cache() (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: use generic slab iterators for showing slabinfo (Vladimir Davydov) [PSBM-25018]
  - ms/slab: print slabinfo header in seq show (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab: Give s_next and s_stop slab-specific names (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab: Sharing s_next and s_stop between slab and slub (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_can_account_kmem (Vladimir Davydov) [PSBM-25018]
  - ploop: fixed deadlock by interrupts off inside lookup_extent_mapping (Andrey Smetanin) [PSBM-32614]
  - config.OpenVZ/audit: Disable audit subsystem in config (Cyrill Gorcunov) [PSBM-32261]
  - ploop: fix deadlock inside dio_alloc_sync - lock inside while() but unlock outside (Andrey Smetanin)
  - net/vznetstat: remove redirection remains (Konstantin Khorenko) [PSBM-32912]
  - vznetstat: alloc ve->stat if necessary (Kirill Tkhai) [PSBM-32072]
  - Revert "VE: export more headers to userspace" (Konstantin Khorenko) [PSBM-31973]
  - VE: export more headers to userspace (Konstantin Khorenko)
  - Makefile: make VZVERSION evaluated dynamically (Konstantin Khorenko)
  - dummy: add dummy modules for service vz init script (Konstantin Khorenko) [PSBM-31333]
  - vzstat: port vzstat module from rh6 (Vladimir Davydov)
  - vzlist: return second pid in container's namespace (Dmitry Guryanov) [PSBM-20095]
  - vzlist: fix get_vepids function (Dmitry Guryanov) [PSBM-20095]
  - vzlist: fix obvious compilation errors (Dmitry Guryanov) [PSBM-20095]
  - vzlist: add vzlist from 2.6.32-x as is (Dmitry Guryanov) [PSBM-20095]
  - vznetstat: don't use vehooks (Dmitry Guryanov) [PSBM-20094]
  - vznetstat: fix compilation (Konstantin Khorenko) [PSBM-20094]
  - vznetstat: apply vznetstat patches from 2.6.32 as is (Dmitry Guryanov) [PSBM-20094]
  - ms/memcg: move memcg_update_cache_size to slab_common.c (Vladimir Davydov)
  - ms/memcg: don't call memcg_update_all_caches if new cache id fits (Vladimir Davydov)
  - ms/memcg: move memcg_{alloc,free}_cache_params to slab_common.c (Vladimir Davydov)
  - ms/mm: vmscan: remove shrink_control arg from do_try_to_free_pages() (Vladimir Davydov)
  - ms/mm: vmscan: move call to shrink_slab() to shrink_zones() (Vladimir Davydov)
  - ms/mm: vmscan: respect NUMA policy mask when shrinking slab on direct reclaim (Vladimir Davydov)
  - ms/mm: vmscan: call NUMA-unaware shrinkers irrespective of nodemask (Vladimir Davydov)
  - ms/slab: delete cache from list after __kmem_cache_shutdown succeeds (Vladimir Davydov)
  - ms/memcg: cleanup kmem cache creation/destruction functions naming (Vladimir Davydov)
  - ms/memcg: memcg_kmem_create_cache: make memcg_name_buf statically allocated (Vladimir Davydov)
  - ms/memcg: get rid of memcg_create_cache_name (Vladimir Davydov)
  - ms/memcg, slab: simplify synchronization scheme (Vladimir Davydov)
  - ms/memcg, slab: merge memcg_{bind,release}_pages to memcg_{un}charge_slab (Vladimir Davydov)
  - ms/memcg, slab: do not schedule cache destruction when last page goes away (Vladimir Davydov)
  - ms/mm: get rid of __GFP_KMEMCG (Vladimir Davydov)
  - ms/mm/sl[aou]b: Move kmallocXXX functions to common code (Christoph Lameter)
  - ms/slob: Rework #ifdeffery in slab.h (Christoph Lameter)
  - ms/sl[au]b: charge slabs to kmemcg explicitly (Vladimir Davydov)
  - ms/slub: rework sysfs layout for memcg caches (Vladimir Davydov)
  - ms/slub: adjust memcg caches when creating cache alias (Vladimir Davydov)
  - ms/memcg, slab: do not destroy children caches if parent has aliases (Vladimir Davydov)
  - ms/memcg, slab: unregister cache from memcg before starting to destroy it (Vladimir Davydov)
  - ms/memcg, slab: separate memcg vs root cache creation paths (Vladimir Davydov)
  - ms/memcg, slab: never try to merge memcg caches (Vladimir Davydov)
  - ms/memcg, slab: cleanup memcg cache creation (Vladimir Davydov)
  - ms/memcg: fix mutex not unlocked on memcg_create_kmem_cache fail path (Vladimir Davydov)
  - ms/memcg: remove unused code from kmem_cache_destroy_work_func (Vladimir Davydov)
  - ms/memcg: rework memcg_update_kmem_limit synchronization (Vladimir Davydov)
  - ms/memcg: do not account memory used for cache creation (Glauber Costa)
  - ms/memcg: also test for skip accounting at the page allocation level (Glauber Costa)
  - ms/memcg: remove KMEM_ACCOUNTED_ACTIVATED flag (Vladimir Davydov)
  - ms/memcg, slab: RCU protect memcg_params for root caches (Vladimir Davydov)
  - ms/memcg: get rid of kmem_cache_dup() (Vladimir Davydov)
  - ms/memcg, slab: fix races in per-memcg cache creation/destruction (Vladimir Davydov)
  - ms/memcg: fix possible NULL deref while traversing memcg_slab_caches list (Vladimir Davydov)
  - ms/memcg, slab: fix barrier usage when accessing memcg_caches (Vladimir Davydov)
  - ms/memcg, slab: clean up memcg cache initialization/destruction (Vladimir Davydov)
  - ms/memcg, kmem: use cache_from_memcg_idx instead of hard code (Qiang Huang)
  - ms/memcg, kmem: rename cache_from_memcg to cache_from_memcg_idx (Qiang Huang)
  - ms/memcg, kmem: use is_root_cache instead of hard code (Qiang Huang)
  - ms/memcg, slab: kmem_cache_create_memcg(): fix memleak on fail path (Vladimir Davydov)
  - ms/slab: clean up kmem_cache_create_memcg() error handling (Vladimir Davydov)
  - ms/memcg: don't need to free memcg via RCU or workqueue (Li Zefan)
  - ms/memcg: kill memcg refcnt (Li Zefan)
  - ms/memcg: don't need to get a reference to the parent (Li Zefan)
  - ms/memcg: use css_get/put for swap memcg (Li Zefan)
  - ms/memcg: use css_get/put when charging/uncharging kmem (Li Zefan)
  - ms/memcg: don't use mem_cgroup_get() when creating a kmemcg cache (Li Zefan)
  - ms/memcg: use css_get() in sock_update_memcg() (Li Zefan)
  - ms/vfs: fix dentry LRU list handling and nr_dentry_unused accounting (Linus Torvalds)
  - vmscan: don't retry shrink_slab if current is dying (Vladimir Davydov)
  - ms/fs/super.c: fix lru_list leak for real (Al Viro)
  - ms/super: fix for destroy lrus (Glauber Costa)
  - ms/list_lru: dynamically adjust node arrays (Glauber Costa) [PSBM-42319]
  - mm: workingset: convert shrinker to count/scan API (Vladimir Davydov)
  - ms/fs: convert inode and dentry shrinking to be node aware (Dave Chinner)
  - ms/list_lru: remove special case function list_lru_dispose_all. (Glauber Costa)
  - ms/dcache: convert to use new lru list infrastructure (Dave Chinner)
  - ms/shrinker: Kill old ->shrink API. (Dave Chinner)
  - ms/shrinker: convert remaining shrinkers to count/scan API (Dave Chinner)
  - ms/hugepage: convert huge zero page shrinker to new shrinker API (Glauber Costa)
  - ms/drivers: convert shrinkers to new count/scan API (Vladimir Davydov) [PSBM-34838 PSBM-42317]
  - ms/fs: convert fs shrinkers to new scan/count API (Vladimir Davydov) [PSBM-34838]
  - ms/xfs: rework buffer dispose list tracking (Dave Chinner)
  - ms/xfs-convert-buftarg-lru-to-generic-code-fix (Andrew Morton)
  - ms/xfs: convert buftarg LRU to generic code (Dave Chinner)
  - ms/vmscan: per-node deferred work (Glauber Costa)
  - ms/shrinker: add node awareness (Dave Chinner)
  - ms/inode: move inode to a different list inside lock (Glauber Costa)
  - ms/inode: convert inode lru list to generic lru list code. (Dave Chinner)
  - ms/shrinker: convert superblock shrinkers to new API (Dave Chinner) [OVZ-6646 PSBM-42760]
  - ms/mm: new shrinker API (Dave Chinner)
  - ms/dcache: remove dentries from LRU before putting on dispose list (Dave Chinner)
  - ms/dentry: move to per-sb LRU locks (Dave Chinner)
  - ms/dcache: convert dentry_stat.nr_unused to per-cpu counters (Dave Chinner)
  - ms/super: fix calculation of shrinkable objects for small numbers (Glauber Costa)
  - ms/fs: bump inode and dentry counters to long (Glauber Costa)
  - bc: Allocate beancounters without limits when cgroup interface is used (Cyrill Gorcunov)
  - ve/nsproxy: Allow to unshare network namespace (Cyrill Gorcunov)
  - ve/cgroup: Fix missing cgroup::cgroup_ve assignment (Cyrill Gorcunov)
  - ve/cgroup: devices -- Fix memory leaking in sysfs_perms_open (Cyrill Gorcunov)
  - ve/signal: Fix NULL dereference in sig_ve_ignored (Cyrill Gorcunov)
  - ve/dcache: Allow to read proc links if new mount namespace is used (Cyrill Gorcunov)
  - ve/cgroup: Fix systemd virtualization (Cyrill Gorcunov)
  - ve/cgroup: Allow non-virtualized hierarchies in containers (Cyrill Gorcunov) [PSBM-30052]
  - ms/sched/fair: Fix division by zero sysctl_numa_balancing_scan_size (Kirill Tkhai)
  - ms/sched/numa: fix unsafe get_task_struct() in task_numa_assign() (Kirill Tkhai)
  - ms/sched: Fix race between task_group and sched_task_group (Kirill Tkhai)
  - Revert "ve: Port task_struct:vetask_list and while_each_thread_ve() etc" compilation fix (Konstantin Khorenko)
  - ve/proc: vestat_seq_show: Fix kernel OOPs (Cyrill Gorcunov)
  - ms/mm: softdirty: keep bit when zapping file pte (Peter Feiner)
  - rh/mm: Drop off Live Kernel Self Migration (TRACK_DIRTY_PAGES) (Cyrill Gorcunov)
  - ve/devtmpfs: Create required devices on container startup (Cyrill Gorcunov) [PSBM-29214]
  - ve: Use own uevent_seqnum for every VE (Kirill Tkhai) [PSBM-17903]
  - bc/proc: fix sleep in atomic bug in ub_{start,next,stop} (Vladimir Davydov)
  - ve/fs: Use ve_printk in fs/binfmt_aout.c (Kirill Tkhai) [PSBM-17903]
  - ve: Ignore signals from wrong ve (Kirill Tkhai) [PSBM-17903]
  - ve/fs: Port fs.fsync-enable and fs.odirect_enable sysctls (Kirill Tkhai) [PSBM-17903]
  - ve/mm/swap: do not uncharge on reuse_swap_page (Vladimir Davydov)
  - ms/fs/notify: don't show f_handle if exportfs_encode_inode_fh failed (Andrey Vagin)
  - ms/fsnotify/fdinfo: use named constants instead of hardcoded values (Andrey Vagin)
  - ms/kcmp: fix standard comparison bug (Rasmus Villemoes)
  - ms/cbq: now_rt removal (Vasily Averin)
  - ms/cbq: incorrectly low bandwidth setting blocks limited traffic (Vasily Averin)
  - ms/tty: Fix potential use after free in release_one_tty (Cyrill Gorcunov)
  - ploop: purge plo->map on merge (Maxim Patlasov) [PSBM-27891]
  - ploop: set PLOOP_MAP_IDENTICAL bit on merge (Maxim Patlasov) [PSBM-24408]
  - ploop: update i_size on preallocation (Maxim Patlasov)
  - ploop: support of explicit unplug: unplug callback (Maxim Patlasov) [PSBM-18168]
  - ploop: support of explicit unplug: start and stop plugging (Maxim Patlasov) [PSBM-18168]
  - ploop: check ENOSPC callback (Maxim Patlasov) [PSBM-18168]
  - ploop: port io_kaio module (Maxim Patlasov) [PSBM-18168]
  - ploop: congestion detection (Maxim Patlasov) [PSBM-18168 PSBM-11585]
  - ploop: generic support of writeback control (Maxim Patlasov) [PSBM-18168 PSBM-11585]
  - ploop: check error from freeze_bdev (Maxim Patlasov) [PSBM-28460]
  - ploop: fix file->f_count leak in raw_complete_snapshot() (Kirill Tkhai)
  - ub: show dead beancounters in procfs v3 (Vladimir Davydov)
  - ub: convert to cgroup (Vladimir Davydov)
  - ub: decouple from alien cgroups (Vladimir Davydov)
  - ub: (partial) fix for meminfo (Vladimir Davydov)
  - ub: introduce ub_page_stat (Vladimir Davydov)
  - ub: do not sync ubparms with memory cgroup (Vladimir Davydov)
  - ub: add ub_name to safely store CT name (Vladimir Davydov)
  - ub: drop CONFIG_BC_KEEP_UNUSED (Vladimir Davydov)
  - ub: get rid of get/put_beancounter_longterm (Vladimir Davydov) [PSBM-20089]
  - ub: rm include/bc/kmem.h (Vladimir Davydov) [PSBM-20089]
  - ve/bc/mm: port UB_PRIVVMPAGES, UB_SHMPAGES, and UB_LOCKEDPAGES accounting (Vladimir Davydov) [PSBM-20089]
  - ve/netfilter: Implement pernet net->ct.max / virtualize "nf_conntrack_max" sysctl (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Implement pernet expect_max / virtualize "net.netfilter.nf_conntrack_expect_max" sysctl (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Add pernet permission checks in ip_tables (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Implement net_ipt_permitted() etc (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Implement ip_conntrack_disable_ve0 module option (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "conntrack" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "owner" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "connmark" match / "CONNMARK" target support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "TOS" target support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "tos" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "mark" match and "MARK" target support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "iprange" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Basic ve transformations (Kirill Tkhai) [PSBM-18322]
  - ms/hrtimer: Set expiry time before switch_hrtimer_base() (Viresh Kumar)
  - ms/hrtimer: Prevent remote enqueue of leftmost timers (Leon Ma)
  - ms/module: remove rmmod --wait option. (Rusty Russell) [PSBM-27580 PSBM-27580]
  - ms/bluetooth: never linger on process exit (Vladimir Davydov)
  - bc/io: put beancounter before free (Maxim Patlasov)
  - ve/net/pppoe: fix nil dereference if no VE_FEATURE_PPP present (Cyrill Gorcunov)
  - ve/cgroups: hide toplevel cgroup entry from in /proc/pid/cgroup output (Cyrill Gorcunov) [PSBM-28377]
  - ve/cgroups: don't explicitly remove self destructable ve cgroups (Cyrill Gorcunov)
  - mm: make task with TIF_MEMDIE die faster (Kirill Tkhai)
  - ms/nmi: do not call unblank_screen() from nmi_show_regs() (Kirill Tkhai)
  - mm: add independed bio pool for swapout (Kirill Tkhai) [PSBM-14619]
  - vfs: call statfs on mnt's sb (Kirill Tkhai)
  - fs: add fadvise file_operation (Kirill Tkhai)
  - vfs: take stat's dev from mnt->sb (Kirill Tkhai)
  - vfs: add set_flags wrapper (Kirill Tkhai)
  - ms: unwind changes on shift_arg_pages error path (Kirill Tkhai)
  - ms: skip "relatime" in shmem_parse_options() (Kirill Tkhai)
  - ms: FIGETBSZ ioctl safety checks (Kirill Tkhai)
  - ext4: make data=writeback mode safe (Kirill Tkhai)
  - ext4: quarantee rename atomic behavior (Kirill Tkhai)
  - ms/fs: introduce "fs.relatime_interval" sysctl (Kirill Tkhai)
  - ve/vfs: introduce "odirect_enable" sysctl and disable it by default (Kirill Tkhai)
  - ext4: resplit block_page_mkwrite: fix get-host convention (Kirill Tkhai) [PSBM-16485]
  - blk/ploop: Add BLKPG_GET_PARTITION operation (Kirill Tkhai)
  - ext4/ploop: ask ploop about ENOSPC condition (Kirill Tkhai)
  - Subject: ve/futex/timeout: adjust futex timeout to absolule (Kirill Tkhai) [PSBM-14471]
  - ve/posix-timers: reference ve monotonic clock from ve start (v2) (Kirill Tkhai) [PSBM-13860]
  - x86: vdso: add sysctl to disable vdso for gettime monotonic (Kirill Tkhai) [PSBM-13860]
  - ve/posix-timers: reference ve monotonic clock from start in clock_nanosleep (Kirill Tkhai)
  - bc/io: set and release ioc->ioc_ub (Maxim Patlasov) [PSBM-15568]
  - oom: Show writeback_temp stats in oom message (Maxim Patlasov)
  - fuse: fix erroneous unlock_page() in fuse_send_writepages() (Maxim Patlasov)
  - fuse: release cleanup (Maxim Patlasov)
  - fuse: fix deadlock in fuse_flush() (Maxim Patlasov) [PSBM-29381]
  - fuse: invalidate_files backward compatibility mode (Maxim Patlasov)
  - fuse: fix writeback/release race (Maxim Patlasov) [PSBM-26148]
  - fuse: report details of aio failure (Maxim Patlasov) [PSBM-23696]
  - fuse: fail lost-lease notification if async_read (Maxim Patlasov)
  - fuse: skip waiting for fuse writeback (Maxim Patlasov)
  - fuse: prevent queueing new requests after (Maxim Patlasov)
  - fuse: kill requests on "lost-lease" event (Maxim Patlasov)
  - fuse: pass "fc" to fuse_invalidate_files() (Maxim Patlasov)
  - fuse: add "killed" bit to fuse request (Maxim Patlasov)
  - fuse: add page_cache bit to fuse request (Maxim Patlasov)
  - fuse: the list of all opened files (Maxim Patlasov)
  - fuse: do not flush files opened ro (Maxim Patlasov) [PSBM-20562]
  - fuse: add mount option to disable close_wait (Maxim Patlasov)
  - fuse: make umount synchronous (Maxim Patlasov) [PSBM-19305]
  - fuse: print initialized flag in conn info (Maxim Patlasov)
  - fuse: extend report on pstorage errors (Maxim Patlasov)
  - fuse: do not use RELEASE on directory (Maxim Patlasov) [PSBM-17195]
  - fuse: add missed fuse_file_put() (Maxim Patlasov)
  - fuse: cleanups in fuse writeback (Maxim Patlasov) [PSBM-16442 PSBM-16442]
  - fuse: implement invalidate_files notification (Maxim Patlasov) [PSBM-16105]
  - fuse: report size from server if no openers exist (Maxim Patlasov) [PSBM-15941]
  - fuse: write_begin() should wait for writeback (Maxim Patlasov)
  - fuse: account read/write requests into iopslimit (Maxim Patlasov)
  - fuse: improve bdi dirty memory limits for fuse (Maxim Patlasov) [PSBM-13700]
  - fuse: enable async_dio for pcs (Maxim Patlasov)
  - fuse: optimize fuse_vma_close() (Maxim Patlasov)
  - fuse: do not oops in fuse writepage (Maxim Patlasov) [PSBM-10752]
  - fuse: increment BDI_WRITEOUT for each page (Maxim Patlasov)
  - fuse: remove extra write_update (Maxim Patlasov) [PSBM-18167]
  - fuse: account directio requests into ioacct (Maxim Patlasov)
  - fuse: wire iolimit sleep-hook into directio path. (Maxim Patlasov)
  - fuse: account read/write requests into iostat (Maxim Patlasov)
  - fuse: set num_openers on create (Maxim Patlasov) [PSBM-13820]
  - fuse: i_size to be updated on first open (Maxim Patlasov) [PSBM-13636]
  - fuse: reimplement synchronous close (Maxim Patlasov)
  - fuse: Wait for real writeback to finish on file (Maxim Patlasov)
  - fuse: Dcache is always invalid (Maxim Patlasov)
  - fuse: virtualize context pid (Maxim Patlasov)
  - fuse: some fairness in handling writeback (Maxim Patlasov)
  - fuse: Fuse ctl file with connection info (Maxim Patlasov)
  - fuse: Show open files in fusectl (Maxim Patlasov)
  - fuse: Show active requests in fusectl files (Maxim Patlasov)
  - fuse: fuse-ve-odirect sysctl (Maxim Patlasov) [PSBM-18167]
  - fuse: direct_enable mount option (Maxim Patlasov) [PSBM-18167]
  - fuse: set req->background flag for fuse_writepages (Maxim Patlasov) [PSBM-18167]
  - fuse: kaio support (Maxim Patlasov) [PSBM-18167]
  - fuse: fix compilation for __fuse_readpage() (Maxim Patlasov)
  - fuse: Turn writeback cache on (Maxim V. Patlasov)
  - fuse: Fix O_DIRECT operations vs cached writeback misorder - v2 (Maxim V. Patlasov)
  - fuse: fuse_flush() should wait on writeback (Maxim V. Patlasov)
  - fuse: fuse_writepage_locked() should wait on writeback (Maxim V. Patlasov)
  - fuse: Implement writepages and write_begin/write_end callbacks (Maxim V. Patlasov)
  - fuse: Flush files on wb close (Maxim V. Patlasov)
  - fuse: Trust kernel i_mtime only (Maxim V. Patlasov)
  - fuse: Trust kernel i_size only (Maxim V. Patlasov)
  - fuse: Connection bit for enabling writeback (Maxim V. Patlasov)
  - fuse: Prepare to handle multiple pages in writeback (Maxim V. Patlasov)
  - fuse: Prepare to handle short reads (Maxim V. Patlasov)
  - fuse: Getting file for writeback helper (Maxim V. Patlasov)
  - fuse: Linking file to inode helper (Maxim V. Patlasov)
  - ms/sched: fix_small_imbalance: Fix local->avg_load > busiest->avg_load case (Vladimir Davydov) [PSBM-27697]
  - ms/sched: calculate_imbalance: Fix local->avg_load > sds->avg_load case (Vladimir Davydov) [PSBM-27697]
  - nfs/ioacounting: ported skipped code for read/write io accounting (Andrey Smetanin) [PSBM-27695]
  - ve/printk: define some log_* symbols for kdump (Vladimir Davydov)
  - mm: don't forget to set softdirty on file mapped fault (Cyrill Gorcunov)
  - mm: softdirty: clear VM_SOFTDIRTY flag inside clear_refs_write() instead of clear_soft_dirty() (Cyrill Gorcunov)
  - mm: softdirty: don't forget to save file map softdiry bit on unmap (Cyrill Gorcunov)
  - mm: softdirty: make freshly remapped file pages being softdirty unconditionally (Cyrill Gorcunov)
  - idr: fix overflow bug during maximum ID calculation at maximum height (Lai Jiangshan)
  - ve/idr: correctly alloc/release ve->veid from ve_idr (Andrey Smetanin) [PSBM-28031]
  - ub: use d_set_d_op to init ub ops (Vladimir Davydov)
  - ve/devtmpfs: pass proper options string (Cyrill Gorcunov)
  - ve/idr: fix WARN_ON(1) at ve_list_del: move idr_remove(&ve_idr, ve->veid) from ve_offline to ve_destroy (Andrey Smetanin)
  - mm/vps_dumpable: naming and description for task->mm->vps_dumpable values (Andrey Smetanin) [PSBM-20666]
  - vzstat: export symbols KSTAT_LAT_*_UPDATE funcs to be usable by our private vzmodules (Andrey Smetanin)
  - ubc/net: remove unused variable from neigh_periodic_work() (Konstantin Khorenko)
  - epoll: fix use-after-free in eventpoll_release_file (Konstantin Khlebnikov)
  - radix-tree/filemap: fix prev tag not set after deleting direct slot (Vladimir Davydov)
  - radix-tree/filemap: clear prev tag when deleting page from page cache (Vladimir Davydov)
  - fs/ceph: add BUG_ON to iov_iter access (Maxim Patlasov) [PSBM-34911]
  - fs/ceph: honor kernel direct aio changes (Konstantin Khorenko)
  - fs: kernel direct aio (Dmitry Monakhov) [PSBM-18169 PSBM-42312]
  - ploop/fairsched/io_prio: compilation fixes (Cyrill Gorcunov)
  - all: compilation fixes (Konstantin Khorenko)
  - VE/VFS: use sb->s_ns member to store namespace for mount_ns() calls (Konstantin Khorenko)
  - radix-tree: hunks left from initial combined patch added (Vladimir Davydov) [PSBM-18056 PSBM-27696]
  - quota/compat: move compat stuff from quota.h to compat.h (Konstantin Khorenko)
  - ubc/net: recharge skb in tcp_fragment() only (Konstantin Khorenko)
  - config.OpenVZ: OpenVZ related config options are added (Konstantin Khorenko)
  - config.OpenVZ: added symlinks to kernel config and debug config (Konstantin Khorenko)
  - bc/memcontrol: fix per-bc memcg pages output (Stanislav Kinsbursky) [PSBM-26039]
  - fairsched: add missing close in sys_fairsched_mknod (Vladimir Davydov)
  - drivers/core/sysfs: respect ns when removing sys dev link (Vladimir Davydov) [PSBM-25801]
  - nfsd/sunrpc/mqueue: use sb->s_ns instead of data in fill_super (Vladimir Davydov) [PSBM-25107]
  - ve/cgroups: add missing list_del(cgroup_ve_list) on error path (Vladimir Davydov) [PSBM-24622]
  - ve: get rid of get_ve_by_name() (Vladimir Davydov) [PSBM-24622]
  - ve: allocate ids on cgroup create (Vladimir Davydov) [PSBM-24622]
  - ve: get rid of __ve_name (Vladimir Davydov) [PSBM-24622]
  - venet: fix compilation (Vladimir Davydov) [PSBM-24622]
  - Revert "VE/NET: replace veid with ve_name in veip_struct" (Vladimir Davydov) [PSBM-24622]
  - mm: ignore VM_SOFTDIRTY on VMA merging (Cyrill Gorcunov)
  - ve/cgroups: use cgroup subsystem names only if in vz compat mode (Vladimir Davydov) [PSBM-22882]
  - ve/pid_ns: do not panic on kthreads when reaping external tasks on zap pid_ns (Vladimir Davydov)
  - fairsched: fix nasty typos (Dmitry Guryanov)
  - kmod: add header inclusion (Stanislav Kinsbursky)
  - stat: add header inclusion (Stanislav Kinsbursky)
  - vzstat: move code to source file (Stanislav Kinsbursky)
  - ve/proc: add empty "partitions" entry (Stanislav Kinsbursky) [PSBM-18889]
  - ve/devpts: cleanup per-VE creation (Stanislav Kinsbursky)
  - ve: containerize tty and console devices (Stanislav Kinsbursky) [PSBM-20100]
  - ve/tty: containerize ttys and console devices (Stanislav Kinsbursky)
  - tty: split tty's and console init routines (Stanislav Kinsbursky)
  - ve/pid_ns: reap zombies with external parent on container's init exit (Stanislav Kinsbursky)
  - ve/umh: make it ve-stopping safe (Stanislav Kinsbursky)
  - ve: remove ve_mutex (Stanislav Kinsbursky)
  - sched: use LBF_SOME_PINNED to balance tasks among vcpus (Vladimir Davydov)
  - ve/umh: fix NULL pointer dereference in VE0 (Stanislav Kinsbursky)
  - ve/pty: containerize Unix98 pty drivers (Stanislav Kinsbursky) [PSBM-20100]
  - ve/pty: containerize Unix98 driver (Stanislav Kinsbursky)
  - pty: split Unix98 init routines (Stanislav Kinsbursky)
  - ve/pty: containerize legacy pty drivers (Stanislav Kinsbursky) [PSBM-20100]
  - ve/pty: containerize legacy driver (Stanislav Kinsbursky)
  - pty: split legacy init routines (Stanislav Kinsbursky)
  - devtmpfs: containerize it with new obj ns operation (Stanislav Kinsbursky)
  - fs: add data pointer to mount_ns() (Stanislav Kinsbursky)
  - ve/tty: register containerized tty drivers only on global VE (Stanislav Kinsbursky)
  - ve/tty: add tty_cdev_del helper (Stanislav Kinsbursky)
  - ve/tty: make tty_class VE-namespace aware (Stanislav Kinsbursky)
  - ve: do not set VE_MEMINFO_DEFAULT to VE0 on ve_create (Vladimir Davydov)
  - fairsched: mount cpuacct together with cpu (Dmitry Guryanov)
  - bc: mount mem and blkio subsystems separately (Dmitry Guryanov)
  - bc: create separate cgroup for mem and blkio hierarchies (Dmitry Guryanov)
  - fairsched: mount cpu and cpuset separately (Dmitry Guryanov)
  - fairsched: don't use common root cgroup in fairsched.c (Dmitry Guryanov)
  - ve: split beancounter hierarchy (Dmitry Guryanov)
  - ve/cgroups: don't use common root cgroup in vecalls.c (Dmitry Guryanov)
  - ve/cgroups: don't mount freezer subsystem (Dmitry Guryanov)
  - ve/cgroups: add functions ve_cgroup_open and ve_cgroup_remove (Dmitry Guryanov)
  - ve/sunrpc: use correct pointer to net_namespace in auth_gss.c (Dmitry Guryanov)
  - tty: don't try to free termios if TTY_DRIVER_DEVPTS_MEM is set (Stanislav Kinsbursky)
  - ve/sysfs: make dev/char/ directory tagged with VE tag (Stanislav Kinsbursky)
  - ve/sysfs: allow symlinks between tagged and generic directories (Stanislav Kinsbursky)
  - ve/kobject: new type for VE-aware object introduced (Stanislav Kinsbursky)
  - ve/kobject: introduce new namespace tag and operations for VE (Stanislav Kinsbursky)
  - ve/vzstat: move code to source file and cleanup headers (Stanislav Kinsbursky)
  - ve/vzstat: port vzstat bits from rh6 (Vladimir Davydov)
  - ve/sysctl: allow to change mqueue sysctl-s (Andrew Vagin) [PSBM-20102]
  - ve/sysctl: allow to write kernel/hostname and kernel/domainname entries in container (Cyrill Gorcunov) [PSBM-20102]
  - ve/sysctl: allow to write /proc/sys/kernel/$next$ entries in container (Cyrill Gorcunov)
  - devtmpfs: per-VE mounts introduced (Stanislav Kinsbursky) [PSBM-17915]
  - pid: export symbol nex_pidmap (Dmitry Guryanov) [PSBM-20095]
  - dcache: d_root_check: allow to proceed on disconnected entries (Kirill Gorkunov)
  - ve/fs: remove ve_proto.h header from super.c (Stanislav Kinsbursky)
  - mm: /proc/pid/pagemap: inspect _PAGE_SOFT_DIRTY only on present pages (Cyrill Gorcunov)
  - mm: track vma changes with VM_SOFTDIRTY bit (Cyrill Gorcunov)
  - VE/sysrq-trigger: make it VE-namespace aware (Stanislav Kinsbursky) [PSBM-20664]
  - ve/sched: port boosting hacks against prio inversion (Vladimir Davydov) [PSBM-15441]
  - ve/sched: port vcpu hotslice (Vladimir Davydov) [PSBM-16913 PSBM-16913 PSBM-17399]
  - ve/sched: port nr cpus limit (Vladimir Davydov) [PSBM-16856]
  - venet: add venet_free_stat callback (Dmitry Guryanov)
  - sched: calc_load_ve: do not account rt tasks (Vladimir Davydov) [PSBM-22149]
  - config.OpenVZ: enable options required for CRIU (Konstantin Khorenko)
  - mm: do not loose soft dirty bit if page is in migration state (Kirill Gorkunov)
  - Revert "ve: set vps_dumpable for a process, which writes start in ve.state" (Andrew Vagin)
  - VE: don't clear vps_dumpable if ve isn't running (Andrew Vagin)
  - ve: allow to start CT by external processes (v2) (Andrew Vagin)
  - ve: show content of /proc/cgroups if CT isn't running yet (Andrew Vagin)
  - ve: skip d_root_check() for CT0 (Andrew Vagin)
  - kmemcg: don't allocate extra memory for root memcg_cache_params (Andrey Vagin)
  - mm: move_ptes -- Set soft dirty bit depending on pte type (Cyrill Gorcunov)
  - mm: save soft-dirty bits on file pages (Cyrill Gorcunov)
  - mm: save soft-dirty bits on swapped pages (Cyrill Gorcunov)
  - proc-net: mark all files in proc-net directories as virtualized (Vladimir Davydov)
  - proc: mark only net dirs as virtualized by default (Vladimir Davydov)
  - ve: use proc_mkdir for proc dir creation (Vladimir Davydov)
  - fairsched: use proc_mkdir for proc dir creation (Vladimir Davydov)
  - net: remove include/net/netlink_sock.h (Vladimir Davydov)
  - cgroup/cpuset/fairsched: get rid of cgroup_lock (Vladimir Davydov)
  - cgroup: cgroup->top_cgroup => &cgroup->root->top_cgroup (Vladimir Davydov)
  - ve/cgroup: fix compilation (Vladimir Davydov)
  - cpuset: remove unused stuff and fix compilation (Vladimir Davydov)
  - bc/proc: fix compilation (Vladimir Davydov)
  - khleper: fix compilation (Vladimir Davydov)
  - sched: move declaration of cgroup related functions to global header (Vladimir Davydov)
  - all: trivial compilation fixes (Vladimir Davydov)
  - Initial OpenVZ config for 3.10.x branch added, based on kernel-3.10.10-200.fc19 Fedora 19 kernel. (Konstantin Khorenko)
  - veth: Make it carry NETIF_F_VIRTUAL (Cyrill Gorcunov)
  - ve/cgroup: delete VE cgroup on the error path (Andrew Vagin) [PSBM-21953]
  - pfcache: do not ignore TTU_MUNLOCK in try_to_unmap_file() (Maxim Patlasov)
  - pfcache: iterate peer list only for shared pages (Maxim Patlasov)
  - pfcache: release path if dentry_open() failed (Maxim Patlasov)
  - pfcache: check root path in ext4_open_pfcache() (Maxim Patlasov)
  - ve/devcgroup: fix mknod permissions - allow to create any dev inside a CT (Vladimir Davydov) [PSBM-21979]
  - pfcache: add hashed peers for ext4 (Konstantin Khlebnikov) [PSBM-20098]
  - pfcache: add generic mapping peers (Konstantin Khlebnikov) [PSBM-20098]
  - mpi: export arithmetic functions required for in-kernel DSA implementation (Konstantin Khorenko)
  - ve/pidns: allow to change ns_last_pid from containers (Andrew Vagin)
  - VENET: add netlink interface for venet (Dmitry Guryanov)
  - mpi: fix compilation (Konstantin Khlebnikov)
  - ms/mpi: revert "Revert "crypto: GnuPG based MPI lib - (Dmitry Kasatkin)
  - ms/mpi: revert "Remove unused code from MPI library" (Dmitry Kasatkin)
  - ve: convert get/put_ve to non-gpl functions (Konstantin Khlebnikov)
  - ve: return back 'down_at' ve_struct field (Konstantin Khlebnikov)
  - VE: add function legacy_name_to_veid (Dmitry Guryanov)
  - VE: fix couple compilation warnings (Konstantin Khlebnikov)
  - ve: set vps_dumpable for a process, which writes start in ve.state (Andrew Vagin)
  - ms/pagemap: prepare to reuse constant bits with page-shift (Pavel Emelyanov)
  - ms/mm: soft-dirty bits for user memory changes tracking (Pavel Emelyanov)
  - ms/pagemap: introduce pagemap_entry_t without pmshift bits (Pavel Emelyanov)
  - ms/clear_refs: introduce private struct for mm_walk (Pavel Emelyanov)
  - ms/proc/clear_refs: sanitize accepted commands declaration (Pavel Emelyanov)
  - ve/sysfs: drop full access for all containers (Konstantin Khlebnikov) [PSBM-20892]
  - ve/sysfs: remove xattr interface to ve permissions (Konstantin Khlebnikov)
  - ve/sysfs: add new interface to control sysfs (Konstantin Khlebnikov)
  - ve: move unlinking ve_sysfs_perms into right function (Konstantin Khlebnikov)
  - nfsd: enable UMH client tracker in a container (Stanislav Kinsbursky)
  - ve: khelper kthread in a container introduced (Stanislav Kinsbursky)
  - ve: introduce kthread_run_ve() helper (Stanislav Kinsbursky)
  - nfsd: containerize kthreads (Stanislav Kinsbursky)
  - ve: kthreads creation facility introduced (Stanislav Kinsbursky)
  - kthread: make of a new kthread's queuing code to a callback (Stanislav Kinsbursky)
  - fs: virtualize devtmpfs file system (Stanislav Kinsbursky)
  - cpuset: do not remove tasks from empty cpusets (Vladimir Davydov)
  - SCHED: rework cputime accounting (v2) (Vladimir Davydov) [PSBM-18113 PSBM-20541]
  - ve/nfsd: virtualize nfsd file system (Stanislav Kinsbursky)
  - ext4: pfcache_csum mount option (Konstantin Khlebnikov)
  - ve: permit full access in sysfs for all containers (Konstantin Khlebnikov)
  - venet: unregister ve cgroup cftypes (Konstantin Khlebnikov)
  - ext4: fix balloon_ino mount option (Konstantin Khlebnikov)
  - VE: add __find_ve_by_name() function (Dmitry Guryanov)
  - misc: remove redundant security check from mmap_min_addr_handler (Konstantin Khlebnikov) [PSBM-18031]
  - VE: use ve environtment for sysctl restrictions (Konstantin Khlebnikov) [PSBM-18032 PSBM-18030]
  - VE: use ve environtment for proc restrictions (Konstantin Khlebnikov) [PSBM-18021]
  - VE: virtualize cgroups (Konstantin Khlebnikov) [PSBM-20665 PSBM-20540]
  - VE/NET: port diff-net-substitute-ve_hook-by-pernet_operations-in-veth (v2) (Vladimir Davydov) [PSBM-20668 PSBM-18176]
  - VE/NET: port diff-net-substitute-ve_hook-by-pernet_operations-in-venet (v2) (Vladimir Davydov) [PSBM-20668 PSBM-18176]
  - VE: uncomment ve_log_init, ve_log_destroy (Vladimir Davydov)
  - VE/PRINTK: rework printk virtualization (v2) (Vladimir Davydov) [PSBM-20669 PSBM-17899]
  - ve: mark /proc/self as virtualized (Konstantin Khlebnikov)
  - mntns: allow changes in init namespace (Konstantin Khlebnikov)
  - devpts: don't require newinstance (Konstantin Khlebnikov)
  - devcgroup: fix default behaviour (Konstantin Khlebnikov)
  - ve: plug broken printk changes (Konstantin Khlebnikov)
  - ve: allow user ns in chroot (Konstantin Khlebnikov)
  - device_cgroup: fix compilation (Konstantin Khlebnikov)
  - oom_groups: fix user-ns uid mangling (Konstantin Khlebnikov)
  - ubc: fix user-ns uid mangling (Konstantin Khlebnikov)
  - UBC: fix compilation (Konstantin Khlebnikov)
  - FS/NAMESPACE: fix compilation (Konstantin Khlebnikov)
  - VENETDEV: fix compilation (Konstantin Khlebnikov)
  - NFSD: fix compilation (Konstantin Khlebnikov)
  - QUOTA: fix compilation (Konstantin Khlebnikov)
  - KMAPSET: fix compilation (Konstantin Khlebnikov)
  - SYSCTL: fix compilation (Konstantin Khlebnikov)
  - SYSFS: fix compilation (Konstantin Khlebnikov)
  - TUN: fix compilation (Konstantin Khlebnikov)
  - NET/PROC: fix compilation (Konstantin Khlebnikov)
  - CGROUPS: fix compilation (Konstantin Khlebnikov)
  - NET/VLAN: fix compilation (Konstantin Khlebnikov)
  - MM: fix compilation (Konstantin Khlebnikov)
  - VE: fix compilation (Konstantin Khlebnikov)
  - UBC/STATD: fix compilation (Konstantin Khlebnikov)
  - COMMON: fix compilation (Konstantin Khlebnikov)
  - CGROUP/FREEZER: revert changes (Konstantin Khlebnikov)
  - VE/DEVICE_CGROUP: fix compilation (Konstantin Khlebnikov) [PSBM-20663]
  - ploop: add ploop to the tree (Maxim V. Patlasov)
  - mm: Account for WRITEBACK_TEMP in balance_dirty_pages (Maxim V. Patlasov)
  - ext4: Provide a balloon nipple for management (Maxim V. Patlasov) [PSBM-41222]
  - ext4: Don't show the active balloon to user (Maxim V. Patlasov)
  - ext4: Teach statfs to report reduced disk usage (Maxim V. Patlasov)
  - ext4: Teach the fs where the balloon inode is (Maxim V. Patlasov)
  - block: export put_io_context_active() (Maxim V. Patlasov)
  - VE/NET: add ip_list file to ve controller (Dmitry Guryanov)
  - VE/NET: provide cgroup interface for venet ip management (Dmitry Guryanov)
  - VE/NET: replace veid with ve_name in veip_struct (Dmitry Guryanov)
  - VE: add __ve_name function (Dmitry Guryanov)
  - VE: add legacy_veid_to_name function (Dmitry Guryanov)
  - VE/PRINTK: check syslog capability in user ns (Vladimir Davydov) [PSBM-17980]
  - VE/MM: show_signal_msg: print vma addr to VE_LOG (Vladimir Davydov)
  - VE: add cgroup attribute ve.legacy_veid (Konstantin Khlebnikov)
  - VE/NET: don't oops in net_generic() on disabled features (Konstantin Khlebnikov)
  - UBC: kill BC_DEBUG_KMEM (Konstantin Khlebnikov)
  - VE/SYSFS: add xattrs to control ve-permissions (Konstantin Khlebnikov)
  - VE/SYSFS: hide forbidden entries in container (Konstantin Khlebnikov)
  - VE/SYSFS: implement ve-based permissions (Konstantin Khlebnikov)
  - KMAPSET: set of key-value mappings with build-in (Konstantin Khlebnikov)
  - VE: implement get_ve_by_name() (Konstantin Khlebnikov)
  - VE: more veid to ve_name conversion (Konstantin Khlebnikov)
  - VE: cgroup interface for starging container (Konstantin Khlebnikov)
  - VE: kill vzmond (Konstantin Khlebnikov)
  - VE: drop devpts superblock in ve_exit_ns (Konstantin Khlebnikov)
  - VE: manage namespaces in ve-cgroup (Konstantin Khlebnikov)
  - VE: manage list of running container in ve-cgroup (Konstantin Khlebnikov)
  - VE: praparation for non-numeric veid (Konstantin Khlebnikov)
  - VE: forbid cgroup attach during starting or (Konstantin Khlebnikov)
  - VE: allocate log buffer together with ve_struct (Konstantin Khlebnikov)
  - VE: fix error path in do_env_create() (Konstantin Khlebnikov)
  - VE: implement ve_start_container() (Konstantin Khlebnikov)
  - VE: simplify hooks in zap_pid_ns_processes() (Konstantin Khlebnikov)
  - VE: cleanup setup_iptables_mask() (Konstantin Khlebnikov)
  - VE: remove ve_init_task (Konstantin Khlebnikov)
  - VE: forbid nested containers (Konstantin Khlebnikov)
  - VE: forbids threads in ve_can_attach() (Konstantin Khlebnikov)
  - VE/VZETHDEV: pass ve_struct in veth_dev_start (Andrew Vagin)
  - VE: fix filesystem type permition check (Konstantin Khlebnikov)
  - VE: mark virtual filesystems as virtualized (Konstantin Khlebnikov)
  - VE: cleanup credentials handling (Konstantin Khlebnikov)
  - VE/PROC: mark content of /proc/self/net as virtualized (Konstantin Khlebnikov)
  - VE/BINFTM: fix destruction ordering (Konstantin Khlebnikov)
  - VE/NSPROXY: fix refcounting of init_nsproxy (Andrew Vagin) [PSBM-17904]
  - VE/CPUSET: make [cpus|mems]_allowed be subset of cpuset_[cpus|mems]_allowed (Vladimir Davydov) [PSBM-18531]
  - VE/CPUSET: remove lock in cgroup_set_[cpumask|nodemask] (Vladimir Davydov)
  - VE: export headers to userspace (Dmitry Guryanov)
  - VE: export switch_task_namespaces() (Konstantin Khlebnikov)
  - VE: export nr_threads_ve() (Konstantin Khlebnikov)
  - VE: convert khelper_wq to kthread_worker (Konstantin Khlebnikov)
  - VE: add kthread into container (Konstantin Khlebnikov)
  - VE: convert to cgroup (Konstantin Khlebnikov)
  - VE: move fairsched creation out of op_sem (Konstantin Khlebnikov)
  - VE: cleanup include/linux/ve.h (Konstantin Khlebnikov)
  - VE: remove ve.h from sched.h (Konstantin Khlebnikov)
  - VE: collect basic interface in ve_proto.h (Konstantin Khlebnikov)
  - VE: remove task->owner_env (Konstantin Khlebnikov)
  - VE: remove pcounter (Konstantin Khlebnikov)
  - VE: rework shutdown sequence (Konstantin Khlebnikov)
  - VE: remove set_exec_env() (Konstantin Khlebnikov)
  - VE: remove set_exec_env from vc_screen (Konstantin Khlebnikov)
  - VE: remove set_exec_env() from venet_set_features() (Konstantin Khlebnikov)
  - PIDNS: add proc mount option 'hidepidns=0|1' (Konstantin Khlebnikov)
  - PIDNS: remove sysctl kernel.pid_ns_hide_child (Konstantin Khlebnikov)
  - PIDNS: Make the pidns proc mount/umount logic (Konstantin Khlebnikov)
  - PIDNS: general revert and cleanup (Konstantin Khorenko)
  - PIDNS: implement change_pid_ns() (Konstantin Khlebnikov)
  - VE/CALLS: allow CAP_[SYS|NET]_ADMIN if CAP_VE_[SYS|NET]_ADMIN set (Vladimir Davydov)
  - VE/AUTOFS: port 71-diff-autofs-combined (Dmitry Guryanov)
  - VE/NFS: check VE_FEATURE_NFS is set on mount (Stanislav Kinsbursky)
  - VE/BINFTM: virtualization (Konstantin Khlebnikov)
  - VE/BINFTM: move all internal data to structure (Stanislav Kinsbursky)
  - VE/BINFTM: remove all old containerization code (Stanislav Kinsbursky)
  - VE/NFS: mark NFS as containerized (Stanislav Kinsbursky) [PSBM-18170]
  - VE/SUNRPC: mark SUNRPC PipeFS as containerized (Stanislav Kinsbursky) [PSBM-18170]
  - VE/FS: containerize filesystems access (Stanislav Kinsbursky)
  - VFS: revert changes around vfsmount namespaces (Konstantin Khlebnikov)
  - VE/FS: allow mountpoint operations for CAP_VE_SYS_ADMIN (Konstantin Khlebnikov)
  - VE/FS: allow to mknod inside ct (Vladimir Davydov)
  - config.OpenVZ: enable in-kernel crypto DSA code (Konstantin Khorenko)
  - config.OpenVZ: enable CONFIG_LEGACY_PTY_COUNT and CONFIG_NETLINK_DIAG (Konstantin Khorenko)
  - config.OpenVZ: enable CONFIG_LEGACY_PTYS (Konstantin Khorenko)
  - config.OpenVZ: remove CONFIG_BC_DEBUG_KMEM and CONFIG_VZ_CHECKPOINT (Konstantin Khorenko)
  - Initial OpenVZ config added, based on kernel-3.6.11-5.fc17 Fedora 17 kernel. (Konstantin Khorenko)
  - FAIRSCHED: allow writing to cpus_allowed and mems_allowed (Dmitry Guryanov)
  - VE/SCHED: remove sched stats from ve_task_info (Vladimir Davydov)
  - SCHED: account forks per task group (Vladimir Davydov) [PSBM-18113 PSBM-18113]
  - SCHED: account ctxsw per task group (Vladimir Davydov) [PSBM-18113 PSBM-18113]
  - FAIRSCHED: get rid of cgorup cpuacct subsys (Vladimir Davydov) [PSBM-18113]
  - SCHED: fix nr_sleeping accounting (Vladimir Davydov) [PSBM-18113]
  - SCHED: fix nr_iowait accounting (Vladimir Davydov) [PSBM-18113]
  - DEVPTS: handle early ptmx open (Konstantin Khlebnikov)
  - VE/PTRACE: simplify pid-ns hack (Konstantin Khlebnikov)
  - VE: allow reboot in container (Konstantin Khlebnikov)
  - VE: cleanup hacks in signal handling (Konstantin Khlebnikov)
  - VE: use pid-ns reboot event (Konstantin Khlebnikov)
  - VE: remove switching context in irq_enter/leave (Konstantin Khlebnikov)
  - VE/USERNS: setup equal uid mapping (Konstantin Khlebnikov)
  - VE: fix lockdep warning in ve_task_ppid_nr_ns() (Konstantin Khlebnikov)
  - VE: filter zap_ve_processes() (Konstantin Khlebnikov)
  - VECALLS: simplify legacy-devpts virtualization (Konstantin Khlebnikov)
  - VE/SYSCTL: ignore writes to sysctl vm.mmap_min_addr by (Konstantin Khlebnikov)
  - VE/SYSCTL: fixup virtualized sysctls (Konstantin Khlebnikov)
  - VE/SYSCTL: implement virtualized methods (Konstantin Khlebnikov)
  - VE/SYSCTL/IPC: mark as virtualized (Konstantin Khlebnikov)
  - VE/PROC/SYSCTL: show real permissions in stat (Konstantin Khlebnikov)
  - VE/SYSCTL: write permission restriction (Konstantin Khlebnikov) [PSBM-18022]
  - VE/PROC/UPTIME: fix task_cgroup() usage out of rcu protection (Konstantin Khlebnikov)
  - VE/PROC: show /proc/filesystems in container (Konstantin Khlebnikov)
  - VE/PROC: unblock more proc entries (Konstantin Khlebnikov) [PSBM-18889]
  - VE/PROC: unblock sysvipc interface (Konstantin Khlebnikov)
  - VE/PROC: fix bug in proc_readdir_de() (Konstantin Khlebnikov)
  - VE/PROC: replace glob_proc_root with S_ISVTX (Konstantin Khlebnikov)
  - VE/PROC: resticted proc-entries scope (Konstantin Khlebnikov) [PSBM-18019]
  - VE/DCACHE: reimplement d_root_check (Konstantin Khlebnikov)
  - VE/KOBJ: add function for send uevent in a currect exec_env only (Andrey Vagin)
  - VZPRIVNET: cache filtering result on dst (Pavel Emelyanov)
  - MISC: port of diff-misc-bits-2 (Dmitry Guryanov)
  - FS/QUOTA: Compatibility with older quotactl interface (Dmitry Guryanov)
  - UBC/SHMEM: remove beancounter (Konstantin Khlebnikov)
  - UBC/MEMCG: fix typo in mem_cgroup_apply_beancounter (Dmitry Guryanov)
  - UBC/MEMCG: change memsw before and after chaing memory (Konstantin Khlebnikov)
  - UBC/MEMCG: reset memsw limit before setting mem limit (Vladimir Davydov)
  - UBC: remove beancounter from struct pid (Konstantin Khlebnikov)
  - UBC: link with kmem controller (Konstantin Khlebnikov)
  - UBC: fix lost retval in memcg-ub link layer (Vladimir Davydov)
  - UBC: cleanup permission checks (Konstantin Khlebnikov)
  - UBC: tie beancounter and memory-cgroup together (Konstantin Khlebnikov)
  - UBC: link memcg with beancounter (Konstantin Khlebnikov)
  - VE/UBC/MM: enable memcg (Konstantin Khlebnikov)
  - mm: account all page tables for mm (Konstantin Khlebnikov)
  - simfs: to be substituted by bindmounts (Maxim V. Patlasov) [PSBM-18885 PSBM-18885 PSBM-34494 PSBM-20810]
  - MS/SIMFS: export statfs_by_dentry (Konstantin Khlebnikov)
  - VE/PRINTK: make log_from_idx, log_next use non-virtualized log_buf (Vladimir Davydov)
  - VE/PRINTK: printk virtualization (Vladimir Davydov) [PSBM-17899]
  - VE/NET: unblock net-namespaces (Konstantin Khlebnikov)
  - VE/NET: Allow userns root to control ppp device (Vladimir Davydov)
  - VE/NET: more get_exec_env() cleanups (Konstantin Khlebnikov)
  - VE/NET: hold ve ref until net is destroyed (Vladimir Davydov)
  - VE/NET: drop tcp_time_stamp fixup (Konstantin Khlebnikov)
  - VENET: cleanup owner_env references (Konstantin Khlebnikov)
  - VZETH: cleanup owner_env references (Konstantin Khlebnikov)
  - VE/NET: switch vz_security_*_check to netns (Konstantin Khlebnikov)
  - VE/NET: remove sysfs-related hacks for netdev (Konstantin Khlebnikov)
  - VE/NET: port of VZ VENET device (Stanislav Kinsbursky)
  - VE/NET: port of VZ VETH device (Stanislav Kinsbursky)
  - MS/PIDNS: don't force SIGKILL to tasks on child reaper death (Stanislav Kinsbursky)
  - MS/CGROUP: port kernel api (Vladimir Davydov) [PSBM-17927 PSBM-16529]
  - MS/CGROUP: self-destruction (without userspace helpers) (Konstantin Khlebnikov)
  - MS/CGROUP: export cgroup_kernel_close (Konstantin Khlebnikov)
  - cgroup: forbid mounting cgroups inside ve (Vladimir Davydov)
  - cgroup: adds kernel api stubs (Konstantin Khlebnikov)
  - cgroup: kernel api stubs (Konstantin Khlebnikov) [PSBM-17927]
  - x86/SYSCALL: remove sys32 vm86 warning (Dmitry Guryanov)
  - x86/NMI: introduce dumps via nmi (Dmitry Guryanov)
  - Initial patch commit + compilation fixes (Konstantin Khorenko) [PSBM-33584 PSBM-17651 PSBM-17886 PSBM-17909 PSBM-17918 PSBM-17915 PSBM-17917 PSBM-17914 PSBM-17902 PSBM-17924 PSBM-17926 PSBM-17924 PSBM-17918 PSBM-17930 PSBM-17931 PSBM-17945 PSBM-17960 PSBM-17971 PSBM-18875 PSBM-18876 PSBM-18877 PSBM-17908 PSBM-18878 PSBM-18879 PSBM-18056 PSBM-18882 PSBM-18884 PSBM-18899 PSBM-31125 PSBM-12955 PSBM-20089 PSBM-20089 PSBM-12523 PSBM-41530 OVZ-6600 OVZ-5192]
  - LICENSE: introduce COPYING.Parallels (Dmitry Guryanov)
  - MS/KBD: add file kbd_bind in sysfs, which allow unbind keyboard from tty (v2) (Andrey Vagin)
  - MS/DEVICE: input_mutex isn't static now (Andrey Vagin)
  - MS/NET/IPV6: remove duplicate neigh_ifdown (Vladimir Davydov) [PSBM-13449]
  - MS/MM/SLAB: show slab_info core (Dmitry Guryanov)
  - MS/NSPROXY: removing helper for restoring nsproxy (Konstantin Khlebnikov)
  - MS/IDLE: add boot param to forcibly enable intel auto demotion (Vladimir Davydov) [PSBM-11477]
  - MS/TTY: TIOSAK Secure Attention Key ioctl (Konstantin Khlebnikov) [PSBM-11881]
  - MS/FS/PROC: Drop the MS_RDONLY bit in proc_get_sb() (Stanislav Kinsbursky)
  - MS/FS/DCACHE: move vfs caches to headers (Dmitry Guryanov)
  - MS/DRV: move dev helpers to header (Andrey Vagin)
  - KBUILD: build should fail on modpost errors for external modules (Konstantin Khlebnikov)


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.10.1.vz7.12.2]
changelog:
  - ms/fs: Add a missing permission check to do_umount (Pavel Tikhomirov) [PSBM-43294]
  - ms/mnt: Only change user settable mount flags in remount (Pavel Tikhomirov) [PSBM-43294]
  - ms/fs/super.c: fix WARN on alloc_super() fail path (Pavel Tikhomirov) [PSBM-43294]
  - ms/ipv4: Don't do expensive useless work during inetdev destroy. (David Miller) [PSBM-42414]
  - Revert "config.OpenVZ: show Odin's logo on boot" (Konstantin Khorenko) [PSBM-44739]
  - Revert "ve/video/logo: show Odin's logo on boot" (Konstantin Khorenko) [PSBM-44739]
  - ve/fs/sync: fix CT's mountpoints traversal (Andrey Ryabinin) [PSBM-44125 PSBM-44684]
  - ve: remove sync_mutex (Andrey Ryabinin)
  - memcg: ignore memory.low for cgroups w/o tasks (Vladimir Davydov) [PSBM-44192]
  - ms/userns, pidns: Force thread group sharing, not signal handler sharing. (Eric W. Biederman) [PSBM-44152]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.10.1.vz7.12.3]
changelog:
  - ploop: use FALLOC_FL_CONVERT_UNWRITTEN in io_direct (Maxim Patlasov) [PSBM-22381]
  - ploop: replace BLOCK_UNINIT (Maxim Patlasov) [PSBM-22381]
  - ploop: fix direct_io prealloc checks (Maxim Patlasov) [PSBM-22381]
  - ploop: update gendisk disk_stats (Maxim Patlasov) [PSBM-41247]
  - ms/af_unix: Guard against other == sk in unix_dgram_sendmsg (Rainer Weikusat) [PSBM-43080]
  - ms/mm: slab: free kmem_cache_node after destroy sysfs file (Dmitry Safonov) [PSBM-43010]
  - ms/slub: do not assert not having lock in removing freed partial (Steven Rostedt) [PSBM-43010]
  - ms/slub: use lockdep_assert_held (Peter Zijlstra) [PSBM-43010]
  - ext4: rename fallocate(FALLOC_FL_CONVERT_AND_EXTEND) (Maxim Patlasov) [PSBM-22381]
  - ext4: rework fallocate(FALLOC_FL_CONVERT_AND_EXTEND) (Maxim Patlasov) [PSBM-22381]
  - vfs: fix fallocate(FALLOC_FL_CONVERT_AND_EXTEND) (Maxim Patlasov) [PSBM-22381]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.10.1.vz7.12.4]
changelog:
  - ve/cgroup: Allow to write to several safe cgroup files from CT (Pavel Tikhomirov) [PSBM-44981]
  - ve/cgroup: Prohibit access to toplevel cgroups in CT (Pavel Tikhomirov) [PSBM-44981]
  - vzprivnet: Enable module in configs (Pavel Tikhomirov) [PSBM-43685]
  - vzprivnet: Do not execute vzprivnet_hook inside CT (Pavel Tikhomirov) [PSBM-35111]
  - vzprivnet: Set GPL license (Pavel Tikhomirov)
  - vzprivnet: rt cache drop on vzprivnet update (Pavel Tikhomirov) [PSBM-28881]
  - vzprivnet: Incorrect return value in vzprivnet_hook() (Pavel Tikhomirov) [PSBM-28845]
  - vzprivnet: Check that vzprivnet6_lookup() returns not NULL (Pavel Tikhomirov) [PSBM-8734]
  - vzprivnet6: Interpret zero address as internet (Pavel Tikhomirov) [PSBM-8734]
  - vzprivnet6: Legacy mode support (Pavel Tikhomirov)
  - vzprivnet6: Switch to radix tree (Pavel Tikhomirov)
  - vzprivnet6: Remove hash references (Pavel Tikhomirov)
  - vzprivnet: Allow internet access for weak private networks (Pavel Tikhomirov)
  - vzprivnet: Introduce constants for weakness (Pavel Tikhomirov)
  - vzprivnet: Catch v4 conflict on add (Pavel Tikhomirov) [PSBM-6404 PSBM-7345]
  - vzprivnet6: Don't handle neighbor solicit packets in bridge (Pavel Tikhomirov) [PSBM-7078]
  - vzprivnet: Filter VM/CT to Host traffic (Pavel Tikhomirov) [PSBM-6404]
  - vzprivnet6: Mask the jhash value to fit the chain into one page - fix hash access (Pavel Tikhomirov)
  - vzprivnet: Check for bridged skbs in privnet properly (Pavel Tikhomirov) [PSBM-6635]
  - vzprivnet: Handle bridged skbs in ipv4 privnet (Pavel Tikhomirov) [PSBM-6459 PSBM-6448 PSBM-6444]
  - vzprivnet6: Use rh6 kapi (Pavel Tikhomirov)
  - vzprivnet: Hash sets for ipv6 privnet (Pavel Tikhomirov)
  - vzprivnet: Initial implementation of v6 privnets (Pavel Tikhomirov)
  - vzprivnet: Add stuff required for ipv6 support (Pavel Tikhomirov)
  - vzprivnet: Bad retcode on IP add conflict (Pavel Tikhomirov)
  - vzprivnet: Fix privnet object leak (Pavel Tikhomirov)
  - vzprivnet: Weak sparse networks (Pavel Tikhomirov)
  - vzprivnet: Flush rt cache each time rules change (Pavel Tikhomirov)
  - vzprivnet: Add the classifier proc file (Pavel Tikhomirov)
  - vzprivnet: Introduce basic statistics (Pavel Tikhomirov)
  - vzprivnet: Sparse privnets support (Pavel Tikhomirov)
  - vzprivnet: Netmask byte order toss (Pavel Tikhomirov)
  - vzprivnet: Legacy tree core isolation (Pavel Tikhomirov)
  - vzprivnet: Rework proc structure (Pavel Tikhomirov)
  - vzprivnet: Cache filtering result on dst (Pavel Tikhomirov)
  - vzprivnet: Split privnet descriptor into 2 parts (Pavel Tikhomirov)
  - vzprivnet: Include the last IP of the range into checks (Pavel Tikhomirov)
  - vznetfilter/vzprivnet: Combined patch (Pavel Tikhomirov) [PSBM-43685]
  - dcache: zap dentry_lru_del() (Vladimir Davydov)
  - ms/dcache: don't remove from shrink list in select_collect() (Al Viro) [PSBM-44210]
  - ms/dcache: dentry_kill(): don't try to remove from shrink list (Vladimir Davydov) [PSBM-44210]
  - ve/tty: vtty -- Drop TTY_PINNED_BY_OTHER bit (Cyrill Gorcunov)
  - block: suppress hard lockup warning in elv_drain_elevator (Vladimir Davydov) [PSBM-44480]
  - ms/kernel/watchdog.c: touch_nmi_watchdog should only touch local cpu not every one (Ben Zhang)
  - tmpfs: shmem_fallocate must return ERESTARTSYS (Maxim Patlasov) [PSBM-43399]
  - ploop: must acquire write access on space allocation (Maxim Patlasov) [PSBM-20150]
  - exit: clear TIF_MEMDIE after exit_task_work (Vladimir Davydov) [PSBM-44683]
  - ve/memcg: do not ignore oom_guarantee for unlimited cgroups (Vladimir Davydov) [PSBM-44683]
  - debug/scsi: debug Scsi_Host recovery (Maxim Patlasov) [PSBM-44228]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.12]
changelog:
  - ve: drop xattr policy toggle (Stanislav Kinsburskiy) [OVZ-6409]
  - ploop: push_backup: rework lockout machinery (Maxim Patlasov) [PSBM-47680 PSBM-47680]
  - Revert "ploop: push_backup must pass READs intact" (Maxim Patlasov) [PSBM-47680 PSBM-47680 PSBM-46775]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.13]
changelog:
  - net/skbuff: fix skb_clone() (Andrey Ryabinin) [PSBM-38924 PSBM-47290]
  - ve/netfilter/ipset: allow modules autoload (Pavel Tikhomirov) [PSBM-46102]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.14]
changelog:
  - ms/kmod: remove false positive warning "waiting module removal not supported: please upgrade" (Rusty Russell) [PSBM-27580 OVZ-6748 PSBM-47877]
  - ploop: push_backup: PLOOP_PEEK mode of ioctl(PLOOP_IOC_PUSH_BACKUP_IO) (Maxim Patlasov) [PSBM-47764]
  - cbt: blk_cbt_update_size() must return if cbt->block_max not changed (Maxim Patlasov)
  - cbt: blk_cbt_update_size() should not copy uninitialized data (Maxim Patlasov) [PSBM-48120]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.15]
changelog:
  - ve/vtty: Don't free console mapping until no clients left (Cyrill Gorcunov) [PSBM-39463]
  - fs: do not allow rootfs umount (Vasily Averin) [PSBM-46437]
  - ms/kernel/sysrq: restore touch_nmi_watchdog() in show_state_filter() (Andrey Ryabinin) [PSBM-47486]
  - ploop: fix gendisk disk_stats to be seen on partition (Maxim Patlasov) [PSBM-48266]
  - modules: set module author for Virtuozzo modules (Konstantin Khorenko) [PSBM-43847]
  - ploop: "Parallels loopback device" -> "Virtuozzo loopback device" (Konstantin Khorenko) [PSBM-43847]
  - license: put correct copyrights into file headers (Konstantin Khorenko) [PSBM-43847]
  - license: drop COPYING.Parallels file (Konstantin Khorenko) [PSBM-43847]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.16]
changelog:
  - netlink/diag: report flags for netlink sockets (Andrey Vagin) [PSBM-28386]
  - netlink: add an ability to restore messages in a receive queue (Andrey Vagin) [PSBM-28386]
  - netlink: allow to set peeking offset for sockets (Andrey Vagin) [PSBM-28386 PSBM-48484 PSBM-28386]
  - ploop: io_kaio: fix silly bug in kaio_complete_io_state() (Maxim Patlasov)
  - ploop: fix counting bio_qlen (Maxim Patlasov)
  - ve/device_cgroup: kill ACC_QUOTA permission (Andrey Ryabinin) [PSBM-48482]
  - ve/device_cgroup: allow to change device mount permission via cgroup (Andrey Ryabinin) [PSBM-48431]
  - ve/security: device_cgroup -- Allow manage devices in @pseudosuper state (Cyrill Gorcunov) [PSBM-48421]
  - ve/sysctl: remove unused fs.ve-area-access-check, net.ipv4.tcp_max_tw* (Pavel Tikhomirov) [PSBM-47061]


author: Vladimir Davydov <vdavydov@virtuozzo.com> [3.10.0-327.18.2.vz7.14.17]
changelog:
  - cgroup: fix path mangling for ve cgroups (Vladimir Davydov) [PSBM-48629]
  - cgroup: use cgroup_path_ve helper in cgroup_show_path (Vladimir Davydov)
  - Drop fairsched syscalls (Vladimir Davydov)
  - Use ve init task's css instead of opening cgroup via vfs (Vladimir Davydov) [PSBM-48629]
  - Drop VZCTL_ENV_CREATE (Vladimir Davydov)
  - Drop vz_compat boot param (Vladimir Davydov)
  - mm: memcontrol: fix race between kmem uncharge and charge reparenting (Vladimir Davydov) [OVZ-6756]
  - timers should not get negative argument (Vasily Averin) [PSBM-48475]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.18]
changelog:
  - ve: drop not used CAP_VE_ADMIN and CAP_VE_NET_ADMIN (Vladimir Davydov)
  - ploop: fix barriers for ordinary requests (Maxim Patlasov)
  - ms/mm: memcontrol: reclaim when shrinking memory.high below usage (Johannes Weiner) [PSBM-48546]
  - rh/locks: check for fl->fl_owner != filp in show_fd_locks (Stanislav Kinsburskiy) [PSBM-48727]
  - ve/fs: namespace -- Ignore device permissions during restore (Cyrill Gorcunov) [PSBM-48188]
  - ve: mark DEF_PERMS feature deprecated (Evgenii Shatokhin) [PSBM-40280]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.20]
changelog:
  - ve/net: sit: fix crash on newlink if VE_FEATURE_SIT is disabled (Vladimir Davydov)
  - ve/net: ipip: fix crash on newlink if VE_FEATURE_IPIP is disabled (Vladimir Davydov)
  - ve/net: ip_vti: skip per net init in ve (Vladimir Davydov) [PSBM-48698]
  - ve/net: ipip: enable in container (Vladimir Davydov) [PSBM-48608]
  - ve/fs: namespace -- Don't fail on permissions if @ve->devmnt_list is empty (Cyrill Gorcunov) [PSBM-48188]
  - ploop: deadcode cleanup in dio_submit() (Dmitry Monakhov)
  - ploop: skip redundant fsync for REQ_FUA in post_submit (Dmitry Monakhov)
  - ve/net: enable IPPROTO_ICMP inside Containers (Vasily Averin) [OVZ-6744 PSBM-47413]
  - ve/fairsched: Resurrect proc fairsched files (Vladimir Davydov) [PSBM-48824]
  - ve/binfmt_misc: Allow mount if capable(CAP_SYS_ADMIN) (Kirill Tkhai) [PSBM-47737]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.21]
changelog:
  - ploop: push_backup: implement timeout functions (Maxim Patlasov) [PSBM-48082]
  - ploop: push_backup: health monitor thread (Maxim Patlasov) [PSBM-48082]
  - ploop: push_backup: add timeout tunable (Maxim Patlasov)
  - ploop: push_backup: extend pb_set (Maxim Patlasov)
  - ploop: push_backup: factor rb_erase() out (Maxim Patlasov)
  - ploop: push_backup: introduce pb_set structure (Maxim Patlasov) [PSBM-48082 PSBM-48082]
  - ploop: fixup barrier handling during relocation (Maxim Patlasov)
  - ploop: fix barriers for PLOOP_E_RELOC_NULLIFY (Maxim Patlasov)
  - ploop: generalize issue_flush (Dmitry Monakhov)
  - ploop: remove preflush from dio_submit (Maxim Patlasov)
  - ploop: resurrect delay_fua for io_direct (Maxim Patlasov)
  - ploop: minor rework of ->write_page() io method (Dmitry Monakhov)
  - ploop: resurrect delayed_fua for io_kaio (Maxim Patlasov)
  - ploop: minor rework of ploop_req_delay_fua_possible (Maxim Patlasov) [PSBM-47107]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-327.18.2.vz7.14.22]
changelog:
  - Revert "ve/vmscan: do not throttle kthreads due to too_many_isolated" (Vladimir Davydov)
  - mm: vmscan: never wait on writeback pages (Vladimir Davydov) [PSBM-48115]
  - ub: account memory overcommit failures in UB_PRIVVMPAGES.failcnt (Andrey Ryabinin) [PSBM-48891]
  - ms/netfilter: x_tables: check for bogus target offset (Cyrill Gorcunov) [PSBM-49001]
  - ms/netfilter: x_tables: validate e->target_offset early (Cyrill Gorcunov) [PSBM-49001]
  - ms/netfilter: x_tables: make sure e->next_offset covers remaining blob size (Florian Westphal) [PSBM-49001]


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-42
changelog:
  - Fix a deadlock with hpc backup solution
  - CLKRN-92: Megaraid driver panic fixes
  - CLKRN-94: Improve a symlink attack protection by checking nested symlinks
  - CLKRN-95: Reduce high-order allocation impact in filesystem mount code
  - CLKRN-97: Fix race condition in common hashtable implementation


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-51
changelog:
  - CLKRN-125: net: netfilter: use vmalloc for ftp_buffer allocation
  - CLKRN-124: mm/memcg, ub: fix overflow in mem_cgroup_apply_beancounter()


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-59
changelog:
  - Updated version to 714 to avoid problems with migration from RHEL/CentOS
  to CloudLinux
  - Code clean-up on working with the filesystem


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-62
changelog:
  - Improved kernel GRUB entry checking, fixing error when initramfs might
  not be added in kernel GRUB entry


author: Sergey Fokin <sfokin@cloudlinux.com> - 1.4-58
changelog:
  - CLKRN-63: make symlinks in /sys/dev/char be visible
  - CLKRN-138: cleanup a cpufreq_cpu_data to avoid access aftre free situation


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-63
changelog:
  - CLKRN-151: fixup disk errors on HyperV hosts
  - CLKRN-149: tcp: check skb tailroom before collapsing


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-64
changelog:
  - CLKRN-128: fs: introduce flag FS_NOTRAVERSAL_FL
  - CLKRN-145: use kern_path call to find target file
  - CLKRN-153: lockref: move lockref counter from unsigned int to signed int


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.4-76
changelog:
  - AL-2163: Reworked detection of the GRUB related issues during kernel installation/update
  - CLKRN-175: register events with different number
  - CLKRN-170: take into account stack_guard_gap value
  - KMODLVE-121: the freezer cgroup is released before closed


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-3.1
changelog:
  - KMODLVE-109: don't allow unlinked lves to block lvp cpu limit change
  - KMODLVE-111: need to print error if cgroup rename or rmdir fails


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-5
changelog:
  - AL-2163: Reworked detection of the GRUB related issues during kernel installation/update
  - CLKRN-175: register events with different number
  - CLKRN-170: take into account stack_guard_gap value
  - KMODLVE-96: allow to use self and default commands for lvp info
  - KMODLVE-119: fix potential errors on exit from LVE by using only one namespace
  - KMODLVE-121: fix module panic on exit by closing freezer cgroup first before releasing it
  - KMODLVE-122: fix kernel crash on init if cgroups mount failed


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-7
changelog:
  - CLKRN-147: fix wrong uncharge in UB0
  - CLKRN-187: ext4: handle the rest of ext4_mb_load_buddy() ENOMEM errors
  - CLKRN-194: fix for CVE-2017-8824
  - CLKRN-195: mm: Count list_lru_one::nr_items lockless


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-8
changelog:
  - Added patches for Meltdown and Spectre attacks (CVE-2017-5753, CVE-2017-5715,
    CVE-2017-5754)
  - KMODLVE-142: resync stats before returning IO usage
  - KMODLVE-141: better make distclean cleanup
  - KMODLVE-140: fix panic with module loading
  - KMODLVE-139: add ability to set debug level in load time
  - KMODLVE-138: properly check lve_cgroup_kernel_open return value
  - KMODLVE-134: code cleanup for better test coverage
  - KMODLVE-131: improve failure IDs handling
  - KMODLVE-127: lvp_lve_move implementation


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-10
changelog:
  - CLKRN-210: fix CVE-2017-5715 [branch target injection] aka 'Spectre Variant 2'
  Fixed SPEC_CTRL and IBPB_SUPPORT features setting after microcode update
  - CLEN-61: restore serialized access to TSC through mfence
  - Restored patch to fix regression and cover CLKRN-172


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-12
changelog:
  - AL-2579: Fixed GRUB checks when system uses UEFI
  - CLKRN-153: fix possible race between dentry_kill and RCU-walk
  - KMODLVE-149: check a notifier pointer while unregistering notifiers


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-13
changelog:
  - CLKRN-219: fixed boot on Xen PV instances
  - CLKRN-230: fix ACL issue on XFS
  - Improved Meltdown/Spectre patch, returned missing chunks


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-14
changelog:
  - AL-2620: Use find-debuginfo.sh script from Fedora to reduce kernel binary RPM compile time
  - CLKRN-240: Fix NULL pointer dereference in __rds_rdma_map
  - CLKRN-234: fix a possible deadlock in the sctp socket diagnostic code
  - CLKRN-235: sched/numa: fixed softlockup in scheduler when running stressed workloads
  - CLKRN-239: fix Xen PV boot


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-15
changelog:
  - CLKRN-238: Fixed memory allocation size during procfs access
  - KMODLVE-92: Added lve ftrace events to improve debugging
  - KMODLVE-145: Check admin permissions while deleting an LVE
  - KMODLVE-153: Fixed a deadlock scenario on LVE destroy
  - KMODLVE-154: Fixed lvp mapping error which leads to inaccessible lvp
  - KMODLVE-155: Fixed incorrect IO counter value in lvetop


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-16
changelog:
  - CLKRN-250: solve the conflict between user ptrace switch and process visilibilty
    controlled by the hidepid option.


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-18
changelog:
  - CLKRN-266: x86/entry/64: Dont use IST entry for #BP stack
  - CLKRN-266: kvm/x86: fix icebp instruction handling


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-19.1
changelog:
  - Added fix for the CVE-2018-8781
  - Added fix for the CVE-2018-10675
  - CLKRN-287: Fix a CPU soft lockup during the path lookup
  - CLKRN-272: Fix kernel crashes in ia32 emulation layer


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-19.4
changelog:
  - CLKRN-315: fix an issue with the task scheduling during cond_resched()
  - KMODLVE-198: fixed stable-1.5 build


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-19.6
changelog:
  - KMODLVE-205: avoid lve kernel module crash on cgroup double removal
  - CLKRN-354: Fixed CVE-2018-14634
  - CLKRN-351: fix kernel crashes in bcache
  - CLKRN-348: Fixed CVE-2018-5391


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-19.8
changelog:
  - KMODLVE-205: create 'immutable' cgroups for UBC
  - KMODLVE-208: fix the lvp tree lock deadlock which leads to kernel
  soflockup and reboot.
  - KMODLVE-203: use lvp global tree to simplify ID management
  - KMODLVE-206: fix typo in lvp radix tree initialization


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-24.2
changelog:
  - Datacycle: disabled by default
  - CLKRN-365: fixed protected hardlinks issue
  - KMODLVE-210: add backward compatibility with lve utils


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-24.3
changelog:
  - CLKRN-368: fixed issue with nproc limis during code merge
  - CLKRN-371: NUMPROC precharge is not reliable


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-24.4
changelog:
  - Fixed CVE-2018-3620, CVE-2018-3646, CVE-2018-3693, CVE-2018-5390
    CVE-2017-13215, CVE-2018-10675, CVE-2018-7566
  - CLKRN-362: virtio_balloon: fix another race between migration and ballooning


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-24.5
changelog:
  - AL-3255: Enabled CONFIG_NETLINK_MMAP option to fix network issues in CL 7.6
  - CLKRN-389: restore  memcg_oom_disable sysctl option


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-24.7
changelog:
  - CLKRN-393: fs: I/O throttle on reading directory blocks
  - CLKRN-392: fs: xfs: forcibly convert v1 inodes to v2 inodes
  - CLKRN-386: add /proc/sys to proc whitelist


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-24.9
changelog:
  - CLKRN-421: ext4: handle the rest of ext4_mb_load_buddy() ENOMEM errors
    ext4: use __GFP_NOFAIL in ext4_free_blocks()
  - CLKRN-419: CVE-2018-18559: net/packet: fix a race in packet_bind() and packet_notifier()
  - CLKRN-418: userfaultfd: shmem: UFFDIO_COPY: set the page dirty if VM_WRITE is not set
    userfaultfd: shmem: add i_size checks
    userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas
    userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem
    userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-24.10
changelog:
  - CLKRN-424: IOPS limit support for mq-deadline
  - CLKRN-402: create UB cgroup and related mem, blkio cgroups in EXCL mode
  - ext4 fixes
  - root dentries need RCU-delayed freeing
  - mount: Retest MNT_LOCKED in do_umount
  - mount: Prevent MNT_DETACH from disconnecting locked mounts
  - mm fix reces and clearcache
  - fix mntput/mntput race
  - ipv6: fix possible use-after-free in ip6_xmit()
  - jbd2: don't mark block as modified if the handle is out of credits
  - CLKRN-411: avoid too long stalls in iolimits


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-21
changelog:
  - CLKRN-322: tcp: avoid collapses in tcp_prune_queue() if possible
  - CLKRN-322: tcp: detect malicious patterns in tcp_collapse_ofo_queue()


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-23
changelog:
  - CLKRN-342: Fixed L1TF backport issues which lead to corrupted page tables
  - CLKRN-348: Fixed CVE-2018-5391
  - ipvs: Fixed infinite loop in ipvs when using ipvs in docker env
  - CLKRN-351: fix kernel crashes in bcache
  - CLKRN-354: exec Limit arguments stack to avoid pathological stack usage


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-25.6
changelog:
  - CLKRN-439: libxfs: pack the agfl header structure so XFS_AGFL_SIZE is correct
  - CLKRN-427: Revert "mm/memcontrol: try to free all memcg during offline"


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-25.7
changelog:
  - CLKRN-446: port stable fixes to CL7
  - CLKRN-417: enable kabi check
  - CLKRN-424: IOPS limits support for the noop IO scheduler
  - CLKRN-421: jbd2: do not fail journal because of frozen_buffer allocation failure
  - CLKRN-450: xfs: handle error if xfs_btree_get_bufs fails
  - CLKRN-147: uncharging too much 1 h 0, res numflock ub 0


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-25.8
changelog:
  - CLKRN-457: fix KABI breakage
  - CLKRN-458: CVE-2018-12126: MSBDS Microarchitectural Store Buffer Data Sampling
  - CLKRN-458: CVE-2018-12130: MFBDS Microarchitectural Fill Buffer Data Sampling
  - CLKRN-458: CVE-2018-12127: MLPDS Microarchitectural Load Port Data Sampling
  - CLKRN-458: CVE-2019-11091: MDSUM Microarchitectural Data Sampling Uncacheable Memory


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-25.9
changelog:
  - CLKRN-466: fix Infiniband connectivity
  - CLKRN-464: xfs: Allow user to kill fstrim process
  - xfs: detect agfl count corruption and reset agfl


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-25.11
changelog:
  - CLKRN-421: ratelimit memcg oom message entries to dmesg
  - CLKRN-482: CVE-2019-11477: SACK Panic
  - CLKRN-483: CVE-2019-11478: SACK Slowness  or Excess Resource Usage 
  - CLKRN-485: CVE-2019-11479: Excess Resource Consumption Due to Low MSS Values


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-26.1
changelog:
  - CLKRN-421: fs: ext4: dont't mask __GFP_NOFAIL when working with s_buddy_cache
  - CLKRN-480 xfs don't block a slab shrinker


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-26.2
changelog:
  - CLKRN-479: careful cgroups removal for CL7
  - CLKRN-498: fs: xfs: drain m_buf_workqueue before destroying m_log
  - CLKRN-499: ext4: zero out the unused memory region in the extent tree block


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-26.3
changelog:
  - CLKRN-507: don't export /proc/net{tcp,udp,unix} info
  - KMODLVE-259: do not spam with killer fault messages
  - KMODLVE-263: create vs destroy race


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-26.4
changelog:
  - CLKRN-511: CVE-2019-1125: x86/entry/64: Use JMP instead of JMPQ
  - CLKRN-511: CVE-2019-1125: fix compilation and adjust the code
  - CLKRN-511: CVE-2019-1125: x86/speculation: Enable Spectre v1 swapgs mitigations
  - CLKRN-511: CVE-2019-1125: x86/speculation: Prepare entry code for Spectre v1 swapgs
  - CLKRN-504: fs: NFS: use cond_resched() when restarting walk of delegation list
  - KMODLVE-268 improve message for race
  - KMODLVE-273: stable-1.5 build failure
  - KMODLVE-255: additional debugging for lve integrity


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-26.5
changelog:
  - CLKRN-517: CVE-2019-14835: vhost: make sure log_num < in_num
  - CLKRN-515: hugetlbfs: fix memory leak for resv_map
  - CLKRN-515: tcp: Clear sk_send_head after purging the write queue
  - CLKRN-515: x86/kprobes: Avoid kretprobe recursion bug
  - CLKRN-515: ipv4: Fix raw socket lookup for local traffic
  - CLKRN-515: ipv4: ip_do_fragment: Preserve skb_iif during fragmentation
  - CLKRN-515: scsi: storvsc: Fix calculation of sub-channel count
  - CLKRN-515: ipv6/flowlabel: wait rcu grace period before put_pid()
  - CLKRN-515: ipv6: invert flowlabel sharing check in process and user mode
  - CLKRN-515: ext4: cleanup bh release code in ext4_ind_remove_space()
  - CLKRN-515: scsi: libsas: fix a race condition when smp task timeout


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-26.6
changelog:
  - CLKRN-522: CVE-2019-14821: KVM: coalesced_mmio: add bounds checking
  - CLKRN-521: CVE-2019-5489: mm/mincore.c: make mincore() more conservative
  - CLKRN-521: CVE-2019-11599: fix race condition between mmget_not_zero()/get_task_mm() and core dumping
  - CLKRN-520: KVM: VMX: fixes for vmentry_l1d_flush module parameter
  - CLKRN-514: net: tg3: introduce separate timeout values for NVRAM r/w ops


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-27
changelog:
  - CLKRN-542: x86/msr: Add the IA32_TSX_CTRL MSR
  - CLKRN-542: x86/cpu: Add a helper function x86_read_arch_cap_msr()
  - CLKRN-542: x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
  - CLKRN-542: x86/speculation/taa: Add mitigation for TSX Async Abort
  - CLKRN-542: x86/speculation/taa: Add sysfs reporting for TSX Async Abort
  - CLKRN-542: x86/tsx: Add "auto" option to the tsx= cmdline parameter
  - CLKRN-542: x86/tsx: Add config options to set tsx=on|off|auto
  - CLKRN-542: x86/bugs: Add ITLB_MULTIHIT bug infrastructure
  - CLKRN-542: drm/i915/gen8+: Add RC6 CTX corruption WA
  - CLKRN-539: ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
  - CLKRN-539: x86/speculation/mds: Apply more accurate check on hypervisor platform
  - CLKRN-539: hpet: Fix division by zero in hpet_time_div()
  - CLKRN-539: sched/numa: Move task_numa_free() to __put_task_struct()
  - CLKRN-539: sched/fair: Don't free p->numa_faults with concurrent readers
  - CLKRN-539: tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop
  - CLKRN-539: tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR
  - CLKRN-539: sched/fair: Don't assign runtime for throttled cfs_rq
  - CLKRN-539: signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
  - CLKRN-539: crypto: talitos - check AES key size
  - CLKRN-539: crypto: ghash - fix unaligned memory access in ghash_setkey()
  - CLKRN-539: x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
  - KMODLVE-292: preserve task's original umask when entering LVE


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-28
changelog:
  - CLKRN-554: KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES
  - CLKRN-554: kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
  - CLKRN-554: KVM: x86: use Intel speculation bugs and features as derived in generic x86 code
  - CLKRN-554: KVM: Introduce kvm_get_arch_capabilities()
  - CLKRN-554: kvm: x86: IA32_ARCH_CAPABILITIES is always supported
  - CLKRN-554: KVM: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts
  - CLKRN-554: CVE-2019-19332: KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID
  - CLKRN-554: x86/atomic: Fix smp_mb__{before,after}_atomic()
  - CLKRN-554: filldir[64]: remove WARN_ON_ONCE() for bad directory entries
  - CLKRN-554: Make filldir[64]() verify the directory entry filename is valid
  - CLKRN-554: ext4: add more paranoia checking in ext4_expand_extra_isize handling
  - CLKRN-554: ext4: Introduce ext4_clamp_want_extra_isize()
  - CLKRN-551: mm: do not stall register_shrinker
  - KMODLVE-301: fix lve loading module service
  - KMODLVE-292: fix typo in umask aasignment
  - KMODLVE-288: destroy all lves and lvps before unloading kmodlve
  - KMODLVE-269  don't panic with error UBC init
  - KMODLVE-264 lets protect procfs access with LVP reference.
  - KMODLVE-255: ignore move requests


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-30
changelog:
  - CLKRN-556: bgrt: check BGRT validness on sysfs read access
  - Reverted prviously applied efi bgrt patches since it requirs a lot of changes


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-33
changelog:
  - CLKRN-556: check bgrt pointer to avoid null-ptr dereference
  - CLKRN-574: mm: resolve lock contention issue in get_vmalloc_info()


author: Vladislav Fomin <vfomin@cloudlinux.com> - 1.5-36
changelog:
  - CLKRN-589 xfs: log mount failures don't wait for buffers to be released
  - CLKRN-591: disable CL7 code which duplicate KMODLVE-master functionality


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-37
changelog:
  - CLKRN-597: ext4: wait for existing dio workers in ext4_alloc_file_blocks()
  - CLKRN-597: ext4: check for directory entries too close to block end
  - CLKRN-597: tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK
  - CLKRN-597: vfs: fix do_last() regression
  - CLKRN-597: do_last(): fetch directory ->i_mode and ->i_uid before it's too late
  - CLKRN-597: CVE-2000-1134: CVE-2007-3852: CVE-2008-0525: CVE-2009-0416: CVE-2011-48
  34: CVE-2015-1838: CVE-2015-7442: CVE-2016-7489: namei: allow restricted O_CREAT of FIFOs and regular files
  - CLKRN-601: make CONFIG_CL_* entries visible in "menuconfig"
  - CLKRN-597: mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  - CLKRN-597: jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal
  - CLKRN-597: x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR
  - CLKRN-597: PCI: Don't disable bridge BARs when assigning bus resources
  - CLKRN-597: scsi: qla2xxx: Fix mtcp dump collection failure
  - CLKRN-597: CVE-2020-12114: fs/namespace.c: fix mountpoint reference counter race
  - CLKRN-597: tracing: Fix tracing_stat return values in error handling paths
  - CLKRN-597: tracing: Fix very unlikely race of registering two stat tracers
  - CLKRN-597: ext4, jbd2: ensure panic when aborting with zero errno
  - CLKRN-597: jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record
  - CLKRN-597: KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c
  - CLKRN-597: KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks
  - CLKRN-597: KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks
  - CLKRN-597: KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks
  - CLKRN-597: tcp: clear tp->total_retrans in tcp_disconnect()
  - CLKRN-597: mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
  - CLKRN-597: net_sched: ematch: reject invalid TCF_EM_SIMPLE
  - CLKRN-607: random: always use batched entropy for get_random_u{32,64}
  - CLKRN-607: x86/speculation: Add Ivy Bridge to affected list
  - CLKRN-607: x86/speculation: Add SRBDS vulnerability and mitigation documentation
  - CLKRN-607: x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation
  - CLKRN-607: x86/cpu: Add 'table' argument to cpu_matches()
  - CLKRN-607: x86/cpu: Add a steppings field to struct x86_cpu_id
  - CLKRN-607: x86/cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping
  - CLKRN-600: mm: don't clear __GFP_NOFAIL when matching against mask


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-39
changelog:
  - CLKRN-610: mm: don't use "overdraft" feature if oom_guarantee is zero
  - KMODLVE-345: add do_readlinkat helper
  - CLKRN-621: xfs: set format back to extents if xfs_bmap_extents_to_btree
  - CLKRN-621: ip6_gre: fix null-ptr-deref in ip6gre_init_net()
  - CLKRN-621: mm: fix swap cache node allocation mask
  - CLKRN-621: mm/slab: use memzero_explicit() in kzfree()
  - CLKRN-621: sched/core: Fix PI boosting between RT and DEADLINE tasks
  - CLKRN-621: net: core: reduce recursion limit value
  - CLKRN-621: tcp: grow window for OOO packets only for SACK flows
  - CLKRN-621: tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT
  - KMODLVE-344 generic packet mark
  - CLKRN-619: fix kmodlve srcversion printing
  - KMODLVE-345: prevent "readlink" if symlink is protected
  - KMODLVE-346: iolock vs pagelock deadlock in CL7h/8
  - KMODLVE-339: fix wrong ifdefs for lve sysctl calls
  - KMODLVE-339 cl7: fix cl7 (openvz7) based for master
  - KMODLVE-340 build: fix build with cl8.2
  - KMODLVE-337: limit maximum link count to avoid kernel stack overflow
  - KMODLVE-336: avoid scheduling under radix tree preload
  - KMODLVE-335: a debug patch to get more context info on error
  - KMODLVE-334: properly truncate events output
  - KMODLVE-327: /proc/lve/defaults crashes without .stop handler
  - KMODLVE-331: reset link depth and total limit before lookup a path


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-40
changelog:
  - CLKRN-638 xfs: prevent dropping ioend completions during buftarg wait
  - CLKRN-636: perf probe: Fix memory leakage when the probe point is not found
  - CLKRN-636: xfs: fix inode quota reservation checks
  - CLKRN-636: xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init
  - CLKRN-636: ext4: fix potential negative array index in do_split()
  - CLKRN-636: fix regression in "epoll: Keep a reference on files added to the check list"
  - CLKRN-636: do_epoll_ctl(): clean the failure exits up a bit
  - CLKRN-636: epoll: Keep a reference on files added to the check list
  - CLKRN-636: net: Fix potential wrong skb->protocol in skb_vlan_untag()
  - CLKRN-636: bonding: fix a potential double-unregister
  - CLKRN-636: PCI: Fix pci_create_slot() reference count leak
  - CLKRN-636: netfilter: nf_tables: fix destination register zeroing
  - CLKRN-636: tg3: Fix soft lockup when tg3_reset_task() fails.
  - CLKRN-636: net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init()
  - CLKRN-636: bnxt: don't enable NAPI until rings are ready
  - CLKRN-636: net: disable netpoll on fresh napis
  - CLKRN-636: iommu/vt-d: Serialize IOMMU GCMD register modifications
  - CLKRN-636: mm/hugetlb: fix a race between hugetlb sysctl handlers
  - CLKRN-633: update kernel config for master kmodlve
  - CLKRN-628: fs/binfmt_misc.c: do not allow offset overflow
  - CLKRN-611: fix use-after-free of shm file via remap_file_pages()
  - CLKRN-635: implement an ability to hide /proc/net{tcp,udp,unix}
  - CLKRN-634 get/drop reference to device in revalidate and  check_events
  - KMODLVE-348: limit warnings output
  - KMODLVE-361: disable BUG_ON(1) in LVE removal code
  - KMODLVE-330: BUG: sleeping function called from invalid context
  - KMODLVE-358: CL6h 1.5-39 loading module problem
  - KMODLVE-355: Fix ftrace hooks cleanup path


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-41
changelog:
  - CLKRN-640: use kernel built-in procfs access checks
  - CLKRN-640: enable kernel built-in procfs access checks
  - KMODLVE-366: check link_body properly
  - KMODLVE-363: add ability to account CPU/IO throttling time
  - KMODLVE-354: disallow to disable 'ftrace_enabled' parameter


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-42
changelog:
  - CLKRN-648: xfs: push the AIL in xlog_grant_head_wake
  - KMODLVE-370: lvp creating problem on kmodlve 2.0
  - KMODLVE-367: Investigate issue with unavailability to create LVE
  - KMODLVE-363: whitelist the task_sched_stat
  - KMODLVE-363: make task_sched_stat global, add missing removal code
  - CLKRN-640: enable procfs code only for CL8


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-43
changelog:
  - CLKRN-658: libfs: fix error cast of negative value in simple_attr_write()
  - CLKRN-658: perf lock: Don't free "lock_seq_stat" if read_count isn't zero
  - CLKRN-658: don't dump the threads that had been already exiting when zapped.
  - CLKRN-658: ext4: correctly report "not supported" for {usr,grp}jquota when !CONFIG_QUOTA
  - CLKRN-658: perf: Fix get_recursion_context()
  - CLKRN-658: xfs: fix a missing unlock on error in xfs_fs_map_blocks
  - CLKRN-658: iommu/amd: Increase interrupt remapping table limit to 512 entries
  - CLKRN-658: i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c
  - CLKRN-658: i40e: Wrong truncation from u16 to u8
  - CLKRN-658: perf tools: Add missing swap for ino_generation
  - CLKRN-658: time: Prevent undefined behaviour in timespec64_to_ns()


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-44
changelog:
  - CLKRN-648: xfs: use sync buffer I/O for sync delwri queue submission
  - CLKRN-648: xfs: refactor buffer submission into a common helper
  - CLKRN-648: xfs: push buffer of flush locked dquot to avoid quotacheck deadlock
  - CLKRN-648: xfs: fix use-after-free race in xfs_buf_rele
  - CLKRN-638 xfs: acquire superblock freeze protection on eofblocks scans" into lve
  - CLKRN-667: added CONFIG_CL_PROC_PROTECTION=y to the config for debug kernel
  - KMODLVE-374: remove trace_printk() calls
  - KMODLVE-353: lve_enter_pid_flags() API call
  - KMODLVE-373: do not kill unkillable threads in lve_enter
  - KMODLVE-380: enable sleep in hooks and avoid calling the hooked func
  - KMODLVE-385: prevent jump out of the container's root via procfs symlinks
  - KMODLVE-383: do not cpu-starve in __lve_init
  - CLKRN-659: fix procfs access
  - KMODLVE-377: use module_mutex when resolving names
  - CLKRN-678: Revert "CLKRN-648: xfs: use sync buffer I/O for sync delwri queue submission"
  - CLKRN-678: Revert "CLKRN-648: xfs: refactor buffer submission into a common helper"
  - KMODLVE-382: fix for permissions of /proc/<pid>/task/<pid>/io file
  - KMODLVE-384: reduce memory consumption by lve procfs
  - KMODLVE-379 out of bound access


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-44
changelog:
  - CLKRN-648: xfs: use sync buffer I/O for sync delwri queue submission
  - CLKRN-648: xfs: refactor buffer submission into a common helper
  - CLKRN-648: xfs: push buffer of flush locked dquot to avoid quotacheck deadlock
  - CLKRN-648: xfs: fix use-after-free race in xfs_buf_rele
  - CLKRN-638 xfs: acquire superblock freeze protection on eofblocks scans" into lve
  - CLKRN-667: added CONFIG_CL_PROC_PROTECTION=y to the config for debug kernel
  - KMODLVE-374: remove trace_printk() calls
  - KMODLVE-353: lve_enter_pid_flags() API call
  - KMODLVE-373: do not kill unkillable threads in lve_enter
  - KMODLVE-380: enable sleep in hooks and avoid calling the hooked func
  - KMODLVE-385: prevent jump out of the container's root via procfs symlinks
  - KMODLVE-383: do not cpu-starve in __lve_init
  - CLKRN-659: fix procfs access
  - KMODLVE-377: use module_mutex when resolving names
  - CLKRN-678: Revert "CLKRN-648: xfs: use sync buffer I/O for sync delwri queue submission"
  - CLKRN-678: Revert "CLKRN-648: xfs: refactor buffer submission into a common helper"
  - CLKRN-673: disable THP by default
  - KMODLVE-382: fix for permissions of /proc/<pid>/task/<pid>/io file
  - KMODLVE-384: reduce memory consumption by lve procfs
  - KMODLVE-379 out of bound access


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-46
changelog:
  - CLKRN-686: futex: Provide and use pi_state_update_owner()
  - CLKRN-686: futex: Replace pointless printk in fixup_owner()
  - CLKRN-686: futex: Handle faults correctly for PI futexes
  - CKSIX-269: fix complete_all issue


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-47
changelog:
  - CLKRN-675: restore docker containers compatibility
  - KMODLVE-391: lvp reference is not used
  - KMODLVE-392: loadavg for root should be fully accounted


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-49
changelog:
  - KMODLVE-398: don't use ref-style in RCU-lookup
  - KMODLVE-392: wrong assignment in get_avenrun handler


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-51
changelog:
  - CLKRN-733: CVE-2017-18595: tracing: Fix possible double free on failure of allocating trace buffer
  - CLKRN-733: CVE-2015-9289: cx24116: fix a buffer overflow when checking userspace params
  - CLKRN-733: CVE-2019-15916: net-sysfs: Fix mem leak in netdev_register_kobject
  - CLKRN-733: CVE-2019-12382: drm/edid: Fix a missing-check bug in drm_load_edid_firmware()
  - CLKRN-733: CVE-2018-7191: tun: allow positive return values on dev_get_valid_name() call
  - CLKRN-733: CVE-2018-7191: tun: call dev_get_valid_name() before register_netdevice()
  - CLKRN-733: CVE-2019-15214: ALSA: core: Fix card races between register and disconnect
  - CLKRN-733: CVE-2019-15214: ALSA: info: Fix racy addition/deletion of nodes
  - CLKRN-733: CVE-2019-11884: Bluetooth: hidp: fix buffer overflow
  - CLKRN-733: CVE-2018-19985: USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data
  - CLKRN-733: CVE-2018-19985 CVE-2018-20169: USB: check usb_get_extra_descriptor for proper size
  - CLKRN-719: CVE-2021-20219: n_tty: Fix stall at n_tty_receive_char_special()
  - CLKRN-721: CVE-2021-27365: scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE
  - CLKRN-721: CVE-2021-27363 CVE-2021-27364: scsi: iscsi: Restrict sessions and handles to admin  capabilities


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-52
changelog:
  - CLKRN-673: improve shrinker scalability
  - KMODLVE-407: release path after symlink lookup for CL7 lsm
  - KMODLVE-405: a false fault injection is triggered due to a typo


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-53
changelog:
  - CLKRN-749: CVE-2020-29661: tty: Fix ->pgrp locking in tiocspgrp()
  - CLKRN-749: CVE-2020-28374: scsi: target: Fix XCOPY NAA identifier lookup
  - CLKRN-749: xcopy: loop over devices using idr helper
  - CLKRN-749: CVE-2020-25705: icmp: randomize the global rate limiter
  - CLKRN-749: CVE-2021-20265: af_unix: fix struct pid memory leak
  - CLKRN-749: af_unix: Revert 'lock_interruptible' in stream receive code
  - CLKRN-749: CVE-2020-25656: vt: keyboard, extend func_buf_lock to readers
  - CLKRN-749: CVE-2020-25656: vt: keyboard, simplify vt_kdgkbsent
  - CLKRN-749: CVE-2020-25645: geneve: add transport ports in route lookup for geneve
  - CLKRN-749: CVE-2020-25211: netfilter: ctnetlink: add a range check for l3/l4 protonum
  - CLKRN-749: CVE-2020-14351: perf/core: Fix race in the perf_mmap_close() function
  - CLKRN-749: CVE-2020-7053: drm/i915: Fix use-after-free when destroying GEM context
  - CLKRN-749: CVE-2020-0427: pinctrl: devicetree: Avoid taking direct reference to device name string
  - CLKRN-749: CVE-2019-19532: HID: Fix assumption that devices have inputs
  - KMODLVE-410: properly handle lve_leave_pid() errors
  - CLKRN-736: fix kmod-qa 0102-procfs_protection on CL7h/8
  - KMODLVE-399: move exec handler to the new hook infra
  - CLKRN-741: adapt datacycle fsnotify hook on unlink/rmdir events to 8.2


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-54
changelog:
  - CLKRN-691: mm: don't cap request size based on read-ahead setting
  - CLKRN-691: block: bump BLK_DEF_MAX_SECTORS to 2560" into lve
  - CLKRN-691: mm: don't cap request size based on read-ahead setting" into lve


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-57
changelog:
  - KMODLVE-424: fix incorrect IO throttling accounting for CL7
  - KMODLVE-431: whitelist nf_conntrack_max
  - KMODLVE-430: add missing LVE_API_ENTER/EXIT directives
  - KMODLVE-421: incorrect db_governor/sql start order


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-58
changelog:
  - CLKRN-781: whitelist /proc/lve/task_sched_stat
  - CLKRN-775: net: ipv6: send unsolicited NA on admin up


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-59
changelog:
  - CVE-2021-22555: CLKRN-793: netfilter: x_tables: fix compat match/target pad out-of-bound  write
  - KMODLVE-417: fine-grained options for lve_enter
  - KMODLVE-417: iolimits should be disabled explicitly for CL8


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-61
changelog:
  - CLKRN-801: disable vfs_cache_min_ratio
  - CLKRN-721: CVE-2021-27365: scsi: iscsi: Verify lengths on passthrough PDUs
  - CLKRN-804: datacycle should filter events by fsuid, not euid
  - CLKRN-739: allow access to /proc/sys/net/core/xfrm_acq_expires for ipsec service
  - KMODLVE-438: pump kapi version
  - CLKRN-803: fixed searching for modules to avoid broken weak-modules links


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-62
changelog:
  - CLKRN-836: call iolimits hooks always with mq
  - CLKRN-821: datacycle path names should be mangled
  - CLKRN-823: smartpqi: correct lun reset issues
  - KMODLVE-448: don't load the module if there's no CONFIG_SECURITY_PATH defined
  - KMODLVE-450: datacycle cannot flush ids > 65535


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-63
changelog:
  - CLKRN-827: ext4: add prefetching for block allocation bitmaps
  - CLKRN-838: jbd2: fix deadlock while checkpoint thread waits commit
  - CLKRN-838: jbd2: fold __process_buffer() into jbd2_log_do_checkpoint()


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-64
changelog:
  - CLKRN-863: CVE-2020-36385:  RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
  - CLKRN-863: CVE-2020-36385: RDMA/ucma: Fix locking for ctx->events_reported
  - CLKRN-863: CVE-2020-36385: RDMA/ucma: Fix the locking of ctx->file
  - CLKRN-863: CVE-2020-36385: RDMA/cma: Add missing locking to rdma_accept()
  - KMODLVE-478: add missing LVE_API_* directives into setuid feature
  - CLKRN-859: added CAP_SYS_ADMIN capability allowing ptrace children
  - KMODLVE-470: don't restrict root process from traversing symlinks
  - KMODLVE-461: register usage cleanup
  - KMODLVE-460: unused label removal


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-65
changelog:
  - CLKRN-802: ext2: fix sleeping in atomic bugs on error
  - CLKRN-802: proc/vmcore: fix clearing user buffer by properly using clear_user()
  - CLKRN-802: netlink: annotate data races around nlk->bound
  - CLKRN-802: scsi: ses: Fix unsigned comparison with less than zero
  - CLKRN-802: scsi: core: Put LLD module refcnt after SCSI device is released
  - CLKRN-802: ipv6: tcp: drop silly ICMPv6 packet too big messages
  - CLKRN-802: tcp: annotate data races around tp->mtu_info
  - CLKRN-802: tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop.
  - CLKRN-802: workqueue: fix UAF in pwq_unbound_release_workfn()
  - KMODLVE-485: iolimits are not applied to XFS


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-67
changelog:
  - CLKRN-911: virtio-balloon: fix managed page counts when migrating pages between zones
  - CLKRN-929: CVE-2022-0492: cgroup-v1: Require capabilities to set release_agent
  - KMODLVE-508: replace immutable cgroups with rmdir hooks


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-68
changelog:
  - CLKRN-944: CVE-2022-1016: netfilter: nf_tables: initialize registers in nft_do_chain()
  - CLKRN-943: CVE-2022-1015: netfilter: nf_tables: validate registers coming from userspace.


author: Anatoly Stepanov <astepanov@cloudlinux.com> - 1.5-69
changelog:
  - CLKRN-951: Revert "hide cgroups in /proc/cgroups in order to cheat systemd"
  - CLKRN-955: scsi: aacraid: fix illegal IO beyond last LBA
  - CLKRN-955: scsi: aacraid: fix shutdown crash when init fails
  - CLKRN-955: scsi: aacraid: Prevent crash in case of free interrupt during scsi EH path
  - KMODLVE-515: add missing path_put in lve_namespace_set_root


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-70
changelog:
  - KMODLVE-523: rmdir hooks are not being called
  - KMODLVE-516: network-manager has no access to mtu
  - KMODLVE-591: user_ptrace checks should account CAP_SYS_PTRACE


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 1.5-71
changelog:
  - CLKRN-881: backport XFS corruption fix from Centos 7
  - CLKRN-974: drm/vmwgfx: Fix two list_for_each loop exit tests
  - CLKRN-974: drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add
  - CLKRN-974: drm/vmwgfx: Fix double free in vmw_recv_msg()
  - CLKRN-974: drm/vmwgfx: fix memory leak when too many retries have occurred
  - CLKRN-974: drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
  - CLKRN-974: drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read
  - CLKRN-974: drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set
  - CLKRN-974: drm/vmwgfx: Don't double-free the mode stored in par->set_mode
  - CLKRN-974: drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user
  - CLKRN-974: drm/vmwgfx: Fix setting of dma masks
  - CLKRN-974: drm/vmwgfx: Fix 32-bit VMW_PORT_HB_[IN|OUT] macros
  - CLKRN-974: drm/vmwgfx: Fix a buffer object leak
  - CLKRN-974: drm/vmwgfx: Fix a destoy-while-held mutex problem.
  - CLKRN-974: drm/vmwgfx: Potential off by one in vmw_view_add()
  - CLKRN-974: perf/core: Fix address filter parser for multiple filters
  - CLKRN-974: ext4: don't BUG if someone dirty pages without asking ext4 first
  - CLKRN-974: ext4: force overhead calculation if the s_overhead_cluster makes no sense
  - CLKRN-974: ext4: fix overhead calculation to account for the reserved gdt blocks
  - CLKRN-974: ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
  - CLKRN-974: ipv4: drop dst in multicast routing path
  - CLKRN-974: ptrace: Reimplement PTRACE_KILL by always sending SIGKILL
  - CLKRN-974: inotify: show inotify mask flags in proc fdinfo
  - CLKRN-974: ext4: fix bug_on in ext4_writepages
  - CLKRN-974: ext4: fix use-after-free in ext4_rename_dir_prepare
  - CLKRN-974: md: protect md_unregister_thread from reentrancy
  - CLKRN-974: ext4: make variable "count" signed
  - CLKRN-974: ext4: fix bug_on ext4_mb_use_inode_pa
  - CLKRN-974: dm era: commit metadata in postsuspend after worker stops


author: Denis Kirjanov <dkirjanov@cloudlnux.com> - 1.5-74
changelog:
  - CLKRN-1061: introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty()
  - CLKRN-1061: netfilter: nf_tables: disallow non-stateful expression in sets earlier
  - CLKRN-1061: perf: Fix sys_perf_event_open() race against self
  - CLKRN-1061: RDMA/cma: Do not change route.addr.src_addr.ss_family
  - CLKRN-1061: xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate
  - CLKRN-1061: Bluetooth: use correct lock to prevent UAF of hdev object
  - CLKRN-1061: Bluetooth: fix use-after-free error in lock_sock_nested()
  - CLKRN-1061: media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
  - CLKRN-1061: CVE-2021-3564: Bluetooth: fix the erroneous flush_work() order
  - CLKRN-1061: CVE-2020-0465: HID: core: Sanitize event code and type when mapping input
  - CLKRN-1061: [media] firewire: don't break long lines
  - CLKRN-1061: [media] firewire: firedtv-avc: potential buffer overflow
  - CLKRN-1061: perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  - CLKRN-1061: net_sched: cls_route: remove the right filter from hashtable
  - CLKRN-1061: bluetooth: eliminate the potential race condition when removing the HCI controller
  - CLKRN-1061: CVE-2021-29650: netfilter: x_tables: Use correct memory barriers.
  - CLKRN-1061: CVE-2020-8648: vt: selection, close sel_buffer race
  - CLKRN-1061: CVE-2021-29154:  bpf, x86: Validate computation of branch displacements for x86-64
  - CLKRN-1061: CVE-2020-14331: Fix for missing check in vgacon scrollback handling
  - CLKRN-1061: net-sysfs: Call dev_hold always in rx_queue_add_kobject
  - CLKRN-1061: net-sysfs: Call dev_hold always in netdev_queue_add_kobject
  - CLKRN-1061: net-sysfs: call dev_hold if kobject_init_and_add success
  - CLKRN-1061: Bluetooth: A2MP: Fix not initializing all members
  - CLKRN-1061: Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel
  - CLKRN-1061: [usb] USB: core: Fix races in character device registration and deregistraion
  - CLKRN-1061: [usb] usb: cdc-acm: make sure a refcount is taken early enough
  - CLKRN-1061: [usb] USB: adutux: fix use-after-free on disconnect
  - CLKRN-1061: [fs] ext4: fix support for inode sizes > 1024 bytes
  - CLKRN-1061: [fs] ext4: forbid i_extra_isize not divisible by 4
  - CLKRN-1061: [fs] ext4: validate the debug_want_extra_isize mount option at parse time
  - CLKRN-1061: CVE-2019-19062: [crypto] crypto: user - fix memory leak in crypto_report
  - CLKRN-1061: [media] media: v4l: event: Prevent freeing event subscriptions while accessed
  - CLKRN-1061: [wireless] rtlwifi: prevent memory leak in rtl_usb_probe
  - CLKRN-1061: [wireless] iwlwifi: dbg_ini: fix memory leak in alloc_sgtable
  - CLKRN-1061: CVE-2019-19524: [input] Input: ff-memless - kill timer in destroy()
  - CLKRN-1061: CVE-2017-18551: [i2c] i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA
  - CLKRN-1061: [fs] ext4: work around deleting a file with i_nlink == 0 safely
  - CLKRN-1061: [netdrv] can: peak_usb: fix slab info leak
  - CLKRN-1061: [fs] fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
  - CLKRN-1061: [media] media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
  - CLKRN-1061: [scsi] scsi: libsas: delete sas port if expander discover failed
  - CLKRN-1061: CVE-2019-15917: [bluetooth] Bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in hci_uart_set_proto()
  - CLKRN-1061: [netdrv] fjes: Handle workqueue allocation failure
  - CLKRN-1061: [scsi] scsi: qla2xxx: fix a potential NULL pointer dereference
  - CLKRN-1061: CVE-2019-17053: [net] ieee802154: enforce CAP_NET_RAW for raw sockets
  - CLKRN-1061: CVE-2019-16994: [net] sit: fix memory leak in sit_init_net()
  - CLKRN-1061: CVE-2019-17055: [isdn] mISDN: enforce CAP_NET_RAW for raw sockets
  - CLKRN-1061: CVE-2019-18808: [crypto] crypto: ccp - Release all allocated memory if sha type is invalid
  - CLKRN-1061: [fs] nfs: Correct an nfs page array calculation error
  - CLKRN-1061: [security] selinux: properly handle multiple messages in selinux_netlink_send()
  - CLKRN-1061: [scsi] scsi: sg: add sg_remove_request in sg_write
  - CLKRN-1061: CVE-2020-12826: [fs] signal: Extend exec_id to 64bits
  - CLKRN-1061: CVE-2020-10732: [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()
  - CLKRN-1061: CVE-2020-10942: [vhost] vhost: Check docket sk_family instead of call getname
  - CLKRN-1061: [input] Input: add safety guards to input_set_keycode()
  - CLKRN-1061: [x86] kvm: x86: clear stale x86_emulate_ctxt->intercept value
  - CLKRN-1061: [x86] kvm: vmx: check descriptor table exits on instruction emulation
  - CLKRN-1061: [x86] kvm: nvmx: Check IO instruction VM-exit conditions
  - CLKRN-1061: [x86] kvm: nvmx: Refactor IO bitmap checks into helper function
  - CLKRN-1061: [x86] kvm: nvmx: Don't emulate instructions in guest mode
  - CLRKN-1061: [net] ipv6: constify ip6_dst_lookup_{flow|tail}() sock arguments
  - CLKRN-1061: CVE-2020-8649: CVE-2020-8647 [video] vgacon: Fix a UAF in vgacon_invert_region
  - CLKRN-1061: [wireless] mwifiex: Fix mem leak in mwifiex_tm_cmd
  - CLKRN-1061: [block] floppy: check FDC index for errors before assigning it
  - CLKRN-1061: mac80211: drop robust management frames from unknown TA
  - CLKRN-1061: mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()
  - CLKRN-1061: mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv()
  - CLKRN-1061: HID: hiddev: avoid opening a disconnected device
  - CLKRN-1061: CVE-2020-10757: mm: Fix mremap not considering huge pmd devmap
  - CLKRN-1061: vfio-pci: Invalidate mmaps and block MMIO access on disabled memory
  - CLKRN-1061: [scsi] scsi: qedi: remove memset/memcpy to nfunc and use func instead
  - CLKRN-1061: blktrace: Protect q->blk_trace with RCU
  - CLKRN-1061: netlabel: cope with NULL catmap
  - CLKRN-1061: CVE-2019-16746: [net] nl80211: validate beacon head
  - CLKRN-1061: [net] mac80211: Do not send Layer 2 Update frame before authorization
  - CLKRN-1061: cfg80211: Use const more consistently in for_each_element macros
  - CLKRN-1061: ieee80211: fix for_each_element_extid()
  - CLKRN-1061: cfg80211: add and use strongly typed element iteration macros
  - CLKRN-1061: CVE-2019-3901: [kernel] perf/core: Fix perf_event_open() vs. execve() race
  - CLKRN-1061: binfmt_elf: switch to new creds when switching to new mm
  - CLKRN-1061: CVE-2019-10638: [net] inet: switch IP ID generator to siphash
  - CLKRN-1061: CVE-2019-10638: [lib] siphash: add cryptographically secure PRF
  - CLKRN-1061: CVE-2019-10638: [fs] dcache: allow word-at-a-time name hashing with big-endian CPUs
  - CLKRN-1061: CVE-2019-15221: [sound] ALSA: line6: Fix memory leak at line6_init_pcm() error path
  - CLKRN-1061: CVE-2019-15221: [sound] ALSA: line6: Fix write on zero-sized buffer
  - CLKRN-1061: CVE-2019-14283: [block] floppy: fix out-of-bounds read in copy_buffer
  - CLKRN-1061: CVE-2019-10207: [bluetooth] Bluetooth: hci_uart: check for missing tty operations


author: Denis Kirjanov <dkirjanov@cloudlnux.com> - 1.5-74
changelog:
  - CLKRN-1061: introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty()
  - CLKRN-1061: CVE-2022-32250: CVE-2022-1966: netfilter: nf_tables: disallow non-stateful expression in sets earlier
  - CLKRN-1061: perf: Fix sys_perf_event_open() race against self
  - CLKRN-1061: RDMA/cma: Do not change route.addr.src_addr.ss_family
  - CLKRN-1061: xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate
  - CLKRN-1061: Bluetooth: use correct lock to prevent UAF of hdev object
  - CLKRN-1061: Bluetooth: fix use-after-free error in lock_sock_nested()
  - CLKRN-1061: media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
  - CLKRN-1061: CVE-2021-3564: Bluetooth: fix the erroneous flush_work() order
  - CLKRN-1061: CVE-2020-0465: HID: core: Sanitize event code and type when mapping input
  - CLKRN-1061: [media] firewire: don't break long lines
  - CLKRN-1061: [media] firewire: firedtv-avc: potential buffer overflow
  - CLKRN-1061: perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  - CLKRN-1061: net_sched: cls_route: remove the right filter from hashtable
  - CLKRN-1061: bluetooth: eliminate the potential race condition when removing the HCI controller
  - CLKRN-1061: CVE-2021-29650: netfilter: x_tables: Use correct memory barriers.
  - CLKRN-1061: CVE-2020-8648: vt: selection, close sel_buffer race
  - CLKRN-1061: CVE-2021-29154:  bpf, x86: Validate computation of branch displacements for x86-64
  - CLKRN-1061: CVE-2020-14331: Fix for missing check in vgacon scrollback handling
  - CLKRN-1061: net-sysfs: Call dev_hold always in rx_queue_add_kobject
  - CLKRN-1061: net-sysfs: Call dev_hold always in netdev_queue_add_kobject
  - CLKRN-1061: net-sysfs: call dev_hold if kobject_init_and_add success
  - CLKRN-1061: Bluetooth: A2MP: Fix not initializing all members
  - CLKRN-1061: Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel
  - CLKRN-1061: [usb] USB: core: Fix races in character device registration and deregistraion
  - CLKRN-1061: [usb] usb: cdc-acm: make sure a refcount is taken early enough
  - CLKRN-1061: [usb] USB: adutux: fix use-after-free on disconnect
  - CLKRN-1061: [fs] ext4: fix support for inode sizes > 1024 bytes
  - CLKRN-1061: [fs] ext4: forbid i_extra_isize not divisible by 4
  - CLKRN-1061: [fs] ext4: validate the debug_want_extra_isize mount option at parse time
  - CLKRN-1061: CVE-2019-19062: [crypto] crypto: user - fix memory leak in crypto_report
  - CLKRN-1061: [media] media: v4l: event: Prevent freeing event subscriptions while accessed
  - CLKRN-1061: [wireless] rtlwifi: prevent memory leak in rtl_usb_probe
  - CLKRN-1061: [wireless] iwlwifi: dbg_ini: fix memory leak in alloc_sgtable
  - CLKRN-1061: CVE-2019-19524: [input] Input: ff-memless - kill timer in destroy()
  - CLKRN-1061: CVE-2017-18551: [i2c] i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA
  - CLKRN-1061: [fs] ext4: work around deleting a file with i_nlink == 0 safely
  - CLKRN-1061: [netdrv] can: peak_usb: fix slab info leak
  - CLKRN-1061: [fs] fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
  - CLKRN-1061: [media] media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
  - CLKRN-1061: [scsi] scsi: libsas: delete sas port if expander discover failed
  - CLKRN-1061: CVE-2019-15917: [bluetooth] Bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in hci_uart_set_proto()
  - CLKRN-1061: [netdrv] fjes: Handle workqueue allocation failure
  - CLKRN-1061: [scsi] scsi: qla2xxx: fix a potential NULL pointer dereference
  - CLKRN-1061: CVE-2019-17053: [net] ieee802154: enforce CAP_NET_RAW for raw sockets
  - CLKRN-1061: CVE-2019-16994: [net] sit: fix memory leak in sit_init_net()
  - CLKRN-1061: CVE-2019-17055: [isdn] mISDN: enforce CAP_NET_RAW for raw sockets
  - CLKRN-1061: CVE-2019-18808: [crypto] crypto: ccp - Release all allocated memory if sha type is invalid
  - CLKRN-1061: [fs] nfs: Correct an nfs page array calculation error
  - CLKRN-1061: [security] selinux: properly handle multiple messages in selinux_netlink_send()
  - CLKRN-1061: [scsi] scsi: sg: add sg_remove_request in sg_write
  - CLKRN-1061: CVE-2020-12826: [fs] signal: Extend exec_id to 64bits
  - CLKRN-1061: CVE-2020-10732: [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()
  - CLKRN-1061: CVE-2020-10942: [vhost] vhost: Check docket sk_family instead of call getname
  - CLKRN-1061: [input] Input: add safety guards to input_set_keycode()
  - CLKRN-1061: [x86] kvm: x86: clear stale x86_emulate_ctxt->intercept value
  - CLKRN-1061: [x86] kvm: vmx: check descriptor table exits on instruction emulation
  - CLKRN-1061: [x86] kvm: nvmx: Check IO instruction VM-exit conditions
  - CLKRN-1061: [x86] kvm: nvmx: Refactor IO bitmap checks into helper function
  - CLKRN-1061: [x86] kvm: nvmx: Don't emulate instructions in guest mode
  - CLRKN-1061: [net] ipv6: constify ip6_dst_lookup_{flow|tail}() sock arguments
  - CLKRN-1061: CVE-2020-8649: CVE-2020-8647 [video] vgacon: Fix a UAF in vgacon_invert_region
  - CLKRN-1061: [wireless] mwifiex: Fix mem leak in mwifiex_tm_cmd
  - CLKRN-1061: [block] floppy: check FDC index for errors before assigning it
  - CLKRN-1061: mac80211: drop robust management frames from unknown TA
  - CLKRN-1061: mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()
  - CLKRN-1061: mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv()
  - CLKRN-1061: HID: hiddev: avoid opening a disconnected device
  - CLKRN-1061: CVE-2020-10757: mm: Fix mremap not considering huge pmd devmap
  - CLKRN-1061: vfio-pci: Invalidate mmaps and block MMIO access on disabled memory
  - CLKRN-1061: [scsi] scsi: qedi: remove memset/memcpy to nfunc and use func instead
  - CLKRN-1061: blktrace: Protect q->blk_trace with RCU
  - CLKRN-1061: netlabel: cope with NULL catmap
  - CLKRN-1061: CVE-2019-16746: [net] nl80211: validate beacon head
  - CLKRN-1061: [net] mac80211: Do not send Layer 2 Update frame before authorization
  - CLKRN-1061: cfg80211: Use const more consistently in for_each_element macros
  - CLKRN-1061: ieee80211: fix for_each_element_extid()
  - CLKRN-1061: cfg80211: add and use strongly typed element iteration macros
  - CLKRN-1061: CVE-2019-3901: [kernel] perf/core: Fix perf_event_open() vs. execve() race
  - CLKRN-1061: binfmt_elf: switch to new creds when switching to new mm
  - CLKRN-1061: CVE-2019-10638: [net] inet: switch IP ID generator to siphash
  - CLKRN-1061: CVE-2019-10638: [lib] siphash: add cryptographically secure PRF
  - CLKRN-1061: CVE-2019-10638: [fs] dcache: allow word-at-a-time name hashing with big-endian CPUs
  - CLKRN-1061: CVE-2019-15221: [sound] ALSA: line6: Fix memory leak at line6_init_pcm() error path
  - CLKRN-1061: CVE-2019-15221: [sound] ALSA: line6: Fix write on zero-sized buffer
  - CLKRN-1061: CVE-2019-14283: [block] floppy: fix out-of-bounds read in copy_buffer
  - CLKRN-1061: CVE-2019-10207: [bluetooth] Bluetooth: hci_uart: check for missing tty operations


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-76
changelog:
  - CLKRN-1076: substituted ipset allocating memory to kvzalloc
  - CLKRN-1083: CVE-2022-2588: net_sched: cls_route: remove from list when handle is 0


author: Denis Kirjanov <dkirjanov@cloudlnux.com>> - 1.5-77
changelog:
  - CLKRN-1061: fget: check that the fd still exists after getting a ref to it
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: KVM: x86/speculation: Disable Fill buffer clear within guests
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/srbds: Update SRBDS mitigation selection
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: cpu/speculation: Add prototype for cpu_show_srbds()
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/mmio: Enable CPU Fill buffer         clearing on idle
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
  - CLKRN-1078: CVE: CVE-2022-21123: CVE: CVE-2022-21125: CVE: CVE-2022-21166: x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug


author: Denis Kirjanov <dkirjanov@cloudlnux.com>> - 1.5-79
changelog:
  - KRNTSTNG-292: Fix oom_kill counter in CL7
  - CLKRN-1013: Move CL7 XFS to Centos 7/OpenVZ current implementation


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-80
changelog:
  - CLKRN-1077: disable kmem accounting due to memory leak
  - CVE: mm/rmap: Fix anon_vma->degree ambiguity leading to  double-reuse
  - CVE: mm: rmap: explicitly reset vma->anon_vma in unlink_anon_vmas()
  - CVE: CVE-2022-4378: proc: proc_skip_spaces() shouldn't think it is working on C strings
  - CVE: CVE-2022-4378: proc: avoid integer type confusion in get_proc_long
  - CVE: CVE-2022-2964: net: usb: ax88179_178a: Fix packet receiving
  - CVE: CVE-2022-2964: net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
  - CVE: CVE-2022-2964: net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32
  - CVE: CVE-2022-2964: ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32
  - CVE: CVE-2022-2964: net: usb: ax88179_178a: fix packet alignment padding


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-81
changelog:
  - KMODLVE-589: avoid crashes in os_set_dac_override()
  - CLKRN-1093: allow freezable sleep in kmodlve


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-82
changelog:
  - CVE: Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu
  - CVE: usb: mon: make mmapped memory read only
  - CLKRN-1176: added patch to fix ttypushback vulnerability
  - KMODLVE-596: fix cgroup stat parsing


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-83
changelog:
  - CLKRN-1406: revert some changes related to prod_net_disable2 - made the behaviour obliged
  - CLKRN-1399: improved fs.enforce_symlinksifowner option to close the SecureLink creating vulnerability


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-84
changelog:
  - CLKRN-1532: (CVE-2024-1086) netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - CLKRN-1203: switch back to using rh_reserved for tag links
  - CLKRN-1411: use monotonic clock for iolimits


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-86
changelog:
  - CLKRN-1723: Implement namespace check in __ptrace_may_access
  - [ELSCVE-33860] Squashfs: sanity check symbolic link size by Phillip Lougher
  - [ELSCVE-33999] ath9k: fix use-after-free in ath9k_hif_usb_rx_cb by Pavel Skripkin
  - [ELSCVE-34184] ALSA: pcm: Fix races among concurrent prealloc proc writes by Takashi Iwai
  - [ELSCVE-34184] ALSA: pcm: Add debug print on memory allocation failure by Amadeusz Sławiński
  - [ELSCVE-34184] ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls by Takashi Iwai
  - [ELSCVE-34184] ALSA: pcm: Fix races among concurrent read/write and buffer changes by Takashi Iwai
  - [ELSCVE-34184] ALSA: pcm: Fix races among concurrent hw_params and hw_free calls by Takashi Iwai
  - [ELSCVE-34009] af_key: Do not call xfrm_probe_algs in parallel by Herbert Xu
  - [ELSCVE-34009] af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register by Haimin Zhang
  - [ELSCVE-34035] tcp: Fix data races around icsk->icsk_af_ops. by Kuniyuki Iwashima
  - [ELSCVE-34076] igmp: Add ip_mc_list lock in ip_check_mc_rcu by Liu Jian
  - [ELSCVE-34078] x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit by Wander Lairson Costa
  - [ELSCVE-34078] x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK by Wander Lairson Costa
  - [ELSCVE-34078] x86/elf: Add table to document READ_IMPLIES_EXEC by Wander Lairson Costa
  - [ELSCVE-34080] ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE by Jann Horn
  - [ELSCVE-34092] wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() by Johannes Berg
  - [ELSCVE-34097] wifi: cfg80211: fix BSS refcounting bugs by Johannes Berg
  - [ELSCVE-34097] cfg80211: hold bss_lock while updating nontrans_list by Rameshkumar Sundaram
  - [ELSCVE-34097] cfg80211: save multi-bssid properties by Sara Sharon
  - [ELSCVE-34097] cfg80211: use for_each_element() for multi-bssid parsing by Johannes Berg
  - [ELSCVE-34097] cfg80211: Scan results to also report the per chain signal strength by Sunil Dutt
  - [ELSCVE-34097] cfg80211: Move Multiple BSS info to struct cfg80211_bss to be visible by Sara Sharon
  - [ELSCVE-34097] cfg80211: Properly track transmitting and non-transmitting BSS by Sara Sharon
  - [ELSCVE-34097] cfg80211: Parsing of Multiple BSSID information in scanning by Peng Xu
  - [ELSCVE-34147] Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() by Takashi Iwai
  - [ELSCVE-34216] openvswitch: fix OOB access in reserve_sfa_size() by Paolo Valerio
  - [ELSCVE-34216] openvswitch: fix the incorrect flow action alloc size by zhangliping
  - [ELSCVE-34231] net/packet: fix slab-out-of-bounds access in packet_recvmsg() by Eric Dumazet
  - [ELSCVE-34231] packet: in recvmsg msg_name return at least sizeof sockaddr_ll by Willem de Bruijn
  - [ELSCVE-34266] can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path by Hangyu Hua
  - [ELSCVE-34275] net/sched: cls_u32: fix netns refcount changes in u32_change() by Eric Dumazet
  - [ELSCVE-34275] net: sched: cls_u32: get rid of unused argument of u32_destroy_key() by Al Viro
  - [ELSCVE-34277] netfilter: nf_queue: do not allow packet truncation below transport header offset by Florian Westphal
  - [ELSCVE-33443] net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free by valis
  - [ELSCVE-33442] net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free by valis
  - [ELSCVE-33441] net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free by valis
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free by M A Ramdhan
  - [ELSCVE-33436] net/sched: cls_u32: Fix reference counter leak leading to overflow by Lee Jones
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval by Florian Westphal
  - netfilter: nf_tables: skip deactivated anonymous sets during lookups by Florian Westphal
  - [ELSCVE-25393] netfilter: nf_tables: do not allow SET_ID to refer to another table by Florian Westphal
  - netfilter: nf_tables: deactivate anonymous set from preparation phase by Florian Westphal
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg by Davide Caratti
  - RDMA/i40iw: Prevent zero-length STAG registration by Kamal Heib
  - [ELSCVE-34145] vt: vt_ioctl: fix race in VT_RESIZEX by Eric Dumazet
  - [ELSCVE-34145] VT_RESIZEX: get rid of field-by-field copyin by Al Viro
  - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() by David Marlin
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() by David Marlin
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve by Davide Caratti
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve by Davide Caratti
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). by Guillaume Nault
  - igb: set max size RX buffer when store bad packet is enabled by Radoslaw Tyl
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() by valis
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm by Luiz Augusto von Dentz
  - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM by Luiz Augusto von Dentz
  - [ELSCVE-30788] wifi: mac80211: Avoid address calculations via out of bounds array indexing by Kenton Groombridge
  - [ELSCVE-29571] fuse: fix pipe buffer lifetime for direct_io by Miklos Szeredi
  - [ELSCVE-28406] net: fix __dst_negative_advice() race by Eric Dumazet


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.5-88
changelog:
  - CLKRN-1963: CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers and posix_cpu_timer_del


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1.5-24.5
changelog:
  - AL-3255: Enabled CONFIG_NETLINK_MMAP option to fix network issues in CL 7.6
  - CLKRN-389: restore  memcg_oom_disable sysctl option
  - CLKRN-390: Backport ptrace access sysctls


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-9
changelog:
  - kdumpctl: bail out earlier in case of no reserved memory
  - kdumpctrl: kdump feasibility should fail if no crash memory
  - kdumpctl: improve "while read" time for /etc/kdump.conf
  - kdumpctl: update check_dump_fs_modified() to use "lsinitrd -f"
  - kdumpctl: improve check_wdt_modified()
  - kdumpctl: remove is_mode_switched()
  - arm64: cmdline: modify to optimize size for memory reservation


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-10
changelog:
  - kdumpctl: call strip_comments only when necessary to speedup
  - Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-12
changelog:
  - kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
  - Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-14
changelog:
  - kdump.conf.5: clarify the fence_kdump_nodes option
  - kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-15
changelog:
  - Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
  - udev rules: mask cpu hotplug rules


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-7
changelog:
  - arm64: Increase the upper limit for RAM segments
  - kdump: Introduce 'force_no_rebuild' option
  - kdump-lib-initramfs.sh: ignore the failure of echo
  - use "systemctl reboot -f" for reboot action


author: Pingfan Liu <piliu@redhat.com> - 2.0.7-52
changelog:
  - kdumpctl: check /etc/fstab modification only when it exists
  - kdumpctl: remove duplicate statement
  - kdumpctl: Kill duplicate code related to file modication check
  - fadump: restore default initrd when fadump mode is disabled
  - kdump/fadump: fix network interface name when switching from fadump to kdump


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-2
changelog:
  - kdumpctl: check the existence of /sys/kernel/security/securelevel
  - kdump.sysconfig.x86_64: Remove 'notsc' from kdump kernel cmdline
  - kdump.sysconfig: add KDUMP_COMMANDLINE_REMOVE for aarch64 and ia64
  - kdump.sysconfig: add KDUMP_COMMANDLINE_REMOVE
  - Document: fix incorrect link in fadump-how.txt
  - kexec-tools.spec: add %doc for fadump-howto.txt


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-3
changelog:
  - arm64: backport latest kdump patches
  - Fix `makedumpfile --mem-usage /proc/kcore`
  - kdump-lib.sh: fix incorrect usage with pipe as input for grep -q in is_pcs_fence_kdump()


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-4
changelog:
  - kdump-emergency: fix "Transaction is destructive" emergency failure
  - x86: Support large number of memory ranges


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-5
changelog:
  - ppc64: Reduce number of ELF LOAD segments
  - kexec-kdump-howto: Include notes about using debug kernel as crash kernel
  - Correct two typos in kdumpctl and kdump.conf


author: Pingfan Liu <piliu@redhat.com> 2.0.15-2
changelog:
  - mkdumprd: fix patterns to modify mount options
  - kexec-tools/ppc64: avoid adding coherent memory regions to crash memory ranges
  - kexec-tools/ppc64: fix command line overflow error
  - kexec-tools/ppc64: fix how RMA top is deduced


author: Pingfan Liu <piliu@redhat.com> 2.0.15-3
changelog:
  - makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
  - makedumpfile: ppc64: get the info of mem reserved for crashkernel
  - makedumpfile: Fix SECTION_MAP_MASK for kernel >= v.13


author: Pingfan Liu <piliu@redhat.com> 2.0.15-5
changelog:
  - Revert "Update kdump anaconda addon"
  - Revert "Update kdump anaconda addon: fix the md5sum in source file"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-7
changelog:
  - mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
  - Change dump_to_rootfs to use "--mount" instead of "root=X"
  - kdumpctl: move is_fadump_capable() to kdump-lib.sh
  - module-setup: fix 99kdumpbase network dependency
  - mkdumprd: change for_each_block_target() to use get_kdump_targets()
  - kdump-lib.sh: introduce get_kdump_targets()
  - kdump-lib.sh: fix improper get_block_dump_target()
  - kdumpctl: remove "root=X" for kdump boot
  - kdumpctl: fix a bug in remove_cmdline_param()


author: Pingfan Liu <piliu@redhat.com> 2.0.15-9
changelog:
  - makedumpfile: Fix 'kernel_version' variable being uninitialized & introduce minor reorganization
  - makedumpfile: Fix segmentation fault when using --split on a vmcore
  - dracut-module-setup.sh: check whether to include multipath-hostonly or not


author: Pingfan Liu <piliu@redhat.com> 2.0.15-10
changelog:
  - kexec-tools.spec: require dracut >= 033-522 to make 99kdump module installed correctly
  - kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
  - Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-11
changelog:
  - dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
  - kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
  - kdumpctl: skip selinux-relabel for dracut_args --mount dump target


author: Pingfan Liu <piliu@redhat.com> 2.0.15-13
changelog:
  * Thu Feb 1 2018 Pingfan Liu <piliu@redhat.com> 2.0.15-12
  - makedumpfile/sadump: Fix a problem of PTI enabled kernel
  - makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'


author: Pingfan Liu <piliu@redhat.com> 2.0.15-14
changelog:
  - kdumpctl: Remove 'netroot' and 'iscsi initiator' entries from kdump cmdline
  - doc: remove btrfs from supported filesystems list
  - Update kdump anaconda addon
  - makedumpfile/arm64: Add '--mem-usage' support
  - Fix warning about persistent device name not found.
  - kdumpctl: Check the modification time of core_collector
  - kdump.sysconfig.x86_64: Remove 'notsc' from KDUMP_COMMANDLINE_REMOVE
  - makedumpfile: fix for hugepages filtering


author: Pingfan Liu <piliu@redhat.com> 2.0.15-15
changelog:
  - dracut-module-setup.sh: pass ip=either6 param for ipv6
  - dracut-module-setup.sh: install /etc/hosts when using fence_kdump
  - update kdump-anaconda-addon-003-29-g4c517c5.tar.gz


author: Pingfan Liu <piliu@redhat.com> 2.0.15-18
changelog:
  kdumpctl: Rebuild initramfs if loaded kernel modules changed
  dracut-module-setup.sh: don't include multipath-hostonly
  Add document to declare FCoE support (V2)
  Revert "Add document to declare FCoE support"
  Add document to declare FCoE support
  makedumpfile: fix makedumpfile Not tainted in 2nd kernel


author: Pingfan Liu <piliu@redhat.com> 2.0.15-20
changelog:
  - makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
  - dracut-module-setup: Fix DRM module inclusion test for hyper-v
  - kdumpctl: remove some cmdline inheritage from 1st kernel
  - kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
  - kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
  - Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
  - dracut-module-setup: Fix test for inclusion of DRM modules


author: Pingfan Liu <piliu@redhat.com> 2.0.15-22
changelog:
  - doc/kdump.conf: Local dump path should be <mnt>/<path>/%HOST_IP-%DATE
  - Update help text to indicate --mem-usage is supported on archs other than x86_64
  - Add missing usage info
  - Rewrite kdump's udev rules, use reload instead of restart
  - kdumpctl: Add reload support


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-23
changelog:
  - kdump: fix an error that can not parse the e820 reserved region
  - Doc: add document to declare atlantic support


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-24
changelog:
  - mkdumprd: use --quiet dracut argument to speedup initramfs build
  - mkdumprd: refine regex on dropping mount options


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-32
changelog:
  - makedumpfile: exclude pages that are logically offline
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-33
changelog:
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
    [Fix the Fix the patch to make sure makedumpfile-1.6.2/ path is used]


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-34
changelog:
  - kdump.sysconfig/x86_64: Disable HEST by default
  - Introduce kdumpctl rebuild command and update document


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-37
changelog:
  - dracut-module-setup: get localhost alias by manual
  - dracut-module-setup: filter out localhost for generic_fence_kdump
  - kdumpctl: distinguish the reason for ssh failure


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43
changelog:
  - module-setup: re-fix 99kdumpbase network dependency
  - kdumpctl: bail out immediately if host key verification failed


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48
changelog:
  - dracut-module-setup.sh: ensure cluster info is ready before query.
  - dracut-module-setup.sh: improve get_alias()


author: WANG Chao <chaowang@redhat.com> - 2.0.4-24
changelog:
  - remove selinux flipping when propagating ssh key
  - add kdump-in-cluster-environment.txt to rpm pkg
  - Secure Boot status check warning
  - Some watchdog driver support


author: WANG Chao <chaowang@redhat.com> - 2.0.4-25
changelog:
  - kdumpctl: Pass disable_cpu_apicid to kexec of capture kernel
  - Relax restriction of dumping on encrypted target
  - ssh dump: create random-seed manually


author: WANG Chao <chaowang@redhat.com> - 2.0.4-27
changelog:
  - mkdumprd: call dracut with --hostonly-cmdline (dracut >= 033-145)
  - warning on secure boot enabled platform


author: WANG Chao <chaowang@redhat.com> - 2.0.4-28
changelog:
  - Document supported/unsupported/unknown list of dump targets
  - Warn user about save vmcore path mounted by another disk


author: WANG Chao <chaowang@redhat.com> - 2.0.7-4
changelog:
  - ppc64: kexec load fails due to elf symbol relocation failure.
  - display a message while waiting for kdump lock


author: WANG Chao <chaowang@redhat.com> - 2.0.7-5
changelog:
  - rework of kdump error handling
  - ppc: add fadump support
  - add static route support
  - systemd will take care of shutdown and unmount filesystems
  - fix an issue that can't bring up correct network device


author: WANG Chao <chaowang@redhat.com> - 2.0.7-9
changelog:
  - Enable ppc64le arch.
  - add sample eppic scripts to kexec-tools-eppic package
  - Restart kdump service on cpu ADD/REMOVE events


author: WANG Chao <chaowang@redhat.com> - 2.0.7-10
changelog:
  - Rebase makedumpfile-1.5.7
  - Fix an issue on iscsi boot environment
  - Disable kvm CMA reservation in kdump kernel


author: WANG Chao <chaowang@redhat.com> - 2.0.7-14
changelog:
  - fix core_collector issue for ssh/raw dump
  - remove sysctl.conf for kdump kernel
  - exclude aarch64 build
  - fix path directive issue
  - remove panic_on_warn kernel parameter


author: WANG Chao <chaowang@redhat.com> - 2.0.7-15
changelog:
  - mount fail if its mount poing doesn't exist in /sysroot
  - rebuild initrd dependency during kdump restart
  - fix a dump path issue


author: Baoquan He <bhe@redhat.com> - 2.0.7-19.2
changelog:
  - dracut-module-setup: Enhance kdump to support the bind mounted feature in Atomic
  - Fix the warning if the target path is bind mount in Atomic
  - Get the mount point correctly, if the device has several mount point
  - kdump-lib: Add new function to judge the system is Atomic or not
  - kdump-lib: Add the new function to enhance bind mounted judgement
  - Remove duplicate slash in save path
  - dracut-module-setup.sh: change the insecure use of /tmp/*$$* filenames


author: Baoquan He <bhe@redhat.com> - 2.0.7-33
changelog:
  mkdumprd: Remove ifcfg from dracut's modules
  arm64: move -fno-exceptions from purgatory code to spec file
  module-setup: Choose the first matched gateway in kdump_static_ip


author: Baoquan He <bhe@redhat.com> - 2.0.7-34
changelog:
  arm64: Overwrite CFLAGS and remove -fno-exceptions from kexec purgatory code
  Fix comment to exclude keyword 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info
  Revert "arm64: move -fno-exceptions from purgatory code to spec file"


author: Baoquan He <bhe@redhat.com> - 2.0.7-40
changelog:
  - kdumpctl: force rebuild in case of file system is modified
  - mkdumprd: move to_dev_name() & get_persistent_dev() to kdump-lib.sh
  - kdumpctl: Move file modification check logic in check_system_modified()
  - kdumpctl: force rebuild in case of dynamic system modification
  - mkdumprd: do not lookup in by-uuid dirs for raw device's persistent name


author: Baoquan He <bhe@redhat.com> - 2.0.7-42
changelog:
  - module-setup: Use get_ifcfg_filename() to get the proper ifcfg file
  - kdump-lib: Add get_ifcfg_filename() to get the proper ifcfg file
  - doc: add nfs to supported filesystems list


author: Baoquan He <bhe@redhat.com> - 2.0.7-43
changelog:
  - kexec/sadump: Back port two patches to fix regression bug of makedumpfile 1.6.0
  - Makedumpfile: Rebase to 1.6.0


author: Baoquan He <bhe@redhat.com> - 2.0.7-44
changelog:
  - Update kdump anaconda addon
  - kdumpctl: Do not rebuild initramfs when $KDUMP_BOOTDIR is read only
  - get_persistent_dev(): fix name contention with dracut's similar function


author: Baoquan He <bhe@redhat.com> - 2.0.7-45
changelog:
  - kdump.conf man page fixes
  - kdump.conf comments fixes
  - Add persistent memory support
  - module-setup: Don't handle iBFT in kdump


author: Baoquan He <bhe@redhat.com> - 2.0.7-47
changelog:
  - spec: Update to add dependency on dracut version >= 033-449
  - watchdog: do not add watchdog module in rd.driver.pre now
  - howto: Notes on watchdog module handling
  - kdumpctl: force rebuild in case of watchdog state change
  - mkdumprd: Add dracut watchdog module as default option


author: Baoquan He <bhe@redhat.com> - 2.0.7-50
changelog:
  - spec: Update to add dependency on dracut-network version >= 033-449
  - mkdumprd: Do not add "nfs" dracut module explicitly
  - kexec-kdump-howto: Add doc about the special mount information via "dracut_args"
  - Support special mount information via "dracut_args"


author: David Howells <dhowells@redhat.com>
changelog:
  - Adjust the manual page for 'keyctl unlink' to show keyring is optional.
  - Add --version support for the keyutils version and build date.


author: David Howells <dhowells@redhat.com> - 1.5.4-1
changelog:
  - Fix the keyctl padd command and similar to handle binary input.
  - Make keyctl show able to take a keyring to dump.
  - Make keyctl show able to take a flag to request hex key IDs.
  - Make keyctl show print the real ID of the root keyring.


author: David Howells <dhowells@redhat.com> - 1.5.6-1
changelog:
  - Fix the request-key.conf.5 manpage.
  - Fix the max depth of key tree dump (keyctl show) [BZ 1002761].
  - The input buffer size for keyctl padd and pinstantiate should be larger [BZ 1002761].
  - Add keyctl_invalidate.3 manpage [BZ 1002761].


author: David Howells <dhowells@redhat.com> - 1.5.7-1
changelog:
  - Provide a utility function to find a key by type and name.
  - Allow keyctl commands to take a type+name arg instead of a key-id arg.
  - Add per-UID get_persistent keyring function [BZ 1014739].


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-2
changelog:
  - Resolves: #997594, misbehaving checkbox "Allow encryption with untrusted keys"
  - Resolves: #997599, Key Manager does not refresh after change
  - Resolves: #999850, shows error message despite the change was successful


author: Rex Dieter <rdieter@fedoraproject.org> - 4.10.1-2
changelog:
  - pull a few upstream patches, in particular...
  - kmix crahes moving streams between sinks (#922849)


author: David Shea <dshea@redhat.com> - 20-5
changelog:
  - Check for changes in non-module files that affect that initramfs
    Resolves: rhbz#1108166
  - Use dracut to skip early cpio archives in the initramfs
    Resolves: rhbz#1210449


author: David Shea <dshea@redhat.com> - 20-6
changelog:
  - Accept '.' as part of a symbol exported by the kernel
    Resolves: rhbz#1283486
  - Check the addon modules of the new kernel for exported symbols
    Resolves: rhbz#1296465


author: Tony Camuso <tcamuso@redhat.com> - 20-9
changelog:
  - Must be bumped to 20-9 due to changes and version bumps in the
    7.2-z stream.
    Resolves: rhbz#1320204


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-10
changelog:
  - weak-modules: deprecate --delete-modules switch.
  - weak-modules: implement some pathes configuration from cmdline.
  - weak-modules: redesign to reuse depmod -aeE functionality
    (with some preparation changes).
    This is an updated version of the script which doesn't support
    multiple installation of the same out-of-tree module (stored in the
    'extra' subdirectory). But it more correctly checks dependencies
    between the modules.
    Resolves: rhbz#1367942


author: Tony Camuso <tcamuso@redhat.com> - 20-10
changelog:
  - Rename patches so they are not specific to the build. This was
    causing problems with z-stream builds.
    Resolves: rhbz#1416498


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-12
changelog:
  - weak-modules: fix coverity introduced by latest changes
  - weak-modules: fix "permission denied" on some upgrades.
    Resolves: rhbz#1416566


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.2
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1482385


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.3
changelog:
  - weak-modules: implement dry run by symlink restoration.
  - weak-modules: fix dry-run for non-lib-modules installation.
    Resolves: rhbz#1489696.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.5
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1511943.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-17
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1468305
  - weak-modules: implement dry run by symlink restoration.
    Resolves: rhbz#1477073


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-18
changelog:
  - depmod: external directories support.
    Resolves: rhbz#1361857
  - BuildRequires automake autoconf libtool.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-20
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1510058


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-23
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1619889.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-26
changelog:
  - weak-modules: handle independent modules in one run
  - weak-modules: use asterisk for kernel version in sandbox
    Resolves: rhbz#1695547


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-28
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1774925


author: Radek Novacek <rnovacek@redhat.com> 0.9.0-1
changelog:
  - Update to version 0.9.0
  - Drop upstreamed patches
  - Use CMake build system
  - Include FindCMPI.cmake and FindKonkretCMPI.cmake cmake modules
  - Add python subpackage


author: Radek Novacek <rnovacek@redhat.com> 0.9.0-3
changelog:
  - Enable direct calls
  - Fix method arguments that are both input and output
  - Don't install Find*.cmake files


author: Radek Novacek <rnovacek@redhat.com> 0.9.1-3
changelog:
  - Set format(printf) attribute to __KReturn2 function
  - Fix possible integer overflow
  - Resolves: rhbz#1000434, rhbz#1000430


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-40
changelog:
  - pull in fix from master to make reporting of errors encountered by
    the SPNEGO mechanism work better (RT#7045, part of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-42
changelog:
  - add proposed patch to fix the GSSAPI library's checks for expired
    client creds in gss_init_sec_context() so that they work with keyring
    caches (RT#7820, #1030607)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-44
changelog:
  - pull in and backport multiple changes to allow replay caches to be added to
    a GSS credential store as "rcache"-type credentials (RT#7818/#7819/#7836,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-46
changelog:
  - pull in patch from master to move the default directory which the KDC uses
    when computing the socket path for a local OTP daemon from the database
    directory (/var/kerberos/krb5kdc) to the newly-added run directory
    (/run/krb5kdc), in line with what we're expecting in 1.13 (RT#7859, more
    of #1040056 as #1063905)
  - add a tmpfiles.d configuration file to have /run/krb5kdc created at
    boot-time
  - own /var/run/krb5kdc


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-47
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1066002, RT#7858)


author: Nathaniel McCallum <npmccallum@redhat.com> - 1.11.3-48
changelog:
  - add Nathaniel's backported fix for to make password changes work properly
    when performed while obtaining creds over FAST (RT#7868, #1072579)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-49
changelog:
  - mark the pkinit module "nodelete" so that applications which cause it
    to be loaded and unloaded repeatedly don't suffer from memory loss when
    libcrypto is initialized, allocating memory in the process, and then
    unloaded along with the module (most of #1063732)
  - when copying creds from one ccache to another, if we single out one
    server for which creds shouldn't be copied, don't leak the memory
    that those creds use (a bit more of #1063732)
  - fix an uninitialized variable warning that could, rarely, cause a
    service-unavailable error to be reported when a server was merely
    unreachable (spotted while chasing #1063732)
  - don't leak the per-request context allocated by preauth modules (a
    bit more of #1063732)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-4
changelog:
  - kpropd hasn't bothered with -S since 1.11; stop trying to use that flag
    in the systemd unit file


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-5
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1078888)
  - define _GNU_SOURCE in files where we use EAI_NODATA, to make sure that
    it's declared (#1059730,#1084068,#1109102)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-6
changelog:
  - backport patch to make the client skip checking the server's reply
    address when processing responses to password-change requests, which
    between NAT and upcoming HTTPS support, can cause us to erroneously
    report an error to the user when the server actually reported success
    (RT#7886)
  - backport support for accessing KDCs and kpasswd services via HTTPS
    proxies (marked by being specified as https URIs instead as hostnames
    or hostname-and-port), such as the one implemented in python-kdcproxy
    (RT#7929, #109919), and pick up a subsequent patch to build HTTPS
    as a plugin


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-8
changelog:
  - fix the problem where the %license file has been a dangling symlink
  - ksu: pull in fix from pull #206 to avoid breakage when the
    default_ccache_name doesn't include a cache type as a prefix
  - ksu: pull in a proposed fix for pull #207 to avoid breakage when the
    invoking user doesn't already have a ccache


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-9
changelog:
  - Undo libkadmclnt SONAME change (from 8 to 9) which originally
    happened in the krb5 1.12 rebase (#1166012) but broke
    rubygem-rkerberos (sort of ruby language bindings for
    libkadmclnt&co.) dependicies, as side effect of
    rubygem-rkerberos using private interfaces in libkadmclnt.


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-10
changelog:
  - In ksu, without the -e flag, also check .k5users (#1105489)
    When ksu was explicitly told to spawn a shell, a line in .k5users which
    listed "*" as the allowed command would cause the principal named on the
    line to be considered as a candidate for authentication.
    When ksu was not passed a command to run, which implicitly meant that
    the invoking user wanted to run the target user's login shell, knowledge
    that the principal was a valid candidate was ignored, which could cause
    a less optimal choice of the default target principal.
    This doesn't impact the authorization checks which we perform later.
    Patch by Nalin Dahyabhai <nalin@redhat.com>


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-13
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9423 (#1179863) "libgssrpc server applications
    leak uninitialized bytes (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-14
changelog:
  - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, "Do not
    loop on principal unknown errors").


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-15
changelog:
  - Add a patch to fix RedHat bug #1256870 ("KDC sends multiple
    requests to ipa-otpd for the same authentication") which causes
    the KDC to send multiple retries to ipa-otpd for TCP transports
    while it should only be done for UDP.


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-1
changelog:
  - update to 1.12.2
    - drop patch for RT#7820, fixed in 1.12.2
    - drop patch for #231147, fixed as RT#3277 in 1.12.2
    - drop patch for RT#7818, fixed in 1.12.2
    - drop patch for RT#7836, fixed in 1.12.2
    - drop patch for RT#7858, fixed in 1.12.2
    - drop patch for RT#7924, fixed in 1.12.2
    - drop patch for RT#7926, fixed in 1.12.2
    - drop patches for CVE-2014-4341/CVE-2014-4342, included in 1.12.2
    - drop patch for CVE-2014-4343, included in 1.12.2
    - drop patch for CVE-2014-4344, included in 1.12.2
    - drop patch for CVE-2014-4345, included in 1.12.2
  - replace older proposed changes for ksu with backports of the changes
    after review and merging upstream (#1015559, #1026099, #1118347)


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-0
changelog:
  - Update to krb5-1.13.2
    - drop patch for krb5-1.13.2-CVE_2015_2694_requires_preauth_bypass_in_PKINIT_enabled_KDC, fixed in krb5-1.13.2
    - drop patch for krb5-1.12.1-CVE_2014_5355_fix_krb5_read_message_handling, fixed in krb5-1.13.2


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-1
changelog:
  - the rebase to krb5 1.13.1 in vers 1.13.1-0 also fixed:
    - Bug 1144498 ("Fix the race condition in the libkrb5 replay cache")
    - Bug 1163402 ("kdb5_ldap_util view_policy does not shows ticket flags on s390x and ppc64")
    - Bug 1185770 ("Missing upstream test in krb5-1.12.2: src/tests/gssapi/t_invalid.c")
    - Bug 1204211 ("CVE-2014-5355 krb5: unauthenticated denial of service in recvauth_common() and other")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-2
changelog:
  - Add fix for RedHat Bug #1164304 ("Upstream unit tests loads
    the installed shared libraries instead the ones from the build")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-3
changelog:
  - Add patch to fix Redhat Bug #1222903 ("[SELinux] AVC denials may appear
    when kadmind starts"). The issue was caused by an unneeded |htons()|
    which triggered SELinux AVC denials due to the "random" port usage.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-4
changelog:
  - the rebase to krb5 1.13.2 in vers 1.13.2-0 also fixed:
    - Redhat Bug #1247761 ("RFE: Minor krb5 spec file cleanup and sync
      with recent Fedora 22/23 changes")
    - Redhat Bug #1247751 ("krb5-config returns wrong -specs path")
    - Redhat Bug #1247608 ('Add support for multi-hop preauth mechs
      via |KDC_ERR_MORE_PREAUTH_DATA_REQUIRED| for RFC 6113 ("A
      Generalized Framework for Kerberos Pre-Authentication")')
  - Removed "krb5-1.10-kprop-mktemp.patch" and
    "krb5-1.3.4-send-pr-tempfile.patch", both are no longer used since
    the rebase to krb5 1.13.1


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-5
changelog:
  - Add a patch to fix RedHat bug #1251586 ("KDC sends multiple
    requests to ipa-otpd for the same authentication") which causes
    the KDC to send multiple retries to ipa-otpd for TCP transports
    while it should only be done for UDP.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-6
changelog:
  - Add a patch to fix RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') so that krb5 resolves GSS creds
    if |time_rec| is requested.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-7
changelog:
  - Obsolete multilib versions of server packages to fix RH
    bug #1251913 ("krb5 should obsolete the multilib versions
    of krb5-server and krb5-server-ldap").
    The following packages are declared obsolete:
    - krb5-server-1.11.3-49.el7.i686
    - krb5-server-1.11.3-49.el7.ppc
    - krb5-server-1.11.3-49.el7.s390
    - krb5-server-ldap-1.11.3-49.el7.i686
    - krb5-server-ldap-1.11.3-49.el7.ppc
    - krb5-server-ldap-1.11.3-49.el7.s390


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-8
changelog:
  - Add a patch to fix RH Bug #1250154 ("[s390x, ppc64, ppc64le]:
    kadmind does not accept ACL if kadm5.acl does not end with EOL")
    The code "accidently" works on x86/AMD64 because declaring a
    variable |char| results in an |unsigned char| by default while
    most other platforms (e.g. { s390x, ppc64, ppc64le, ...})
    default to |signed char| (still have to use lint(1) to clean
    up 38 more instances of this kind of bug).


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-9
changelog:
  - Ammend patch for RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') to handle the newly introduced
    valgrind hits.


author: Robbie Harwood <rharwood@redhat.com> 1.13.2-9
changelog:
  - Add patch and test case for "KDC does not return proper
    client principal for client referrals"
  - Resolves: #1259846


author: Robbie Harwood <rharwood@redhat.com> - 1.13.2-12
changelog:
  - Fix CVE-2015-8631, CVE-2015-8630, and CVE-2015-8629
  - Remove obsolete trigger to enable building of package
  - Resolves: #1306969


author: Robbie Harwood <rharwood@redhat.com> - 1.14.1-16
changelog:
  - Fix kprop/iprop handling of default realm
  - Fix t_kprop.py
  - Resolves: #1290561
  - Resolves: #1302967
  - Resolves: #1292795


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-23
changelog:
  - Fix flaws in LDAP DN checking (CVE-2018-5729, CVE-2018-5730)
  - Resolves: #1562684
  - Resolves: #1562679


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-29
changelog:
  - Process profile includedir in sorted order
  - Also, ignore dotfiles in included directories
  - Resolves: #1539824


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-32
changelog:
  - Include preauth name in trace output if possible
  - Update cert generation scripts to work on modern openssl
  - Fix per-request preauth scoping
  - Add test case for PKINIT DH renegotiation
  - Echo KDC cookies in preauth tryagain
  - Fall back to other preauth mechanisms after failures
  - Resolves: #1540130


author: Linar Nadeev <lnadeev@cloudlinux.com> - 1.15.1-55.tuxcare.els1
changelog:
  - CVE-2024-37370: prevent modification of Extra Count field in GSS krb5 wrap
    token to avoid appearing truncated to application
  - CVE-2024-37371: fix invalid memory reads during GSS message token handling


author: Robbie Harwood <rharwood@redhat.com> - 1.15-1
changelog:
  - Rebase to 1.15-final
  - Resolves: #1389073
  - Resolves: #1367169
  - Resolves: #1389072
  - Resolves: #1366863


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-1
changelog:
  - Bump to krb5-1.15.1 (very small change)
  - Apply some sanity to our patches and ordering
  - Resolves: #1389073


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-4
changelog:
  - Backport certauth plugin and related pkinit changes
  - Note: related changes cannot be tested because RHEL does not allow
    binary git diffs
  - Resolves: #1428484


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-7
changelog:
  - Fix installed files for -java subpkg
    Resolves: bz#1253143, build failure when java is installed in build enviroment


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-8
changelog:
  - Properly remove kross-java files
    Resolves: bz#1253143, build failure when java is installed in build enviroment


author: Siteshwar Vashisht <svashisht@redhat.com> - 20120801-37
changelog:
  - Add configuration option to enable signal bubbling for backward compatibility
    Resolves: #1484937


author: Kamil Dudka <kdudka@redhat.com> - 20120801-137
changelog:
  - Increase the release number by 100 to make sure it stays higher than in RHEL-6
    Related: #1484937


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-12
changelog:
  - ksh sometimes wrote wrong byte sequence to terminal when vi editing 
    mode was used (#1026360)
  - fix errors in man page (#1030867)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-15
changelog:
  - fix argv rewrite (#1047507)
  - fix memory leak (#1048995)
  - standard error output could get misdirected (#1048272)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-19
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1070328)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-20
changelog:
  - fix segfault in job list code (#1084406)
  - do not resend signal on termination (#1085385)
  - fix brace expansion on/off (#1099935)
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1070871)
  - fix parser errors related to the end of the here-document marker (#1111120)
  - ksh hangs when command substitution fills out the pipe buffer (#1077090)
  - using typeset -l with a restricted variabled caused segmentation fault (#1121960)
  - monitor mode was documented incorrectly (#1100215)
  - do not crash when unsetting running function from another one (#1100215)
  - should report an error when trying to cd into directory without execution bit (#1109893)
  - job locking mechanism did not survive compiler optimization (#1116506)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-21
changelog:
  - include symlink for restricted shell (#1146161)
  - ksh hangs when command substitution containing pipe fills out the pipe buffer (#1138751)
  - current directory could differ from PWD (#1135573)
  - cd builtin could break IO redirection (#1133585)
  - return code from a function could be wrong (#1116507)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - closing a file descriptor in a command substitution caused loss of the output (#1202439)
  - fix: in a login shell "( cmd & )" does nothing (#1217237)
  - exporting fixed with variable corrupted its data (#1192026)
  - fix segfault when handling a trap (#1211540)
  - combining alarm and IFS caused segfault (#1192119)
  - declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
  - do not inherit invalid variables during shell initializaton (#1211538)
  - case in a for loop inside a subshell caused syntax error (#1241014)


author: Robert Scheck <robert@fedoraproject.org> - 1.13-5
changelog:
  - Really added the plugindir patch now (thanks to Karsten Hopp)
  - Avoid the make errors because of mkdirhier better than until now


author: Jakub Martisko <jamartis@redhat.com> - 3.4.2-7
changelog:
  - fix issue with creation of srpm where __isa_bits on noarch leads to an error
  - Related: rhbz#1176026


author: Simo Sorce <simo@redhat.com> 2.4.0-0
changelog:
  - Update to final 2.4.0 version
  - Drop all patches, they are now included in 2.4.0
  - Change Source URI


author: Remi Collet <rcollet@redhat.com> - 2.4.0-4
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/Php56
  - add numerical prefix to extension configuration file
  - drop unneeded dependency on pecl
  - add provides php-lasso


author: John Dennis <jdennis@redhat.com> - 2.4.1-7
changelog:
  - Add ECP support, brings Lasso up to current upstream tip + revised ECP patches
    Resolves: #1205342


author: John Dennis <jdennis@redhat.com> - 2.4.1-8
changelog:
  - Add explicit minimum dependency on glib2 2.42,
    for some reason RPM is not automatically detecting the dependency
    Resolves: #1254989


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3
changelog:
  - Resolves: #1634267 - ECP signature check fails with
                         LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                         instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4
changelog:
  - Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5
changelog:
  - Resolves: #1719014 - Expired certificate prevents tests from running
  - Actually apply the patch file for the previous build
  - Related: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6
changelog:
  - Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                         vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7
changelog:
  - Fix Coverity warning introduced by the previous patch
  - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                        vulnerability when parsing SAML responses


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-6
changelog:
  - Build both with and without GUI to allow the use on systems where Gtk
    dependency is undesirable. The latencytop package is still the full-blown build.
    latencytop-tui is the miminal build. latencytop-common has the shared files.


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-7
changelog:
  - Remove the broken fsync view, stop using the obsolete 'tracing_enabled'.
  - Better error message when run as non-root.


author: Jiri Olsa <jolsa@redhat.com> - 0.5.11-5.1
changelog:
  - latrace-aarch64-basic-audit.patch: add basic aarch64 LD_AUDIT support.
  - Add aarch64 to ExclusiveArch. (BZ#1094501)


author: Jiri Olsa <jolsa@redhat.com> - 0.5.11-6
changelog:
  - latrace-ppcle64-basic-audit.patch: add basic ppc64le LD_AUDIT support.
  - Add ppc64le to ExclusiveArch. (BZ#1125756)


author: Richard Hughes <richard@hughsie.com> 2.4-1
changelog:
  - Update to new upstream version.
  - Black point detection from the algorithm disclosed by Adobe
  - Added support for transforms on planar data with different stride
  - Added a new plug-in type for optimizing full transforms
  - Linear (gamma 1.0) profiles can now operate in unbounded mode
  - Added "half" float support


author: Richard Hughes <richard@hughsie.com> 2.5-1
changelog:
  - Update to new upstream version.
  - Added a reference for Mac MLU tag
  - Added a way to read the profile creator from header
  - Added error descriptions on cmsSmoothToneCurve
  - Added identity curves support for write V2 LUT
  - Added new cmsPlugInTHR() and fixed some race conditions
  - Added TIFF Lab16 handling on tifficc
  - Fixed a bug on big endian platforms not supporting uint64 or long long.
  - Fixed a multithead bug on optimization
  - Fixed devicelink generation for 8 bits
  - Fixed some 64 bit warnings on size_t to uint32 conversions
  - Rendering intent used when creating the transform is now propagated to profile
  - RGB profiles store only one copy of the curve to save space
  - Transform2Devicelink now keeps white point when guessing deviceclass is enabled
  - Update black point detection algorithm to reflect ICC changes
  - User defined parametric curves can now be saved in ICC profiles


author: Andrew Hughes <gnu.andrew@redhat.com> - 2.6-3
changelog:
  - Run tests as part of %check, fixing Makefile to set LD_LIBRARY_PATH
  - Use upstream endianness fix to avoid ppc64le being built big-endian
  - Resolves: #1250914


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Paul Wouters <pwouters@redhat.com> - 1.6.13-2
changelog:
  - Added reworked ldns-read-zone patch from trunk
    (adds -p for SOA padding, and -o for zeroizing timestamps/sigs)


author: Paul Wouters <pwouters@redhat.com> - 1.6.14-1
changelog:
  - [pulled before release]
  - Updated to 1.6.14
  - Removed merged in patch
  - Added new dependancy on ca-certificates for ldns-dane PKIX validation


author: Fridolin Pokorny <fpokorny@redhat.com> - 458-3
changelog:
  - Expanded lessecho usage (#948597)
  - Added lessfilter info to man (#948597)
  - Expanded lesskey usage (#948597)
  - Added --old-bot to help (#948597)


author: Jozef Mlich <jmlich@redhat.com> - 458-5
changelog:
  - fixing regression in 72dfd3f63594e1d4c9416180a95c47ae583934c6
    incorrect parsing of commandline arguments
  - Resolves #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-8
changelog:
  - changes introduced in less-458-old-bot-in-help.patch
    wasn't compiled in. It is necessary to use mkhelp tool.
    Resolves: #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-9
changelog:
  - The --use-backslash option documented in the man page
    was missing from online help for less.
    Resolves: #1109090


author: Dmitrii Zudin <dzudin@cloudlinux.com> - 458-9.tuxcare.els1
changelog:
  - Fix CVE-2022-48624: filename.c (close_altfile): before 606 omits shell_quote
    calls for LESSCLOSE.


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 458-10.tuxcare.els2
changelog:
  - Extend ELS coverage to rhel7els, oraclelinux7els and cloudlinux7els.
  - CVE-2022-48624 and CVE-2024-32487 were already fixed in 458-10.tuxcare.els1;
    this release reships those fixes to the additional platforms.


author: Martin Briza <mbriza@redhat.com> - 451-1
changelog:
  - Rebase to 451 (#835802)
  - Removed the empty-lessopen-pipe patch as the issue is now fixed upstream.


author: Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6
changelog:
  - Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
  - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
  - Added RFE - lftp configurations for restricting each SSL/TLS 
    version (#1182987)
  - Fixed bogus dates of this SPEC


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp


author: Michal Ruprich - 4.4.8-10
changelog:
  - Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                      - Patch edited so that it corresponds to upstream


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11
changelog:
  - Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
  - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11.1
changelog:
  - Resolves: #1797963 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-12
changelog:
  - Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased


author: Michal Ruprich <michalruprich@gmail.com> - 4.4.8-12.1
changelog:
  - Resolves: #1797964 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-13
changelog:
  - Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1392944 - File size decreases when synchronizing folders with a sftp account using lftp


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0.8-6
changelog:
  - Fix duplicate documentation (#1001256) by not using %doc
  - Turn on verbose build output via V=1 make
  - Use %?_isa in -devel base package dep


author: Benjamin Tissoires <btissoir@redhat.com> 1.4.7-2
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163604, bug 1163603)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163604, bug 1163603)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163604, bug 1163603)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.4.7-3
changelog:
  - CVE-2015-1802: missing range check in bdfReadProperties (bug 1258894)
  - CVE-2015-1803: crash on invalid read in bdfReadCharacters (bug 1258894)
  - CVE-2015-1804: out-of-bounds memory access in bdfReadCharacters (bug 1258894)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.2-1
changelog:
  - libXp 1.0.2. Drags in a bunch of general cleanup, code changes are quite
    limited and CVE-2013-2062 (#960362)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.1.5-3
changelog:
  - libXt 1.1.5
  - Merge F25:
  - Fix duplicate documentation (#1001246) by not using %doc
  - Turn on verbose build output via V=1 make
  - Remove %defattr
  - Use %?_isa in explicit package deps
  - Exclude docs from main package


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-1
changelog:
  - Pull in upstream .109 to get ARM architecture support.
  - Remove the broken sparc patch;  it should go upstream first.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-8
changelog:
  - Change the source location to the new upstream on fedorahosted
  - import a new tarball from the new source


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-10
changelog:
  - Un-revert the RHEL-specific changes. (Jeff Moyer)
  - Make devel sub-package depend on specific ver-rel (Jeff Moyer)
  - Resolves: bz#905462


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-12.2
changelog:
  - Get rid of sparc support (we don't build it) (Jeff Moyer)
  - Implement proper support for aarch64 (Jeff Moyer)
  - Resolves: bz#1026429


author: Rakesh Pandit <rakesh@fedoraproject.org> - 1.0.0-1
changelog:
  - Updated to 1.0.0
     * AO returned to active development
     * Added surround channel mapping API and capability
     * Updated all drivers on modern installs
     * New config file options
     * Driver options may be specified in config file
     * Support for MacOSX updated to 10.5 and later
     * Build in WMM driver rather than using dlopen()
     * Added Roar Audio driver
     * Added OpenBSD SNDIO driver
     * Workaround for ESD non-4096 byte write bug
     * Workaround aRts server crash bug
     * Workaround for VIA82xx click/crackle bugs under ALSA
     * Remove dead/unused drivers (solaris, alasa05, mmsound)
     * Numerous patches from multiple downstreams
  - Patch from upstream: libao-1.0.0 Pulse Audio Fix


author: Tomas Popela <tpopela@redhat.com> - 12.10.0-12
changelog:
  - Move package from EPEL 7 to RHEL 7, but leave the mono support in EPEL in
    libappindicator-sharp package.
  - Resolves: rhbz#1546657


author: Pavel Raiskup <praiskup@redhat.com> - 3.1.2-11
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.4-3
changelog:
  - better install manual pages for libarchive/bsdtar/bsdcpio (# ... )
  - several fedora-review fixes ...:
  - Source0 has moved to github.com
  - remove trailing white spaces
  - repair summary to better describe bsdtar/cpiotar utilities


author: Jochen Schmitt <Jochen herr-schmitt de> - 2.3.21-7
changelog:
  - Add aarch64 as a 65-Bit architecture (#975267)
  - Add libtool as a BR
  - Call libtoolize before autoreconf


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.6-1
changelog:
  - Move the  part_err library before part and fs (vtrefny)
  - Fix BuildRequires for crypto and dm packages (vtrefny)
  - Fix mounting read-only devices (vtrefny)
  - Fix the bd_s390_dasd_is_ldl function. (vponcova)
  - Add the bd_s390_dasd_is_fba function to check if DASD is FBA (vponcova)
  - Disable MD RAID tests on 32bit systems (vpodzime)
  - Fix error message when mounting with a wrong fs type (vtrefny)
  - Only create RPMs for requested/configured  plugins (vpodzime)
  - Only check dependencies of plugins to be built (vpodzime)
  - Only build and distribute plugins if configured so (vpodzime)
  - Fix format-security and unused-result compiler warnings (vtrefny)
  - Add an AC macro for modular builds (vpodzime)
  - Add functions for mounting and unmounting filesystems (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7-1
changelog:
  - Skip btrfs min size tests on Fedora 25 (vtrefny)
  - Make sure the loop device doesn't disappear during tests (vpodzime)
  - Close the loop device when autoclear is (un)set (vpodzime)
  - Do not enforce Python 3 for running tests in CI (vpodzime)
  - Revert "Use different BTRFS_MIN_MEMBER_SIZE on aarch64" (vtrefny)
  - Use both 'old' and 'new' sysfs files to read zRAM stats (vtrefny)
  - Check if libparted-fs-resize pkgconfig is available (vpodzime)
  - Do not try to get name for inactive partitions (vtrefny)
  - Skip tests for getting free regions on CentOS/RHEL (vpodzime)
  - Free the container holding the specs of free regions (vpodzime)
  - Open loop devices as O_RDONLY when getting flags (vpodzime)
  - Resolve maximum partition size when we know its start (vpodzime)
  - Use --id instead of --part-type when setting partition id (vpodzime)
  - Fix mdadm command for removing failed device from an array (vtrefny)
  - Skip bcache tests on CentOS/RHEL 7 (vpodzime)
  - Use six.assertRaisesRegex in the FS tests (vpodzime)
  - Use mkdtemp() instead of TemporaryDirectory() (vpodzime)
  - Fix installation without specifying --exec-prefix (vpodzime)
  - Add options to force mkfs.ext4/vfat to create a FS on the whole device (vpodzime)
  - Skip the test for device escrow on CentOS/RHEL (vpodzime)
  - Define DEVNULL on our own if not in subprocess (vpodzime)
  - Remove the patches from the spec file (vpodzime)
  - Sync the spec file with downstream (vpodzime)
  - Stop skipping zRAM stats tests (vtrefny)
  - Add more tests for zRAM stats (vtrefny)
  - Fix reading zRAM properties from sysfs (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.8-1
changelog:
  - Temporarily skip vfat generic resize test on rawhide (vtrefny)
  - Use "safeprobe" in "bd_fs_wipe" (vtrefny)
  - Add a generic filesystem resize function (vtrefny)
  - Add a function to get mountpoint for a device (vtrefny)
  - Add a function to get filesystem type for a device (vtrefny)
  - Only include the LVM DBus config when shipping LVM DBus (vpodzime)
  - Skip the LVM DBus vgreduce tests on Rawhide (vpodzime)
  - Do not build the lvm-dbus plugin on RHEL/CentOS (vpodzime)
  - Give zRAM more time to settle before trying to remove a device (vpodzime)
  - Put zram tests adding/removing devices into a separate class (vpodzime)
  - Skip LVM cache and RAID tests on Rawhide (vpodzime)
  - Fix the skip_on decorator factory for tests (vpodzime)
  - Use 'blkid -p' instead of lsblk to get device's FS type (vpodzime)
  - Improve the lvm_set_global_config test (vpodzime)
  - Pass '-y' to pvresize (vpodzime)
  - Create a copy of os.environ for a child process (vpodzime)
  - Revert "Use the "C.UTF-8" locale instead of just "C"" (vpodzime)
  - Fix how we create vfat FS in tests (vpodzime)
  - Skip the test if requiring unavailable locales (vpodzime)
  - Use the "C.UTF-8" locale instead of just "C" (vpodzime)
  - Add functions for working with ext2 and ext3 filesystems (vtrefny)
  - Link to gobject when lvm or btrfs is enabled (andreas)
  - Link to libm where needed (andreas)
  - Add a function for cleaning a device (vtrefny)
  - Add few code exaples to documentation (vtrefny)
  - Use a special exception for no fs signature when doing wipe (vpodzime)
  - One more incompatible os.symlink() call (vpodzime)
  - Do not use pass-by-name in the os.symlink() call (vpodzime)
  - Ignore previous errors when falling back to using ioctl() (vpodzime)
  - Use ioctl() call to teardown loop devices (vpodzime)
  - Resolve the device to remove for mdadm (vpodzime)
  - Add a function for getting device symlinks (vpodzime)
  - Use the new resolve_device() function where appropriate (vpodzime)
  - Add the resolve_device() function to the utils library (vpodzime)
  - First try to read the 'autoclear' flag from /sys/ (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.9-1
changelog:
  - Fix hardcoded reference to gcc (timo.gurr)
  - Catch and ignore partial failures in LVM tests' cleanups (vpodzime)
  - Fix hardcoded reference to pkg-config (timo.gurr)
  - Make GObject introspection optional (vpodzime)
  - Do not link libraries required by plugins to the GI files (vpodzime)
  - Make sure the whole build status image is shown (vpodzime)
  - Show CI status in README (at the GH repo's front page) (vpodzime)
  - Always require the libudev pkg (tgurr)
  - Make sure we give kernel time to fully setup zram device(s) (vpodzime)
  - fs_test.py: Close FDs when calling utilities (tasleson)
  - crypto.c: Correct segmentation fault (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.10-1
changelog:
  - Only enable partition size tolerance with alignment (vpodzime)
  - Limit the requested partition size to maximum possible (vpodzime)
  - Do not verify vfat FS' size after generic resize (vpodzime)
  - Specify tolerance for partition size (kailueke)
  - Only use the exact constraint if not using any other (vpodzime)
  - Check resulting FS size in tests for generic FS resize (vpodzime)
  - Query setting FS label support and generic relabeling (kailueke)
  - Do not strictly require all FS utilities (vpodzime)
  - Compile everything with the C99 standard (vpodzime)
  - Add partition resize function (kailueke)
  - Generic Check and Repair Functions (kailueke)
  - Query functions for FS resize and repair support (kailueke)
  - Update the project/source URL in the spec file (vpodzime)
  - Add functions for opening/closing TrueCrypt/VeraCrypt volumes (vpodzime)
  - Adapt to a change in behaviour in new libmount (vpodzime)
  - Try RO mount also if we get EACCES (vpodzime)
  - Size in bytes for xfs_resize_device (kailueke)
  - src/plugins/Makefile.am: Remove hard coded include path in /usr prefix (tristan.vanberkom)
  - Fixed include for libvolume_key.h (tristan.vanberkom)
  - Ignore parted warnings if possible (squimrel)
  - bcache tests: Remove FEELINGLUCKY checks (tasleson)
  - kbd.c: Code review corrections (tasleson)
  - kbd.c: Make bd_kbd_bcache_create work without abort (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.11-1
changelog:
  - Make the KbdZRAMDevicesTestCase inherit from KbdZRAMTestCase (vpodzime)
  - Allow non-source directory builds (kailueke)
  - Add a way to disable runtime dependency checks (vpodzime)
  - Link to GObject even if no plugin is activated (kailueke)
  - Skip zram tests on Rawhide (vpodzime)
  - Keep most utilities available for tests (vpodzime)
  - Use new libmount function to get (un)mount error message (vtrefny)
  - Update the documentation URL (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.12-1
changelog:
  - Own directories /etc/libblockdev and /etc/libblockdev/conf.d (vtrefny)
  - Wait for resized partition (kailueke)
  - Make sure the device is opened for libparted (vpodzime)
  - Fix label check in swap_test (vtrefny)
  - Use "run_tests" script for running tests from Makefile (vtrefny)
  - Add a script for running tests (vtrefny)
  - Tests: Move library initialization to setUpClass method (vtrefny)
  - Stop skipping FAT resize tests on rawhide (vtrefny)
  - Close filesystem before closing the partition during FAT resize (vtrefny)
  - Use mountpoint for "xfs_info" calls (vtrefny)
  - Use libmount cache when parsing /proc/mounts (vtrefny)
  - Add some space for the CI status (vpodzime)
  - Confirm the force when creating PVs in FS tests (vpodzime)
  - Skip vgremove tests on 32bit Debian (vtrefny)
  - Fix names of backing files in tests (vtrefny)
  -  Fix checking for available locales (vtrefny)
  - Skip dependency checking in mpath tests on Debian (vtrefny)
  - Skip zRAM tests on Debian (vtrefny)
  - Skip the test for device escrow on Debian too (vtrefny)
  - Skip free region tests on Debian too (vtrefny)
  - Fix redirecting command output to /dev/null in tests (vtrefny)
  - Try harder to unmount devices in test cleanup (vtrefny)
  - Require only plugins that are needed for given test (vtrefny)
  - Try to get distribution info from "PrettyName" if "CPEName" isn't available (vtrefny)
  - Use -ff when creating PVs in FS tests (vpodzime)
  - Sync spec with downstream (vpodzime)


author: Bastien Nocera <bnocera@redhat.com> - 0.2.3-6
changelog:
  + libbluray-0.2.3-0.12.git
  - Fix security issues in parts of the library that we never exercised
  Related: rhbz#1045453 rhbz#1045452


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.9-1
changelog:
  - Allow the Size python class to be easily imported (vpodzime)
  - Make sure pyexecdir is defined (vpodzime)
  - Do not run Python 3 tests without python3 (vpodzime)
  - Disable python3 on RHEL (vpodzime)
  - Reflect the configuration in the spec file template (vpodzime)
  - Make documentation generation conditional (vpodzime)
  - Make python3 support conditional (vpodzime)
  - Require lower version of libpcre (vpodzime)
  - Sync the spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.10-1
changelog:
  - Fix installation without specifying --exec-prefix (martin)
  - Sync the spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.11-1
changelog:
  - Fix README file name (vtrefny)
  - Add a build status image to the README.md (vpodzime)
  - Remove "glibc-all-langpacks" from test dependencies (vtrefny)
  - Check for requires in generated spec file, not in the template (vtrefny)
  - Fix checking for available locales (vtrefny)
  - Fix library name in acinclude.m4 (vtrefny)
  - Do not try to run translation tests on CentOS/RHEL 7 (vtrefny)
  - Skip tests if they require unavailable locales (vpodzime)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.11-4
changelog:
  - Python 2 binary package renamed to python2-libbytesize
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.0-1
changelog:
  - Make more space for CI status image (vtrefny)
  - Include limits.h to make sure ULONG_MAX is defined (vpodzime)
  - Remove extra 'is' in two docstrings (vpodzime)
  - Properly support 64bit operands (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.1-1
changelog:
  - Add NEWS.rst file (vtrefny)
  - Fix source and url in spec file (vtrefny)
  - Use only one git tag for new releases (vtrefny)
  - Actually translate the units when expected (vpodzime)
  - Add two temporary test files to .gitignore (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.2-1
changelog:
  - Use only version as a tag of the last release (vpodzime)
  - Do not require the glib-2.0 pkgconfig package (vpodzime)
  - Do not lie about tag creation (vpodzime)


author: Steve Grubb <sgrubb@redhat.com> 0.7.5-2
changelog:
  - resolves: #1185610 - libcap-ng: update caps table for newer kernels
  - Fix a leaked FD in upstream code


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-2
changelog:
  - added missing files from git: COPYING-GPL and COPYING-LGPL
  - added patch from git for missing pkgconfig requires
    and fixed FSF address


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-3
changelog:
  - included upstreamed patches which are changing the license
    headers to be LGPLv2+ for the library parts and GPLv2+ for the
    binaries


author: jchaloup <jchaloup@redhat.com> - 0.41-8
changelog:
  - resolves: #885174
    loading configuration files from /etc/cgconfig.d/ directory
  - resolves: #885166
    use * character as a meta character for all mounted
  - resolves: #886920
    add examples to man pages
  - resolves: #1143851
    extending cgroup names with default
  - resolves: #1142807
    api.c: support for setting multiline values in control files
    config.c: xfs file system sets item->d_type to zero, stat() and S_ISREG() test added (#885174)


author: Nikola Forró <nforro@redhat.com> - 0.41-12
changelog:
  - resolves: #1406927
    start cgred service after nss-user-lookup target
    show warnings about unsuccessful user/group lookups


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - show warning when "tasks" file can not be opened
  - extend description of "controllers" section in cgrules.conf man page
    resolves: #1561736


author: Peter Schiffer <pschiffe@redhat.com> - 0.38-3
changelog:
  - resolves: #850183
    scriptlets replaced with new systemd macros (thanks to vpavlin)
  - cleaned .spec file


author: Peter Schiffer <pschiffe@redhat.com> 0.40-0.rc1.1
changelog:
  - resolves: #819568, #740113
    rebased to 0.40.rc1
  - resolves: #983264
    rebuilt with full relro and PIE
  - resolves: #1016810
    removed cgrulesengd daemon


author: Peter Schiffer <pschiffe@redhat.com> 0.40-0.rc1.2
changelog:
  - related: #1016810
    returned creation of cgred group, which was removed in previous commit by mistage


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.12.4-1
changelog:
  - Update to 0.12.4
  - http://ftp.gnome.org/pub/GNOME/sources/libchamplain/0.12/libchamplain-0.12.4.news


author: Peter Robinson <pbrobinson@fedoraproject.org> - 0.12.3-1
changelog:
  - Update to 0.12.3
  - http://ftp.gnome.org/pub/GNOME/sources/libchamplain/0.12/libchamplain-0.12.3.news


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.3-1
changelog:
  - Upstream update to 0.3.3
    + Fix memory access violation.
    + Improved Python binding.
    + Merged with libchewing-data project. (r455)
    + Improved random key stroke tester.
    + Fix the handling of phonetic symbols in Hsu's keyboard.
    + Fix unexpected candidate disorder when doing symbol choice.
    + Revised phrase choice from rearward logic.
    + Fix cross compilation.
    + Improved shell script to merge changes form libchewing-data.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.3-4
changelog:
  - BuildRequires for libchewing-python changed
    from python-devel to python2-devel
  - RPM_BUILD_ROOT changed to buildroot


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-1
changelog:
  - Upstream update to 0.3.4
  - Download is changed to Google Code.
  - /usr/share/chewing is removed, data files now located in
    /usr/lib(64)/libchewing
  - Info for libchewing is included.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-3
changelog:
  - Fixed [Bug 913214] libchewing complains "no info dir entry" while installing
    Add direntry in libchewing.texi so it can be listed under 
    Category "Localization"


author: David Tardon <dtardon@redhat.com> - 0.3.1-5
changelog:
  - Resolves: rhbz#918079 libcmis::sha1() can return digests with fewer
    than 40 hexadecimal digits
  - Resolves: rhbz#918080 restrict redirection protocols


author: David Tardon <dtardon@redhat.com> - 0.5.0-2
changelog:
  - Related: rhbz#1290152 autoreconf is not needed
  - Related: rhbz#1290152 add a bunch of fixes found by coverity


author: Doug Ledford <dledford@redhat.com> - 1.3.1-6
changelog:
  - Update valgrind settings and build against newest valgrind libs
    that resolve a register clobber issue on ppc (1142101)
  - Build against latest libibverbs
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.3.1-7
changelog:
  - Remove modprobe file and move it to rdma package
  - Add requires on rdma package
  - Related: bz1164618


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Fix package description to differentiate the fact that this is for the T4
    Chelsio based adapters instead of the previous T3 generation


author: Doug Ledford <dledford@redhat.com> - 1.2.0-6
changelog:
  - Our -fno-strict-alias option patch was lost, and we discovered it
    was lost when I rebuilt the package.  Put it back and rebuild
    again.
  - Related: bz1062281


author: Doug Ledford <dledford@redhat.com> - 1.3.5-2
changelog:
  - Rebuild without modprobe file
  - Add requires on rdma package that now contains modprobe file
  - Related: bz1164618


author: Matej Mužila <mmuzila@redhat.com> - 5.3.21-23
changelog:
  - Mention in man page that care should be taken when running db_hotbackup
    with -c option. Resolves: rhbz#1460077


author: Tom Lane <tgl@redhat.com> 0.8.3-4
changelog:
  - Do not use -ffast-math; it breaks things and seems quite unlikely to offer
    any useful performance benefit for this type of package, anyway
  Resolves: #629964


author: Tom Lane <tgl@redhat.com> 0.8.4-1
changelog:
  - Update to version 0.8.4 (seems to contain only configure-support updates,
    but might as well adopt it)
  - Fix memory leak due to incorrect test in _is_row_fetched()
  Related: #733413


author: Tom Lane <tgl@redhat.com> 0.8.3-12
changelog:
  - Remove unnecessary package-name Requires:, since dependencies on library
    sonames should be enough, and we don't want to hard-wire assumptions about
    which packages provide which libraries
  - isa-ify cross-subpackage Requires:


author: Simone Caronni <negativo17@gmail.com> - 16.04.0-2
changelog:
  - Add tests, remove valgrind-devel build requirements (#1262274).
  - Disable tests until dbus-test-runner is available.


author: Richard W.M. Jones <rjones@redhat.com> - 1.12-13.1.el7
changelog:
  - Add patch to fix multilib conflicts in dnet-config
    resolves: rhbz#1059593
  - Remove RPM cruft from the spec file.


author: Jaroslav Mracek <jmracek@redhat.com> - 0.10.1-1
changelog:
  - Update to 0.10.1
  - It improves query performance with name and arch filters. Also nevra filter will now
    handle string with or without epoch.
  - Additionally for python bindings it renames NEVRA._has_just_name() to NEVRA.has_just_name() due
    to movement of code into c part of library.
  - Resolves: rhbz#1260242 - --exclude does not affect dnf remove's removal of requirements
  - Resolves: rhbz#1485881 - DNF claims it cannot install package, which have been already installed
  - Resolves: rhbz#1361187 - [abrt] python-ipython-console: filter_updown(): python3.5 killed by SIGABRT


author: Jaroslav Mracek <jmracek@redhat.com> - 0.11.1-1
changelog:
  - Rerelease of 0.11.1-1
  - Improvement query performance
  - Run file query in hy_subject_get_best_solution only for files (arguments that start with ``/`` or
    ``*/``)
  - Resolves: rhbz#1498207 - DNF crash during upgrade installation F26 -> F27


author: Dominik Mierzejewski <rpm[AT]greysector.net> 4.1.4-0.1.svn1184
changelog:
  - fix multilib conflict, based on a patch by Rex Dieter (rhbz#477684)
  - update to SVN r1184
  - move TODO to devel docs


author: Dominik Mierzejewski <rpm@greysector.net> 4.1.4-0.1.svn1183
changelog:
  - updated to SVN r1183
  - simplified multilib patch
  - fixed endianness issues (rhbz#442508)
  - added some docs


author: Tom Hughes <tom@compton.nu> - 20120410-1
changelog:
  - Update to 20120410 release
  - Drop the 0. from the version - the dates are the upstream versions
  - Remove explicit dependencies on elfutils-libelf


author: Jerry James <loganjerry@gmail.com> - 3.0-3.20110227cvs
changelog:
  - Update to 3.0 (20110227 snap)
  - Drop upstreamed -sigwinch patch
  - Preserve ChangeLog timestamp when converting to UTF-8
  - Fix "unused direct shared library dependency" warning from rpmlint
  - Don't BR gawk; it is on the exceptions list


author: Kamil Dudka <kdudka@redhat.com> 3.0-7.20120601cvs
changelog:
  - Update to 3.0 (20120601 snap)
  - fix crash of el_insertstr() on incomplete multi-byte sequence (#840598)


author: Pawel Salek <pawsa@theochem.kth.se> - 1.0.4-14
changelog:
  - fix bug 599428: use 'version' macro instead of '_version'.
  - Use SSL patch by Ludwig Nussel of SUSE (bugzilla att id 399130).


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.11-2
changelog:
  - Make a patch out of Michal's pkgconfig support.
  - Modernize the configure.ac file for Automake >= 1.13.
  - Respect the Fedora CFLAGS
    https://bugzilla.redhat.com/show_bug.cgi?id=908096


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.15-3
changelog:
  - Get the package closer to what upstream intended:
    - Do not move the headers into a subfolder of /usr/include
    - Make a libev-libevent-devel subpackage to contain the libevent
      compatibility header, so that only this subpackage conflicts with
      libevent-devel, not all of libev-devel
    - Drop the pkgconfig file, as upstream rejected it several times already.


author: Steve Dickson <steved@redhat.com> 2.0.14-1
changelog:
  - Updated to latest stable upstream version: 2.0.14-stable (bz 727129)
  - Removed the installion of the outdate man pages and the latex raw docs.
  - Corrected where the other doc are installed.


author: Steve Dickson <steved@redhat.com> 2.0.18-1
changelog:
  - Updated to latest stable upstream version: 2.0.18-stable
  - Moved documentation into its own rpm (bz 810138)


author: Petr Sabata <psabata@redhat.com> - 0.6.20-1
changelog:
  - 0.6.20 bump
  - Repackaging prehistoric libexif-docs, introducing version string in filename
  - Buildroot cleanup


author: Petr Šabata <contyk@redhat.com> - 0.6.21-1
changelog:
  - 0.6.21 bump
  - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
    CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845)
  - Drop the pre-generated docs and introduce a doc subpackage


author: Dan Horák <dhorak@redhat.com> - 3.0.13-16
changelog:
  - Drop ppc64le from the multilib list
  - Use additional BR: only in ppc64le build
  - Resolves: RHBZ1116945


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 0.8.2-1.cloudlinux
changelog:
  - Remove "--rebuild-types" from doc/meson.build. For details see
    https://gitlab.freedesktop.org/libfprint/libfprint/merge_requests/9/


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-5
changelog:
  - add FIPS DRBG implementation
  - run the FIPS POST tests in shared library constructor
  - make it possible to run the test suite in the FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-12.1
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-14
changelog:
  - add DRBG CAVS driver and other necessary CAVS driver updates (#1172568)
  - allow ath reinitialization in FIPS mode
  - allow for auto-initialization of DRBG


author: Debarshi Ray <rishi@fedoraproject.org> - 0.10.4-4
changelog:
  - Ensure that the new exiv2 soname is used during the build
  - Adapt to Exiv2::BasicIo API change
    Resolves: rhbz#1486570


author: Iryna Shcherbina <ishcherb@redhat.com> - 1:1.0.1-0.2.20180226gitb029c24
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Adam Jackson <ajax@redhat.com> - 1.0.1-0.6.git5baa1e5
changelog:
  - Enable %check for all but ppc64 and s390x, which has known but low-impact
    failures
  - Simplify %release


author: Ray Strode <rstrode@redhat.com> 2.32.1-4
changelog:
  - drop /etc/skel entry. libgnome creates it by default if it's
    not around and it needs it anyway. Better not to clutter users
    home directories just because they install glade.


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Kalev Lember <kalevlember@gmail.com> - 3.4.0.1-1
changelog:
  - Update to 3.4.0.1
  - Obsolete the -capplet subpackage; the whole plugins architecture is
    removed from libgnomekbd


author: Christophe Fergeau <cfergeau@redhat.com> 0.0.3-2
changelog:
  - Removed definition of BuildRoot and cleanup of BuildRoot in %clean
  - Added missing arch to versioned Requires: %{name} in the -devel package
  - Don't include empty NEWS and ChangeLog in built RPM


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-1.3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Related: rhbz#1344633


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-1.4
changelog:
  - Add upstream patch forcing use of the older v3 REST API as we don't support
    yet the v4 API
    Resolves: rhbz#1346215


author: Fabiano Fidêncio <fidencio@redhat.com> 0.3.3-2
changelog:
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274356
  - Add OvirtProxy::sso-token support for oVirt 4.0
    Resolves: rhbz#1324457


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Resolves: rhbz#1346256


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.3-5
changelog:
  - New storage format added in oVirt 4.1
    Resolves: rhbz#1346215
  - Check if operation was cancelled before disconnecting signal
    Resolves: rhbz#1431275


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.4-1
changelog:
  - Rebase to latest 0.3.4 upstream release. Still quite a few patches as
    there was no 0.3.5 release yet
    Resolves: rhbz#1584266


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.4-2
changelog:
  - Parse XML nodes automatically
    Related: rhbz#1427467
  - Set detailed error message for async call
    Related: rhbz#1427467


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.4-4
changelog:
  - Use certificate data from XML
    Resolves: rhbz#https://bugzilla.redhat.com/show_bug.cgi?id=1402909


author: Rex Dieter <rdieter@fedoraproject.org> - 0.8.2-7
changelog:
  - libgpod.pc Requires: libimobiledevice-1.0 ... overlinking (#818594)
  - tighten subpkg deps (via %_isa)
  - omit -devel deps that (should) get autodetected already


author: Caolán McNamara <caolanm@redhat.com> 1.14.26-1
changelog:
  - latest version
  - drop integrated gnome689706.gsf_input_dup.patch
  - libgsf-python is gone with "excise old bit-rotted python support"


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-11
changelog:
  - Further fixes for kvmclock
    resolves: rhbz#998109
  - Document that blockdev-setbsz is deprecated and should not be used
    resolves: rhbz#1016465


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-12
changelog:
  - Backport: "daemon: Fix xfs_info parser because of new format."
    which is required to fix libguestfs tests.
    related: rhbz#1019503


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-15
changelog:
  - Add libguestfs-tools.conf(5) man page
    resolves: rhbz#1019891
  - Drop PHP bindings
    resolves: rhbz#1020021
  - Disable Haskell & Erlang (in case someone has these dependencies
    installed and tries to rebuild the package).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-19
changelog:
  - Fix placement of *.py[co] files
    resolves: rhbz#1061155
  - Remove bogus license file from daemon
    resolves: rhbz#1061160
  - Prevent virt-sparsify from overwriting block or char devices
    resolves: rhbz#1056556
  - mount-local should give a clearer error if root is not mounted
    resolves: rhbz#1057492


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-21
changelog:
  - Fix segfault in guestfs_list_filesystems when presented with a
    corrupt btrfs filesystem
    resolves: rhbz#1064008


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.3
changelog:
  - v2v: Fix conversion from NBD sources
    resolves: rhbz#1153589
  - v2v: BR zip and unzip, and require unzip, for ZIP support in -i ova mode
    related: rhbz#1152998


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.4
changelog:
  - v2v: Fix handling of relative paths in -i ova
    resolves: rhbz#1155121
  - v2v: disable uninstallation of VMware drivers on Linux for RHEL 7.1
    resolves: rhbz#1155610


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.5
changelog:
  - virt-sysprep & virt-customize: Fix password setting problems
    resolves: rhbz#1141626, rhbz#1147065
  - virt-inspector: document that -a option can take a URI
    resolves: rhbz#1156301
  - bash-completion: use symlinks instead of copying files
    resolves: rhbz#1156298


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.7
changelog:
  - guestfish: Fix tab completion of filenames on XFS and elsewhere
    resolves: rhbz#1153844
  - v2v: Ensure <features/> are set in output so ACPI etc works
    resolves: rhbz#1159258
  - v2v: Add --password-file parameter
    resolves: rhbz#1158526


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.8
changelog:
  - p2v: Explain in the man page why the virt-p2v ISO is used.
  - p2v: Ensure we are using virt-v2v >= 1.28.
  - v2v: Add bounds check to Xml.xpathobj_node function.
  - v2v: Ensure --bridge and --network args are documented correctly in --help
  - v2v: -i libvirt vcenter: Change 'esx:' to 'vcenter:' in errors/warnings.
  - v2v: Ignore small filesystems when checking for sufficient free space.
  - v2v: Document minimum free filesystem space requirements.
    related: rhbz#1021149
  - customize: firstboot: make sure to run Linux scripts only once
    resolves: rhbz#1160043
  - customize: firstboot: fix Linux log output
    resolves: rhbz#1160199


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.10
changelog:
  - v2v: -o glance: Fix metadata for disk type and NIC
    resolves: rhbz#1161575
  - check xfs label lengths
    resolves: rhbz#1162966


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.11
changelog:
  - Fix inspect-get-icon on RHEL 7 guests
    resolves: rhbz#1164619
  - Fix description of set-append (append) and get-append commands
    resolves: rhbz#1164732
  - Fix small typo in release notes.
    resolves: rhbz#1164697


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.13
changelog:
  - Fix device mapping of /boot/grub2/device.map
    resolves: rhbz#1165975
  - Fix 'no volume groups found' because of old LVM cache file
    resolves: rhbz#1164853


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.13
changelog:
  - v2v: Fix device mapping of /boot/grub2/device.map
    resolves: rhbz#1165975
  - v2v: Fix 'no volume groups found' because of old LVM cache file
    resolves: rhbz#1164853


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.14
changelog:
  - p2v: Add Reboot button to the GUI
    resolves: rhbz#1165564
  - p2v: Fixes to 'Cancel Conversion' button
    resolves: rhbz#1165569
  - v2v: -i ova: Remove incorrect warning for disks with no parent controller
    resolves: rhbz#1167302
  - resize: Capture errors from ntfsresize
    resolves: rhbz#1166618


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.15
changelog:
  - v2v: Document Windows Group Policy problems causing 0x0000007B BSOD
    resolves: rhbz#1161333
  - v2v: Fix conversion of RHEL 3 guests
    resolves: rhbz#1171130
  - v2v: Fix conversion of RHEL 4 guests that use epoch
    resolves: rhbz#1170685
  - v2v: Favour non-debug kernels over debug kernels
    resolves: rhbz#1170073
  - p2v: Fix kickstart for virt-p2v
    resolves: rhbz#1168632
  - Fixed some documentation mistakes.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.18
changelog:
  - v2v: Copy graphics password from source to destination
    resolves: rhbz#1174123
  - p2v: Allow ports to be reused and specify source port number
    resolves: rhbz#1167774
  - p2v: Fix "Conversion was successful" dialog appearing on failure (1167601)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.44
changelog:
  - v2v: Fix error message when grub.conf is malformed
    resolves: rhbz#1239053
  - v2v: Various fixes to conversion of UEFI systems
    resolves: rhbz#1184690


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.46
changelog:
  - v2v: Refuse to convert Windows > 7
    reverts: rhbz#1190669
  - v2v: Depend directly on libguestfs-xfs
    resolves: rhbz#1240275
  - v2v: Inclusion of libguestfs-winsupport in RHEL 7.2
    resolves: rhbz#1240274, rhbz#1240276


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.47
changelog:
  - v2v: Work around 'umount: /sysroot: target is busy'
    resolves: rhbz#1246032
  - v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
    virt-inspector
    resolves: rhbz#1243493


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.50
changelog:
  - v2v:
    * When debugging, dump OVF to stderr.
    * Ignore missing kernels from grub
      resolves: rhbz#1230412
    * Calculate VMware dcPath correctly (1256823)
    * Map empty VMware network or bridge name to default (1257895)
  - p2v:
    * Wait for network to come online before testing connection
      resolves: rhbz#1256222
  - Fix tests to run correctly with libguestfs-winsupport 7.2.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.51
changelog:
  - v2v: Fix handling of extra slashes in dcPath calculation
    resolves: rhbz#1258342 rhbz#1256823
  - v2v: Fix -oa preallocation option
    resolves: rhbz#1251909


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.52
changelog:
  - v2v: Warn if Group Policy or AV software may result in 7B boot failure
    (1260689)
  - v2v: Fix OVF XML to enable qxl display
    resolves: rhbz#1260590


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.53
changelog:
  - v2v: Error if certain options appear twice on the command line (1261242)
  - v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
  - v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
  - v2v: Detect AVG Technologies as AV software (1261436)
    resolves: rhbz#1261281


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.32.7-3
changelog:
  - Rebase to libguestfs 1.32 in RHEL 7.3
    resolves: rhbz#1218766
  - The full tests are now run after the package has been built.
  - New tool and subpackage: virt-dib (safe diskimage-builder replacement).
  - New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
    (see https://bugzilla.redhat.com/1194158).
  - New tool: virt-get-kernel.
  - Depend on java-headless instead of full java.
  - New tool: virt-v2v-copy-to-local.
  - Disable virt-v2v subpackage on ppc64 etc
    resolves: rhbz#1287826
  - v2v: Remove VirtualBox Additions correctly
    resolves: rhbz#1296606
  - Add clearer warnings sections to all man pages
    resolves: rhbz#1293527
  - v2v: Disable the --in-place option.
  - v2v: Support conversion of Windows > 7
    resolves: rhbz#1190669
  - Add code to verify tarball signatures.
  - General performance improvements.
  - v2v: Prevent duplicate -b, -n, -oa options
    resolves: rhbz#1326266
    resolves: rhbz#1325825
  - v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
  - v2v: Fix alignment issues in treeviews in conversion dialog
    resolves: rhbz#1340407
  - p2v: spinner should be hidden when it stops spinning
    resolves: rhbz#1341564
  - p2v: ethtool command is not supported on p2v client
    resolves: rhbz#1341608
  - p2v: Add ifconfig command to ISO
    resolves: rhbz#1342447
  - p2v: Warn if virt-p2v-make-disk used on a partition
    resolves: rhbz#1342337
  - Build using OCaml with fix for CVE-2015-8869.
    resolves: rhbz#1343101
  - customize: Add --uninstall option (upstream 1343375)
  - p2v: Document permissions on id_rsa file
    resolves: rhbz#1343414
  - p2v: Print full curl error message
    resolves: rhbz#1343423
  - get-kernel: Fix --format auto
    resolves: rhbz#1341984
  - v2v: Provide better <Origin/> information to RHEV-M
    resolves: rhbz#1342398
  - customize: Give an error if --truncate-recursive path does not exist
    resolves: rhbz#1345809
  - sysprep: Add --network option so that --install option can be used
    resolves: rhbz#1345813
  - p2v: Print proper error if incorrect password is given
    resolves: rhbz#1227599
  - p2v: Print ssh error if incorrect hostname is given
    resolves: rhbz#1167916
  - p2v: Display progress of operation in non-GUI mode
    resolves: rhbz#1229386
  - p2v: Add a dialog confirming the user really means to cancel
    resolves: rhbz#1340464
  - p2v: log window should process colour escapes and backspaces
    resolves: rhbz#1314244
  - v2v: Fix installation of virtio drivers with *.dll files
    resolves: rhbz#1311373
  - p2v: Improve error message when ssh login to conversion server fails
    resolves: rhbz#1348900
  - v2v: Remove --dcpath parameter from manual
    resolves: rhbz#1315237
  - v2v: Fix conversion of guests with floppy drives
    resolves: rhbz#1309706
  - p2v: Better error when sudo requires a password
    resolves: rhbz#1340809
  - v2v: Refuse to convert if there is < 1GB free in temporary directory
    resolves: rhbz#1316479
  - inspection: Get Windows drive letters for GPT disks
    resolves: rhbz#1349237
  - p2v: Add disk utils and display serial number of disks
    resolves: rhbz#855058
  - p2v: Fix timeout error when connecting to unresponsive ssh server
    resolves: rhbz#1350363
  - Remove external dependency generator.  Use supermin RPM deps instead.
    related: rhbz#1309796
  - p2v: Flush messages to the journal immediately
    resolves: rhbz#1229386
  - customize: Fix --install on ppc64le
    resolves: rhbz#1264835
  - lib: Fix finding icons in Windows 7 64 bit guests
    resolevs: rhbz#1352761
  - v2v: Add virsh --quiet flag when running virt-v2v --quiet
    resolves: rhbz#1358142
  - lib: Fix inspection of ISOs with latest libosinfo
    resolves: rhbz#1359652
  - dib: Fix run_command exit handlers on failure
    resolves: rhbz#1362357
  - dib: Rework run of extra-data.d hooks
    resolves: rhbz#1362354
  - Miscellaneous fixes to man pages and --help output
    resolves: rhbz#1362668
  - lib: Specify backing format for read-only files
    resolves: rhbz#1354335
  - Fix --selinux-relabel option
    resolves: rhbz#1362669
  - sparsify: Fix --in-place option with UEFI guest
    resolves: rhbz#1364347
  - p2v: Use latest linux-firmware in ISO
    resolves: rhbz#1364419
  - v2v: Fix guest name when using -i disk
    resolves: rhbz#1365005
  - p2v: Fix GUI message.
  - v2v: Make fstrim message clearer
    resolves: rhbz#1366456
  - v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
    resolves: rhbz#1367615
  - lib: Fix assert-fail if port is missing in libvirt XML
    resolves: rhbz#1370424


author: Pino Toscano <ptoscano@redhat.com> - 1:1.32.7-3.el7_3.1
changelog:
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1406289
  - Disable EDD when launching the appliance
    resolves: rhbz#1406393
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1406854


author: Pino Toscano <ptoscano@redhat.com> - 1:1.32.7-3.el7_3.2
changelog:
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1408124
  - Avoid spurious dependency on kernel-rt.


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.3-6
changelog:
  - Rebase to libguestfs 1.36 in RHEL 7.4.
    resolves: rhbz#1359086
  - v2v: always use names for libvirt pools
    resolves: rhbz#1141631
  - v2v: correctly find GRUB in RHEL UEFI guests
  - v2v: uninstall VMware tools packages from guests
    resolves: rhbz#1155150
  - v2v: install RHEV-APT only when using -o rhev/-o vdsm
    resolves: rhbz#1161019
  - New API: btrfs-filesystem-show
    resolves: rhbz#1164765
  - p2v: always enable debugging when running virt-v2v
    resolves: rhbz#1167623
  - libguestfs prefers virtio-pci on aarch64
    resolves: rhbz#1237250
  - v2v: make sure to copy all the driver files on Windows
    resolves: rhbz#1255610
  - Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
    Requires to >= 1.3.10-5.8.el7
    resolves: rhbz#1311890
  - v2v: ignore all the environment variables for proxy when exporting from
    vCenter
    resolves: rhbz#1354507
  - virt-sysprep can deal with full-LUKS encrypted guests
    resolves: rhbz#1362649
  - All the tools have bash completion scripts.
    resolves: rhbz#1367738
  - v2v: do not remove Processor and Intelppm nodes in Windows guests
    resolves: rhbz#1372668
  - Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
    regular expression in file_contexts file
    resolves: rhbz#1374232
  - v2v: set all the properties on creation when exporting to Glance
    resolves: rhbz#1374405
  - v2v: set hw_video_model when exporting to Glance
    resolves: rhbz#1374651
  - v2v: fix OVA conversion as root using the libvirt backend
    resolves: rhbz#1375157
  - Various improvements and fixes to the documentation
    resolves: rhbz#1377081
    resolves: rhbz#1390876
    resolves: rhbz#1398070
    resolves: rhbz#1425306
  - v2v: support <listen type='socket'> and <listen type='none'>
    resolves: rhbz#1378022
  - v2v: allow libvirt >= 2.1.0 for vCenter conversions
    resolves: rhbz#1379240
  - p2v: enable mnemonics in the GUI
    resolves: rhbz#1379289
  - Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
    resolves: rhbz#1382275
  - Correctly parse mount options in btrfs entries in /etc/fstab.
    resolves: rhbz#1383517
  - Read secrets from libvirt domains, when inspecting them
    resolves: rhbz#1392798
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1400205
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1401474
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1402301
  - resize: allow URIs for the output disk
    resolves: rhbz#1404182
  - Disable EDD when launching the appliance
    resolves: rhbz#1404287
  - v2v: increase the memory allocated to the appliance
    resolves: rhbz#1418283
  - p2v: switch from GTK+ 2 to GTK+ 3
  - p2v: add dbus-devel as BuildRequires to disable suspension during the
    conversion
  - libguestfs-java: bump the java-headless Require to >= 1.7.0, matching the
    Build-Require, and the generated bytecode
    resolves: rhbz#1364518
  - Do not try to use/write to /var/cache/yum & /var/log/yum.log
  - Bump ocaml-findlib-devel BuildRequires to >= 1.3.3-7.el7, because of
    RHBZ#1403897
  - v2v: remove --dcpath & --dcPath from --help output too
    resolves: rhbz#1429430
  - v2v: force VNC as display for -i disk, as SDL is not supported
    resolves: rhbz#1372671
  - v2v, p2v: rename rhvm network to ovirtmgmt
    resolves: rhbz#1429491
  - v2v: when exporting to local disk, check that UEFI firmware is installed
    before conversion
    resolves: rhbz#1429506
  - dib: actually generate SHA256 checksums when using --checksum
    resolves: rhbz#1430184
  - v2v: do not mention SUSE Xen hosts as supported
    resolves: rhbz#1430203
  - v2v: depend on OVMF/AAVMF, for converting EFI guests
    resolves: rhbz#1429643
  - v2v: use absolute path when using an OVA as backing file
    resolves: rhbz#1430680
  - v2v: support Debian/Ubuntu guests
    resolves: rhbz#1387213
  - sysprep: remove DHCP_HOSTNAME entries
    resolves: rhbz#1427529
  - v2v: avoid repeated "run virt-v2v -v -x" message on error
    resolves: rhbz#1167623
  - bash-completion: add script for virt-v2v-copy-to-local
    resolves: rhbz#1367738
  - v2v: fix virtio block driver installation for Windows 10 and Windows 2016
    resolves: rhbz#1434737
  - Replace the libosinfo dependency with osinfo-db, since we are only using
    the osinfo database.
  - v2v: fix virtio driver installation for Windows 8 UEFI
    resolves: rhbz#1431579
  - v2v: new 'vmx' import method
    resolves: rhbz#1441197
  - v2v: properly identify Windows 2016 guests when exporting them to RHV-M
    resolves: rhbz#1447202
  - Run pvresize in non-interactive mode
    resolves: rhbz#1460692
  - resize: make sure the input disk is read-only
    resolves: rhbz#1463714
  - Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
    resolves: rhbz#1463646


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.10-4
changelog:
  - Rebase to libguestfs 1.36.10 in RHEL 7.5.
    resolves: rhbz#1472272
  - Build against OCaml 4.05
    resolves: rhbz#1447981
  - Enable the copyonread flag when running the appliance using libvirt.
    resolves: rhbz#1466563
  - Make sure kernel-rt is never used as Requires.
    resolves: rhbz#1471651
  - v2v: disable unconfiguration of manually installed VMware tools.
    resolves: rhbz#1477905
  - v2v: prefer pigz or pxz for uncompressing OVA files, if available
    resolves: rhbz#1448739
  - resize: handle empty UUIDs for swap partitions
    resolves: rhbz#1482737
  - v2v: remove mention of --dcpath in an error message
    resolves: rhbz#1486197
  - Disables the QEMU image file locking when opening disks as read-only
    resolves: rhbz#1417306
  - Briefly document the format used for URIs
    resolves: rhbz#1450325
  - v2v: deal with grub2 configurations without a default set
    resolves: rhbz#1472288
  - v2v: warn when a guest has passthrough devices
    resolves: rhbz#1472719
  - v2v: fix three regular expressions
    resolves: rhbz#1494555
  - v2v: enable conversion of full-disk LUKS-encrypted Linux guests
    resolves: rhbz#1451665
  - v2v: new 'vddk' import method
    resolves: rhbz#1477912
    resolves: rhbz#1513884
  - Enable libguestfs to work on z Systems
    resolves: rhbz#1479526
  - p2v: fx check for sudo requiring a password
    resolves: rhbz#1500673
  - v2v: handle disks with snapshots in vCenter
    resolves: rhbz#1172425
  - rescue: backport improved version
    resolves: rhbz#1438710
  - v2v: improve bootloader detection
    resolves: rhbz#1508299
  - v2v: parse MAC address of network interfaces in OVF files
    resolves: rhbz#1506572
  - Unconditionally depend on libvirt-daemon-kvm >= 3.9.0-1, which will always
    pull the right qemu-kvm too, and thus remove the unversioned dependencies
    on it
    resolves: rhbz#1500870
  - v2v: fix RPM file owned test
    resolves: rhbz#1503958
  - Do not open read-only disks using <shareable/> in the libvirt backend
    resolves: rhbz#1518517
  - v2v: handle better when grubby does not report any default kernel
    resolves: rhbz#1519204
  - v2v: enhance vmx import method to access via SSH
    resolves: rhbz#1523767
  - builder: fix caching of templates when using --cache-all-templates
    resolves: rhbz#1523650


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.10-6
changelog:
  - Rebase to libguestfs 1.36.10 in RHEL 7.5.
    resolves: rhbz#1472272
  - Build against OCaml 4.05
    resolves: rhbz#1447981
  - Enable the copyonread flag when running the appliance using libvirt.
    resolves: rhbz#1466563
  - Make sure kernel-rt is never used as Requires.
    resolves: rhbz#1471651
  - v2v: disable unconfiguration of manually installed VMware tools.
    resolves: rhbz#1477905
  - v2v: prefer pigz or pxz for uncompressing OVA files, if available
    resolves: rhbz#1448739
  - resize: handle empty UUIDs for swap partitions
    resolves: rhbz#1482737
  - v2v: remove mention of --dcpath in an error message
    resolves: rhbz#1486197
  - Disables the QEMU image file locking when opening disks as read-only
    resolves: rhbz#1417306
    resolves: rhbz#1503497
  - Briefly document the format used for URIs
    resolves: rhbz#1450325
  - v2v: deal with grub2 configurations without a default set
    resolves: rhbz#1472288
  - v2v: warn when a guest has passthrough devices
    resolves: rhbz#1472719
  - v2v: fix three regular expressions
    resolves: rhbz#1494555
  - v2v: enable conversion of full-disk LUKS-encrypted Linux guests
    resolves: rhbz#1451665
  - v2v: new 'vddk' import method
    resolves: rhbz#1477912
    resolves: rhbz#1513884
  - Enable libguestfs to work on z Systems
    resolves: rhbz#1479526
  - p2v: fx check for sudo requiring a password
    resolves: rhbz#1500673
  - v2v: handle disks with snapshots in vCenter
    resolves: rhbz#1172425
  - rescue: backport improved version
    resolves: rhbz#1438710
  - v2v: improve bootloader detection
    resolves: rhbz#1508299
  - v2v: parse MAC address of network interfaces in OVF files
    resolves: rhbz#1506572
  - Unconditionally depend on libvirt-daemon-kvm >= 3.9.0-1, which will always
    pull the right qemu-kvm too, and thus remove the unversioned dependencies
    on it
    resolves: rhbz#1500870
  - v2v: fix RPM file owned test
    resolves: rhbz#1503958
  - Do not open read-only disks using <shareable/> in the libvirt backend
    resolves: rhbz#1518517
  - v2v: handle better when grubby does not report any default kernel
    resolves: rhbz#1519204
  - v2v: enhance vmx import method to access via SSH
    resolves: rhbz#1523767
  - builder: fix caching of templates when using --cache-all-templates
    resolves: rhbz#1523650


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.3-3
changelog:
  - Rebase to libguestfs 1.36 in RHEL 7.4.
    resolves: rhbz#1359086
  - v2v: always use names for libvirt pools
    resolves: rhbz#1141631
  - v2v: correctly find GRUB in RHEL UEFI guests
  - v2v: uninstall VMware tools packages from guests
    resolves: rhbz#1155150
  - v2v: install RHEV-APT only when using -o rhev/-o vdsm
    resolves: rhbz#1161019
  - New API: btrfs-filesystem-show
    resolves: rhbz#1164765
  - p2v: always enable debugging when running virt-v2v
    resolves: rhbz#1167623
  - libguestfs prefers virtio-pci on aarch64
    resolves: rhbz#1237250
  - v2v: make sure to copy all the driver files on Windows
    resolves: rhbz#1255610
  - Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
    Requires to >= 1.3.10-5.8.el7
    resolves: rhbz#1311890
  - v2v: ignore all the environment variables for proxy when exporting from
    vCenter
    resolves: rhbz#1354507
  - virt-sysprep can deal with full-LUKS encrypted guests
    resolves: rhbz#1362649
  - All the tools have bash completion scripts.
    resolves: rhbz#1367738
  - v2v: do not remove Processor and Intelppm nodes in Windows guests
    resolves: rhbz#1372668
  - Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
    regular expression in file_contexts file
    resolves: rhbz#1374232
  - v2v: set all the properties on creation when exporting to Glance
    resolves: rhbz#1374405
  - v2v: set hw_video_model when exporting to Glance
    resolves: rhbz#1374651
  - v2v: fix OVA conversion as root using the libvirt backend
    resolves: rhbz#1375157
  - Various improvements and fixes to the documentation
    resolves: rhbz#1377081
    resolves: rhbz#1390876
    resolves: rhbz#1398070
    resolves: rhbz#1425306
  - v2v: support <listen type='socket'> and <listen type='none'>
    resolves: rhbz#1378022
  - v2v: allow libvirt >= 2.1.0 for vCenter conversions
    resolves: rhbz#1379240
  - p2v: enable mnemonics in the GUI
    resolves: rhbz#1379289
  - Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
    resolves: rhbz#1382275
  - Correctly parse mount options in btrfs entries in /etc/fstab.
    resolves: rhbz#1383517
  - Read secrets from libvirt domains, when inspecting them
    resolves: rhbz#1392798
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1400205
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1401474
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1402301
  - resize: allow URIs for the output disk
    resolves: rhbz#1404182
  - Disable EDD when launching the appliance
    resolves: rhbz#1404287
  - v2v: increase the memory allocated to the appliance
    resolves: rhbz#1418283
  - p2v: switch from GTK+ 2 to GTK+ 3
  - p2v: add dbus-devel as BuildRequires to disable suspension during the
    conversion
  - libguestfs-java: bump the java-headless Require to >= 1.7.0, matching the
    Build-Require, and the generated bytecode
    resolves: rhbz#1364518
  - Do not try to use/write to /var/cache/yum & /var/log/yum.log
  - Bump ocaml-findlib-devel BuildRequires to >= 1.3.3-7.el7, because of
    RHBZ#1403897
  - v2v: remove --dcpath & --dcPath from --help output too
    resolves: rhbz#1429430
  - v2v: force VNC as display for -i disk, as SDL is not supported
    resolves: rhbz#1372671
  - v2v, p2v: rename rhvm network to ovirtmgmt
    resolves: rhbz#1429491
  - v2v: when exporting to local disk, check that UEFI firmware is installed
    before conversion
    resolves: rhbz#1429506
  - dib: actually generate SHA256 checksums when using --checksum
    resolves: rhbz#1430184
  - v2v: do not mention SUSE Xen hosts as supported
    resolves: rhbz#1430203
  - v2v: depend on OVMF/AAVMF, for converting EFI guests
    resolves: rhbz#1429643
  - v2v: use absolute path when using an OVA as backing file
    resolves: rhbz#1430680
  - v2v: support Debian/Ubuntu guests
    resolves: rhbz#1387213
  - sysprep: remove DHCP_HOSTNAME entries
    resolves: rhbz#1427529
  - v2v: avoid repeated "run virt-v2v -v -x" message on error
    resolves: rhbz#1167623
  - bash-completion: add script for virt-v2v-copy-to-local
    resolves: rhbz#1367738
  - v2v: fix virtio block driver installation for Windows 10 and Windows 2016
    resolves: rhbz#1434737
  - Replace the libosinfo dependency with osinfo-db, since we are only using
    the osinfo database.
  - v2v: fix virtio driver installation for Windows 8 UEFI
    resolves: rhbz#1431579
  - v2v: new 'vmx' import method
    resolves: rhbz#1441197


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12
changelog:
  - Rebase to libguestfs 1.38.2 in RHEL 7.6.
    resolves: rhbz#1551055
  - v2v: warn about unknown VMware controller types
    resolves: rhbz#1510801
  - df: show correct sizes in human-readable mode for filesystems with
    block size = 512
    resolves: rhbz#1525262
  - v2v: fix example URL in man page
    resolves: rhbz#1540535
  - Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
    resolves: rhbz#1541525
  - Fix qemu-img-ma dependency in non-x86_64 architectures
    resolves: rhbz#1568676
  - v2v: update "resume=/dev/sdaX" entries in GRUB command lines
    resolves: rhbz#1532224
  - v2v: fix virtio-rng and memballoon OVF fragment for RHV
    resolves: rhbz#1550168
  - v2v: detect whether the root filesystem was not mounted in read-write mode
    resolves: rhbz#1567763
  - v2v: import OVAs with snapshots
    resolves: rhbz#1570407
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1571237
  - Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
    place where it used now (by virt-builder-repository).
  - v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
    oVirt REST API
    resolves: rhbz#1557273
  - Start lvmetad earlier when booting the appliance
    resolves: rhbz#1581810
  - v2v: fix kernel detection in Ubuntu guests since 18.04
    resolves: rhbz#1591248
  - v2v: convert the CPU topology correctly
    resolves: rhbz#1541908
  - Add a new inspect_get_osinfo API, and add its result to the output of
    virt-inspector
    resolves: rhbz#1544842
  - Pass absolute paths to NBD sockets when using the libvirt backend
    resolves: rhbz#1588451
  - v2v: do not write only <vendor> without <model> in libvirt XMLs
    resolves: rhbz#1591789
  - v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
    used for -it vddk, and -o rhv-upload
    resolves: rhbz#1589776
    resolves: rhbz#1608718
  - v2v/p2v: disable on aarch64, since it is not supported (nor even working)
    there
    resolves: rhbz#1601488
  - v2v: handle srN devices in libvirt XML (for virt-p2v)
    resolves: rhbz#1612785
  - Do not use the -cpu parameter under any circumstances for ppc64le.
    resolves: rhbz#1605071


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12.el7_6.1
changelog:
  - v2v: update documentation regarding SHA-2 certificates in Windows 7 and
    Windows Server 2008 R2
    resolves: rhbz#1632788
  - v2v: fix rhev-apt firstboot command for Windows
    resolves: rhbz#1625216


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-4
changelog:
  - Rebase to libguestfs 1.40.2 in RHEL 7.7.
    resolves: rhbz#1621895
  - v2v: uninstall the VMware Tools correctly
    resolves: rhbz#1465849
    resolves: rhbz#1481930
  - v2v: fix VMware vCenter roles needed for conversion
    resolves: rhbz#1530967
  - v2v: preserve the VM Generation ID
    resolves: rhbz#1598350
  - Query QEMU to known whether KVM is supported
    resolves: rhbz#1605071
  - v2v: add --mac option
    resolves: rhbz#1607274
  - v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
    resolves: rhbz#1619665
    resolves: rhbz#1691659
  - v2v: provide a way to query for the estimated size of the disks
    resolves: rhbz#1622785
  - Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
    resolves: rhbz#1634248
  - p2v: add an option to Shutdown the machine after the conversion
    resolves: rhbz#1642044
  - v2v: fix epoch when querying installed RPM packages
    resolves: rhbz#1669395
  - Use a better icon for RHEL >= 7 guests
    resolves: rhbz#1679482
  - v2v: improve the architecture detection of Linux kernel modules
    resolves: rhbz#1690574
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1688155
  - v2v: update nbdkit information in documentation
    resolves: rhbz#1605242
  - v2v: warn when a guest has 'direct' network interfaces
    resolves: rhbz#1151902


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-5
changelog:
  - Rebase to libguestfs 1.40.2 in RHEL 7.7.
    resolves: rhbz#1621895
  - v2v: uninstall the VMware Tools correctly
    resolves: rhbz#1465849
    resolves: rhbz#1481930
  - v2v: fix VMware vCenter roles needed for conversion
    resolves: rhbz#1530967
  - v2v: preserve the VM Generation ID
    resolves: rhbz#1598350
  - Query QEMU to known whether KVM is supported
    resolves: rhbz#1605071
  - v2v: add --mac option
    resolves: rhbz#1607274
  - v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
    resolves: rhbz#1619665
    resolves: rhbz#1691659
  - v2v: provide a way to query for the estimated size of the disks
    resolves: rhbz#1622785
  - Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
    resolves: rhbz#1634248
  - p2v: add an option to Shutdown the machine after the conversion
    resolves: rhbz#1642044
  - v2v: fix epoch when querying installed RPM packages
    resolves: rhbz#1669395
  - Use a better icon for RHEL >= 7 guests
    resolves: rhbz#1679482
  - v2v: improve the architecture detection of Linux kernel modules
    resolves: rhbz#1690574
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1688155
  - v2v: update nbdkit information in documentation
    resolves: rhbz#1605242
  - v2v: warn when a guest has 'direct' network interfaces
    resolves: rhbz#1151902
  - v2v: use proper SELinux label for nbdkit sockets
    resolves: rhbz#1698437


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-5.el7_7.1
changelog:
  - v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
    for 'rhv-upload'
    resolves: rhbz#1726168


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-7
changelog:
  - v2v: -o rhv-upload: improve wait logic after finalize
    resolves: rhbz#1680361
  - v2v: fix DISKTYPE value in generated .ovf files
    resolves: rhbz#1750719


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream version
  - Do not use deprecated GLib functionality
  - Unref the GMainloop after it has been run, not when just quit


author: Marek Kasik <mkasik@redhat.com> - 0.2.4-1
changelog:
  - Update to 0.2.4
  - Backport several important patches from current master
  - Revert addition of GXPSImage (it would change ABI)
  - Resolves: #1384959


author: Marek Kasik <mkasik@redhat.com> - 0.2.5-1
changelog:
  - Update to newly released 0.2.5
  - Preserve ABI by exporting the same set of methods as before
  - Resolves: #1384959


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-2
changelog:
  - Ensure gxps_archive_read_entry() fills the GError in case of failure
  - Handle errors returned by archive_read_data()
  - Resolves: #1574844


author: Rafael Aquini <aquini@redhat.com> - 2.16-13
changelog:
  - tests/stack_grow_into libhugetlbfs test fixes (#1422960)
  - PPC vm/hugepage/libhugetlbfs test fix (#1515365)


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 0.5.224-1
changelog:
  - Add BSD license text to COPYING
  - Clean up the AM_CFLAGS settings
  - Minor fixes to the spec.in, including license, config and url entries


author: Doug Ledford <dledford@redhat.com> - 1.3.11-1
changelog:
  - Update to latest upstream release (dependency for another package)
  - Enable valgrind in build
  - Related: bz1092538


author: Doug Ledford <dledford@redhat.com> - 1.3.12-1
changelog:
  - Build on s390
  - Update to latest version to work with OPA enabled libibumad
  - Related: bz1169962, bz1186159


author: Doug Ledford <dledford@redhat.com> - 1.3.10.2-1
changelog:
  - Update to latest upstream release
  - Pick up OPA MAD support
  - Drop s390 restriction
  - Resolves: bz1169962
  - Related: bz1186159


author: Doug Ledford <dledford@redhat.com> - 1.1.6-5
changelog:
  - Correct the Url and Source tags now that the openfabrics server no longer
    responds if you don't include the www in the link


author: Doug Ledford <dledford@redhat.com> - 1.1.7-6
changelog:
  - Add in support for flow steering and IP addressing of UD RoCE QPs
  - Resolves: bz1058537, bz1062281


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Grab official upstream release.  This includes all of the pre-release
    items we had in the last release except for the IP based RoCE GID
    addressing changes.  So we are still carrying patches for those two
    items
  - Upstream fixed the copy-n-paste error that broke flow steering
  - Related: bz1122333


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Grab official upstream release.  This includes all of the pre-release
    items we had in the last release except for the IP based RoCE GID
    addressing changes.  So we are still carrying patches for those two
    items
  - Upstream fixed the copy-n-paste error that broke flow steering
  - Related: bz1094988
  - Resolves: bz947308


author: Doug Ledford <dledford@redhat.com> - 1.1.8-2
changelog:
  - Update RoCE IP addressing patches to latest version under review
  - Build against valgrind on ppc64le
  - Fix a coverity found issue
  - Resolves: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.1.8-4
changelog:
  - Fix one of the coverity bugs in a different way (the original fix
    caused a problem in libmlx4)
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.1.8-6
changelog:
  - Add build on s390
  - Drop back to building against libnl instead of libnl3
  - Resolves: bz1182178, bz1177115


author: Doug Ledford <dledford@redhat.com> - 1.1.8-7
changelog:
  - Add checksum offload support
  - Update the various patches to the ones from the official upstream git repo
  - Related: bz1195888


author: Robert Scheck <robert@fedoraproject.org> 0.46-1
changelog:
  - Upgrade to 0.46 (#525933, #628893)
  - Fixed race in populating builtin timezone components (#637150)
  - Fixed wrong ICAL_ERRORS_ARE_FATAL preprocessor check (#575715)


author: Jarod Wilson <jarod@redhat.com> 1.2.0-1
changelog:
  - Update to libiec61883 v1.2.0 release
  - Rework installtests patch to not require autoreconf
  - Make iso channel allocation work w/o local fw node r/w


author: Tim Waugh <twaugh@redhat.com> 0.2.11-6
changelog:
  - Package review fixes (bug #226031):
    - Drop prereq on ldconfig.
    - Removed trailing dot in devel package summary.
    - Fixed devel package requirement on main package.
    - Use SMP make flags.
    - Removed static libraries and la files.
    - Fixed source URL.
    - Make sure timestamps are preserved on install.
    - Ship AUTHORS and NEWS.


author: Tim Waugh <twaugh@redhat.com> 0.2.11-9
changelog:
  - The python sub-package now requires the exactly-matching main
    package (bug #605169).
  - Fixed strict aliasing warnings (bug #605170).


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.4-3
changelog:
  - disable broken python/cython bindings (for now, currently FTBFS)
  - track soname
  - tighten  subpkg deps


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.3-3
changelog:
  - Fix touchpad tap timestamps (#1491525)
  - Fix missing show-keycodes entry in man page (#1491532)
  - Change palm detection thresholds (#1491537)
  - Ignore tap motion threshold for nfingers > nslots (#1491533)
  - Fix a memory leak on destroy
  - Ignore hovering touches while tapping
  - Fix a man page typo


author: Peter Hutterer <peter.hutterer@redhat.com> 1.5.2-2
changelog:
  - Swap to the correct tarball so we match the checksums from upstream (had a
    local mixup of tarballs)


author: Rex Dieter <rdieter@fedoraproject.org> 3.52.6-3
changelog:
  - capitalize Name,Summary,Version tags
  - -devel: capitalize Summary
  - fix spurious permissions on header files
  - refresh upstream source
  - -admin,-devel: add %defattr(...)


author: Rex Dieter <rdieter@fedoraproject.org> 3.52.6-4
changelog:
  - -devel: install headers to /usr/include/libiodbc/ to better avoid
    conflicts and need for bogus unixODBC-devel dep


author: Doug Ledford <dledford@redhat.com> - 1.2-1.el6
changelog:
  - Update to latest upstream source
  - Change BuildRequires from valgrind to valgrind-devel for rhel6
  - Drop ppc64 build as it isn't officially supported upstream
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.3-1
changelog:
  - Update to latest upstream release and build against latest libibverbs
  - Resolve mezzanine configure issue (1085946)
  - Related: bz1137044


author: Paolo Bonzini <pbonzini@redhat.com> - 1.7.0-3
changelog:
  - Correct license for libiscsi-utils, prefer %global to %define
  - Add Requires
  - Remove %clean section


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-3
changelog:
  - Fixed issues reported by coverity (bz #1026820)
  - Do not mark /etc/ld.so.conf.d/ as config (bz #1011126)
  - Resolves: #1026820 
  - Resolves: #1011126


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-7.el7
changelog:
  - libiscsi-Discovery-return-multiple-portals-for-the-same-disco.patch [bz#1266523]
  - libiscsi-iscsi-ls-skip-link-local-IPv6-addresses.patch [bz#1266523]
  - Resolves: bz#1266523
    (iscsi-ls doesn't work if target has more than one portal)


author: Honza Horak <hhorak@redhat.com> 1.2.4-2
changelog:
  - Changed license from GPLv2 to GPLv2+ to correspond with source
  - Added license LGPLv2+ due to make_isohybrid_mbr.c


author: Matthias Clasen <mclasen@redhat.com> - 1.2.8-2
changelog:
  - Don't ship api docs twice (they were included in both
    the main and the devel package, by accident (need to save
    space on the f19 live images)


author: Nikola Forró <nforro@redhat.com> - 1.2.90-7
changelog:
  - Fix CVE-2018-11212 (#1586062)
  - Fix CVE-2016-3616 (#1318509), CVE-2018-11213 (#1589091)
    and CVE-2018-11214 (#1589110)
  - Fix CVE-2018-11813 (#1591203)


author: Than Ngo <than@redhat.com> - 4.10.5-2
changelog:
  - bz#970713, CVE-2013-2126, double-free flaw when handling
    damaged full-color in Foveon and sRAW files


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.14-2
changelog:
  - Add patch by Stephen Gallagher to include manual pages for
    ldb_connect() and several other functions.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.17-2
changelog:
  - Fix the minimal required tdb version
  - Related: rhbz#1133914 - Rebase libldb to version 1.1.17 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-1.1
changelog:
  - Resolves: rhbz#1290714 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.2.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-1.2
changelog:
  - Resolves: rhbz#1290714 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.2.z]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-2
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-3
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1
changelog:
  - Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1
changelog:
  - Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                             version 4.7.x


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-8
changelog:
  - rename to liblockfile
  - sorting file to main and -devel package
  - explicitly list files in files-section


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-9
changelog:
  - change description and summary of -devel-subpackage
  - make wildcard for man-pages even match against uncompressed files


author: Mahaveer Darade <mah.darade@gmail.com> - 0.3.5-1
changelog:
  - upgrade to upstream version 0.3.5
  - drop patch0, merged upstream
    liblognorm-0.3.4-rename-to-lognormalizer.patch
  - remove trailing whitespace


author: Jiri Vymazal <jvymazal@redhat.com> 2.0.2-2
changelog:
  RHEL 7.6 erratum
  - added patch with skipempty support
    resolves: rhbz#1565219
  - removed no longer used patch file


author: Rui Matos <rmatos@redhat.com> - 2.5.2-11
changelog:
  - Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
    CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184


author: Michal Ruprich <mruprich@redhat.com> - 1.2.0-5
changelog:
  - Resolves: #1643464 - Add libmaxminddb package as a successor of deprecated GeoIP package
  - Lowering the release to 1.2.0-5 due to current version in el8 - having larger version would break the migration from el7 to el8


author: Remi Collet <remi@fedoraproject.org> - 1.0.11-1
changelog:
  - update to 1.0.11, soname bump to libmemcached.so.11
  - drop broken SASL support
  - don't generate parser (bison 2.6 not supported)


author: Remi Collet <remi@fedoraproject.org> - 1.0.12-1
changelog:
  - update to 1.0.12
  - add aclocal/ax_lib_libmemcached.m4
  - abi-compliance-checker verdict : Compatible
  - uggly hack for man pages


author: Remi Collet <remi@fedoraproject.org> - 1.0.14-1
changelog:
  - update to 1.0.14
  - libmemcachedprotocol removed
  - sasl support is back
  - run test during build
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1079994 (bigendian)
    https://bugs.launchpad.net/libmemcached/+bug/1079995 (config.h)
    https://bugs.launchpad.net/libmemcached/+bug/1079996 (dtrace)
    https://bugs.launchpad.net/libmemcached/+bug/1079997 (-ldl)
    https://bugs.launchpad.net/libmemcached/+bug/1080000 (touch)


author: Remi Collet <remi@fedoraproject.org> - 1.0.15-1
changelog:
  - update to 1.0.15
  - libmemcachedprotocol is back
  - add memaslap command line tool
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1094413 (libevent)
    https://bugs.launchpad.net/libmemcached/+bug/1094414 (c99 MODE)


author: Remi Collet <remi@fedoraproject.org> - 1.0.16-1
changelog:
  - update to 1.0.16
  - ignore test result for memaslap (XFAIL but PASS)
    https://bugs.launchpad.net/libmemcached/+bug/1115357


author: Václav Pavlín <vpavlin@redhat.com> - 0.9.33
changelog:
  - Update to latest uptsream release 0.9.33 due to
    security issues.
    Resolves: rhbz#1039393, rhbz#1039387


author: Doug Ledford <dledford@redhat.com> - 1.0.4-2
changelog:
  - Fix Url and Source tags
  - Drop old Provides/Obsoletes we used to change package names
  - Pick up a bug fix to modprobe.d/libmlx4.conf


author: Doug Ledford <dledford@redhat.com> - 1.0.5-1
changelog:
  - Update to latest upstream
  - Drop awk based setup for a bash based setup, making including
    the setup code on an initramfs easier
  - Modernize spec file


author: Doug Ledford <dledford@redhat.com> - 1.0.5-7
changelog:
  - Fix dracut module support to work with rdma dracut module
  - Add support for IP based RoCE addressing and UD QPs
  - Add flow steering support
  - Related: bz1064316, bz1062284, bz1058538


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream release
  - Update RoCE IP GID support
  - Fix flow steering support
  - Related: bz1122333


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream release
  - Update RoCE IP GID support
  - Fix flow steering support
  - Resolves: bz1094988


author: Doug Ledford <dledford@redhat.com> - 1.0.6-2
changelog:
  - Bump and rebuilt against latest libibverbs (updated RoCE GID
    patch in libibverbs)
  - Fix a couple compiler warnings (the problems were bogus, but
    we still prefer a silent build)
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Drop the module init stuff and move it to the rdma package
  - Make sure we require the rdma package, and that we conflict
    with older versions of the package
  - Related: bz1164618


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1
changelog:
  - Update to latest upstream release
  - Remove files related to setting ports to Ethernet mode as that
    isn't even supported on this card yet and the files that are
    there will be wrong when it is supported
  - Resolves: bz1061584


author: Jarod Wilson <jarod@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream release v1.2.1
  - This is libmlx5, not libmlx4, fix descriptions accordingly
  - Resolves: bz1298698, bz1275412, bz1275396, bz1296267, bz1296186, bz1288821


author: Jarod Wilson <jarod@redhat.com> - 1.2.1-7
changelog:
  - Fix mlx5_post_send incompatibility with ibv_post_send ABI
  - Add explicit Requires: on libibverbs >= 1.2.1
  - Resolves: rhbz#1364525


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-4
changelog:
  - Remove docs from -devel package
  - Upgrade cmake requirement to 2.8.0
  - Add cmake to -devel requires


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-5
changelog:
  - Remove conflict with libproxy, its not really necessary since
    we already have the latest libproxy in rawhide.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - Update to 1.6.0
  - Adds Modulemd.ModuleStream object, deprecating Modulemd.Module
  - Adds Modulemd.Translation and Modulemd.TranslationEntry objects
  - Adds Modulemd.ImprovedModule object that collects streams, defaults and
    translations together
  - Adds new Modulemd.index_from_*() funtions to get a hash table of
    Modulemd.ImprovedModule objects for easier searching
  - Moves function documentation to the public headers
  - Corrects the license headers to MIT (they were incorrectly listed as MITNFA
    in previous releases)
  - Makes the "eol" field optional for Modulemd.ServiceLevel
  - Clean up HTML documentation
  - Fixes a type error on 32-bit systems


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - Update to 1.6.3
  - Drop upstreamed patch
  - Don't return ModuleStream objects from modulemd_module_new_all_from_*_ext()
  - Ensure that Component buildorder property is signed
  - Work around optimization bug
  - Don't crash dumping translation events without summary or desc
  - Remove Obsoletes: python-modulemd from EPEL


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0-2
changelog:
  - %files: track lib soname (so bumps aren't a surprise)
  - tighten subpkg deps (%_isa)
  - %build: --disable-static


author: John5342 <john5342 at, fedoraproject.org> 4.2-1
changelog:
  - Rebase to new upstream version
  - Drop patches (they were already both upstream waiting for this new release)
  - No real changes in this version since we already carried all patches except the version change


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.4.alpha
changelog:
  - Avoid 'test/md5.c:126:3: warning: dereferencing type-punned pointer
    will break strict-aliasing rules' by adding -fno-strict-aliasing flag.


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.6.alpha
changelog:
  - Fixes for CVE-2018-14679 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682
  - resolves: rhbz#1611550 rhbz#1611551 rhbz#1611552 rhbz#1611553


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream version
  - Add pseudoprovide for libibverbs-driver.{_arch} while keeping old
    pseudoprovide until libibverbs can be rebuilt without needing the
    old provide


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Undo pseudoprovide workaround as it's no longer needed due to
    a change in the libibverbs requirements


author: Christophe Fergeau <cfergeau@redhat.com> - 4.0.3-1
changelog:
  - New upstream 4.0.3 release, should fix a bug breaking metadata fetching
    from musicbrainz servers


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-1
changelog:
  - Package libmusicbrainz5, apart from the name/version it's identical to
    libmusicbrainz4 so this .spec is based on it.


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-2
changelog:
  - Address review comments (rhbz#832670)
      fix licence (LGPLv2+ -> LGPLv2)
      fix tarball URL
      remove obsolete use of RPM_BUILD_ROOT
      remove BuildRequires on pkg-config
      remove use of %defattr


author: Jiri Pirko <jpirko@redhat.com> - 1.2-1
changelog:
  - Update to 1.2
  - libndp: silently ignore packets with optlen 0 [1016064]
  - libndp: fix processing for larger options [1016064]
  - libndp: do not fail on receiving non-ndp packets [1016078]


author: Jiri Pirko <jpirko@redhat.com> - 1.2-3
changelog:
  - libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf() [1044084]


author: Lubomir Rintel <lrintel@redhat.com> - 1.2-5
changelog:
  - libndp: validate the IPv6 hop limit [CVE-2016-3698]
  - libndb: reject redirect and router advertisements from non-link-local [CVE-2016-3698]


author: Eric Garver <egarver@redhat.com> - 1.2-7
changelog:
  - libndp: add option flags to send messages
  - ndptool: add option to send messages types
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - libndp: revert API change for ndp_msg_send() and add


author: Doug Ledford <dledford@redhat.com> - 1.1.4-1
changelog:
  - Update to latest and rebuild against latest libibverbs and
    valgrind (1142116)
  - Related: bz1137044


author: Steve Dickson <steved@redhat.com> 0.25-13
changelog:
  - Strip newlines out of IDMAP_LOG messages (bz 1261124)
  - Fixed some NEGATIVE_RETURNS that a Covscan scan found (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-14
changelog:
  - nss_getpwnam: correctly check for negative values (bz 1271449)
  - Fixed a memory leak in nss_name_to_gid() (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-16
changelog:
  - Add options to aid id mapping in multi domain environments (bz 1378557)
  - Query DNS for the the NFSv4 domain (bz 980925)


author: Steve Dickson <steved@redhat.com> 0.25-18
changelog:
  - Enlarge the TXT record to lager than 127 characters (bz 1498210)
  - Allow white spaces in static IP mapping (bz 1455923)


author: Phil Sutter <psutter@redhat.com> [1.0.6-5.el7]
changelog:
  - expr: lookup: give support for inverted matching (Phil Sutter) [1441084]
  - tests: stricter string attribute validation (Phil Sutter) [1441084]


author: Phil Sutter <psutter@redhat.com> [1.0.6-6.el7]
changelog:
  - chain: dynamically allocate name (Phil Sutter) [1353320]
  - src: Avoid returning uninitialized data (Phil Sutter) [1353319]
  - expr/limit: Drop unreachable code in limit_to_type() (Phil Sutter) [1353312]
  - ruleset: Initialize ctx.flags before calling nftnl_ruleset_ctx_set() (Phil Sutter) [1353322]
  - src: Fix nftnl_*_get_data() to return the real attribute length (Phil Sutter) [1353322]
  - expr/ct: prevent array index overrun in ctkey2str() (Phil Sutter) [1353309]
  - utils: Don't return directly from SNPRINTF_BUFFER_SIZE (Phil Sutter) [1353311]
  - set: prevent memleak in nftnl_jansson_parse_set_info() (Phil Sutter) [1353311]


author: Phil Sutter <psutter@redhat.com> [1.0.8-2.el7]
changelog:
  - trace: Check return value of mnl_attr_parse_nested() (Phil Sutter) [1510538]
  - set_elem: Don't return garbage in nftnl_set_elems_parse() (Phil Sutter) [1510538]
  - ruleset: Avoid reading garbage in nftnl_ruleset_cb() (Phil Sutter) [1510538]
  - object: Avoid returning garbage in nftnl_obj_do_parse() (Phil Sutter) [1510538]
  - gen: Remove a pointless call to mnl_nlmsg_get_payload() (Phil Sutter) [1510538]
  - data_reg: Add a missing break in nftnl_data_reg_snprintf (Phil Sutter) [1510538]


author: Dan Williams <dcbw@redhat.com> - 1.1-14
changelog:
  - Fix portmap position calculation (rh #677526) (rh #677725)
  - Make port allocation threadsafe (rh #677527) (rh #677724)


author: Thomas Haller <thaller@redhat.com> - 3.2.21-6
changelog:
  - fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
  - fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
  - fix printing in nl_msec2str for whole seconds
  - don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
  - backport nl_has_capability function


author: Thomas Haller <thaller@redhat.com> - 3.2.21-9
changelog:
  - improve local port handling for netlink socket with EADDRINUSE (rh #1249158)
  - rtnl: backport support for link-netnsid attribute (rh #1255050)


author: Dan Mashal <dan.mashal@fedoraproject.org> - 0.7.5-5
changelog:
  - Fix RHBZ #925824
  - Update source URL
  - Fix mix of spaces and tabs in spec file
  - Fix bogus changelog date


author: Ray Strode <rstrode@redhat.com> 0.7.5-8
changelog:
  - Don't require desktop notification daemon (breaks a build loop with mutter/gnome-shell)
    Related: #1174722


author: Jarod Wilson <jarod@redhat.com> - 1.0.8-1
changelog:
  - Update to upstream release v1.0.8 for RoCE v2 support
  - Restore AUTHORS, COPYING and README installation
  - Resolves: bz1276743


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.0.9-1
changelog:
  - Updated to 0.0.9
  - Dropped obsolete Group, Buildroot, %clean and %defattr
  - Switched to .bz2 sources
  - Dropped included patches


author: Zeeshan Ali <zeenix@redhat.com> - 0.2.7-3
changelog:
  - rhel: Add info on 6.5 and 7.0 (#1015055).
  - install-script,rhel: Fix for 'Server' & 7.0 (#1033007).


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-3
changelog:
  - Resolves: rhbz#1712458 - [machines] The function of 'Auto-detect guest
                             operating system' is not available on rhel 7.7


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-4
changelog:
  - Resolves: rhbz#1727842 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Neal Becker <ndbecker2@gmail.com> - 0.9.9-2
changelog:
  - Remove libotf-config (just just pkg-config instead)
  - Remove example/Makefile to fix multilib conflict


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4.2
changelog:
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is accounted for (#1207666)


author: Adam Jackson <ajax@redhat.com> 0.12.902-4
changelog:
  - libpciaccess-lol-dev-port.patch: Don't use /dev/port since the kernel insists
    that it remain unusably broken.


author: Tom Lane <tgl@redhat.com> 2:1.5.10-3
changelog:
  - Remove compat subpackage (it's now a separate package "libpng12")
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 2:1.5.12-1
changelog:
  - Update to libpng 1.5.12 for minor bug fixes
  - Activate chunk size limits by default, with a very generous default limit


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptf based on upstream
  - Related: #1283576


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptr base on upstream
  - Related: #1283575


author: Peter Robinson <pbrobinson@fedoraproject.org> - 0.4.7-4
changelog:
  - Add upstream patches to use js rather than xulrunner
  - Add patch to fix FTBFS on gcc 4.7
  - Cleanup spec for latest updates and remove obsolete bits


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-1
changelog:
  - fix leak when throwing PWQError exception
  - added pkgconfig file
  - call the simplicity checks before the cracklib check
  - add enforce_for_root option to the PAM module
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-1
changelog:
  - use rpm built-in filtering of provides (rhbz#830153)
  - remove strain debug fprintf() (rhbz#831567)


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-5
changelog:
  - fix brittle configuration settings (#1259633)
  - fix abort when generating large passwords on some architectures


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.4-1
changelog:
  LOG: prevent the last char of the blackbox message from getting lost.
  Example: make the blackbox example more practical.
  Add the processing which remove notifier at skiplist_destroy function
  Add the processing which remove hash node and notifier at hashtable_destroy function
  Unify to QB_TRUE/QB_FALSE a boolean value
  Document the default prefix in INSTALL
  Unify the list processing with qb_list function
  Add travis link to the readme.
  Fix return code which is an error occurred at pthread function
  TEST: add a progam to compare the speed of vsnprintf and qb_vsnprintf_serialize
  LOG: add a test for a padded hex int.
  Fedora's splint has a strange syntax error, don't fail on it.
  LOG: fix truncation in some messages that get padded.
  Fix the blackbox formatter when specifing the string len/precision
  Fix strlcpy and strlcat functions
  IPC: don't over log on disconnect
  Make sure we don't use the format string whilst it is getting changed.
  ptrie: deref the current node in trie_iter_free()
  LOG: fix the format comparison to avoid generating multiple entries.
  LOG: set the return code when calloc fails
  IPC: call poll if we are mid message and get EAGAIN
  Remove extra ";"
  IPC: set the error more correctly when qb_sys_mmap_file_open() fails.
  Make sure that mmap'ed files smaller than a page size are written to.
  example/test: check for error in qb_ipc_run()
  example: check for error in qb_ipc_run()
  TEST: fix typo s/,/; in check_ipc.c


author: David Vossel <dvossel@redhat.com> - 0.16.0-4
changelog:
  - Require log filtering to match function and file exactly.
    No substring matching.

  - Fixes complile time issue with 'make check' unit tests.

    Resolves: rhbz#1018091


author: David Vossel <dvossel@redhat.com> - 0.17.1-1
changelog:
  Fix: ipcs: Correctly allocate receive buffer size
    Fix: ipc_socket: Signalhandler must be resetted to Default, use only cleanup_sigpipe to return from qb_ipc_dgram_sock_setup.
    Fix: trie: allow modifying the trie map during the notify callback
    Fix: fix invalid option when run 'ipcclient -h'
    Fix: epoll: don't miss poll events under high load
    Fix: ipc_shm: fix error handling in qb_ipcs_shm_connect()
    Fix: ringbuffer: fix size in qb_rb_create_from_file()
    Fix: ringbuffer: fix qb_rb_open_2() debug format string
    Fix: trie: fixes regression caused by ref count refactoring
    Fix: ipcc: Properly timeout during recv when timeout value is provided

    Resolves: rhbz#1110043
    Resolves: rhbz#975903


author: David Vossel <dvossel@redhat.com> - 0.17.1-1.1
changelog:
  Fix bug that prevents ipc server from working in pid with realtime priority.

    Resolves: rhbz#1198718


author: Christine Caulfield <ccaulfie@redhat.com> - 0.17.1-2.1
changelog:
  Increase size of the buffer where we make the socket name to allow for longer PIDs
    Resolves bz#1114852


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-2
changelog:
  Detect IPC Shared memory corruption in peek as well as read. Prevents
    the mainloop from spinning if multithreaded IPC (which is currently 
    not supported) is attempted without locking.
    Resolves: rhbz#1422454


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-3
changelog:
  Allow IPC system to use filesystem sockets instead of abstract
    sockets if a configuration file exists.
    Resolves: rhbz#1446254


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-4
changelog:
  Revert git patch 189ca28 which caused problems with pacemaker CIB
    closing down.
    Resolves: rhbz#1459276


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-5
changelog:
  Put backpatch 189ca28 as it's not the culprit
    
    Don't truncate IPC files in the client as it can cause servers to crash.
    I've also had to (for this release) disable one of the tests as it checks
    for truncated files.
    Resolves: rhbz#1459276


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-7
changelog:
  Prevent crashes when client truncates SHM segment
    I've reverted the patch for 1459276 which is no longer needed as this
    is a proper fix.
    Resolves: rhbz#1473695


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.1.0.4-5
changelog:
  - Resolves: rhbz#989246 Honor user's JavaDriverClass override in mysql driver
  - Resolves: fdo#67045 fix several nasty screen selection issues


author: David Tardon <dtardon@redhat.com> - 1:4.3.7.2-2
changelog:
  - Related: rhbz#1205091 add more fixes from f21
  - Resolves: tdf#91078 check also DBData modified, not only named expressions
  - don't include red spelling underlines on bitmap copy/paste


author: David Tardon <dtardon@redhat.com> - 1:4.3.7.2-4
changelog:
  - Related: rhbz#1205091 add another bunch of fixes from Fedora
  - rhbz#1219137 tweak ruler for happenchance side-effect
  - Related: rhbz#1205091 do not filter out requires


author: David Tardon <dtardon@redhat.com> - 1:4.3.7.2-5
changelog:
  - Related: rhbz#1205091 fix for ppc64
  - Related: rhbz#1205091 fix deps for gdb-debug-support subpackage


author: David Tardon <dtardon@redhat.com> - 1:4.3.7.2-5.1
changelog:
  - Resolves: rhbz#1285820 various flaws
  - CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
  - CVE-2015-5212 Integer underflow in PrinterSetup length
  - CVE-2015-5213 Integer overflow in DOC files
  - CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
    causing memory corruption


author: Caolán McNamara <caolanm@redhat.com> - 1:5.0.6.2-4
changelog:
  - Resolves: rhbz#1378521 crash in calc on exit after using csv dialog with a11y enabled
  - Resolves: rhbz#1397992 crash in calc on closing dialog with a11y enabled


author: Caolán McNamara <caolanm@redhat.com> - 1:5.0.6.2-6
changelog:
  - Resolves: rhbz#1401082 gnome hangs opening certain docx
  - Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE


author: David Tardon <dtardon@redhat.com> - 1:5.0.6.2-7
changelog:
  - Resolves: rhbz#1431539 gnome-documents needs libreofficekit
  - Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
    Calc and Writer


author: David Tardon <dtardon@redhat.com> - 1:5.0.5.2-2
changelog:
  - Related: rhbz#1290148 remove unintentional dependency of libreoffice-core on
    libreoffice-calc
  - Related: rhbz#1290148 restore lost changelog entry
  - Related: rhbz#1290148 add additional 5.0.6 patches


author: Caolán McNamara <caolanm@redhat.com> - 1:5.0.6.2-4
changelog:
  - Resolves: rhbz#1425535 crash in calc on exit after using csv dialog with a11y enabled
  - Resolves: rhbz#1425536 crash in calc on closing dialog with a11y enabled


author: Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17
changelog:
  - Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
  - Resolves: rhbz#1610692 silence console warnings from print dialog


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 3.2-2
changelog:
  - Build in the build section, install in the install section
  - Add the _isa macro to the libreoffice dependencies


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 3.2-4
changelog:
  - Specify CC_FLAGS and COMP_LINK_FLAGS so that an extra -O switch and setting an
    rpath are avoided.


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.9-1
changelog:
  - handle: Fix memory leak when looking for local metalink/mirrorlist (Issue #33)
  - Return -1 for LRR_YUM_TIMESTAMP if no repomd is available
  - Use CURLOPT_ERRORBUFFER to get more useful error messages
  - repoutil_yum: lr_repoutil_yum_check_repo: fix path handling


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-1
changelog:
  - Substitute vars in URL in the lr_downloadtarget_new()
  - New module repoconf for reading of *.repo files
  - Add LRE_VALUE code + LR_REPOCONF_ERROR error domain
  - Fail if gpgcheck enabled but repomd.xml signature is not available
  - Support for RHEL6
  - Add LRO_GNUPGHOMEDIR option
  - Refactoring to prevent RhBug: 1144741
  - fastest_mirror: Use <0.0 (-1.0) instead of DBL_MAX when a connection time wasn't measured
  - Add sanity checks in order to avoid bugs like: 1166533, 1160087
  - Refactoring


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1
changelog:
  - downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
  - downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
  - downloader: Show also calculated checksums in error message about bad checksum
  - Python: Return all strings in unicode


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1
changelog:
  - Fix ABI compatibility (RhBug: 1185180)
  - fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
  - downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
  - Make building tests and docs optional
  - librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1
changelog:
  - tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
  - Add LRO_OFFLINE
  - Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
  - Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
  - Add LR_VERSION constant with version string
  - python: Import contants from C librepo module in a loop
  - repoconf: Add support for failover and skip_if_unavailable options
  - handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
  - Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
  - util: Add lr_is_local_path()
  - New module repoconf for reading *.repo files
  - Add LRO_HTTPHEADER option (RhBug: 1181123)


