# changelog

author: Richard Marko <rmarko@redhat.com> - 2.1.11-28
changelog:
  - doc: fix related to conditional compilation of man page
  - spec: add dbus dependency for abrt-cli and abrt-python
  - Related: #1191572, #1245527


author: Richard Marko <rmarko@redhat.com> - 2.1.11-29
changelog:
  - ccpp: use global TID
  - ccpp: fix comment related to 'MakeCompatCore' option in CCpp.conf
  - cli: fix testing of DBus API return codes
  - dbus-api: unify reporting of errors
  - Related: #1210601, #1252419, #1224984


author: Richard Marko <rmarko@redhat.com> - 2.1.11-31
changelog:
  - Only analyze vulnerabilities when coredump present
  - Only generate core_backtrace if it's not already present.
  - Related: #1210601


author: Richard Marko <rmarko@redhat.com> - 2.1.11-33
changelog:
  - abrt-auto-reporting documentation
  - ccpp: Use global PID
  - ccpp: correct comments mentioning TID
  - Related: #1252590, #1261036, #1223805


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-35
changelog:
  - make /var/spool/abrt owned by root
  - remove 'r' from /var/spool/abrt for other users
  - abrt-action-install-debug-info: use secure temporary directory
  - stop saving abrt's core files to /var/spool/abrt if DebugLevel < 1
  - Fixes for: CVE-2015-5273 and CVE-2015-5287
  - Resolves: #1266853


author: CentOS Sources <bugs@centos.org> - 2.1.11-35.el7.centos
changelog:
  - Drop RHTS hint
  -  Change by David Mansfield <david@orthanc.cobite.com>
  -  Per http://bugs.centos.org/view.php?id=7192
  - Remove cli suggestion text patch
  - set URL to retrace server
  - update to not run sosreport
  -  Per http://bugs.centos.org/view.php?id=7913


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-36.el7.centos
changelog:
  - add abrt patches related to CentOS from https://github.com/abrt/abrt/tree/centos7
  - disabled authenticated autoreporting


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.0.26.1-3
changelog:
  - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
  - clean up spec to follow current guidelines
  - don't build -tools for RHEL. Bill Nottingham patch. Resolves rhbz#586030


author: Jaroslav Kysela <jkysela@redhat.com> - 1.1.0-1
changelog:
  - Updated to 1.1.0
  - Enable hda-verb, hdajackretast, hdajacksensetest for i686/x86_64
  - Resolves: rhbz#1172560


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16
changelog:
  - the correct solution is remove smp_flags, they don't work properly on ppc with
    the option mpower7
  - Related: rhbz#1048745


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-21
changelog:
  - correct the DST correction when using UTC time specification (#1328832)
  - clear non-job files from at dir and test for write error on fclose
    to fix bogus syslog messages


author: Steve Grubb <sgrubb@redhat.com> 2.3.3-2
changelog:
  - New upstream bugfix/enhancement release
  resolves: #1053804 - ausearch issues found by ausearch-test
  resolves: #1030409 - ausearch help typo for "-x" option


author: Steve Grubb <sgrubb@redhat.com> 2.4-1
changelog:
  resolves: #1115196 - Add golang bindings for libaudit
  resolves: #1105150 - audispd config file parser fails on long input
  resolves: #1104973 - auparse truncating selinux context after first category
  resolves: #1088593 - auditctl man page examples use deprecated syscalls
  resolves: #1087849 - support for setting loginuid immutable
  resolves: #1073063 - AUDIT_SECCOMP events syscall field is not interpretted
  resolves: #975796  - confusing aulast records for bad logins


author: Steve Grubb <sgrubb@redhat.com> 2.4.1-1
changelog:
  resolves: #963353 - aarch64 userspace auditing needs to be written
  resolves: #1150202 - perf trace sleep 1 does not list any syscall information
  resolves: #1142989 - Update audit package to 2.4.1
  resolves: #1155221 - adjust fstatat naming to match kernel uapi


author: Steve Grubb <sgrubb@redhat.com> 2.4.1-4
changelog:
  - Remove golang bindings added under the following bz
  resolves: #1115196 - Add golang bindings for libaudit


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-10
changelog:
  - Add patch for IPRoute2, hex and hyphen protocols (RHBZ#1063961)
  - Add patch for IPRoute2, slashes in protocols (RHBZ#1063968)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-12
changelog:
  - Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
  - Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
  - Add patch for Krb5, parse braces in values (RHBZ#1066419)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-13
changelog:
  - aug_save: return error when unlink fails (RHBZ#1091143)
  - augtool: add aliases to autocomplete (RHBZ#1100076)
  - augtool: remove unused dump-xml arg (RHBZ#1100106)
  - Automounter: parse hostnames with hyphens (RHBZ#1075162)
  - Cgconfig: parse other valid controllers (RHBZ#1112543)
  - Chrony: add lens (RHBZ#1071947)
  - docs: update man page with new commands (RHBZ#1100077)
  - Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
  - Httpd: parse continued, quoted lines (RHBZ#1100551)
  - Ldso: parse hwcap lines (RHBZ#1102629)
  - NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
  - Rmt: add lens (RHBZ#1100549)
  - Services: permit colons in service name (RHBZ#1121527)
  - Shellvars: support arithmetic expansion (RHBZ#1100550)
  - Syslog: parse TCP loghosts (RHBZ#1129386)
  - Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
  - Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
  - Systemd: parse quoted environment vars (RHBZ#1100547)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-14
changelog:
  - Kdump: parse new options, EOL comments (RHBZ#1139298)
  - Rsyslog: parse property filters and templates (RHBZ#1138402)
  - Systemd: parse semicolons inside entry values (RHBZ#1139498)
  - Systemd: parse environment variables where value is quoted (RHBZ#1138508)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-16
changelog:
  - Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
  - Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
  - Shadow: add lens (RHBZ#1145249)


author: Dominic Cleal <dcleal@redhat.com> - 1.4.0-1
changelog:
  - Rebase to Augeas 1.4.0
  - Revert some changes for better compatibility with 1.1.0-17:
    * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
    * Dnsmasq: revert splitting of address/server options
    * Dovecot: restore quotes within values
    * Jaas: revert semicolon and line break changes
    * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
    * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
    * Syslog: restore tree without protocol for UDP hosts
    * UpdateDB: keep Simplevars to load config by default


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-7
changelog:
  - check nslcd for restart when --enableforcelegacy is used
  - call restorecon on newly created configuration files


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-8
changelog:
  - enable/start sssd only when config exists or enabled
    for both pam and nsswitch.conf
  - updated translations


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-9
changelog:
  - do not overwrite special ldap base values
  - display error message if winbind or IPA domain join fails
  - fix invocation of IPA domain join from GUI
  - keep altfiles in nsswitch.conf if present (#1134084)
  - the winbind client is now in samba-winbind package (#1084997)
  - correct handling of SSSD enablement during IPA domain joins
  - do not bail out if multiple LDAP URIs are specified (#1142830)


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-10
changelog:
  - fix title of IPA domain join window (#1166119)
  - add --unattended to IPA uninstall command (#1166131)
  - do not mistake comment for krb5 realm name (#1184639)
  - do not traceback with incorrect locales (#1187020)
  - correct the package needed for winbind (#1190226)
  - install empty /etc/sysconfig/authconfig file (#1194698)
  - let SSSD prompt non-local users for passwords (#1204864)
  - add includedir /var/lib/sss/pubconf/krb5.include.d/ to krb5.conf (#1207552)
  - pass the password provided by --winbindjoin to net join (#1225089)


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-11
changelog:
  - add trigger to change pam configuration to use pam_oddjob_mkhomedir
    instead of pam_mkhomedir if oddjob-mkhomedir is installed
  - remove unusable --winbindtemplateprimarygroup option (#1242878)
  - handle inconsistency when missing realm in krb5.conf
  - sort the /etc/sysconfig/authconfig on write (#1320943)
  - avoid unnecessary update of nsswitch.conf
  - add support for myhostname nsswitch module (#1329943)


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18-1
changelog:
  - Update to 5.18
  - Fix multilib conflicts (#831379)
  - Make some dependencies arch-specific
  - Remove obsolete macros


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-15
changelog:
  - enable hardened build (#1092506)
  - fix short option for --version, document -t option of avahi-autoipd (#948583)
  - fix crashes in D-Bus methods GetAlternativeHostName and GetAlternativeServiceName (#1003688)
  - fix bug when avahi-daemon ended up in a tight loop (#1081801)
  - remove prefix /home/lennart/tmp/avahi from references in man pages (#1120233)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-17
changelog:
  - fix crash due to use of deprecated Gtk3 API (#1263720)
  - don't add 0pointer.de and zeroconf.org to default browse list (#1340837)
  - fix not publishing entries if a probing interface is removed (#1222646)


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.0-1
changelog:
  - Update to 2.0 (fixes #817902, #831835).
  - Don't try to python-bytecompile our non-python *.py (#813651).


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.1-1
changelog:
  - Update to 2.1 (fixes #860510, #906469, #912113, #919246, #928253).
  - Don't ship completions included in util-linux 2.23-rc2 for F-19+.


author: Roman Rakus <rrakus@redhat.com> - 2.1-4
changelog:
  - Added conditionals to not add completions for some commands; the packages
    has their own completions
    Resolves: #1007839


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33
changelog:
  - Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185)
  - Fix error in internal test suite (#1259514)
  - Fix named-checkconf call in *-chroot.service files (#1278082)
  - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34
changelog:
  - Added support for CAA records (#1306610)
  - Use HTTPS URL instead of FTP for upstream sources (#1319280)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36
changelog:
  - Added automatic interface scan functionality (#1294506)
  - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)


author: Petr Menšík <pemensik@redhat.com> - 32:9.9.4-38.1
changelog:
  - Fix CVE-2016-9131 (ISC change 4508)
  - Fix CVE-2016-9147 (ISC change 4510)
  - Fix regression introduced by CVE-2016-8864 (ISC change 4530)
  - Fix CVE-2016-9444 (ISC change 4517)


author: Nick Clifton <nickc@redhat.com> 2.25.1-13
changelog:
  - Add support for Zeppelin x86 extensions.
  - Add support for the AMD MWAITX extension.
  - Add support for the PowerPC Power9 architecture.
  - Remove spurious binutils document references.
    (#1335313)
    (#1335684)
    (#1333305)


author: Nick Clifton <nickc@redhat.com> 2.25.1-14-base
changelog:
  - Extend Release string to include ".base" thus ensuring that it
    will not collide with a DTS release which might otherwise have
    the same name.
    (#1337617)


author: Nick Clifton <nickc@redhat.com> 2.25.1-17-base
changelog:
  - Close memory leak in "ar" archiver program.
    (#1162655)
  - Retire the copy-osabi patch.
    (#1252066)


author: Eric Sandeen <sandeen@redhat.com> - 1.0.5-7
changelog:
  - Add upstream cpu scalability patches (#1032368)
  - Remove "-k" option from manpage (#1300354)
  - Fix potential deadlock when calling stop_tracers (#1263189)


author: Petr Machata <pmachata@redhat.com> - 1.53.0-15
changelog:
  - Fix misunderstanding of Boost.MPI about widths of some
    Boost.Serialization types.  (boost-1.53.0-mpi-version_type.patch)


author: Petr Machata <pmachata@redhat.com> - 1.53.0-18
changelog:
  - Turn off build flags pre-set by Boost distribution.
    (boost-1.53.0-buildflags.patch)
  - Pass RPM_OPT_FLAGS through user-config.jam.


author: Petr Machata <pmachata@redhat.com> - 1.53.0-21
changelog:
  - Fix atomic_cas32 (thanks Jaroslav Škarvada for figuring out where
    the problem is) (boost-1.54.0-interprocess-atomic_cas32-ppc.patch)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - do not use arch-specific BuildRequires (#1268268)
  - support TLS libraries without SSLv3 (#1298227)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - Install unpatched gcc.jam (#1305019).
  - Build libboost_python and libboost_python3 such that they depend on
    their respective libpython (#1302120).
    (boost-1.53.0-python-libpython_dep.patch,
    boost-1.53.0-python-abi_letters.patch)
  - Fix Boost.Python test suite so that PyImport_AppendInittab is called
    before PyInitialize, which broke the test suite with Python 3.
    (boost-1.53.0-python-test-PyImport_AppendInittab.patch)
  - Patch gcc.jam to not add bogus rpaths.


author: Petr Sabata <contyk@redhat.com> - 1.5-1
changelog:
  - 1.5 bump
  - BuildRoot and defattr cleanup
  - Use macros in Sources
  - Drop show-ports and foreach patches -- those have been included upstream


author: Petr Sabata <contyk@redhat.com> - 1.5-2
changelog:
  - Add three latest bugfixes from upstream git on top of 1.5
  - Dropping params patch (included upstream variant)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5
changelog:
  - Apply a patch by Stephen Gallagher to patch autoconf, not configure to
    allow optflags to be passed in by build environment
  - Run autoreconf before configure
  - git rm obsolete patches
  - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1
changelog:
  - New upstream release 1.10
  - Obsolete upstreamed patches
  - Amend the multilib patch, there's no need to patch configure since we
    are running autoreconf anyways
  - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES


author: Kai Engert <kaie@redhat.com> - 2014.1.98-71
changelog:
  - Update to CKBI 1.98 from NSS 3.16.1
  - building on RHEL 7 no longer requires java-openjdk
  - added more detailed instructions for release numbers on RHEL branches,
    to avoid problems when rebasing on both z- and y-stream branches.


author: Stef Walter <stefw@redhat.com> - 2014.1.98-72
changelog:
  - The BasicConstraints fix for Entrust Root is no longer necessary.
    In addition it was invalid for p11-kit 0.20.x. rhbz#1130485


author: Kai Engert <kaie@redhat.com> - 2015.2.3-71
changelog:
  - Update to CKBI 2.3 from NSS 3.18 with legacy modifications.
  - Add an alternative version of the "Thawte Premium Server CA" root,
    which carries a SHA1-RSA signature, to allow OpenJDK to verify applets
    which contain that version of the root certificate.
    This change doesn't add trust for another key, because both versions
    of the certificate use the same public key (rhbz#1170982).
  - Add a patch to the source RPM that documents the changes from the
    upstream version.
  - Introduce the ca-legacy utility, a manual page, and the ca-legacy.conf
    configuration file.
  - The new scriptlets require the coreutils package.
  - Remove the obsolete blacklist.txt file.


author: Kai Engert <kaie@redhat.com> - 2017.2.11-70.1
changelog:
  - Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
  - Use comments in extracted bundle files.
  - Change packaging script to support empty legacy bundles.


author: Konstantin Volkov <wolf@virtuozzo.com> 7.0.0-17
changelog:
  - Enable firewalld by default, open appropriate ports, see #PSBM-54055
  - Set default timezone for host, see #PSBM-54121


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.60-1
changelog:
  - don't completely override LDFLAGS
  - pass along any rpm-configured LD flags
  - make sure install_initd/remove_initd provides appropriate help output for those commands (#803818)
  - check for overridden services in /etc too (#850899)
  - chconfig should own /etc/rc.d (#894328)
  - isXinetdEnabled should also ask systemd (#820363)
  - alternatives: look for service file also in /etc
  - alternatives: add --list option (#622635)
  - chkconfig: add hint to call systemctl list-unit-files and list-dependencies (#800334)
  - chkconfig: correctly handle unreadable init.d (#913807)
  - alternatives: call systemctl enable with --force (#915667)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.62-1
changelog:
  - use systemctl preset, not systemctl enable
  - fix typo in manpage
  - partly support socket activated services


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.4-1
changelog:
  - ntsysv: show systemd services and sockets
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files
  - alternatives: remove unused variable
  - alternatives: warn if the target is not a symlink
  - spec: add link to git
  - lets simplify version


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.5-1
changelog:
  - add systemd-sysv-install alias
  - don't create symlinks if they already exist
  - fix wrongly behaving LDFLAGS


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.6-1
changelog:
  - systemd-sysv-install: don't play ping-pong with systemctl
  - ntsysv: add description to systemd services
  - ntsysv: skip templates
  - Makefile: fix typo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.7.2-1
changelog:
  - alternatives: introduce --keep-missing
  - alternatives: allow family in --set and display it in --config


author: Miroslav Lichvar <mlichvar@redhat.com> 1.29.1-1
changelog:
  - update to 1.29.1 (#1053022, CVE-2014-0021)
  - fix selecting of sources with prefer option (#1061048)
  - fix potential bug in writing of drift files (#1061106)
  - replace hardening build flags with _hardened_build (#1061036)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.1-1
changelog:
  - update to 2.1 (#1117882 #1169353 #1206504 #1209568 CVE-2015-1821
    CVE-2015-1822 CVE-2015-1853)
  - extend chrony-helper to allow using servers from DNS SRV records (#1211600)
  - add servers from DHCP with iburst option by default (#1219492)
  - execute test suite


author: Jeff Layton <jlayton@redhat.com> 6.2-3
changelog:
  - fixes for bugs reported by coverity:
  - update bad bit shift patch with one that patches getcifsacl.c too
  - remove some dead code from getcifsacl.c, asn1.c, and data_blob.c
  - fix bad handling of allocated memory in del_mtab in mount.cifs.c


author: Sachin Prabhu <sprabhu@redhat.com> - 6.2-8
changelog:
  - Prevent unnecessary linking of libwbclient
  - Uppercase orig_dev on 2nd try at mounting
  - Include paths.h in mtab.c
  - Clarify use of backupuid/backupgid in manpage
  - Ignore x-* mount options


author: Robert Relyea <rrelyea@redhat.com> - 1.1.0-34
changelog:
  - recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
  - own our cache file.
  - verify we are using the correct mechanisms


author: Ondrej Vasik <ovasik@redhat.com> 8.22-10
changelog:
  - cp/mv/install: do not crash when getfscreatecon() is
    returning a NULL context
  - fix the cut optimizations to UTF-8 locales only
  - unset the unnecessary envvars after colorls scripts


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-13
changelog:
  - call utilities in colorls.* scripts with full path (#1222223)
  - tail: disable inotify in --follow for vxfs (#1109083)
  - remove circular dependency for util-linux (not relevant for RHEL 7 - #1155963)
  - sort: do not look at more than specified keys for mb locales (#1148347)
  - i18n patch: fix buffer overruns and compiler warnings (#1148347)
  - xfs: fix dd sparse false test failure on btrfs and xfs (#1223041)
  - dd: new status=progress level to print stats periodically (#1147701)
  - id/groups - print correct group for session (#1115430)
  - cp,install,mknod,mkfifo,mkdir: separate -Z and --context options
    in --help and manpage (#1084471)
  - ls: clarify --scontext/--context/--lcontext options behaviour
    in info documentation, mention deprecation (#1099508)
  - du: handle bindmount cycles more gracefully (#1238191)
  - mv: prevent possible race condition for hardlinks (#1166570)
  - df: improve filtering of NFS mounts and bind mounts
    (#1197463, #1100026, #1129661)


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-18
changelog:
  - fix xfs build failure in chrooted environment (#1263341)
  - update filesystem lists for stat and tail from latest upstream
    (#1327881, #1280357) 
  - disable id/setgid.sh test(missing chroot feature), fix 
    cp-a-selinux test (#1266500,#1266501)
  - colorls.sh - change detection of interactive shell for ksh
    compatibility (#1321648)
  - fix date --date crash with empty or invalid TZ envvar (#1325786)
  - df -l: do not hang on a dead autofs mount point (#1309247)
  - sort -h: fix functionality of human readable numeric sort for other
    than first field (#1328360)


author: Konstantin Volkov <wolf@virtuozzo.com> 1.0.4
changelog:
  - Move branding to separate file, see #PSBM-58317
   - Create BINDIR during 'make install' if necessary (Denis Silakov
  <dsilakov@gmail.com>)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-3
changelog:
  - Resolves: rhbz#1078361
  - Resolves: rhbz#1136429
  - Resolves: rhbz#1149916

  - [crypto] fix crypto block rounding/padding calculation (rhbz#1136429)
  - merge upstream commit 239e2397820f9fa7ef430ebef0947ec1246eb50f (rhbz#1136429)
  - Adjust MTU for IPv6 correctly (rhbz#1136429)
  - merge upstream commit 03f95ddaa1d223e1e93788a307dc1b36d86b22b5 (rhbz#1136429)
  - init: Don't wait for ipc if corosync doesn't start (rhbz#1149916)
  - merge upstream commit b627844f3d5c5788bd8bb140d8852ba666da16aa (rhbz#1149916)
  - manpage: Fix English (rhbz#1078361)
  - merge upstream commit f77a61ac1795e794244440e1bfe804f02cc5d2b6 (rhbz#1078361)
  - Store configuration values used by totem to cmap (rhbz#1078361)
  - merge upstream commit bb52fc2774ef690d6bb951fe9cc34e5b373caffe (rhbz#1078361)
  - man page: Improve description of token timeout (rhbz#1078361)
  - merge upstream commit 57539d1abc09e5aef322cb9cca5b3e6c496cfae9 (rhbz#1078361)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-4
changelog:
  - Resolves: rhbz#1184154

  - Handle adding and removing UDPU members atomically (rhbz#1184154)
  - merge upstream commit d77cec24d0025d353681762fe707794c621665c7 (rhbz#1184154)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-5
changelog:
  - Resolves: rhbz#1197091
  - Resolves: rhbz#1197671

  - Votequorum: Fix auto_tie_breaker default (rhbz#1197091)
  - merge upstream commit 314a01c98e5f98ff686333966dbe675935b7b6a8 (rhbz#1197091)
  - Don't allow both two_node and auto_tie_breaker in corosync.conf (rhbz#1197671)
  - merge upstream commit c832ade034fa737561ccabefbe417c9d7855d970 (rhbz#1197671)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-6
changelog:
  - Resolves: rhbz#1170347
  - Resolves: rhbz#1225441
  - Resolves: rhbz#1226842
  - Resolves: rhbz#1229194
  - Resolves: rhbz#1234261
  - Resolves: rhbz#1234266
  - Resolves: rhbz#682771
  - Resolves: rhbz#773464

  - config: Make sure user doesn't mix IPv6 and IPv4 (rhbz#773464)
  - merge upstream commit 6c028d4d9c53decaa9469c792ac68fd2a886e7d9 (rhbz#773464)
  - config: Process broadcast option consistently (rhbz#773464)
  - merge upstream commit 70bd35fc06e68a010d780dfa39bd68d4bd2f7da7 (rhbz#773464)
  - config: Ensure mcast address/port differs for rrp (rhbz#773464)
  - merge upstream commit 6449bea835c90045baa23e3e041fed1df2abf070 (rhbz#773464)
  - Reset timer_problem_decrementer on fault (rhbz#1234261)
  - merge upstream commit 8f284b26b3331e1ab252969ba65543e6d9217ab1 (rhbz#1234261)
  - automake: Check minimum automake version (rhbz#773464)
  - merge upstream commit 114b826c67126fe1f690ad976b5217a8487994a4 (rhbz#773464)
  - Set RR priority by default (rhbz#1170347)
  - merge upstream commit 177ef0e5240b4060ff5b14eab6f2eefee3aa777d (rhbz#1170347)
  - Log auto-recovery of ring only once (rhbz#773464)
  - merge upstream commit e0ac861efdc32831366a2b5f5cc1d61e2ffa5504 (rhbz#773464)
  - totem: Ignore duplicated commit tokens in recovery (rhbz#1234261)
  - merge upstream commit 4ee84c51fa73c4ec7cbee922111a140a3aaf75df (rhbz#1234261)
  - corosync_ring_id_store: Use safer permissions (rhbz#1234266)
  - merge upstream commit 252b38ab8a62ff083e83b1d6f514109f7b7cbb42 (rhbz#1234266)
  - totemsrp: Format member list log as unsigned int (rhbz#773464)
  - merge upstream commit 5d9acc5604eb4e8a739cb37a4ad46bcc5ad8deb6 (rhbz#773464)
  - cpg: Add support for messages larger than 1Mb (rhbz#682771)
  - merge upstream commit 8cc8e513633a1a8b12c416e32fb5362fcf4d65dd (rhbz#682771)
  - Really add cpghum (rhbz#682771)
  - merge upstream commit 3842ba6080e00fd9484a2a875d982e149f67bc44 (rhbz#682771)
  - quorum: don't allow quorum_trackstart to be called twice (rhbz#1229194)
  - merge upstream commit 82526d2fe9137e8b604f1bbae6d6e39ba41377f9 (rhbz#1229194)
  - totemconfig: Check for duplicate nodeids (rhbz#773464)
  - merge upstream commit 997074cc3e1ea425ca63e453b7e2181741bdcef0 (rhbz#773464)
  - totem: Log a message if JOIN or LEAVE message is ignored (rhbz#773464)
  - merge upstream commit 53f67a2a7914228f1a406aad61ea6768525e11b0 (rhbz#773464)
  - totemsrp: Improve logging of left/down nodes (rhbz#773464)
  - merge upstream commit ab8942f6260fde93824ed2a18e09e572b59ceb25 (rhbz#773464)
  - votequorum: Fix auto_tie_breaker behaviour in odd-sized clusters (rhbz#1229194)
  - merge upstream commit b9f5c290b7dedd0a677cdfc25db7dd111245a745 (rhbz#1229194)
  - Add note about rrp active beeing unsupported (rhbz#1226842)
  - merge upstream commit 219965f4fe694eaaf2eb4ea05cdc7e35f5146114 (rhbz#1226842)
  - Log: Add logrotate configuration file (rhbz#1225441)
  - merge upstream commit aabbace625b3c68332b4356887378fca81f8f387 (rhbz#1225441)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-7
changelog:
  - Related: rhbz#682771

  - Don't link with libz when not needed (rhbz#682771)
  - merge upstream commit 145f9279d12cf0b981494bbd4dabbc9c3641378e (rhbz#682771)


author: Jan Friesse <jfriesse@redhat.com> 2.3.6-1
changelog:
  - Related: rhbz#1306680
  - Resolves: rhbz#1289169
  - Resolves: rhbz#1306349
  - Resolves: rhbz#1282372
  - Resolves: rhbz#1317573
  - Resolves: rhbz#1336462

  - Rebase to Corosync 2.3.6


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-2
changelog:
  - Resolves: rhbz#1363654

  - Config: Flag config uidgid entries (rhbz#1363654)
  - merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-3
changelog:
  - Related: rhbz#1363654

  - Enhance spec so corosync-qdevice subpackage depends on same version of
    the corosync and corosynclib packages.


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-4
changelog:
  - Resolves: rhbz#1367813

  - Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
  - merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
  - man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
  - merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
  - Qnetd LMS: Fix two partition use case (rhbz#1367813)
  - merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-17
changelog:
  - fix small memory leak in copyin.c (#919454)
  - remove %defattr and install 'cpio' to real %{_bindir}
  - CovScan: add %{?_rawbuild}


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-20
changelog:
  - fix another bogus date in changelog
  - update config.guess/config.sub for aarm64 build (#925189)
  - run autoreconf instead of autoheader


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-3
changelog:
  - fix the python module to work with compressed dictionaries (#972542)
  - fix various dictionary lookup errors (#986400, #986401)
  - make the library reentrant and fix compilation warnings


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-5
changelog:
  - make the simplistic check and the purging of special characters much
    less aggressive (#1003624, #985378)


author: John W. Linville <linville@redhat.com> - 1.1.3_2014.06.13-1
changelog:
  - Update wireless-regdb to version 2014.06.13
  - Add logger commands to setregdomain to make it more communicative


author: John W. Linville <linville@redhat.com> - 1.1.3_2015.04.06-2
changelog:
  - Update wireless-regdb to version 2015.04.06
  - Add patch for regdbdump to display DFS region
  - Make some improvements to setregdomain and its man page


author: Cyrill Gorcunov <gorcunov@virtuozzo.com> 2.10.0.38
changelog:
  - sk-queue: Queue length must be sync (#PSBM-64009)
   - vz7: sk-queue -- Show the creds we're sending (#PSBM-64009)
   - vz7: sk-queue -- Show peers in hex form (#PSBM-64009)


author: Cyrill Gorcunov <gorcunov@virtuozzo.com> 2.10.0.40
changelog:
  - test: Add sk-unix01 test
   - vz7: sk-unix: Add ability to restore sockets with deleted vfs addresses (#PSBM-55992)
   - vz7: sk-unix: Print cwd been restored if @name_dir is present
   - vz7: sk-unix: Don't warn if nothing to unlink
   - vz7: sk-unix: Collect deleted identical addresses in the queues
   - vz7: sk-unix: Make USK_ flags in shift form
   - vz7: sk-unix: Drop empty line at eof
   - vz7: sk-unix: Use add_post_prepare_cb_once helper
   - vz7: sk-unix: Drop empty line
   - vz7: sk-unix: Use generic xptr_pull in dump_one_unix_fd
   - vz7: sk-unix: Use native types in unix_sk_info
   - vz7: sk-unix: Adjust unix_sk_info members
   - vz7: sk-unix: Adjust unix_sk_cinfo members
   - vz7: sk-unix: Make can_dump_unix_sk being boolean
   - vz7: pipes: Use add_post_prepare_cb_once
   - vz7: tty: Use add_post_prepare_cb_once
   - vz7: restore: Add add_post_prepare_cb_once helper
   - unix: a unix name can be a non-null terminated string
   - unix: Do pr_perror() before cleanup
   - files: Sanitize helpers for scattering two-headed files
   - unix: Factor out common parts restoration (v2)
   - unix: Fix tail processing for peer-less sockets
   - unix: don't leak a file descriptor
   - unix: switch into the root mount namespace before cleaning stale sockets
   - Revert "vz7: sk-unix: Restore deleted sockets together with removed dirs"


author: Cyrill Gorcunov <gorcunov@virtuozzo.com> 2.10.0.43
changelog:
  - vz7: sk-unix -- Fix typo in namelen comparision (#PSBM-64715)
   - vz7: sk-queue: Add missing newline into log
   - vz7: restore_sk_queue -- Show how many bytes already sent
   - vz7: test: sk-unix01 -- Fix compilation


author: Cyrill Gorcunov <gorcunov@virtuozzo.com> 2.10.0.44
changelog:
  - vz7: sk-unix -- Adjust default dgram qlen for systemd sake (#PSBM-64628)
   - Revert "vz7: sockets: Separate socket buffer size setting into a helper"
   - Revert "vz7: sk-unix -- Restore qlen before pushing queued data back"
   - Revert "sk-queue: Queue length must be sync"


author: Cyrill Gorcunov <gorcunov@virtuozzo.com> 2.10.0.45
changelog:
  - vz7: test: sk-unix01 -- Make sure the dir with ghost files are empty
   - vz7: sk-unix: Don't wait on socketpair (#PSBM-65051)
   - vz7: sk-unix -- Add info print about slave peers


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-14
changelog:
  - mark the 0hourly and dailyjobs crontabs as config
  - properly handle users for whose getpwnam() returns NULL temporarily
  - log when crond is shutting down


author: Ondrej Kozina <okozina@redhat.com> - 1.6.3-1
changelog:
  - Update to cryptsetup 1.6.3.
  - various fixes related to block devices with 4KiB sectors
  - enable reencryption using specific keyslot (dracut module)
  - fix failure in reading last keyslot from external LUKS header
  - update FIPS POST to be complaint with actual requirements
  - fix hash limiting if parameter is not numeric
  - Resolves: #1028362 #1029032 #1029406 #1030288 #1034388 #1038097


author: Ondrej Kozina <okozina@redhat.com> - 1.6.7-1
changelog:
  - Update to cryptsetup 1.6.7.
  - patch: avoid use of kernel crypto API socket which is known
    to be broken in RHEL7.0 kernel (7.1+ is fine).
  - Resolves: #1206170


author: Tim Waugh <twaugh@redhat.com> - 1:1.6.3-17
changelog:
  - Support for failover without load-balancing (bug #1115219).
  - Fix cupsGetPPD3() so it doesn't give the caller an unreadable file
    (part of fix for CVE-2014-5031, STR #4500).
  - Can no longer reproduce bug #1010580 so removing final-content-type
    patch as it causes issues for some backends (bug #1149245).
  - Start cups.service after network.target (bug #1144780).


author: Tim Waugh <twaugh@redhat.com> - 1:1.6.3-19
changelog:
  - Validate ErrorPolicy in configuration (bug #1196218, STR #4591).
  - Don't use SSLv3 by default (bug #1161172, STR #4476).


author: Tim Waugh <twaugh@redhat.com> - 1:1.6.3-20
changelog:
  - Don't start jobs while cancelling others (bug #1233002, STR #4648).
  - Fix slow resume of jobs after restart (bug #1233006, STR #4646).
  - Fixes for post-install scriptlet (bug #1235035).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-23
changelog:
  - 1257051 - cups-lpd man page incomplete
  - 1275790 - spec file includes triggers with overlapping version intervals
  - 1259770 - permission changed after writing to /etc/cups/subscriptions.conf


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-25
changelog:
  - 1297035 - gnome-settings-daemon leaks file descriptors
  - 1257751 - Email notifications ("lp -m") for printer classes don't work


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-26
changelog:
  - implement 'curl --unix-socket' and CURLOPT_UNIX_SOCKET_PATH (#1263318)
  - improve parsing of URL-encoded user name and password (#1260178)
  - prevent test46 from failing due to expired cookie (#1258834)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-28
changelog:
  - prevent NSS from incorrectly re-using a session (#1269855)
  - call PR_Cleanup() in the upstream test-suite if NSPR is used (#1243324)
  - disable unreliable upstream test-case 2032 (#1241168)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-33
changelog:
  - fix re-using connections with wrong client cert (CVE-2016-5420)
  - fix TLS session resumption client cert bypass (CVE-2016-5419)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-34
changelog:
  - acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
    (required by the fix for CVE-2016-5419)


author: Jakub Jelen <jjelen@redhat.com> 2.1.26-18
changelog:
  - Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
  - Add and document ability to run saslauth as non-root user (#1188065)
  - Support AIX SASL GSSAPI (#1174322)
  - Update client library to be thread safe (#1147659)
  - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
  - Don't use unnecessary quotes around user description (#1082564)
  - Fix confusing message when config file has typo (#1022479)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.1-3
changelog:
  - python3-dbus subpkg (#892474)
  - (main) Provides: python-dbus
  - BR: python-docutils
  - .spec cosmetics
  - skip failed tests on rawhide (#913936)


author: Colin Walters <walters@redhat.com> - 1.1.1-9
changelog:
  - Move modules to libdir to avoid multilib conflicts
  - And comment out test suite, since we were not actually
    failing if it failed, but it trips up an rpmdiff check
    on the output of the suite.
  - Resolves: #1076411


author: Jonathan Dieter <jdieter@lesbg.com> - 3.6-0.13.20130520git
changelog:
  - Clearer error message when applydeltaiso fails (#825428) (Thanks, John!)
  - Add details to applydeltaiso and makedeltaiso man pages (#569499)
  - Add fragiso man page to deltaiso package (#569776)
  - Fix section for applydeltaiso (#548970)
  - Add arch-specific requires (#677060)


author: Jonathan Dieter <jdieter@lesbg.com> - 3.6-1
changelog:
  - Update to 3.6 which, among other things, fixes a bug when applying a deltarpm
    to create a gzip-compressed rpm using full compression


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.164-4
changelog:
  - Use lsblk -s and lsblk -O in lvmdump only if these options are supported.
  - Fix typo in report/columns_as_rows config option name recognition (2.02.99).
  - Do not monitor cache-pool metadata when LV is just being cleared.
  - Add allocation/cache_pool_max_chunks to prevent misuse of cache target.
  - Fix number of stripes shown in lvcreate raid10 message when too many.
  - Give error not segfault in lvconvert --splitmirrors when PV lies outside LV.
  - Avoid PV tags when checking allocation against parallel PVs.


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.164-5
changelog:
  - Use udev db to check for mpath components before running pvscan for lvmetad.
  - Use devices/allow_changes_with_duplicate_pvs=1 by default.


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.165-1
changelog:
  - Support raid scrubbing on cache origin LV.
  - Add lvmraid(7) man page.
  - Use udev db to check for mpath components before running pvscan for lvmetad.
  - Improve explanation of udev fallback in libdevmapper.h.


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.165-2
changelog:
  - Fix possible NULL pointer dereference when checking for monitoring.
  - Add lvmreport(7) man page.
  - Report 0% as dirty (copy%) for cache without any used block.
  - Fix lvm2api reporting of cache data and metadata percent.
  - Restore reporting of metadata usage for cache volumes (2.02.155).


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.165-3
changelog:
  - Fix lvchange --discard|--zero for active thin-pool.
  - Fix lvconvert --repair regression for RAID LVs.
  - Always specify snapshot cow LV for monitoring not internal LV. (2.02.165)
  - Ensure memory allocated internally for --filemap histogram bounds are freed.
  - Fix missing display of last created dmstats file map.
  - Use --alloc normal for mirror logs even if the mimages were stricter.
  - Fix reported origin lv field for cache volumes. (2.02.133)
  - Fix lock-holder device for thin pool with inactive thin volumes.
  - Enforce 4MiB or 25% metadata free space for thin pool operations.
  - Fix lvmetad metadata validation when rescanning VG.


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.166-1
changelog:
  - Disable lvconvert of thin pool to raid while active.
  - Use dm_config_parse_without_dup_node_check() to speedup metadata reading.
  - Fix lvm2-activation-generator to read all LVM2 config sources. (2.02.155)
  - Fix man entry for dmsetup status.
  - Introduce new dm_config_parse_without_dup_node_check().


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.166-1.el7_3.1
changelog:
  - Fix lvconvert to allow repair for cache raid LVs.
  - Fix time when dmeventd is reloaded on package upgrade to start using new code.
  - Fix libdm versioning for dm_tree_node_size_changed symbol.


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.166-1.el7_3.2
changelog:
  - Prevent raid4 creation/conversion on non-supporting kernels
  - Add direct striped -> raid4 conversion
  - Fix raid4 parity image pair position on conversions from striped/raid0*


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-91
changelog:
  - Add 0165-UPBZ-1341748-MSA-2040-conf.patch
    * Add default config for MSA 2040 array
  - Resolves: bz #1341748


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-92
changelog:
  - Add 0166-RHBZ-1323429-dont-allow-new-wwid.patch
    * don't allow path wwid to change while it is in use
  - Add 0167-RHBZ-1335176-fix-show-cmds.patch
    * and new show multipath format wildcard, 'f' to sho number of failures.
      This will hopefully be useful for tracking what happens to multipath
      devices for bz #1335176
  - Resolves: bz #1323429


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-93
changelog:
  - Modify 0135-RHBZ-1299600-path-dev-uevents.patch
    * trigger uevents when adding wwids for existing devices during startup
  - Refresh 0136-RHBZ-1304687-wait-for-map-add.patch
  - Refresh 0150-RHBZ-1253913-fix-startup-msg.patch
  - Add 0168-RHBZ-1347769-shared-lock.patch
    * make multipath lock the path devices with a shared lock
  - Add 0169-UPBZ-1353357-json-output.patch
    * add mulitpathd json output command
  - Resolves: bz #1299600, #1347769, #1353357


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-95
changelog:
  - Add 0170-UPBZ-1352925-fix-typo.patch
  - Add 0171-UPBZ-1356651-allow-zero-size.patch
    * Allow zero-sized paths to be added to a multipath device
  - Add 0172-RHBZ-1350931-no-active-add.patch
    * Allow paths to be added to a new map if no active paths exist. Also
      fixes 1351430
  - Resolves: bz #1350931, #1351430, #1352925, #1356651


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-96
changelog:
  - Modify 0136-RHBZ-1304687-wait-for-map-add.patch
    * change missing_uev_msg_delay to missing_uev_msg_timeout, and make
      multipathd re-enable table loads if the timeout has passed
  - Refresh 0137-RHBZ-1280524-clear-chkr-msg.patch
  - Refresh 0139-RHBZ-1273173-queue-no-daemon-doc.patch
  - Refresh 0150-RHBZ-1253913-fix-startup-msg.patch
  - Refresh 0154-UPBZ-1291406-disable-reinstate.patch
  - Refresh 0155-UPBZ-1300415-PURE-config.patch
  - Refresh 0156-UPBZ-1313324-dont-fail-discovery.patch
  - Refresh 0161-RHBZ-1311659-no-kpartx.patch
  - Refresh 0167-RHBZ-1335176-fix-show-cmds.patch
  - Add 0173-RH-update-man-page.patch
  - Add 0174-RHBZ-1362396-modprobe.patch
    * make starting the multipathd service modprobe dm-multipath in the
      sysvinit scripts
  - Add 0175-RHBZ-1357382-ordering.patch
    * force multipathd.service to start after systemd-udev-trigger.service
  - Add 0176-RHBZ-1363830-fix-rename.patch
    * initialized a variable to make dm_rename not fail randomly
  - Resolves: bz #1304687, #1362396, #1357382, #1363830


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-97
changelog:
  - Add 0177-libmultipath-correctly-initialize-pp-sg_id.patch
    * This and all the following patches add the rbd patch checker
  - Add 0178-libmultipath-add-rbd-discovery.patch
  - Add 0179-multipath-tools-add-checker-callout-to-repair-path.patch
  - Add 0180-multipath-tools-Add-rbd-checker.patch
  - Add 0181-multipath-tools-Add-rbd-to-the-hwtable.patch
  - Add 0182-multipath-tools-check-for-initialized-checker-before.patch
  - Add 0183-multipathd-Don-t-call-repair-on-blacklisted-path.patch
  - Add 0184-rbd-fix-sync-repair-support.patch
  - Add 0185-rbd-check-for-nonshared-clients.patch
  - Add 0186-rbd-check-for-exclusive-lock-enabled.patch
  - Add 0187-rbd-fixup-log-messages.patch
  - Added BuildRequires on librados2-devel
  - Resolves: bz #1348372


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-98
changelog:
  - Modified 0180-multipath-tools-Add-rbd-checker.patch
    * make the rbd path checker only compile if librados2-devel is installed
  - Make librados2-devel only be BuildRequired on x86_64
  - Resolves: bz #1348372


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-99
changelog:
  - Add 0188-RHBZ-1368501-dont-exit.patch
    * make multipathd not exit if it encounters recoverable errors on startup
  - Resolves: bz #1368501


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-99.1
changelog:
  - Add 0189-RHBZ-1395298-rbd-lock-on-read.patch
    * pass lock_on_read when remapping image
  - Resolves: bz #1395298


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.3-1
changelog:
  - Tools now open the metadata device in O_EXCL mode to stop
    running the tools on active metadata.
  - Update to latest upstream release.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.4-1
changelog:
  - Fix cache_check with --clear-needs-check-flag option to
    make sure metadata device is not open already by the tool
    when open with O_EXCL mode is requested.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.5-1
changelog:
  - Support thin_delta's --metadata_snap option without specifying snap location.
  - Update man pages to make it clearer that tools shoulnd't be run on live metadata.
  - Fix bugs in the metadata reference counting for thin_check.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-0.1.rc5
changelog:
  - New thin_ls command.
  - era_invalidate may be run on live metadata if the --metadata-snap
    option is given.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-2
changelog:
  - Improve documentation and messages on output file preallocation
    when using thin_repair and thin_restore.


author: Zdenek Dohnal <zdohnal@redhat.com> - 12:4.2.5-44
changelog:
  - 1269596 - dhclient-script doesn't keep old nameservers
  - 1193586 - DHCP renewal does not update lifetimes if MTU has changed
  - 1306608 - Add ignore-client-uids option to dhcpd
  - 1267489 - dhclient-script does not respect DEFROUTE/GATEWAYDEV


author: Alexander Burluka <aburluka@virtuozzo.com> 0.0.29
changelog:
  - Add container processes to report (#PSBM-58497)
   - Add specific software to dedicated verbose list
   - Implement action logs collecting (#PSBM-58499)


author: Alexander Burluka <aburluka@virtuozzo.com> 0.0.30
changelog:
  - Add container processes to report (#PSBM-58497)
   - Add specific software to dedicated verbose list
   - Implement action logs collecting (#PSBM-58499)
   - Add rsyslog rule for VZ events (#PSBM-58499)


author: Alexander Burluka <aburluka@virtuozzo.com> 0.0.31
changelog:
  - Fix mistype
   - Add container processes to report (#PSBM-58497)
   - Add specific software to dedicated verbose list
   - Implement action logs collecting (#PSBM-58499)
   - Add rsyslog rule for VZ events (#PSBM-58499)


author: Alexander Burluka <aburluka@virtuozzo.com> 0.0.32
changelog:
  - Fix ident (Denis Silakov <dsilakov@virtuozzo.com>)
   - More fixes for Linux guests (Denis Silakov <dsilakov@virtuozzo.com>)
   - Use python3 in libvirt_guests.py if python2 is not available (Denis Silakov
  <dsilakov@virtuozzo.com>)
   - Collect info for Linux guests (Denis Silakov <dsilakov@virtuozzo.com>)


author: Alexander Burluka <aburluka@virtuozzo.com> 0.0.33
changelog:
  - Remove useless code
   - Fix sending routine (#PSBM-63127 #PSBM-62662)
   - No need in no-reload (Denis Silakov <dsilakov@virtuozzo.com>)
   - Enable and start service during the first installation (#PSBM-63314) (Denis
  Silakov <dsilakov@virtuozzo.com>)


author: Alexander Burluka <aburluka@virtuozzo.com> 0.0.34
changelog:
  - Collect install-time Kernel command line from anaconda logs (#PSBM-64448)
   - Fix bug with .sent file from future (#PSBM-64481)


author: Petr Oros <poros@redhat.com> - 1:2.12-6
changelog:
  - Add preliminary support for SMBIOS 64-bit entry point (Mark Salter)
  - Add support for DDR4 memmory


author: Petr Oros <poros@redhat.com> - 1:2.12-9
changelog:
  - dmioem: Decode Acer-specific DMI type 170
  - dmioem: Decode HP-specific DMI types 212 and 219
  - dmioem: Decode HP-specific DMI type 233, and refactored 209 and 221 to use a common function
  - Resolves: #1232501


author: Nils Philippsen <nils@redhat.com> - 2.72-3
changelog:
  - don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead
  - package is dual-licensed GPL v2 or v3
  - drop %triggerun, we're not supposed to automatically migrate from SysV to
    systemd anyway


author: Harald Hoyer <harald@redhat.com> - 033-449
changelog:
  - include /etc/lvm/lvm_<host_tag>.conf
  Resolves: rhbz#1328778
  - cleanup watchdog module
  Resolves: rhbz#1319986
  - make reboot/halt/poweroff work
  Resolves: rhbz#1324454
  - include nfs module, if host_fs_types contains nfs
    copy filesystems to host_fs_types
  Resolves: rhbz#1349253
  - add kernel command line argument rd.emergency to specify a
    default action rd.emergency=[reboot|poweroff|halt]
  Resolves: rhbz#1359144
  - deduplicate /etc/resolv.conf
  Resolves: rhbz#1332418


author: Harald Hoyer <harald@redhat.com> - 033-457
changelog:
  - add --help documentation for --no-hostonly-i18n and --hostonly-i18n options
  Resolves: rhbz#1266448
  - mention rd.shell=0 for rd.emergency
  Resolves: rhbz#1359144
  - put IPv6 IP in brackets for IBFT
  Resolves: rhbz#1322592
  - install symlinked ca-bundle.crt for curl and ssl
  Resolves: rhbz#1341280


author: Harald Hoyer <harald@redhat.com> - 033-461
changelog:
  - be more liberal to multiple ip= lines and ip=dhcp
  Resolves: rhbz#1304069
  - don't display error for hba.conf
  Resolves: rhbz#1369342


author: Josh Stone <jistone@redhat.com> 8.1.1-1
changelog:
  - Update to release 8.1.1.
  - Drop the backported dyninst-test2_4-kill-init.patch.
  - Drop the now-upstreamed dyninst-unused_vars.patch.
  - Update other patches for context.
  - Patch the installed symlinks to be relative, not $(DEST) filled.


author: Josh Stone <jistone@redhat.com> 8.1.2-6
changelog:
  - rhbz1063447: squash testsuite g++ optimization
  - rhbz1030969: backported additional patch to silence new warnings


author: Eric Sandeen <sandeen@redhat.com> 1.42.9-5
changelog:
  - Various manpage updates for chattr and mount (#1053885)
  - Fix resize2fs -P hang on corrupted filesystems (#1104612)


author: Eric Sandeen <sandeen@redhat.com> 1.42.9-8
changelog:
  - e4defrag: backwards-allocated files should be defragmented (#1176785)
  - tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
  - mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
  - libext2fs: prevent buffer overflows (#1293677)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-9
changelog:
  - fixed missing systemd unit file (RHBZ#818953)
    merged fedora patches from Tom Callaway
  - fixed NETWORK test in the init script (RHBZ#1026784)
  - fixed needed rpmdiff failures (RHBZ#883988)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-14
changelog:
  - Fixed persmissions of ebtables.service (RHBZ#1288586)
  - Added upstream patch to add noflush option to ebtables-restore (RHBZ#1334271)


author: Peter Jones <pjones@redhat.com> - 0.8.0-4
changelog:
  - Fix buffer overflow when remove_from_boot_order removes nothing (lennysz)
    Resolves: rhbz#1168019


author: Peter Jones <pjones@redhat.com> - 0.8.0-6
changelog:
  - Handle -b and -o parsing in a way that matches the documentation.
    Resolves: rhbz#1174964
  - Use the right GUID when setting boot entries active/inactive
    Resolves: rhbz#1221771


author: Peter Jones <pjones@redhat.com> - 0.6-1
changelog:
  - Update package to 0.6
  - fixes to documentation from lersek
  - more validation of uefi guids
  - use .xz for archives


author: Peter Jones <pjones@redhat.com> - 0.10-1
changelog:
  - Update package to 0.10.
  - Fixes a build error due to different cflags in the builders vs updstream
    makefile.


author: Mark Wielaard <mjw@redhat.com> - 0.162-1
changelog:
  - Update to 0.162 (#1224169, #1223462, #1207799)
  - Include elfutils/known-dwarf.h
  - Drop BuildRequires glibc-headers


author: Ivan Vecera <ivecera@redhat.com> - 2:4.5-3
changelog:
  - Added support for new ETHTOOL_xLINKSETTINGS API
  - Added support for diagnostics information for QSFP Plus/QSFP28 modules
  - Added support for 25G/50G/100G supported and advertised speed modes


author: Petr Šabata <contyk@redhat.com> - 1.0.29-5
changelog:
  - Don't build on s390x again (#1073060)
  - Drop bnx2fc from SUPPORTED_DRIVERS on s390x, for future (#1056371)
  - Update fcoemon(8) with more systemd changes (#1049162)


author: Chris Leech <cleech@redhat.com> - 1.0.30-4.git91c0c8c
changelog:
  - 1039779 replace README that contained mostly build instructions with
    README.redhat containing better distro-specific information


author: Chris Leech <cleech@redhat.com> - 1.0.31-1.git5dfd3e4
changelog:
  - 1274530 rebase to upstream 1.0.31+
  - no longer requires libhbaapi/libhbalinux
  - no longer attempts to connect to lldpad if DC_REQUIRED is configured off
    for all interfaces


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-44
changelog:
  - fence_mpath: update info to say unique key per node instead of per
    node/device
    Resolves: rhbz#1280151


author: Ryan McCabe <rmccabe@redhat.com> - 0.3.2-3
changelog:
  - fence-virt: Fix broken restrictions on the port ranges
    Resolves: rhbz#1214301
  - client: Fix "delay" parameter checking
    Resolves: rhbz#1204877
  - Remove delay from the status, monitor and list
    Resolves: rhbz#1204877


author: Ryan McCabe <rmccabe@redhat.com> - 0.3.2-4
changelog:
  - fence-virt: Enable the TCP listener plugin
    Resolves: rhbz#1334170
  - Allow fence_virtd to run as non-root
    Fix use of undefined define
    Resolves: rhbz#1334170


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.24-3
changelog:
  - Fix fetchmail loses last line of message if the non-default "mimedecode" option
    is enabled and if that line is not properly terminated
    Resolves: #955814


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-27
changelog:
  - fix CVE-2014-0207 - cdf_read_short_sector insufficient boundary check
  - fix CVE-2014-0237 - cdf_unpack_summary_info() excessive looping DoS
  - fix CVE-2014-0238 - CDF property info parsing nelements infinite loop
  - fix CVE-2014-3478 - mconvert incorrect handling of truncated pascal string
  - fix CVE-2014-3479 - fix extensive backtracking in regular expression
  - fix CVE-2014-3480 - cdf_count_chain insufficient boundary check
  - fix CVE-2014-3487 - cdf_read_property_info insufficient boundary check
  - fix CVE-2014-3538 - unrestricted regular expression matching
  - fix CVE-2014-3587 - fix cdf_read_property_info
  - fix CVE-2014-3710 - out-of-bounds read in elf note headers
  - fix CVE-2014-8116 - multiple denial of service issues (resource consumption)
  - fix CVE-2014-8117 - denial of service issue (resource consumption)
  - fix CVE-2014-9652 - out of bounds read in mconvert()
  - fix CVE-2014-9653 - malformed elf file causes access to uninitialized memory


author: Jan Kaluza <jkaluza@redhat.com> 5.11-32
changelog:
  - fix #1278737 - add support for Java 1.7 and 1.8
  - fix #1281723 - show full executable name for core
  - fix #1271636 - add support for detection of Python 2.7 byte-compiled files
  - fix #1278768 - comment out too-sensitive Pascal magic


author: Kamil Dudka <kdudka@redhat.com> - 1:4.5.10-7
changelog:
  - fix specfile issues reported by the fedora-review script
  - do not use the AM_C_PROTOTYPES macro (removed in Automake 1.12)
  - do not require gets() to be declared


author: Tomas Hozza <thozza@redhat.com> - 0.17-49
changelog:
  - Compile finger with Full RELRO
  - Explicitly use gcc
  - Use only RPM_OPT_FLAGS and RPM_LD_FLAGS
  - Add systemd as BuildRequires because of unitdir macro


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-1
changelog:
  - Rebase to 0.4.3.2
  - Fix regression with unavailable optional commands
  - All missing backend messages should be warnings
  - Individual calls for missing restore commands
  - Only one authenticate call for add and remove options and also sequences
  - RH-Satellite-6 service now upstream
  - Conflict for selinux-policy needed to be updated to newer release
    (RHBZ#1304723)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-2
changelog:
  - Updated conflict for selinux-policy (RHBZ#1304723)
  - Fixed exit codes in command line clients (RHBZ#1357050)
  - Fixed traceback in firewall-cmd without args (RHBZ#1357063)
  - Fixed source docs in man pages and help output (RHBZ#1357888)
  - Fixed rebuild of changed man pages (RHBZ#1360362)
  - Use stderr for errors and warnings in command line tools (RHBZ#1360894)
  - Fixed lockdown not denying invalid commands (RHBZ#1360871)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-3
changelog:
  - Fix test suite for command change (RHBZ#1360871)
  - Fix test suite with stderr usage (RHBZ#1360894)
  - Rebuild for wrong docdir without version (RHBZ#1057327#c7)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-4
changelog:
  - Fixed firewall-config gettext usage (RHBZ#1361612)
  - Fixed ifcfg file reader and writer (RHBZ#1362171)
  - Fixed loading ipset entries from file in commands (RHBZ#1365198)
  - Added conflicts to old main package to sub packages (RHBZ#1361669)
  - Do not show settings of zones etc. without authentication (RHBZ#1357098)
  - Fixed CVE-2016-5410 (RHBZ#1359296)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-5
changelog:
  - Print errors and warnings to stderr additional patch (RHBZ#1360894)
  - Fixed trace back in firewallctl (RHBZ#1367155)
  - Fix client crash if systembus can not be aquired (RHBZ#1367038)
  - Make ALREADY_ENABLED a warning (RHBZ#1366654)
  - Added conflict to old squid package providing the squid.service file
    (RHBZ#1366308)
  - Fixed firewall-cmd help typo (RHBZ#1367171)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-6
changelog:
  - Do not use exit code 254 for {ALREADY,NOT}_ENABLED sequences (RHBZ#1366654)
  - Fail with NOT_AUTHORIZED if authorization fails (RHBZ#1368549)
  - firewall-cmd: Fix get and set description for permanent zones (RHBZ#1368949)
  - Fix loading of service helpers in active zones (RHBZ#1371116)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-7
changelog:
  - Tolerate ipv6_rpfilter fail (RHBZ#1285769)
  - Fix set_rules to copy the rule before extracting the table (RHBZ#1373260)
  - Translation update (RHBZ#1273296)
  - Conflict with NetworkManager < 1:1.4.0-3.el7 (RHBZ#1366288)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2.1-11.20121204gita43f56
changelog:
  - update to 20121204gita43f56
  - create libs subpackage
  - split documentation to base and devel subpackages
  - drop defattr macros
  - add GFDL to License tag


author: Miroslav Lichvar <mlichvar@redhat.com> 1.3.0-5
changelog:
  - fix buffer overflow when processing ID3v2 metadata (CVE-2014-8962)
  - fix buffer overflow with invalid blocksize (CVE-2014-9028)


author: Akira TAGOH <tagoh@redhat.com> - 2.10.94-1
changelog:
  - New upstream release.
  - migrate the configuration for XDG Base Directory spec automatically (#882267)


author: Akira TAGOH <tagoh@redhat.com> - 2.10.95-5
changelog:
  - Fix the race condition issue on updating cache (#1011510)
  - Fix crash issue in FcFontSort()
  - Fix an issue not copying all values from the font.


author: Marek Kasik <mkasik@redhat.com> - 2.4.11-3
changelog:
  - Fix emboldening:
      - split out MSB function
      - fix integer overflows
      - fix broken emboldening at small sizes
  - Resolves: #891457


author: Marek Kasik <mkasik@redhat.com> - 2.4.11-11
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197740


author: Jan Synáček <jsynacek@redhat.com> - 0.17-58
changelog:
  - Extend the input line buffer and the argument storage buffer
  - Prettify spec some more and remove trailing space


author: Paul Howarth <paul@city-fan.org> - 1.5.0-5
changelog:
  - Make GeoIP.dat -> GeoIP-initial.dat symlink in %install, not %post,
    and don't %ghost it
  - Run geoipupdate silently in %post and cron job
  - Create empty database files for %ghost to work with old rpm versions
  - Don't try to use noarch subpackages on old rpm versions
  - Update %description to mention database updates
  - Drop outdated README.Fedora


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-7
changelog:
  - Don't download the database in %post (#1029807)
  - Don't download GeoLiteASNum as it's no longer provided.


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-10
changelog:
  - Added base IPv6 database to GeoIP package
  - Added GeoIP-data subpackage with all other databases (#1201857)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 4.0.0-1
changelog:
  - Remove gawk-3.1.8-syntax.patch, gawk-3.1.8-double-free-wstptr.patch
  - Update to upstream 4.0.0 (#717885)


author: Martin Bříza <mbriza@redhat.com> - 4.0.1-1
changelog:
  - Update to upstream 4.0.1 (#808005)
  - Corrected Source0 link to .tar.gz extension as not all releases are available as .tar.bz2
  - Resolves #724817 - gawk-4.0.0 regression in '\' escape handling in gsub()
  - Resolves #820550 - gawk: getline in BEGIN skips 2 lines


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.6.1-85.el7
changelog:
  - Add --with buildisa, remove %{?_isa} from BuildRequires (RH BZ 1286777):
    https://github.com/msimacek/koschei/issues/54


author: Honza Horak <hhorak@redhat.com> - 1.9.1-1
changelog:
  - Updated to new upstream release 1.9.1
  - Dropped -filestruct, -ndbmlock and -fhs patches, they are not 
    needed anymore and GDBM_NOLOCK is used always
  - Run testsuite


author: Honza Horak <hhorak@redhat.com> - 1.10-1
changelog:
  - Updated to new upstream release 1.10
  - Dropped -shortread patch, which has been already applied by upstream
  - Disable large file support, that is enabled by default since 1.9, 
    but not compatible with db files created using gdbm-1.8.3 and lower
  - License change to GPLv3+
  - Add doc files THANKS AUTHORS NOTE-WARNING
  - Changed text in NOTE-WARNING to correspond with build settings


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-18
changelog:
  - ported from cdda-paranoia to libcdio-paranoia, modified paranoia-cdda.patch
  - fixed bogus date in changelog


author: Andrew Price <anprice@redhat.com> - 3.1.7-6
changelog:
  - fsck.gfs2: fix broken i_goal values in inodes
  - gfs2_convert: use correct i_goal values instead of zeros for inodes
  - tests: test for incorrect inode i_goal values
  - fsck.gfs2: Reprocess nodes if anything changed - addendum 1 of 2
  - fsck.gfs2: addendum to fix broken i_goal values in inodes - addendum 2 of 2
    Resolves: rhbz#1178604


author: Andrew Price <anprice@redhat.com> - 3.1.8-1
changelog:
  - Rebase to new upstream version 3.1.8
    Resolves: rhbz#1184482
    Resolves: rhbz#1153316
    Resolves: rhbz#1154726
    Resolves: rhbz#1162216
    Resolves: rhbz#1165285
    Resolves: rhbz#1186515
    Resolves: rhbz#1186847
    Resolves: rhbz#1194446
    Resolves: rhbz#1195394


author: Andrew Price <anprice@redhat.com> - 3.1.8-4
changelog:
  - fsck.gfs2: Change duptree structure to have generic flags
  - fsck.gfs2: Detect, fix and clone duplicate block refs within a dinode
    Resolves: rhbz#1236669


author: Andrew Price <anprice@redhat.com> - 3.1.8-5
changelog:
  - gfs2-utils: Fix hang on withdraw (4 patches)
  - Include new withdraw helper scripts in files section
    Resolves: rhbz#1225634


author: Andrew Price <anprice@redhat.com> - 3.1.9-1
changelog:
  - Rebase to new upstream release 3.1.9
    Resolves: rhbz#1271674
    Resolves: rhbz#1162819
    Resolves: rhbz#1196321
    Resolves: rhbz#1202814
    Resolves: rhbz#1251036
    Resolves: rhbz#1257625
    Resolves: rhbz#1268045
    Resolves: rhbz#1283866
    Resolves: rhbz#1332728


author: Andrew Price <anprice@redhat.com> - 3.1.9-2
changelog:
  - fsck.gfs2: "undo" functions can stop too early on duplicates
    Resolves: rhbz#1348703
  - fsck.gfs2: link count checking wrong inode's formal inode number
    Resolves: rhbz#1350597
  - fsck.gfs2: check formal inode number when links go from 1 to 2
    Resolves: rhbz#1350600


author: Tim Waugh <twaugh@redhat.com> 9.07-18
changelog:
  - Applied patch from upstream to fix memory handling issue that could
    lead to crashes (bug #1105519).


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-19
changelog:
  - Import LCMS2 2.6 rebase changes into ghostscript (bug #959351)
  - Fix hanging of ghostscript when converting PDF -> PNG (bug #1302121)
  - Do not SIGSEGV after icc_profile error, report error instead (bug #1243784)
  - Fix the color printing on HP InkJet printers (bug #1225858)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-20.el7_3.1
changelog:
  - Added security fixes for:
    - CVE-2013-5653 (bug #1380327)
    - CVE-2016-7977 (bug #1380415)
    - CVE-2016-7978 (bug #1382300)
    - CVE-2016-7979 (bug #1382305)
    - CVE-2016-8602 (bug #1383940)


author: Colin Walters <walters@redhat.com> - 2.36.3-5
changelog:
  - Backport patch to fix gnome-shell lockups
    Resolves: #1030601
  - Backport patch to fix vmtoolsd hangs
    Resolves: #1063789


author: Richard Hughes <rhughes@redhat.com> - 2.42.2-2
changelog:
  - Update to 2.42.2
  - [walters] Switch to autosetup -Sgit for less painful patch management
  - [walters] Actually forward port patches
  - Resolves: #1203755


author: Colin Walters <walters@redhat.com> - 2.46.2-3
changelog:
  - Rebase to 2.46.2
  - Backport two additional notable+applicable patches from upstream
    branch
  - Resolves: #1305515


author: Carlos O'Donell <carlos@redhat.com> - 2.17-157.1
changelog:
  - Do not set initgroups in default nsswitch.conf (#1388638)
  - nss_db: Request larger buffers for long group entries (#1388637)
  - nss_db: Fix get*ent crash without preceding set*ent (#1388635)
  - nss_db: Fix endless loop in services database processing (#1388639)


author: Milind Changire <mchangir@redhat.com> - 3.7.9-4
changelog:
  - fixes bugs bz#1097555 bz#1322306 bz#1327195 bz#1324820 bz#1306194 
    bz#1298724 bz#1299737 bz#1330385 bz#1258875 bz#1283957 bz#1311362 bz#1321550 
    bz#1332199 bz#1329514 bz#1224180 bz#1313370 bz#1328194 bz#1323424 bz#1332957 
    bz#1294755 bz#1328411 bz#1327751 bz#1332077 bz#1328721 bz#1330365


author: Milind Changire <mchangir@redhat.com> - 3.7.9-5
changelog:
  - fixes bugs bz#1261838 bz#1324820 bz#1325760 bz#1328194 bz#1331260 
    bz#1332949 bz#1333668 bz#1334234 bz#1334668 bz#1334985 bz#1335082 bz#1335114 
    bz#1335364 bz#1335437 bz#1335505 bz#1335826


author: Milind Changire <mchangir@redhat.com> - 3.7.9-7
changelog:
  - fixes bugs bz#1286582 bz#1330997 bz#1334092 bz#1337384 bz#1337649 
    bz#1339090 bz#1339163 bz#1339208 bz#1340085 bz#1340383


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.22-4
changelog:
  - allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
  - do not abort when missing hash algorithm in FIPS mode (#1078962)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9
changelog:
  - Amended fix for FIPS enforcement issue (#1163848)
  - Fixed issue with applications that close all file descriptors (#1165047)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11
changelog:
  - Applied fix for urandom FD in FIPS140 mode (#1165047)
  - Applied fix for FIPS140-2 related regression (#1110696)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13
changelog:
  - Corrected reseed and respect of max_number_of_bits_per_request in 
    FIPS140-2 mode. Also enhanced the initial tests. (#1228199)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1
changelog:
  - Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
  - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
  - When writing certificates to smart cards write the CKA_ISSUER and
    CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
  - Use the shared system certificate store (#1110750)
  - Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
    CVE-2015-7575)
  - Allow hashing data over 2^32 bytes (#1306953)
  - Ensure written PKCS#11 public keys are not marked as private (#1339453)
  - Ensure secure_getenv() is called on all uses of environment variables
    (#1344591).
  - Fix issues related to PKCS #11 private key listing on certain HSMs
    (#1351389)


author: Miroslav Rezanina <mrezanin@redhat.com> 2.4-2
changelog:
  - gperf-allow-customizing-trace-filename.patch [bz#1232702]
  - Resolves: bz#1232702
    (gperftools: tcmalloc debug version uses hard-coded path /tmp/google.alloc)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.4-8.el7
changelog:
  - gp-Use-initial-exec-tls-for-libunwind-s-recursion-flag.patch [bz#1339710]
  - Resolves: bz#1339710
    (initalization of 'recursive' tls variable in libunwind stack capturer occasionally triggers deadlock in ceph)


author: Simon Lukasik <slukasik@redhat.com> - 1.3.0-6
changelog:
  - Resolve multilib conflict of gpgme-config (#341351)
  - Resolve multilib conflict of gpgme.h (#341351)


author: Tomas Mraz <tmraz@redhat.com> - 1.3.2-1
changelog:
  - new upstream version
  - re-enable gpg tests (original patch by John Morris <john@zultron.com>)
  - quiet configure warning 'could not find g13'
  - there is no libgpgme-pth anymore


author: Jaromir Capik <jcapik@redhat.com> - 1.20.6-29
changelog:
  - Removing OPTFLAGS
  - Introducing full RELRO
  - Missing header dir in Makefile.in / depend
  - Fixing UsrMove for i686 (mv -f says 'directory not empty')


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.14-4
changelog:
  - Added group-separator, no-group-separator options decription
  - Aligned output of built-in help
  - Defuzzified gnulib-tests-rm-f patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-2
changelog:
  - Fixed invalid UTF-8 byte sequence error in PCRE mode
    (by pcre-backported-fixes patch)
    Resolves: rhbz#1217080
  - Fixed buffer overrun for grep -F
    Resolves: CVE-2015-1345
  - Fixed \w and \W behaviour in multibyte locales
    Resolves: rhbz#1159012
  - Documented --fixed-regexp option
    Resolves: rhbz#1103259
  - Updated pcre buildrequires to require pcre-devel >= 7.8-7
    Related: rhbz#1217080


author: Jan Vcelak <jvcelak@redhat.com> 1.22.1-1
changelog:
  - new upstream release (#890973)
    + various fixes in manual pages
    + various fixes and improvements in macros
    + new gropdf driver for generating PDF files
  - fix: backslash-period escape does not work (#682857)
  - fix: groff ftbfs - patch does not apply (#885225)


author: Peter Jones <pjones@redhat.com> - 2.02-0.36
changelog:
  - Better support for EFI network booting with dhcpv6.
    Resolves: rhbz#1154226
  - Back out a duplicate change resulting in some EFI network firmware drivers
    not working properly.
    Related: rhbz#1273974
    Related: rhbz#1277599
    Related: rhbz#1298765


author: rmarshall@redhat.com - 2.02-0.37
changelog:
  - Update fix for rhbz#1212114 to reflect the move to handling this case
    in anaconda.
    Related: rhbz#1315468
    Resolves: rhbz#1261926
  - Add grub2-get-kernel-settings to allow grub2-mkconfig to take grubby
    configuration changes into account.
    Resolves: rhbz#1226325


author: rmarshall@redhat.com - 2.02-0.39
changelog:
  - Fix all issues discovered during coverity scan. 
    Related: rhbz#1154226
  - Fix a couple compiler and CLANG issues discovered during coverity scan.
    Related: rhbz#1154226
  - Fix the last few CLANG issues and a deadcode issue discovered by the
    coverity scan.
    Related: rhbz#1154226


author: Peter Jones <pjones@redhat.com>
changelog:
  - Remove our patch to force a paricular uefi network interface
    Related: rhbz#1273974
    Related: rhbz#1277599
    Related: rhbz#1298765
  - Update some more coverity issues
    Related: rhbz#1226325
    Related: rhbz#1154226


author: Peter Jones <pjones@redhat.com> - 2.02-0.44
changelog:
  - Work around tftp servers that don't work with multiple consecutive slashes in
    file paths.
    Resolves: rhbz#1217243


author: Peter Jones <pjones@redhat.com> - 8.28-12
changelog:
  - Do a better job recognizing "title" and "default" position and formatting
    on extlinux
    Resolves: rhbz#1200045
  - Do a better job recognizing stanza names and defaults on grub1 and grub2
    Related: rhbz#1142545
  - (reordered some patches to match the ordering in master)
    Related: rhbz#1200045
    Related: rhbz#1142545
  - Add test suite coverage and minor fixes related to zipl and
    --default-{kernel,index,title}
    Related: rhbz#1184014
  - Use systemd debug options that work on RHEL 7
    Resolves: rhbz#1212128


author: Peter Jones <pjones@redhat.com> - 8.28-14
changelog:
  - Handle "set variable" commands separately from other parsing in grubby's
    GetNextLine()
    Resolves: rhbz#1152550


author: Peter Jones <pjones@redhat.com> - 8.28-17
changelog:
  - Fix the ordering of creating the debug entries, so they don't get picked
    when we're choosing kernel command line defaults on upgrades.
    Related: rhbz#1212128


author: rmarshall@redhat.com - 8.28-18
changelog:
  - Patched new-kernel-pkg so that kernel installations when MAKEDEBUG is
    set would put the debugging entries after the non-debugging entries.
    Resolves: #1285601
  - Re-numbered the last set of patches to go with the flow. No actual
    changes to the patches; just a git mv to rename.
  - Re-organized and updated the grubby man page contents to include some
    features that were not documented as well as correct typos and
    re-write some entries for better clarity.
    Resolves: #1232168


author: rmarshall@redhat.com - 8.28-21
changelog:
  - Fixes --info flag on s390/s390x.
    Related: rhbz#1420749
  - Fixes --set-default-index on s390/s390x.
    Related: rhbz#1420749
  - Allows prune_debug to run on s390/s390x.
    Resolves: rhbz#1420749


author: Roland Mainz <rmainz@redhat.com> 0.4.1-6
changelog:
  - Remove extra whitespaces from #1208640/#1194299 patches
  - spec file cleanup
  related: #1208640 #1194299


author: Michal Luscon <mluscon@redhat.com> 1.5-1
changelog:
  - New upstream version
  - Removed gzip-1.3.9-stderr.patch
  - Removed gzip-1.3.10-zgreppipe.patch
  - Removed gzip-1.3.13-noemptysuffix.patch


author: Petr Stodulka <pstodulk@redhat.com> - 1.5-8
changelog:
  - Gzip overwrite existing files when user choose "no" on yes/no question.
    It's due to wrong dupicit declaration of yesno() function in gzip.h
    which is compiled wrong with -O2 option.
    Resolves: rhbz#1201689


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-11
changelog:
  - don't use mmap(2) to avoid failures on i386 with 1GB files and larger (#672917)
  - fix package URL (#676962)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-12
changelog:
  - fix possible buffer overflows, integer overflows (CVE-2011-3630 CVE-2011-3631 CVE-2011-3632)
  - update man page


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-14
changelog:
  - do not allow to hardlink files across filesystems by default (#786719)
    (use -f option to override)


author: Michal Luscon <mluscon@redhat.com> 0.5.4-1
changelog:
  - setup tito to bump version in VERSION.cmake (Michal Luscon)
  - initialize to use tito (Michal Luscon)
  - prepare repo for tito build system (Michal Luscon)
  - New version 0.5.4 (Michal Luscon)
  - goal: implement methods for optional installation (RhBug:1167881) (Michal Luscon)
  - setup tito to bump version in VERSION.cmake (Michal Luscon)
  - initialize to use tito (Michal Luscon)
  - prepare repo for tito build system (Michal Luscon)
  - New version 0.5.4 (Michal Luscon)
  - goal: implement methods for optional installation (RhBug:1167881) (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 0.5.5-1
changelog:
  - get rid of yum references (Jan Silhan)
  - sack: force recomputing excludes (Jan Silhan)
  - doc: cosmetic: made Sack headline more readable (Jan Silhan)
  - doc: sack: warning about using excludes, includes, disabling and enabling
    repos (Jan Silhan)
  - cosmetic: removed commented code (Jan Silhan)
  - sack: calls reinitiate provides after changing considered map (RhBug:1099342)
    (Jan Silhan)
  - fixed memleak from d8f2ca7 (Jan Silhan)
  - doc: add to CMDLINE_REPO_NAME and SYSTEM_REPO_NAME the Python API reference
    manual. (Radek Holy)
  - doc: add Repo to the Python API reference manual. (Radek Holy)
  - updated load_test_repo() to be able to load non-standard system repo (Michael
    Mraka)
  - python tests for goal.run(verify=True) (Michael Mraka)
  - test for HY_VERIFY flag (Michael Mraka)
  - introduced verify option for goal.run() (Michael Mraka)
  - AUTHORS: fixed name (Michael Mraka)
  - AUTHORS: added 3 Michaels (Jan Silhan)
  - Build for x86_64, correction for C++ (Michal Ruprich)


author: Michal Luscon <mluscon@redhat.com> 0.5.7-1
changelog:
  - spec: add a %{snapshot} macro for easier snapshot building (Radek Holy)
  - doc: sack: deep copy added to warning section (Jan Silhan)
  - doc: sack: warning about multiple Sack usage (Jan Silhan)
  - doc: sack: len(sack) -> method __len__ (Jan Silhan)
  - Package.files returns list of Unicode objects (Jan Silhan)


author: Jan Silhan <jsilhan@redhat.com> 0.5.8-1
changelog:
  - added implicit-function-declaration compile flag (Jan Silhan)
  - subject: Fix compiler warning introduced by previous commit (Colin Walters)
  - python: Verify that nosetest actually ran any tests (Colin Walters)
  - AUTHORS: updated (Jan Silhan)
  - subject: Remove internal header includes from public header (Colin Walters)
  - maintain result map in query (RhBug:1049205) (Jan Silhan)
  - AUTHORS: updated (Jan Silhan)
  - package: Don't assume the same pool in hy_package_cmp() (Matthew Barnes)


author: Jan Silhan <jsilhan@redhat.com> 0.5.8-2
changelog:
  - tito: change vesiontagger to releasetagger (Jan Silhan)
  - don't require python3 in rhel (Jan Silhan)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-18
changelog:
  - adjust buildroot location (guidelines)
  - disable static libraries (guidelines)
  - tweak default payload attributes (guidelines)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-19
changelog:
  - fix the release number noted for the previous changelog entry (#225884)
  - remove unapplied "classes" patch (#225884)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.2.1-1
changelog:
  - update to 3.2.1
    - merged all patches or equivalents
    - re-merged hesinfo, so we obsolete it now
    - adds a pkgconfig configuration file for libhesiod
  - correct inconsistent changelog dates, assuming day-of-week is correct
  - add build requirement on libidn-devel
  - package the license


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.13-2
changelog:
  - Bring back config patch to fix -debuginfo, it hasn't been upstreamed yet.
  - Drop empty TODO from docs.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.8-1
changelog:
  - New upstream version 1.3.8.
  - Fixes handling of keys which use ri-records, for both reading and
    writing (RHBZ#717583, RHBZ#987463).
  - Remove upstream patch.
  - Rebase dirs patch against new upstream sources.
  - Rebase ruby patch against new upstream sources.
  - Modernize the RPM spec file.
  - Fix .gitignore.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7
changelog:
  - Fix: "Argument list too long" when using virt-v2v on Windows guest
    with French copy of Citrix installed
    related: rhbz#1145056


author: Jiri Popelka <jpopelka@redhat.com> - 3.11-3
changelog:
  - remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
  - remove outdated de & pt man pages
  - /usr move: use _bindir macro


author: Till Maas <opensource@till.name> - 1.0.3-5
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-41
changelog:
  - mod_cache: merge r->err_headers_out into r->headers when the response
    is cached for the first time (#1264989)
  - mod_ssl: Do not send SSL warning when SNI hostname is not found as per
    RFC 6066 (#1298148)
  - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038)
  - fix apache user creation when apache group already exists (#1299889)
  - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757)
  - mod_proxy: fix slow response time for reponses with error status code
    when using ProxyErrorOverride (#1283653)
  - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149)
  - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495)
  - rotatelogs: improve support for localtime (#1244545)
  - ab: fix read failure when targeting SSL server (#1255331)
  - mod_log_debug: fix LogMessage example in documentation (#1279465)
  - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime
    of DB lookup entries independently of the selected DB engine (#1287844)
  - mod_ssl: fix hardware crypto support with custom DH parms (#1291865)
  - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)


author: CentOS Sources <bugs@centos.org> - 2.4.6-45.el7.centos
changelog:
  - Remove index.html, add centos-noindex.tar.gz
  - change vstring
  - change symlink for poweredby.png
  - update welcome.conf with proper aliases


author: Caolán McNamara <caolanm@redhat.com> - 1.3.2-6
changelog:
  - Resolves: rhbz#573516 have hunspell require hunspell-en to ensure
    at least one dictionary exists


author: Michal Minar <miminar@redhat.com> 0.252-8.1
changelog:
  - Updated pci, usb and vendor ids.
  - Resolves: rhbz#1236458
  - Resolves: rhbz#1256004
  - Resolves: rhbz#1266217
  - Resolves: rhbz#1271797


author: Michal Minar <miminar@redhat.com> 0.252-8.2
changelog:
  - Updated pci, usb and vendor ids.
  - Resolves: rhbz#1292382
  - Resolves: rhbz#1291614
  - Resolves: rhbz#1324198


author: Martin Gieseking <martin.gieseking@uos.de> 0.30.0-1
changelog:
  - updated to release 0.30.0
  - dropped patch as it has been applied upstream
  - removed old buildroot stuff


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.3-1
changelog:
  - Rebase to upstream version 0.31.3.
  - This version includes multiple security fixes
    CVE-2017-5208, CVE-2017-5333, CVE-2017-5332, CVE-2017-6009,
    CVE-2017-6010, CVE-2017-6011
    resolves: rhbz#1430610


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.31-1
changelog:
  - ipv6: wait for all global IPv6 addresses to leave the "tentative" state
  - source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
  - ifup-aliases: inherit ARPCHECK from parent device
  - rhel-dmesg: don't start in containers
  - ifup-eth: fix typo in error message (#1038776)
  - sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
  - rwtab: /var/lib/nfs needs to copy the files
  - functions: improve killing loops
  - ipcalc: detect invalid mask
  - ifup: set valid_lft and preferred_lft to forever for static ip
  - service: use systemd mangle for given service
  - ifup-post: check resolve.conf also with DNS2
  - ifdown-post: remove resolv.conf only in specific cases
  - spec: ghost /var/log/dmesg
  - network-functions: is_available_wait should wait even in the case that is_available returns 2
  - autorelabel: turn quota off before relabeling
  - autorelabel: call dracut-initramfs-restore before forced reboot


author: Boris Ranto <branto@redhat.com> - 0:1.8.15-7
changelog:
  - New release (0:1.8.15-7)
  - ID:437 - sel: Fix "sel time set <time>"
  - ID 408 - fix sel list last X listing


author: Phil Sutter <psutter@redhat.com> [3.10.0-65.el7]
changelog:
  - man: ip, ip-link: Fix ip option location (Phil Sutter) [1251186]
  - ip: enable configuring multicast group autojoin (Phil Sutter) [1333513]
  - ss: Fix accidental state filter override (Phil Sutter) [1318005]
  - ss: Drop silly assignment (Phil Sutter) [1318005]
  - ss: Fix wrong filter behaviour (Phil Sutter) [1318005]


author: Phil Sutter <psutter@redhat.com> [3.10.0-66.el7]
changelog:
  - ip-link: Support printing VF trust setting (Phil Sutter) [1302119]
  - iplink: Support VF Trust (Phil Sutter) [1302119]
  - add new IFLA_VF_TRUST netlink attribute (Phil Sutter) [1302119]
  - ipaddress: Allow listing addresses by type (Phil Sutter) [1341343]
  - man ip-link: Small example of 'ip link show master' (Phil Sutter) [1341343]
  - ip link: Show devices by type (Phil Sutter) [1341343]
  - ip link: Allow to filter devices by master dev (Phil Sutter) [1341343]


author: Phil Sutter <psutter@redhat.com> [3.10.0-67.el7]
changelog:
  - geneve: fix IPv6 remote address reporting (Phil Sutter) [1339178]
  - geneve: add support to set flow label (Phil Sutter) [1339178]
  - geneve: Add support for configuring UDP checksums. (Phil Sutter) [1339178]
  - geneve: add support for lwt tunnel creation and dst port selection (Phil Sutter) [1339178]
  - geneve: add support for IPv6 link partners (Phil Sutter) [1339178]
  - iplink_geneve: add tos configuration at link creation (Phil Sutter) [1339178]
  - iplink_geneve: add ttl configuration at link creation (Phil Sutter) [1339178]
  - iproute2: update ip-link.8 for geneve tunnels (Phil Sutter) [1339178]
  - iproute2: GENEVE support (Phil Sutter) [1339178]
  - man: ip-address, ip-link: Document 'type' quirk (Phil Sutter) [1341343]
  - man: ip-link.8: Fix 'ip link delete' description (Phil Sutter) [1341343]


author: Phil Sutter <psutter@redhat.com> [3.10.0-68.el7]
changelog:
  - devlink: add manpage for shared buffer (Phil Sutter) [1342515]
  - devlink: implement shared buffer occupancy control (Phil Sutter) [1342515]
  - devlink: implement shared buffer support (Phil Sutter) [1342515]
  - devlink: allow to parse both devlink and port handle in the same time (Phil Sutter) [1342515]
  - devlink: introduce dump filtering function (Phil Sutter) [1342515]
  - devlink: split dl_argv_parse_put to parse and put parts (Phil Sutter) [1342515]
  - devlink: introduce helper to print out nice names (ifnames) (Phil Sutter) [1342515]
  - devlink: introduce pr_out_port_handle helper (Phil Sutter) [1342515]
  - list: add list_add_tail helper (Phil Sutter) [1342515]
  - list: add list_for_each_entry_reverse macro (Phil Sutter) [1342515]
  - devlink: fix "devlink port" help message (Phil Sutter) [1342515]
  - devlink: ignore build result (Phil Sutter) [1342515]
  - add devlink tool (Phil Sutter) [1342515]
  - include: add linked list implementation from kernel (Phil Sutter) [1342515]
  - configure: cleanup (Phil Sutter) [1342515]
  - configure: Check for libmnl (Phil Sutter) [1342515]
  - configure: Add check for the doc tools (Phil Sutter) [1342515]
  - add if_macsec header (Davide Caratti) [1300765]
  - RH-INTERNAL: update kernel headers to v4.6.0 (Davide Caratti) [1300765]
  - utils: fix hex digits parsing in hexstring_a2n() (Davide Caratti) [1300765]
  - ip: add MACsec support (Davide Caratti) [1300765]
  - utils: provide get_hex to read a hex digit from a char (Davide Caratti) [1300765]
  - utils: add get_be{16, 32, 64}, use them where possible (Davide Caratti) [1300765]
  - utils: make hexstring_a2n provide the number of hex digits parsed (Davide Caratti) [1300765]
  - lib/ll_addr: improve ll_addr_n2a() a bit (Davide Caratti) [1300765]
  - iproute2: arpd: use ll_addr_a2n and ll_addr_n2a (Davide Caratti) [1300765]
  - iproute2: utils: change hexstring_n2a and hexstring_a2n to do not work with ":" (Davide Caratti) [1300765]


author: Phil Sutter <psutter@redhat.com> [3.10.0-69.el7]
changelog:
  - ip-address.8: Document autojoin flag (Phil Sutter) [1333513]
  - ip-link.8: Fix font choices (Phil Sutter) [1269528]
  - ip-link: fix man page warnings (Phil Sutter) [1269528]
  - vxlan: fix help and man text (Phil Sutter) [1269528]
  - ip-link: fix unterminated string in manpage (Phil Sutter) [1269528]
  - ip-link.8: Add slave type option descriptions (Phil Sutter) [1269528]
  - ip-link.8: Place 'ip link set' warning more prominently (Phil Sutter) [1269528]
  - ip-link.8: Extend type list in synopsis (Phil Sutter) [1269528]
  - man ip-link: Remove extra GROUP explanation (Phil Sutter) [1269528]
  - man ip-link: Add short description about 'group' (Phil Sutter) [1269528]
  - man ip-link: Add deleting links by group (Phil Sutter) [1269528]
  - iplink: bond_slave: Add missing help functions (Phil Sutter) [1269528]
  - iplink: List valid 'type' argument in ip link help text (Phil Sutter) [1269528]
  - ip link: Add group in usage() for 'ip link delete' (Phil Sutter) [1269528]
  - iproute: constify rtattr_cmp (Phil Sutter) [1348133]
  - ip route: restore route entries in correct order (Phil Sutter) [1348133]


author: Phil Sutter <psutter@redhat.com> [3.10.0-70.el7]
changelog:
  - man: ip-link: Document query_rss option (Phil Sutter) [1264146]
  - Document VF link state control in the ip-link man page (Phil Sutter) [1264146]
  - ipneigh: List all nud states in help output (Phil Sutter) [1276661]
  - iproute2: ip-route.8.in: Add expires option for ip route (Phil Sutter) [1357020]
  - ip route: timeout for routes has to be set in seconds (Phil Sutter) [1357020]
  - route: allow routes to be configured with expire values (Phil Sutter) [1357020]


author: Phil Sutter <psutter@redhat.com> [3.10.0-71.el7]
changelog:
  - ip: add paren to silence warning (Phil Sutter) [1340914]
  - Fix MAC address length check (Jakub Sitnicki) [1253767 1271580]
  - iplink: Check address length via netlink (Jakub Sitnicki) [1253767 1271580]
  - iplink: Add missing variable initialization (Jakub Sitnicki) [1253767 1271580]
  - ip link: Fix crash on older kernels when show VF dev (Jakub Sitnicki) [1340914]
  - ip link: Remove unnecessary device checking (Jakub Sitnicki) [1340914]
  - ip: check for missing dev arg when doing VF rate (Jakub Sitnicki) [1340914]
  - Add support to configure SR-IOV VF minimum and maximum Tx rate through ip tool (Jakub Sitnicki) [1340914]


author: Phil Sutter <psutter@redhat.com> [3.10.0-72.el7]
changelog:
  - macsec: cipher and icvlen can be set separately (Davide Caratti) [1354408]
  - ip {link,address}: add 'macsec' item to TYPE list (Davide Caratti) [1354702]
  - man: macsec: fix macsec related typos (Davide Caratti) [1354702 1354319]
  - Revert "Allow specifying bridge port STP state by name rather than number." (Phil Sutter) [1288042]
  - Revert "fix ip -force -batch to continue on errors" (Phil Sutter) [1288042]
  - Revert "ip: fix exit code for addrlabel" (Phil Sutter) [1288042]
  - Revert "link dump filter" (Phil Sutter) [1288042]
  - Revert "ip: return correct exit code on route failure" (Phil Sutter) [1288042]
  - Revert "ip: fix exit code for rule failures" (Phil Sutter) [1288042]
  - man: ip-link: Drop fou and gue related documentation (Phil Sutter) [1013584]
  - man: ip-link, ip-address: Drop references to ipvlan (Phil Sutter) [1013584]
  - doc, man: ip-rule: Remove incorrect statement about rule 0 (Phil Sutter) [1362561]


author: Phil Sutter <psutter@redhat.com> [3.10.0-73.el7]
changelog:
  - ip-link: add missing {min,max}_tx_rate to help text (Phil Sutter) [1340914]
  - man: ip-link.8: Document missing geneve options (Phil Sutter) [1339178]
  - iproute.spec: Fix for missing cbq.8 man page (Phil Sutter) [1362551]


author: Jakub Čajka <jcajka@redhat.com> - 2.4.2-1
changelog:
  - Resolves: #1088562 - [7.1 FEAT] iprutils package update - ppc64
  - Resolves: #1044679 - iprutils should use systemd
  - Resolves: #1092519 - iprutils - PIE and RELRO check


author: Jakub Čajka <jcajka@redhat.com> - 2.4.8-1
changelog:
  - Resolves: #1182038 - [7.2 FEAT] iprutils package update - ppc64/ppc64le
  - Resolves: #1183460 - RHEL7.1 BE: iprutils: Set known zeroed after format


author: Sinny Kumari <skumari@redhat.com> - 2.4.11.1-1
changelog:
  - Resolves: #1274367 - [7.3 FEAT] iprutils package update
  - Resolves: #1297921 - IPR: Raid migration fails to kick while executing through command line


author: Sinny Kumari <skumari@redhat.com> - 2.4.12.1-1
changelog:
  - Resolves: #1364131 - Integrate various important bug fixes for iprutils in
    RHEL7.3 by updating iprutils to 2.4.12


author: Mathieu Bridon <bochecha@fedoraproject.org> - 6.14-1
changelog:
  - New upstream release.
  - Fix scriptlets, ldconfig is needed for the libs subpackage, not the main one.


author: Thomas Woerner <twoerner@redhat.com> - 6.19-5
changelog:
  - New service sub package to provide the ipset service (RHBZ#1136257)
    Service and start-stop script from F-24
  - Fixed ipset package summary (RHBZ#1195171)
    Spec file derived from F-24


author: Thomas Woerner <twoerner@redhat.com> - 6.19-6
changelog:
  - Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
  - Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
  - No save on reload, but legacy save action (RHBZ#1136257)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-9
changelog:
  - fixed missing system hang at shutdown if root device is network based
    (RHBZ#1007934)
  - Fixed iptables-save man page completely wrong (RHBZ#1054871)
  - Fixed missing reload action for iptables service (RHBZ#1066007)
  - Fixed regressions from RHEL-6 iptables services (RHBZ#1067670)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-14
changelog:
  - Add cgroup support (RHBZ#1058660)
  - Add wait seonds support for commands (RHBZ#1156411)
  - Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
  - Add message for init script error returns (RHBZ#1200415)
  - Use flock for wait option (RHBZ#1202435)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-16
changelog:
  - Fix important coverity findings: missing include for flock and use bash for
    init script (RHBZ#1264399)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-17
changelog:
  - Fixed init script not to fail on missing restorecon (RHBZ#1246380)
  - Adapted man page snipplet for TRACE to use proper logging backend names
    (RHBZ#1261238)
  - Warn about use of DROP in nat table (RHBZ#1298879)
  - Fixed modules unload in init script (RHBZ#1324102)


author: Jan Synáček <jsynacek@redhat.com> - 20121221-7
changelog:
  - ping returns odd results with options inet6 in resolv.conf (#1210331)
  - count of "back" is not correct in tracepath (#1208372)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-7
changelog:
  - ping hung when it cannot receive echo reply (#1362463)
  - arping documentation inconsistency (#1351704)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-4.gitc4bce43
changelog:
  - ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
  - Resolves: bz#1062644
    (pxe boot fails if next-server details come from a different dhcp server)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-5.gitc4bce43.el7
changelog:
  - ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
  - ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
  - ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
  - ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
  - ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
  - ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
  - ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
  - Resolves: bz#1031518
    (iPXE does not honor specified boot device)
  - Resolves: bz#857123
    (Guests never get an iPXE prompt)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-6.gitc4bce43.el7
changelog:
  - ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
  - ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
  - ipxe-redhat-delete-useless-editor-backup-of-spec.template.patch [bz#1084561]
  - ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
  - Resolves: bz#1084561
    (RFE: ship UEFI drivers for ipxe in RHEL-7.y)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-7.gitc4bce43.el7
changelog:
  - ipxe-Extract-timing-parameters-out-to-config-dhcp.h.patch [bz#1196352]
  - ipxe-Use-spec-compliant-timeouts.patch [bz#1196352]
  - Resolves: bz#1196352
    ([RFE] option to increase gpxe retry timeout)


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.6-5
changelog:
  - Fixed irqbalance web adresses in spec (bz1060810)
  - Default hintpolicy adjusted (bz1060814)
  - Missing autogen.sh call fixed


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.7-2
changelog:
  - fixed unused variable revealed by covscan
  - fixed ignored pid argument (#1155632)
  - warning when irqbalance started under non-root (#1155799)
  - more robust signal handling (#1158937)
  - fixed hostname in manpage (#1162251)


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-29
changelog:
  - 1166713 1187792 add missing ExecStart, only newer systemd lets that be optional for oneshot services


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-32
changelog:
  - 1235684 apply safe_logout setting to flashnode sessions as well
    but only when logging out by session id, not by flashnode index


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-34
changelog:
  - 1322000 ensure TCP abort on session failure to prevent data corruption with link flap
  - 1294964, 1265073, 1213569 iscsiuio update, fix small ARP table issue
  - 1309488 remove broken sysfs cache code to speed up login of many sessions
  - 1330348 sync with upstream Open-iSCSI for minor fixes


author: Rafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5
changelog:
  - Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910)
  - Update skl firmware for gpu (rhbz 1210012)


author: Jarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5
changelog:
  - Add more old chelsio firmwares, they nuked the one the driver in
    RHEL7.2 is expecting from upstream (rhbz 1262128)
  - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)


author: Rafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)


author: Rafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Restore AMD-ucode firmware blob again (rhbz 866700)
  - qat: Update to the latest upstream firmware (rhbz 1173792)
  - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534)
  - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)


author: Rafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906)
  - Update to latest Chelsio firmware release version (rhbz 1336906)


author: Rafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566)
  - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)


author: Rafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171211)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-5
changelog:
  - Moving from rpmfusion-free to Fedora because it will be free of known patents
    in all countries from 2012-04-04 onwards
  - Changed license from GPL to GPLv2+ and included up-to-date license file


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-3
changelog:
  - Include xkb layouts from xkeyboard-config converted to console keymaps
  - Add version to vlock provides
    Resolves: #902564


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8
changelog:
  - Fix vlock doesn't perform PAM account management or credential reinitialization
    Resolves: #1032140


author: Rafael Aquini <aquini@redhat.com> [3.10.0-509.el7]
changelog:
  - [mm] sparse: use memblock apis for early memory allocations (Koki Sanagi) [1375453]
  - [mm] memblock: add memblock memory allocation apis (Koki Sanagi) [1375453]
  - [mm] thp: harden the debug kernel with a strict check for thp_mmu_gather (Andrea Arcangeli) [1369365]
  - [mm] thp: initialize thp_mmu_gather for newly allocated migrated pages (Andrea Arcangeli) [1369365]
  - [mm] thp: put_huge_zero_page() with MMU gather #2 (Andrea Arcangeli) [1369365]
  - [fs] nfs: fix BUG() crash in notify_change() with patch to chown_common() ("J. Bruce Fields") [1342695]
  - [net] ipv6: gro: fix forwarding of tunneled packets (Jiri Benc) [1375438]
  - [net] sctp: hold the transport before using it in sctp_hash_cmp (Xin Long) [1368884]
  - [net] sctp: identify chunks that need to be fragmented at IP level (Xin Long) [1371377]
  - [scsi] be2iscsi: revert: _bh for io_sgl_lock and mgmt_sgl_lock (Maurizio Lombardi) [1374223]
  - [block] blk-mq: Allow timeouts to run while queue is freezing (Gustavo Duarte) [1372483]
  - [block] defer timeouts to a workqueue (Gustavo Duarte) [1372483]
  - [netdrv] tg3: Fix for disallow tx coalescing time to be 0 (Ivan Vecera) [1368885]
  - [netdrv] tg3: Fix for diasllow rx coalescing time to be 0 (Ivan Vecera) [1368885]
  - [infiniband] rdma/ocrdma: Support user AH creation for RoCE-v2 (Don Dutile) [1376120]
  - [infiniband] rdma/ocrdma: Support RoCE-v2 in the RC path (Don Dutile) [1376120]
  - [infiniband] rdma/ocrdma: Support RoCE-v2 in the UD path (Don Dutile) [1376120]
  - [infiniband] rdma/ocrdma: Export udp encapsulation capability (Don Dutile) [1376120]
  - [infiniband] ib/mlx5: Fix wrong naming of port_rcv_data counter (Don Dutile) [1374862]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-510.el7]
changelog:
  - [kernel] audit: fix exe_file access in audit_exe_compare (Richard Guy Briggs) [1374478]
  - [kernel] mm: introduce get_task_exe_file (Richard Guy Briggs) [1374478]
  - [kernel] prctl: avoid using mmap_sem for exe_file serialization (Richard Guy Briggs) [1374478]
  - [kernel] mm: rcu-protected get_mm_exe_file() (Richard Guy Briggs) [1374478]
  - [dm] dm-raid: reverse validation of nosync+rebuild flags (Heinz Mauelshagen) [1371717]
  - [x86] kvm: correctly reset dest_map->vector when restoring LAPIC state (Paolo Bonzini) [1367716]
  - [s390] dasd: fix hanging device after clear subchannel (Gustavo Duarte) [1368068]
  - [netdrv] bna: fix crash in bnad_get_strings() (Ivan Vecera) [1376508]
  - [netdrv] bna: add missing per queue ethtool stat (Ivan Vecera) [1376508]
  - [powerpc] kvm: Implement kvm_arch_intc_initialized() for PPC (David Gibson) [1375778]
  - [powerpc] kvm: book3s: Don't crash if irqfd used with no in-kernel XICS emulation (David Gibson) [1375778]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-511.el7]
changelog:
  - [net] add recursion limit to GRO (Sabrina Dubroca) [1374191] {CVE-2016-7039}
  - [mm] cgroup: fix hugetlb_cgroup_read() (Jerome Marchand) [1378236]
  - [fs] nfs: change invalidatepage prototype to accept length (Benjamin Coddington) [1366131]
  - [fs] xfs: quiesce the filesystem after recovery on readonly mount (Eric Sandeen) [1375457]
  - [fs] xfs: rework buffer dispose list tracking (Brian Foster) [1349175]
  - [fs] ext4: pre-zero allocated blocks for DAX IO (Eric Sandeen) [1367989]
  - [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1379447]
  - [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1379447]
  - [x86] topology: Handle CPUID bogosity gracefully (Vitaly Kuznetsov) [1377988]
  - [netdrv] sfc: check async completer is !NULL before calling (Jarod Wilson) [1368201]
  - [infiniband] ib/mlx5: Fix iteration overrun in GSI qps (Don Dutile) [1376941]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-512.el7]
changelog:
  - [fs] revert "ext4: pre-zero allocated blocks for DAX IO" (Eric Sandeen) [1380571]
  - [fs] nfsd: fix corruption in notifier registration ("J. Bruce Fields") [1378363]
  - [fs] xfs: log recovery tracepoints to track current lsn and buffer submission (Brian Foster) [1362730]
  - [fs] xfs: update metadata LSN in buffers during log recovery (Brian Foster) [1362730]
  - [fs] xfs: don't warn on buffers not being recovered due to LSN (Brian Foster) [1362730]
  - [fs] xfs: pass current lsn to log recovery buffer validation (Brian Foster) [1362730]
  - [fs] xfs: rework log recovery to submit buffers on LSN boundaries (Brian Foster) [1362730]
  - [x86] perf/uncore: Disable uncore on kdump kernel (Jiri Olsa) [1379569]
  - [netdrv] mlx4_core: Fix to clean devlink resources (Kamal Heib) [1379504]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-514.el7]
changelog:
  - [mm] remove gup_flags FOLL_WRITE games from __get_user_pages() (Larry Woodman) [1385124] {CVE-2016-5195}


author: Frantisek Hrbata <fhrbata@hrbata.com> [3.10.0-514.1.1.el7]
changelog:
  - [netdrv] xen-netfront: avoid packet loss when ethernet header crosses page boundary (Vitaly Kuznetsov) [1390257 1348581]
  - [infiniband] ib/iser: Fix max_sectors calculation (Jonathan Toppins) [1389012 1380515]
  - [block] blk-mq: improve warning for running a queue on the wrong CPU (Gustavo Duarte) [1389011 1376948]
  - [block] blk-mq: don't overwrite rq->mq_ctx (Gustavo Duarte) [1389011 1376948]
  - [kernel] pm/sleep: Fix request_firmware() error at resume (Don Zickus) [1389009 1375203]
  - [vfio] vfio-pci: Disable INTx after MSI/X teardown (Alex Williamson) [1389004 1371495]
  - [vfio] vfio-pci: Virtualize PCIe & AF FLR (Alex Williamson) [1389004 1371495]
  - [nvme] Don't suspend admin queue that wasn't created (Gustavo Duarte) [1389001 1370507]
  - [nvme] Suspend all queues before deletion (Gustavo Duarte) [1389001 1370507]
  - [powerpc] kvm: ppc: book3s hv: Take out virtual core piggybacking code (Thomas Huth) [1388997 1350719]
  - [powerpc] kvm: ppc: book3s: Treat VTB as a per-subcore register, not per-thread (Thomas Huth) [1388997 1350719]
  - [powerpc] kvm: ppc: book3s hv: Move struct kvmppc_vcore from kvm_host.h to kvm_book3s.h (Thomas Huth) [1388997 1350719]
  - [scsi] cxgb4i: Increased the value of MAX_IMM_TX_PKT_LEN from 128 to 256 bytes (Sai Vemuri) [1388996 1379954]
  - [scsi] cxgb4i: fix credit check for tx_data_wr (Sai Vemuri) [1388996 1379954]
  - [x86] pci: vmd: Request userspace control of PCIe hotplug indicators (Myron Stowe) [1388881 1380181]
  - [pci] pciehp: Allow exclusive userspace control of indicators (Myron Stowe) [1388881 1380181]
  - [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth->au_flags (Dave Wysochanski) [1388604 1384666]
  - [x86] fix call location of smp_quirk_init_udelay() (Prarit Bhargava) [1388598 1377296]
  - [x86] hpet: Re-enable HPET on Purley 4S (Prarit Bhargava) [1388597 1372853]
  - [x86] hpet: Reduce HPET counter read contention (Prarit Bhargava) [1388597 1372853]
  - [net] openvswitch: avoid deferred execution of recirc actions (Lance Richardson) [1388592 1370643]
  - [net] ipv4: Use math to point per net sysctls into the appropriate struct net (Eric Garver) [1388591 1363661]
  - [md] dm raid: fix activation of existing raid4/10 devices (Mike Snitzer) [1388504 1385149]
  - [md] dm: free io_barrier after blk_cleanup_queue call (Mike Snitzer) [1388503 1385813]


author: Frantisek Hrbata <fhrbata@hrbata.com> [3.10.0-514.2.1.el7]
changelog:
  - [firmware] efi: Fix usage of illegal alignment on efi_low_alloc (Lenny Szubowicz) [1392044 1387689]


author: Frantisek Hrbata <fhrbata@hrbata.com> [3.10.0-514.2.2.el7]
changelog:
  - [kernel] timekeeping: Copy the shadow-timekeeper over the real timekeeper last (Prarit Bhargava) [1395577 1344747]


author: Baoquan He <bhe@redhat.com> - 2.0.7-33
changelog:
  mkdumprd: Remove ifcfg from dracut's modules
  arm64: move -fno-exceptions from purgatory code to spec file
  module-setup: Choose the first matched gateway in kdump_static_ip


author: Baoquan He <bhe@redhat.com> - 2.0.7-34
changelog:
  arm64: Overwrite CFLAGS and remove -fno-exceptions from kexec purgatory code
  Fix comment to exclude keyword 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-virtuozzo-linux-gnu --host=x86_64-virtuozzo-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info
  Revert "arm64: move -fno-exceptions from purgatory code to spec file"


author: David Howells <dhowells@redhat.com>
changelog:
  - Adjust the manual page for 'keyctl unlink' to show keyring is optional.
  - Add --version support for the keyutils version and build date.


author: David Howells <dhowells@redhat.com> - 1.5.4-1
changelog:
  - Fix the keyctl padd command and similar to handle binary input.
  - Make keyctl show able to take a keyring to dump.
  - Make keyctl show able to take a flag to request hex key IDs.
  - Make keyctl show print the real ID of the root keyring.


author: David Howells <dhowells@redhat.com> - 1.5.6-1
changelog:
  - Fix the request-key.conf.5 manpage.
  - Fix the max depth of key tree dump (keyctl show) [BZ 1002761].
  - The input buffer size for keyctl padd and pinstantiate should be larger [BZ 1002761].
  - Add keyctl_invalidate.3 manpage [BZ 1002761].


author: David Howells <dhowells@redhat.com> - 1.5.7-1
changelog:
  - Provide a utility function to find a key by type and name.
  - Allow keyctl commands to take a type+name arg instead of a key-id arg.
  - Add per-UID get_persistent keyring function [BZ 1014739].


author: David Shea <dshea@redhat.com> - 20-5
changelog:
  - Check for changes in non-module files that affect that initramfs
    Resolves: rhbz#1108166
  - Use dracut to skip early cpio archives in the initramfs
    Resolves: rhbz#1210449


author: David Shea <dshea@redhat.com> - 20-6
changelog:
  - Accept '.' as part of a symbol exported by the kernel
    Resolves: rhbz#1283486
  - Check the addon modules of the new kernel for exported symbols
    Resolves: rhbz#1296465


author: Tony Camuso <tcamuso@redhat.com> - 20-9
changelog:
  - Must be bumped to 20-9 due to changes and version bumps in the
    7.2-z stream.
    Resolves: rhbz#1320204


author: Evgenii Shatokhin <eshatokhin@virtuozzo.com> 0.3.3-17.20160301
changelog:
  - make sure "kpatch info" looks for data in appropriate places
  - drop support for unversioned info.txt files


author: Evgenii Shatokhin <eshatokhin@virtuozzo.com> 0.3.3-20.20160301
changelog:
  - made "readykernel" a separate script (helps with PSBM-48249)
  - restored the old behaviour of "kpatch info"


author: Evgenii Shatokhin <eshatokhin@virtuozzo.com> 0.3.3-21.20160301
changelog:
  - handle relocations of the functions with identical names (PSBM-49192)
  - allow for extension of Kpatch-related structures in the future


author: Mike FABIAN <mfabian@redhat.com> - 0.0.11-1
changelog:
  - Update to 0.0.11
  - Add translations for DE and NL territories in nds (reported by Vratislav Podzimek)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.12-1
changelog:
  - Update to 0.0.12
  - Match case insensitively in languageId() (Resolves: rhbz#1002000 (case insensitive languageId function needed))


author: Mike FABIAN <mfabian@redhat.com> - 0.0.13-4
changelog:
  - Add Add-support-for-timezone-translations.patch (Related: rhbz#1015209)
  - Add Fix-Chinese-translation-problem.patch (Related: rhbz#1015209)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.31-1
changelog:
  - Update langtable to 0.0.31
  - Resolves: rhbz#1202875
  - Revert change included in 0.0.31 which uses "eurlatgr" as the default
    consolefont for many languages because that font is not available in RHEL
  - Remove patches which are already included in 0.0.31


author: Richard Hughes <richard@hughsie.com> 2.5-1
changelog:
  - Update to new upstream version.
  - Added a reference for Mac MLU tag
  - Added a way to read the profile creator from header
  - Added error descriptions on cmsSmoothToneCurve
  - Added identity curves support for write V2 LUT
  - Added new cmsPlugInTHR() and fixed some race conditions
  - Added TIFF Lab16 handling on tifficc
  - Fixed a bug on big endian platforms not supporting uint64 or long long.
  - Fixed a multithead bug on optimization
  - Fixed devicelink generation for 8 bits
  - Fixed some 64 bit warnings on size_t to uint32 conversions
  - Rendering intent used when creating the transform is now propagated to profile
  - RGB profiles store only one copy of the curve to save space
  - Transform2Devicelink now keeps white point when guessing deviceclass is enabled
  - Update black point detection algorithm to reflect ICC changes
  - User defined parametric curves can now be saved in ICC profiles


author: Andrew Hughes <gnu.andrew@redhat.com> - 2.6-3
changelog:
  - Run tests as part of %check, fixing Makefile to set LD_LIBRARY_PATH
  - Use upstream endianness fix to avoid ppc64le being built big-endian
  - Resolves: #1250914


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Fridolin Pokorny <fpokorny@redhat.com> - 458-3
changelog:
  - Expanded lessecho usage (#948597)
  - Added lessfilter info to man (#948597)
  - Expanded lesskey usage (#948597)
  - Added --old-bot to help (#948597)


author: Jozef Mlich <jmlich@redhat.com> - 458-5
changelog:
  - fixing regression in 72dfd3f63594e1d4c9416180a95c47ae583934c6
    incorrect parsing of commandline arguments
  - Resolves #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-8
changelog:
  - changes introduced in less-458-old-bot-in-help.patch
    wasn't compiled in. It is necessary to use mkhelp tool.
    Resolves: #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-9
changelog:
  - The --use-backslash option documented in the man page
    was missing from online help for less.
    Resolves: #1109090


author: Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6
changelog:
  - Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
  - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
  - Added RFE - lftp configurations for restricting each SSL/TLS 
    version (#1182987)
  - Fixed bogus dates of this SPEC


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1392944 - File size decreases when synchronizing folders with a sftp account using lftp


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0.8-6
changelog:
  - Fix duplicate documentation (#1001256) by not using %doc
  - Turn on verbose build output via V=1 make
  - Use %?_isa in -devel base package dep


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-8
changelog:
  - Change the source location to the new upstream on fedorahosted
  - import a new tarball from the new source


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-10
changelog:
  - Un-revert the RHEL-specific changes. (Jeff Moyer)
  - Make devel sub-package depend on specific ver-rel (Jeff Moyer)
  - Resolves: bz#905462


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-12.2
changelog:
  - Get rid of sparc support (we don't build it) (Jeff Moyer)
  - Implement proper support for aarch64 (Jeff Moyer)
  - Resolves: bz#1026429


author: Ondrej Kos <okos@redhat.com> - 0.3.0.1-18
changelog:
  - Apply patch to stop generating doxygen timestamps
  - Apply patch to include correct libini_config file


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.0.1-20
changelog:
  - Apply a patch by Dmitri Pal to strip trailing whitespace
  - Resolves: rhbz#1012434 - libiniconfig doesn't trim trailing whitespace


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-25
changelog:
  - Resolves: rhbz#1205557 - Include the latest upstream ding-libs release in 7.2
  - Port the SONAME hack


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-27
changelog:
  - Re-add the soname hack
  - Resolves: rhbz#1290382 - Rebase ding-libs to the latest available upstream


author: Karel Zak <kzak@redhat.com> 2.23.2-29
changelog:
  - fix #1029385 - lack of non-ascii support
  - fix #1092520 - util-linux - PIE and RELRO check
  - fix #1153770 - backport lsipc
  - fix #1248003 - mount only parses <param>=<value> lines from fstab fs_spec field available from blkid block device
  - fix #1271850 - mount -a doesn't catch a typo in /etc/fstab and a typo in /etc/fstab can make a system not reboot properly
  - fix #1281839 - [RFE]Bind mounts should be handled gracefully by the operating system
  - fix #1290689 - util-linux: /bin/login does not retry getpwnam_r with larger buffers, leading to login failure
  - fix #1296366 - Bash completion for more(1) handles file names with spaces incorrectly
  - fix #1296521 - RHEL7: update audit event in hwclock
  - fix #1298384 - RFE: add SCHED_DEADLINE support to chrt
  - fix #1304246 - fdisk 'f' subcommand updates partition ranges wrongly
  - fix #1304426 - [rfe] /bin/su should be improved to reduce stack use
  - fix #1326615 - util-linux/lscpu: Fix model and model name on Power Systems
  - fix #1327886 - Backport blkdiscard's "-z" flag to RHEL
  - fix #1332084 - [RFE] Inclusion of lsns command in util-linux Package
  - fix #1335671 - extra quotes around UUID confuses findfs in RHEL (but not in Fedora)
  - fix #1344222 - logger port option in help is misleading
  - fix #1344482 - util-linux fails valid_pmbr() size checks if device is > 2.14TB, Device label type: dos instead of gpt
  - fix #587393 - [RFE] Make sure util-linux is ready for writable overlays


author: Karel Zak <kzak@redhat.com> 2.23.2-32
changelog:
  - improve patch for chrt(1) deadline support #1298384
  - fix #1007734 - blkid shows devices as /dev/block/$MAJOR:$MINOR
  - fix #1349536 - Extended partition loop in MBR partition table leads to DOS


author: Steve Grubb <sgrubb@redhat.com> 0.7.5-2
changelog:
  - resolves: #1185610 - libcap-ng: update caps table for newer kernels
  - Fix a leaked FD in upstream code


author: jchaloup <jchaloup@redhat.com> - 0.41-8
changelog:
  - resolves: #885174
    loading configuration files from /etc/cgconfig.d/ directory
  - resolves: #885166
    use * character as a meta character for all mounted
  - resolves: #886920
    add examples to man pages
  - resolves: #1143851
    extending cgroup names with default
  - resolves: #1142807
    api.c: support for setting multiline values in control files
    config.c: xfs file system sets item->d_type to zero, stat() and S_ISREG() test added (#885174)


author: Tom Hughes <tom@compton.nu> - 20120410-1
changelog:
  - Update to 20120410 release
  - Drop the 0. from the version - the dates are the upstream versions
  - Remove explicit dependencies on elfutils-libelf


author: Kamil Dudka <kdudka@redhat.com> 3.0-7.20120601cvs
changelog:
  - Update to 3.0 (20120601 snap)
  - fix crash of el_insertstr() on incomplete multi-byte sequence (#840598)


author: Steve Dickson <steved@redhat.com> 2.0.14-1
changelog:
  - Updated to latest stable upstream version: 2.0.14-stable (bz 727129)
  - Removed the installion of the outdate man pages and the latex raw docs.
  - Corrected where the other doc are installed.


author: Steve Dickson <steved@redhat.com> 2.0.18-1
changelog:
  - Updated to latest stable upstream version: 2.0.18-stable
  - Moved documentation into its own rpm (bz 810138)


author: Dan Horák <dhorak@redhat.com> - 3.0.13-16
changelog:
  - Drop ppc64le from the multilib list
  - Use additional BR: only in ppc64le build
  - Resolves: RHBZ1116945


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-3
changelog:
  - backport aarch64 crc enablement - -mcpu=generic+crc (#1179935)
  - rebuild against fixed binutils to fix up systemtap markers on aarch64
    (#1238462)


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-5
changelog:
  - fix up libitm HTM fastpath (#1180633)
  - on ppc64le default to -mcpu=power8 instead of -mcpu=power7 (#1213268)
  - fix up size in .debug_pubnames (#1278872)
  - turn powerpc* HTM insns into memory barriers (#1282755, PR target/67281)
  - make sure to handle __builtin_alloca_with_align like alloca in
    -fstack-protector* (#1289022, PR tree-optimization/68680)
  - improve DW_AT_abstract_origin of DW_TAG_GNU_call_site on s390 with -fPIC
    (#1312436)
  - fix up libstdc++ pretty-printers (#1076690, PR libstdc++/53477)
  - don't pass explicit --oformat option to ld on powerpc* (#1296211)
  - backport Intel Memory Protection Keys ISA support - -mpku (#1304449)


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-6
changelog:
  - backport s390 z13 support (#1182152)
  - fix up -fsanitize=address on powerpc64 with 46-bit virtual address space
    (#1312850)
  - throw exception on std::random_device::_M_getval() failure (#1262846,
    PR libstdc++/65142, CVE-2015-5276)


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-8
changelog:
  - fix a bug in C++ ref-to-ptr conversion (#1344807)
  - fix combiner handling of jumps on aarch64 (#1344672,
    PR rtl-optimization/52714)


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-9
changelog:
  - backport OpenMP 4.5 support to libgomp (library only; #1357060,
    PRs libgomp/68579, libgomp/64625)


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-11
changelog:
  - on aarch64 emit scheduling barriers before stack deallocation in
    function epilogues (#1362635, PR target/63293)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-5
changelog:
  - add FIPS DRBG implementation
  - run the FIPS POST tests in shared library constructor
  - make it possible to run the test suite in the FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-13
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-30
changelog:
  - systemctl,pid1: do not warn about missing install info with "preset" (#1373950)
  - systemctl/core: ignore masked units in preset-all (#1375097)
  - shared/install: handle dangling aliases as an explicit case, report nicely (#1375097)
  - shared/install: ignore unit symlinks when doing preset-all (#1375097)
  - 40-redhat.rules: don't hoplug memory on s390x (#1370161)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-30.1
changelog:
  - If the notification message length is 0, ignore the message (#4237) (#1381573)
  - systemctl: suppress errors with "show" for nonexistent units and properties (#1380686)
  - 40-redhat.rules: disable auto-online of hot-plugged memory on IBM z Systems (#1381123)
  - pid1: don't return any error in manager_dispatch_notify_fd() (#4240) (#1381573)
  - pid1: process zero-length notification messages again (#1381573)
  - pid1: more informative error message for ignored notifications (#1381573)


author: Michal Sekletar <msekleta@redhat.com> - 219-30.5
changelog:
  - on update from systemd version 219-21 and older generate udev rules that preserve old network interface names on VMware VMs (#1391944)


author: Pavel Butsykin <pbutsykin@virtuozzo.com> - 1:1.34.3-2.0
changelog:
  - add sources file
  - disable tarball verification
  - fix rhel package suffix to vz
  - Adjust virt-v2v package (#VZP-130)
  - Added gtk-doc 2 buildreqs
  - Added perl modules
  - add pnp_wait.exe virt-tool to resolve conflicts with PnP on firstboot


author: Pavel Butsykin <pbutsykin@virtuozzo.com> - 1:1.34.3-2.2
changelog:
  - Revert "RHEL 7: v2v: Disable the virt-v2v --in-place option."
  - Revert "RHEL 7: Reject use of libguestfs-winsupport features except for virt-* tools (RHBZ#1240276)."
  - v2v: set up firstboot script to install vztools-win
  - v2v: set up firstboot script to install vztools-lin
  - v2v: shut down windows VM to finish guest setup
  - v2v: shut down linux VM to finish guest setup
  - firstboot: add DelayedAutoStart value in the registry
  - v2v: bootloaders: search grub config for all distributions


author: Pavel Butsykin <pbutsykin@virtuozzo.com> - 1:1.34.3-2.7
changelog:
  - daemon: run 'udevadm settle' with --exit-if-exists option
  - daemon: add udev_settle_file to is_root_device #PSBM-63411


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.51
changelog:
  - v2v: Fix handling of extra slashes in dcPath calculation
    resolves: rhbz#1258342 rhbz#1256823
  - v2v: Fix -oa preallocation option
    resolves: rhbz#1251909


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.52
changelog:
  - v2v: Warn if Group Policy or AV software may result in 7B boot failure
    (1260689)
  - v2v: Fix OVF XML to enable qxl display
    resolves: rhbz#1260590


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.53
changelog:
  - v2v: Error if certain options appear twice on the command line (1261242)
  - v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
  - v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
  - v2v: Detect AVG Technologies as AV software (1261436)
    resolves: rhbz#1261281


author: Andrey Bondrov <abondrov@virtuozzo.com> - 1:1.28.1-1.55.1
changelog:
  - Drop rhev-apt.exe to avoid license violation
  - Require mingw32-srvany package instead of shipping prebuilt rhsrvany.exe


author: Doug Ledford <dledford@redhat.com> - 1.1.8-2
changelog:
  - Update RoCE IP addressing patches to latest version under review
  - Build against valgrind on ppc64le
  - Fix a coverity found issue
  - Resolves: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.1.8-4
changelog:
  - Fix one of the coverity bugs in a different way (the original fix
    caused a problem in libmlx4)
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.1.8-6
changelog:
  - Add build on s390
  - Drop back to building against libnl instead of libnl3
  - Resolves: bz1182178, bz1177115


author: Doug Ledford <dledford@redhat.com> - 1.1.8-7
changelog:
  - Add checksum offload support
  - Update the various patches to the ones from the official upstream git repo
  - Related: bz1195888


author: Eike Rathke <erack@redhat.com> - 50.1.2-6
changelog:
  - Resolves: rhbz#966141 various flaws in Layout Engine font processing
  - Resolves: rhbz#966077 aarch64 support for icu-config.sh wrapper


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-43.4
changelog:
  - Revert the fix for ignoring sudoUser case as it breaks processing
    of rules that completely lack a sudoUser attribute
  - Related: rhbz#1392946 - sudo: ignore case on case insensitive domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-43.6
changelog:
  - Related: rhbz#1396486 - bz - ldap group names don't resolve after
                            upgrading sssd to 1.14.0 if ldap_nesting_level
                            is set to 0


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-43.7
changelog:
  - Resolves: rhbz#1393730 - No supplementary groups are resolved for users
                             in nested OUs when domain stanza differs from AD
                             domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-43.11
changelog:
  - Resolves: rhbz#1404340 - Use-after free in resolver in case the fd is
                             writeable and readable at the same time


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-3
changelog:
  - Fixed issues reported by coverity (bz #1026820)
  - Do not mark /etc/ld.so.conf.d/ as config (bz #1011126)
  - Resolves: #1026820 
  - Resolves: #1011126


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-7.el7
changelog:
  - libiscsi-Discovery-return-multiple-portals-for-the-same-disco.patch [bz#1266523]
  - libiscsi-iscsi-ls-skip-link-local-IPv6-addresses.patch [bz#1266523]
  - Resolves: bz#1266523
    (iscsi-ls doesn't work if target has more than one portal)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.17-2
changelog:
  - Fix the minimal required tdb version
  - Related: rhbz#1133914 - Rebase libldb to version 1.1.17 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-2
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-3
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-5
changelog:
  - Remove conflict with libproxy, its not really necessary since
    we already have the latest libproxy in rawhide.


author: Jiri Pirko <jpirko@redhat.com> - 1.2-1
changelog:
  - Update to 1.2
  - libndp: silently ignore packets with optlen 0 [1016064]
  - libndp: fix processing for larger options [1016064]
  - libndp: do not fail on receiving non-ndp packets [1016078]


author: Jiri Pirko <jpirko@redhat.com> - 1.2-3
changelog:
  - libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf() [1044084]


author: Lubomir Rintel <lrintel@redhat.com> - 1.2-5
changelog:
  - libndp: validate the IPv6 hop limit [CVE-2016-3698]
  - libndb: reject redirect and router advertisements from non-link-local [CVE-2016-3698]


author: Eric Garver <egarver@redhat.com> - 1.2-7
changelog:
  - libndp: add option flags to send messages
  - ndptool: add option to send messages types
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - libndp: revert API change for ndp_msg_send() and add


author: Steve Dickson <steved@redhat.com> 0.25-13
changelog:
  - Strip newlines out of IDMAP_LOG messages (bz 1261124)
  - Fixed some NEGATIVE_RETURNS that a Covscan scan found (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-14
changelog:
  - nss_getpwnam: correctly check for negative values (bz 1271449)
  - Fixed a memory leak in nss_name_to_gid() (bz 1271449)


author: Dan Williams <dcbw@redhat.com> - 1.1-14
changelog:
  - Fix portmap position calculation (rh #677526) (rh #677725)
  - Make port allocation threadsafe (rh #677527) (rh #677724)


author: Thomas Haller <thaller@redhat.com> - 3.2.21-6
changelog:
  - fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
  - fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
  - fix printing in nl_msec2str for whole seconds
  - don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
  - backport nl_has_capability function


author: Thomas Haller <thaller@redhat.com> - 3.2.21-9
changelog:
  - improve local port handling for netlink socket with EADDRINUSE (rh #1249158)
  - rtnl: backport support for link-netnsid attribute (rh #1255050)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Tom Lane <tgl@redhat.com> 2:1.5.10-3
changelog:
  - Remove compat subpackage (it's now a separate package "libpng12")
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 2:1.5.12-1
changelog:
  - Update to libpng 1.5.12 for minor bug fixes
  - Activate chunk size limits by default, with a very generous default limit


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptf based on upstream
  - Related: #1283576


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.99
changelog:
  - Add missed Makefile.incl (Konstantin Volkov <wolf@virtuozzo.com>)
   - Move branding to separate file, see #PSBM-58317 (Konstantin Volkov
  <wolf@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.100
changelog:
  - PVA-36692 Move Win2k16 support type from experimental to supported
  (Konstantin Bukharov <bkb@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.101
changelog:
  - Add function to check if OS supports Hyper-V SCSI disks PSBM-62584 (Inga
  Pyass <ipyass@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.102
changelog:
  - bug #PSBM-56148 aka Slow VM recovery process from one node to another (Sergey
  Galas <shrike@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.103
changelog:
  - Add uid and pid to the client constructor with default values as 0. (Inga
  Pyass <ipyass@virtuozzo.com>) (#PSBM-59011)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.104
changelog:
  - BUGFIX PSBM-64416 Wrong floppy for win10 Floppy name is calculated from
  "short" OS name. Let add proper for Windows 10 (bkbbkb <bkb@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.105
changelog:
  - bug #PSBM-58083 aka prl_disp_service is willing to accept, expand, and store
  in RAM gigabytes of data prior to authentication (Sergey Galas
  <shrike@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.179
changelog:
  - Add "CT-only" and "VM-only" marks to SDK functions declarations #PSBM-28735
  (Igor Sukhih <igor@virtuozzo.com>)
   - bug #PSBM-61204 aka vzt-psbm-validation: vm_resume ERROR: dump: core-
  snmpd-1488228561.9053 (Sergey Galas <shrike@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.180
changelog:
  - Add PVM_UPDATE_MODE migration flags #PSBM-59325 (Igor Sukhih
  <igor@virtuozzo.com>)
   - Remove PrlDisk_GetDiskInfo from Python SDK (Inga Pyass
  <ipyass@virtuozzo.com>) (#PSBM-60480)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.181
changelog:
  - Add support for Hyper-V paravirt storage devices (Inga Pyass
  <ipyass@virtuozzo.com>) (#PSBM-59030)
   - Add contacts to header template in GenSdk.py (Andrey Bondrov
  <abondrov@virtuozzo.com>)
   - Update copyrights ( #PSBM-58317 ) (Andrey Bondrov <abondrov@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.183
changelog:
  - fix There is no PVS_GUEST_TO_STRING conversion for w2k16, #PSBM-62924 (Pavel
  Ganyushin <pganyushin@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.185
changelog:
  * Tue Mar 28 2017 Sergey Galas' <shrike@virtuozzo.com> 7.0.184
   - Add error string PRL_ERR_VMCONF_SCSI_HYPERV_LINUX_NOT_SUPPORTED PSBM-62584
  (Inga Pyass <ipyass@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.186
changelog:
  - Problem Report directory should not be accessible to Other user #PSBM-58087
  (Pavel Vokhmyanin <pvokhmyanin@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.54
changelog:
  - add crash limit field (PSBM-55697) (Pavel Ganyushin
  <pganyushin@virtuozzo.com>)
   - add virtual network adapters to host hardware info (PSBM-53561) (Pavel
  Ganyushin <pganyushin@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.55
changelog:
  - Use *report.virtuozzo.com instead of *report.parallels.com (Denis Silakov
  <dsilakov@virtuozzo.com>)
   - Add memory policy structure to xml model (PSBM-55022) (Pavel Ganyushin
  <pganyushin@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.59
changelog:
  - bug #PSBM-63557 aka  Failed to migrate the VM: Operation failed. Failed to
  execute the operation. (Details: Un ... (Sergey Galas <shrike@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.62
changelog:
  - bug #PSBM-63844 aka Unable to pre-create chardev file
  /vz/vmprivate/....restore/serial.txt (Sergey Galas <shrike@virtuozzo.com>)


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-1
changelog:
  - fix leak when throwing PWQError exception
  - added pkgconfig file
  - call the simplicity checks before the cracklib check
  - add enforce_for_root option to the PAM module
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-1
changelog:
  - use rpm built-in filtering of provides (rhbz#830153)
  - remove strain debug fprintf() (rhbz#831567)


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: David Vossel <dvossel@redhat.com> - 0.16.0-4
changelog:
  - Require log filtering to match function and file exactly.
    No substring matching.

  - Fixes complile time issue with 'make check' unit tests.

    Resolves: rhbz#1018091


author: David Vossel <dvossel@redhat.com> - 0.17.1-1
changelog:
  Fix: ipcs: Correctly allocate receive buffer size
    Fix: ipc_socket: Signalhandler must be resetted to Default, use only cleanup_sigpipe to return from qb_ipc_dgram_sock_setup.
    Fix: trie: allow modifying the trie map during the notify callback
    Fix: fix invalid option when run 'ipcclient -h'
    Fix: epoll: don't miss poll events under high load
    Fix: ipc_shm: fix error handling in qb_ipcs_shm_connect()
    Fix: ringbuffer: fix size in qb_rb_create_from_file()
    Fix: ringbuffer: fix qb_rb_open_2() debug format string
    Fix: trie: fixes regression caused by ref count refactoring
    Fix: ipcc: Properly timeout during recv when timeout value is provided

    Resolves: rhbz#1110043
    Resolves: rhbz#975903


author: David Vossel <dvossel@redhat.com> - 0.17.1-1.1
changelog:
  Fix bug that prevents ipc server from working in pid with realtime priority.

    Resolves: rhbz#1198718


author: Christine Caulfield <ccaulfie@redhat.com> - 0.17.1-2.1
changelog:
  Increase size of the buffer where we make the socket name to allow for longer PIDs
    Resolves bz#1114852


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-1
changelog:
  - Substitute vars in URL in the lr_downloadtarget_new()
  - New module repoconf for reading of *.repo files
  - Add LRE_VALUE code + LR_REPOCONF_ERROR error domain
  - Fail if gpgcheck enabled but repomd.xml signature is not available
  - Support for RHEL6
  - Add LRO_GNUPGHOMEDIR option
  - Refactoring to prevent RhBug: 1144741
  - fastest_mirror: Use <0.0 (-1.0) instead of DBL_MAX when a connection time wasn't measured
  - Add sanity checks in order to avoid bugs like: 1166533, 1160087
  - Refactoring


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1
changelog:
  - downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
  - downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
  - downloader: Show also calculated checksums in error message about bad checksum
  - Python: Return all strings in unicode


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1
changelog:
  - Fix ABI compatibility (RhBug: 1185180)
  - fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
  - downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
  - Make building tests and docs optional
  - librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1
changelog:
  - tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
  - Add LRO_OFFLINE
  - Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
  - Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
  - Add LR_VERSION constant with version string
  - python: Import contants from C librepo module in a loop
  - repoconf: Add support for failover and skip_if_unavailable options
  - handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
  - Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
  - util: Add lr_is_local_path()
  - New module repoconf for reading *.repo files
  - Add LRO_HTTPHEADER option (RhBug: 1181123)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.15-1
changelog:
  - Do not inlude header in the body output (RhBug: 1207685)
  - metalink: Proper error handling
  - New LRR_RPMMD_* contants
  - Support for client certificates
  - Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
  - CMakeLists.txt: do not check for CXX
  - build: Use solely pkg-config to find glib


author: Colin Walters <tmlcoch@redhat.com> - 1.7.16-1
changelog:
  - Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
  - downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
  - test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
  - repoconf: Proper handling of gint64 and guint64 types
  - build: Be compatible with cmake 2.8
  - handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
  - utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
  - Python: call lr_global_init() during module initialization
  - Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
  - util: Honor RFC 3986 (Issue #55)


author: Richard Marko <rmarko@redhat.com> - 2.1.11-28
changelog:
  - don't warn about missing 'type' if the locking fails
  - don't spit unnecessary debug messages
  - Related: #1243280, #1243280


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-31
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Related: #1266853


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-32
changelog:
  - Save remote name in reported_to
  - Add a function for compressing dumpdirs
  - Introduce global configuration + option for excluded elements
  - attach the URL of the uploaded problem to the relevant report
  - Resolves: #1300780


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-33
changelog:
  - lib: allow report SELinux denial from sealert under common user
  - mailx: stop creating dead.letter on mailx failures
  - mailx: introduce debug parameter -D
  - mailx: mail formatting: add comment right after %oneline
  - mailx: use problem report api to define an emais' content
  - lib: remove unused function make_description_bz
  - rhtsupport: attach all dump dir's element to a new case
  - rhtsupport: add pkg_vendor, reproducer and reproducible to description
  - rhtsupport: use problem report API to create description
  - lib: add Problem Format API
  - augeas: trim spaces before key value
  - rhtsupport: Discourage users from reporting in non Red Hat stuff
  - rhtsupport: Discourage users from opening one-shot crashes
  - report-gtk: Require Reproducer for RHTSupport
  - Add workflow for RHEL anonymous report
  - bugzilla: don't report private problem as comment
  - lib: move CREATE_PRIVATE_TICKET to the global configuration
  - event config: add support for 'restricted access'
  - report-gtk: offer users to create private ticket
  - bugzilla: make the event configurable
  - uploader: /etc/libreport/plugins/upload.conf as default conf file
  - dd: make function uid_in_group() public
  - uploader: add possibility to set SSH keyfiles
  - uploader: move username and password to the advanced options
  - uploader: allow empty username and password
  - curl: add possibility to configure SSH keys
  - Resolves #1289513, #1277849, #1289513, #1279453, #1258482, #1236613, #1261358, #1281312, #1309317, #1264921


author: Dmitry Andreev <dandreev@virtuozzo.com> 1.0.3
changelog:
  - Rename directory for crashdumps #PSBM-50823
   - Collect light coredumps for vz* applications #PSBM-50895
   - create dirs in a proper way (Alexander Stefanov-Khryukin
  <akhryukin@parallels.com>)
   - Added license terms (Dmitry Mishin <dim@virtuozzo.com>)
   - Fix folder creation during 'make install' (Denis Silakov
  <dsilakov@gmail.com>)
   - For safety, create necessary folders during 'make install' if they are
  missing (Denis Silakov <dsilakov@gmail.com>)


author: Dmitry Andreev <dandreev@virtuozzo.com> 1.0.4
changelog:
  - Make message about invalid problem directory more clear (Denis Silakov
  <denis.silakov@rosalab.ru>)


author: Dmitry Andreev <dandreev@virtuozzo.com> 1.0.5
changelog:
  - PSBM-58108 Move dumpdir from /tmp to /vz/tmp and set the appropriate
  permissions to corefiles (Inga Pyass <ipyass@virtuozzo.com>)
   - PSBM-58108 Set 700 permissions on /tmp/virtuozzo_crash_dumps (Inga Pyass
  <ipyass@virtuozzo.com>)


author: Paul Moore <pmoore@redhat.com> - 2.2.1-1
changelog:
  - Removed '--disable-static' from the build to ensure that scmp_sys_resolver
    is self contained and resolve RPATH issues


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.2-4
changelog:
  - Fix libselinux.spec file
  - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
  - Add Int_to_mcs function to generate MCS labels from integers.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-5
changelog:
  - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
  - Add Int_to_mcs function to generate MCS labels from integers.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-6
changelog:
  - Add additional go bindings for get*con calls
  - Add go bindings test command
  - Modify man pages of set*con calls to mention that they are thread specific
  Resolves:#1053122


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Fix location of selinuxfs mount point (#1321086)
  - Only mount /proc if necessary
  - procattr: return einval for <= 0 pid args
  - procattr: return error on invalid pid_t inpu


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix setexecfilecon() to work better in a chroot (#1329931)
  - Fix typo in sefcontext_compile.8 (#1320062)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-4
changelog:
  - Clarify is_selinux_mls_enabled() description
  - Explain how to free policy type from selinux_getpolicytype()
  - Compare absolute pathname in matchpathcon -V
  - Add selinux_snapperd_contexts_path()
  - Modify audit2why analyze function to use loaded policy
  - Sort object files for deterministic linking order
  - Respect CC and PKG_CONFIG environment variable
  - Avoid mounting /proc outside of selinux_init_load_policy()
  - Fix multiple spelling errors


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-14
changelog:
  - Cleanup handling of missing mls_range to fix problems with useradd -Z
  - Fix auditing of login record changes, roles were not working correctly.
  Resolves: #1018840


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Sort object files for deterministic linking order
  - Support overriding Makefile RANLIB
  - Respect CC and PKG_CONFIG environment variable
  - Fix multiple spelling errors
  - genhomedircon: %{USERID} and %{USERNAME} support and code cleanups


author: Petr Lautrbach <plautrba@redhat.com> 2.5-4
changelog:
  - genhomedircon: add support for Development/Debug syntax
  - genhomedircon: generate contexts for logins mapped to the default user
  - Validate and compile file contexts before installing
  - Swap tcp and udp protocol numbers


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  	* filename_trans: use some better sorting to compare and merge
  	* coverity fixes
  	* implement default type policy syntax
  	* Fix memory leak issues found by Klocwork
  - Add CONTRAINT_NAMES to the kernel


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Correctly detect unknown classes in sepol_string_to_security_class
  - Sort object files for deterministic linking order
  - Fix neverallowxperm checking on attributes
  - Remove libsepol.map when cleaning
  - Add high-level language line marking support to CIL
  - Change logic of bounds checking to match change in kernel
  - Fix multiple spelling errors
  - Only apply bounds checking to source types in rules
  - Fix CIL and not add an attribute as a type in the attr_type_map
  - Build policy on systems not supporting DCCP protocol
  - Fix extended permissions neverallow checking
  - Fix CIL neverallow and bounds checking
  - Android.mk: Add -D_GNU_SOURCE to common_cflags


author: Petr Lautrbach <plautrba@redhat.com> 2.5-5
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6
changelog:
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Andreas Schneider <asn@redhat.com> - 4.4.4-3
changelog:
  - related: #1260214 - Correctly warn about missing realm for ad domains
                        with 'security=domain'


author: Andreas Schneider <asn@redhat.com> - 4.4.4-4
changelog:
  - resolves: #1351655 - Fix winbind meomory leak with each cached credentials
                         login
  - resolves: #1351961 - Fix CVE-2016-2119


author: Andreas Schneider <asn@redhat.com> - 4.4.4-5
changelog:
  - resolves: #1359091 - Package /usr/lib/samba/ldb in the common-libs package
  - resolves: #1360788 - Fix multilib issue with ctdb-tests package
  - resolves: #1362385 - Fix Samba ignoring supplementary groups
  - resolves: #1364051 - Fix smbd panic with stale ctdb entries


author: Andreas Schneider <asn@redhat.com> - 4.4.4-6
changelog:
  - resolves: #1367316 - Increase required Kerbersion version number
  - resolves: #1366477 - Fix using the right krb5 ccache in libads
  - resolves: #1356501 - Fix high CPU usage with smbclient connection to
                         non-reachable IP


author: Andreas Schneider <asn@redhat.com> - 4.4.4-10
changelog:
  - resolves: #1393050 - Fix linking nss_wins with libreplace
  - resolves: #1393051 - Fix nss_wins function definitions for gethostbyname*
  - resolves: #1393048 - Fix %G substitution in AD case
  - resolves: #1393052 - Fix regression of smbclient unable to connect to
                         Apple and Azure


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-9
changelog:
  - curl consumes too much memory during scp download (#1080459)
  - prevent a not-connected agent from closing STDIN (#1147717)


author: Tony Asleson <tasleson@redhat.com> 1.2.3-3
changelog:
  - Megaraid fixes
    * https://bugzilla.redhat.com/show_bug.cgi?id=1238554
    * https://bugzilla.redhat.com/show_bug.cgi?id=1238582
    * https://bugzilla.redhat.com/show_bug.cgi?id=1238566
  - Command line exit code fix:
    * https://bugzilla.redhat.com/show_bug.cgi?id=1238737


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.6-2
changelog:
  - Resolves: rhbz#1241015 - tdb deadlocks if you acquire allrecord_lock
                             and start two traverses


author: Marcelo Ricardo Leitner <mleitner@redhat.com> - 1.25-2
changelog:
  - Updated to 1.25 [1286840 1286063]
  - Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]


author: Marcelo Ricardo Leitner <mleitner@redhat.com> - 1.25-4
changelog:
  - Added patches to avoid hung on shutdown [1330550]
  - Added patch to fix an out-of-bound write with zero-length hardware
    address [1286840]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-2
changelog:
  - Allow building with RHEL-7.0 libtalloc
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-3
changelog:
  - BuildRequire the minimal applicable libtalloc version
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Nikola Forró <nforro@redhat.com> - 4.0.3-21
changelog:
  - Remove patches for CVEs:
    CVE-2014-8127, CVE-2014-8129, CVE-2014-8130,
    CVE-2014-9330, CVE-2015-7554, CVE-2015-8665,
    CVE-2015-8683, CVE-2015-8781, CVE-2015-8784
  - Add patches for CVEs:
    CVE-2016-3632, CVE-2016-3945, CVE-2016-3990,
    CVE-2016-3991, CVE-2016-5320
  - Update patches for CVEs:
    CVE-2014-9655, CVE-2015-1547, CVE-2015-8668
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-25
changelog:
  - Add patches for CVEs:
    CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,
    CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,
    CVE-2015-8784
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-26
changelog:
  - Add patches for CVEs:
    CVE-2016-9533, CVE-2016-9534, CVE-2016-9535,
    CVE-2016-9536, CVE-2016-9537, CVE-2016-9540,
    CVE-2016-5652, CVE-2015-8870
  - Resolves: #1412080


author: Steve Dickson <steved@redhat.com> 0.2.4-0.7
changelog:
  - Backported upstream debugging (bz 1273159)
  - Fixed memory leak in svc_vc_create (bz 1276685)
  - Fixed memory leaks in server-side GSS authenticator (bz 1282488)


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.2-14
changelog:
  - allow root to copy files into NFS in libtoolize (#740079)
  - pre-filter sed's input by dd (#636045)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-2
changelog:
  - lu-Fix-rpmdiff-failure.patch [bz#1229359]
  - lu-Fix-buffer-overflow-reported-by-Coverity.patch [bz#1233114]
  - Resolves: bz#1229359
    (Fix multilib support)
  - Resolves: bz#1233114
    (fix off-by-one in dwarf_to_unw_regnum (CVE-2015-3239))


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-5
changelog:
  - Version bumped [bz#1238864]
  - Resolves: bz#1238864
    libunwind: bump version to win against existing branches


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-5.el7_2.2
changelog:
  - Fix update from EPEL version [bz#1289950]
  - Resolves: bz#1289950
    (libunwind in RHEL 7.2 has a smaller release than the last libunwind package in EPEL-7)


author: Miloslav Trmač <mitr@redhat.com> - 0.58-2
changelog:
  - Always use secure_getenv() or __secure_getenv(), fail build if neither is
    available.  Patch by Viktor Hercinger <vhercing@redhat.com>.


author: Derbyshev Dmitry' <dderbyshev@virtuozzo.com> 7.0.14
changelog:
  - vcmmd_config: node_list and cpu_list fields added
   - vcmmd_config: string values in config
   - vcmmd_config: prepare for string values in config


author: Konstantin Neumoin <kneumoin@virtuozzo.com> 7.0.15
changelog:
  - add VCMMD_VE_CONFIG_GUARANTEE_TYPE to ve config (#PSBM-55018)
   - add VCMMD_ERROR_TOO_MANY_REQUESTS


author: Konstantin Neumoin <kneumoin@virtuozzo.com> 7.0.16
changelog:
  - Revert "add VCMMD_ERROR_TOO_MANY_REQUESTS"
   - Revert "add VCMMD_VE_CONFIG_GUARANTEE_TYPE to ve config"


author: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com> - 2.4.0-1.vz7.20
changelog:
  - upgrade: support vnc #PSBM-60651
  - upgrade: support bridged interfaces #PSBM-60655
  - upgrade: drop temporary logging to file


author: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com> - 2.4.0-1.vz7.21
changelog:
  - qemu: command: align disk serial check to schema #PSBM-59218
  - qemu: support backup jobs in qemuMonitorGetBlockJobInfo #PSBM-57548
  - upgrade: address issues with libvirt crash while upgrade is in process #PSBM-60706
  - upgrade: fix rare 'domain not running' during upgrade #PSBM-61865
  - upgrade: make upgrade work when domain has snashots #PSBM-62777
  - upgrade: upgrade serial devices via changing backend functionality #PSBM-63255


author: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com> - 2.4.0-1.vz7.22
changelog:
  - qemu.conf: set upper limit for vnc/spice ports to 6900                  #PSBM-63824
  - upgrade: don't reject upgrade if hostname is localhost                  #PSBM-63659
  - qemu: wait indefinetly when acquiring job condition in event handler    #PSBM-63118
  - upgrade: close agent channel befor postcopy with release ram            #PSBM-63758


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-5
changelog:
  - qemu: Fix domain state after reset (rhbz#1269575)
  - rpc: virnetserver: Rename ClientSetProcessingControls to ClientSetLimits (rhbz#1357776)
  - rpc: virnetserver: Move virNetServerCheckLimits which is static up in the file (rhbz#1357776)
  - rpc: virnetserver: Add code to CheckLimits to handle suspending of services (rhbz#1357776)
  - admin: rpc: virnetserver: Fix updating of the client limits (rhbz#1357776)
  - rpc: virnetserver: Remove dead code checking the client limits (rhbz#1357776)
  - storage: Fix a NULL ptr dereference in virStorageBackendCreateQemuImg (rhbz#1363636)
  - qemu: Introduce qemuAliasFromHostdev (rhbz#1289391)
  - qemu: Use the hostdev alias in qemuDomainAttachHostSCSIDevice error path (rhbz#1289391)
  - storage: Don't remove the pool for buildPool failure in storagePoolCreate (rhbz#1362349)
  - lxcDomainCreateXMLWithFiles: Avoid crash (rhbz#1363773)
  - admin: Fix the default uri for session daemon to libvirtd:///session (rhbz#1356858)
  - docs: Distribute subsite.xsl (rhbz#1365004)
  - qemuBuildMachineCommandLine: Follow our pattern (rhbz#1304483)
  - Introduce SMM feature (rhbz#1304483)
  - Introduce @secure attribute to os loader element (rhbz#1304483)
  - qemu: Enable secure boot (rhbz#1304483)
  - qemu: Advertise OVMF_CODE.secboot.fd (rhbz#1304483)
  - tests: Fix broken build (rhbz#1304483)
  - cpu_x86: Introduce x86FeatureIsMigratable (rhbz#1365500)
  - cpu_x86: Properly drop non-migratable features (rhbz#1365500)
  - tests: Add a test for host-model CPU with CMT feature (rhbz#1365500)
  - cpu_x86: Fix host-model CPUs on hosts with CMT (rhbz#1365500)
  - virt-admin: Fix the error when an invalid URI has been provided (rhbz#1365903)
  - conf: improve error log when PCI devices don't match requested controller (rhbz#1363627)
  - conf: don't allow connecting upstream-port directly to pce-expander-bus (rhbz#1361172)
  - conf: restrict where dmi-to-pci-bridge can be connected (rhbz#1363648)
  - conf: restrict expander buses to connect only to a root bus (rhbz#1358712)
  - virNetDevMacVLanCreateWithVPortProfile: Don't mask virNetDevMacVLanTapOpen error (rhbz#1240439)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-6
changelog:
  - qemu_command: don't modify heads for graphics device (rhbz#1366119)
  - virsh: Fix core for cmdSecretGetValue (rhbz#1366611)
  - conf: report an error message for non-existing USB hubs (rhbz#1367130)
  - conf: free the ports array of a USB hub (rhbz#1366097)
  - utils: storage: Fix JSON field name for uri based storage (rhbz#1367260)
  - qemu: Adjust the cur_ballon on coldplug/unplug of dimms (rhbz#1220702)
  - conf: Provide error on undefined iothreadsched entry (rhbz#1366484)
  - qemu: Fix the command line generation for rbd auth using aes secrets (rhbz#1182074)
  - qemu: Fix crash hot plugging luks volume (rhbz#1367259)
  - Revert "admin: Fix the default uri for session daemon to libvirtd:///session" (rhbz#1367269)
  - libvirt: convert to typesafe virConf accessors (rhbz#1367269)
  - admin: Fix default uri config option name s/admin_uri_default/uri_default (rhbz#1367269)
  - virt-admin: Properly fix the default session daemon URI to admin server (rhbz#1367269)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-7
changelog:
  - qemu: caps: Always assume QEMU_CAPS_SMP_TOPOLOGY (rhbz#1097930)
  - conf: Extract code formatting vCPU info (rhbz#1097930)
  - conf: Rename virDomainVcpuInfoPtr to virDomainVcpuDefPtr (rhbz#1097930)
  - conf: Don't report errors from virDomainDefGetVcpu (rhbz#1097930)
  - tests: qemuxml2xml: Format status XML header dynamically (rhbz#1097930)
  - conf: convert def->vcpus to a array of pointers (rhbz#1097930)
  - conf: Add private data for virDomainVcpuDef (rhbz#1097930)
  - qemu: domain: Add vcpu private data structure (rhbz#1097930)
  - qemu: domain: Extract formating and parsing of vCPU thread ids (rhbz#1097930)
  - qemu: Add cpu ID to the vCPU pid list in the status XML (rhbz#1097930)
  - qemu: Store vCPU thread ids in vcpu private data objects (rhbz#1097930)
  - Fix logic in qemuDomainObjPrivateXMLParseVcpu (rhbz#1097930)
  - qemu: Add qemuProcessSetupPid() and use it in qemuProcessSetupIOThread() (rhbz#1097930)
  - qemu: Use qemuProcessSetupPid() in qemuProcessSetupEmulator() (rhbz#1097930)
  - qemu: Use qemuProcessSetupPid() in qemuProcessSetupVcpu() (rhbz#1097930)
  - qemuBuildCpuCommandLine: Don't leak @buf (rhbz#1097930)
  - conf: Make really sure we don't access non-existing vCPUs (rhbz#1097930)
  - conf: Make really sure we don't access non-existing vCPUs again (rhbz#1097930)
  - qemu: capabilities: Drop unused function virQEMUCapsGetMachineTypes (rhbz#1097930)
  - qemu: caps: Sanitize storage of machine type related data (rhbz#1097930)
  - qemu: cap: Refactor access to array in virQEMUCapsProbeQMPMachineTypes (rhbz#1097930)
  - qemu: monitor: Add monitor API for device_add supporting JSON objects (rhbz#1097930)
  - qemu: monitor: Add do-while block to QEMU_CHECK_MONITOR_FULL (rhbz#1097930)
  - qemu: Improve error message in virDomainGetVcpus (rhbz#1097930)
  - qemu: domain: Rename qemuDomainDetectVcpuPids to qemuDomainRefreshVcpuInfo (rhbz#1097930)
  - qemu: monitor: Rename qemuMonitor(JSON|Text)GetCPUInfo (rhbz#1097930)
  - qemu: domain: Improve vCPU data checking in qemuDomainRefreshVcpu (rhbz#1097930)
  - qemu: domain: Simplify return values of qemuDomainRefreshVcpuInfo (rhbz#1097930)
  - internal: Introduce macro for stealing pointers (rhbz#1097930)
  - tests: qemucapabilities: Add data for qemu 2.7.0 (rhbz#1097930)
  - qemu: setcpus: Report better errors (rhbz#1097930)
  - qemu: setvcpus: Extract setting of maximum vcpu count (rhbz#1097930)
  - qemu: driver: Extract setting of live vcpu count (rhbz#1097930)
  - qemu: driver: Split out regular vcpu hotplug code into a function (rhbz#1097930)
  - conf: Provide error on undefined vcpusched entry (rhbz#1097930)
  - qemu: monitor: Return structures from qemuMonitorGetCPUInfo (rhbz#1097930)
  - qemu: monitor: Return struct from qemuMonitor(Text|Json)QueryCPUs (rhbz#1097930)
  - qemu: Add capability for query-hotpluggable-cpus command (rhbz#1097930)
  - qemu: Forbid config when topology based cpu count doesn't match the config (rhbz#1097930)
  - qemu: capabilities: Extract availability of new cpu hotplug for machine types (rhbz#1097930)
  - qemu: monitor: Extract QOM path from query-cpus reply (rhbz#1097930)
  - qemu: monitor: Add support for calling query-hotpluggable-cpus (rhbz#1097930)
  - qemu: monitor: Add algorithm for combining query-(hotpluggable-)-cpus data (rhbz#1097930)
  - tests: Add test infrastructure for qemuMonitorGetCPUInfo (rhbz#1097930)
  - tests: cpu-hotplug: Add data for x86 hotplug with 11+ vcpus (rhbz#1097930)
  - tests: cpu-hotplug: Add data for ppc64 platform including hotplug (rhbz#1097930)
  - tests: cpu-hotplug: Add data for ppc64 out-of-order hotplug (rhbz#1097930)
  - tests: cpu-hotplug: Add data for ppc64 without threads enabled (rhbz#1097930)
  - qemu: domain: Extract cpu-hotplug related data (rhbz#1097930)
  - qemu: domain: Prepare for VCPUs vanishing while libvirt is not running (rhbz#1097930)
  - util: Extract and rename qemuDomainDelCgroupForThread to virCgroupDelThread (rhbz#1097930)
  - conf: Add XML for individual vCPU hotplug (rhbz#1097930)
  - qemu: migration: Prepare for non-contiguous vcpu configurations (rhbz#1097930)
  - qemu: command: Add helper to convert vcpu definition to JSON props (rhbz#1097930)
  - qemu: process: Copy final vcpu order information into the vcpu definition (rhbz#1097930)
  - qemu: command: Add support for sparse vcpu topologies (rhbz#1097930)
  - qemu: Use modern vcpu hotplug approach if possible (rhbz#1097930)
  - qemu: hotplug: Allow marking unplugged devices by alias (rhbz#1097930)
  - qemu: hotplug: Add support for VCPU unplug (rhbz#1224341)
  - virsh: vcpuinfo: Report vcpu number from the structure rather than it's position (rhbz#1097930)
  - qemu: driver: Fix qemuDomainHelperGetVcpus for sparse vcpu topologies (rhbz#1097930)
  - doc: clarify documentation for vcpu order (rhbz#1097930)
  - conf: Don't validate vcpu count in XML parser (rhbz#1097930)
  - qemu: driver: Validate configuration when setting maximum vcpu count (rhbz#1370066)
  - conf: Fix build with picky GCC (rhbz#1097930)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-8
changelog:
  - util: storage: Properly set protocol type when parsing gluster json string (rhbz#1372251)
  - conf: Add IOThread quota and period scheduler/cputune defs (rhbz#1356937)
  - qemu: Add support to get/set IOThread period and quota cgroup values (rhbz#1356937)
  - network: new network forward mode 'open' (rhbz#846810)
  - virtlogd.socket: Tie lifecycle to libvirtd.service (rhbz#1372576)
  - cpu_x86: Fix minimum match custom CPUs on hosts with CMT (rhbz#1365500)
  - qemu: cgroup: Extract temporary relaxing of cgroup setting for vcpu hotplug (rhbz#1097930)
  - qemu: process: Fix start with unpluggable vcpus with NUMA pinning (rhbz#1097930)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-9
changelog:
  - Add helper for removing transient definition (rhbz#1368774)
  - qemu: Remove stale transient def when migration fails (rhbz#1368774)
  - qemu: Don't use query-migrate on destination (rhbz#1374613)
  - conf: allow hotplugging "legacy PCI" device to manually addressed PCIe slot (rhbz#1337490)
  - conf: Add support for virtio-net.rx_queue_size (rhbz#1366989)
  - qemu_capabilities: Introduce virtio-net-*.rx_queue_size (rhbz#1366989)
  - qemu: Implement virtio-net rx_queue_size (rhbz#1366989)
  - audit: Audit information about shmem devices (rhbz#1218603)
  - qemu: monitor: Use a more obvious iterator name (rhbz#1375783)
  - qemu: monitor: qemuMonitorGetCPUInfoHotplug: Add iterator 'anycpu' (rhbz#1375783)
  - qemu: monitor: Add vcpu state information to monitor data (rhbz#1375783)
  - qemu: domain: Don't infer vcpu state (rhbz#1375783)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-10.el7_3.1
changelog:
  - qemu: allow 32 slots on pcie-expander-bus, not just 1 (rhbz#1389369)
  - qemu: Reset post-copy capability after migration (rhbz#1392030)
  - qemuhotplugtest: Only read result_filename if used (rhbz#1392031)
  - schema: Allow shmem to have alias (rhbz#1392031)
  - conf: Allow copying of shmem defs (rhbz#1392031)
  - qemu: Make qemuBuildShmemDevStr static (rhbz#1392031)
  - qemu: Rename qemuBuildShmemDevStr to qemuBuildShmemDevLegacyStr (rhbz#1392031)
  - qemu: Move common checks outside qemuBuildShmemDevLegacyStr (rhbz#1392031)
  - qemu: Reorder shmem params nicely (rhbz#1392031)
  - qemu: Abstract shmem socket path preparation (rhbz#1392031)
  - qemu: Rename qemuBuildShmemBackendStr to qemuBuildShmemBackendChrStr (rhbz#1392031)
  - qemu: Add qemuAssignDeviceShmemAlias and use it (rhbz#1392031)
  - conf: Add some shmem helpers for future use (rhbz#1392031)
  - conf: Remove incorrect check when encoding shmem audit message (rhbz#1389013)
  - conf: Fix virDomainShmemDefFind (rhbz#1392031)
  - conf: Don't complicate find loop (rhbz#1392031)
  - qemu: Disable migration with ivshmem (rhbz#1392031)
  - conf, qemu: Add support for shmem model (rhbz#1392031)
  - conf, qemu: Add newer shmem models (rhbz#1392031)
  - qemu: Add capabilities for ivshmem-{plain, doorbell} (rhbz#1392031)
  - qemu: Save various defaults for shmem (rhbz#1392031)
  - qemu: Support newer ivshmem device variants (rhbz#1392031)
  - qemu: Add support for hot/cold-(un)plug of shmem devices (rhbz#1392031)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-10.el7_3.2
changelog:
  - qemu: Fix double free when live-attaching shmem (rhbz#1392031)
  - qemu: Make sure shmem memory is shared (rhbz#1392031)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-10.el7_3.3
changelog:
  - virDomainNetDefParseXML: Realign (rhbz#1392032)
  - virDomainNetGetActualType: Return type is virDomainNetType (rhbz#1392032)
  - qemuBuildInterfaceCommandLine: Move hostdev handling a bit further (rhbz#1392032)
  - qemuBuildInterfaceCommandLine: Move vhostuser handling a bit further (rhbz#1392032)
  - qemuBuildInterfaceCommandLine: Move from if-else forest to switch (rhbz#1392032)
  - qemuDomainAttachNetDevice: Move hostdev handling a bit further (rhbz#1392032)
  - qemuDomainAttachNetDevice: Explicitly list allowed types for hotplug (rhbz#1392032)
  - qemuBuildHostNetStr: Explicitly enumerate net types (rhbz#1392032)
  - qemuBuildChrChardevStr: Introduce @nowait argument (rhbz#1392032)
  - qemuBuildVhostuserCommandLine: Reuse qemuBuildChrChardevStr (rhbz#1392032)
  - qemuBuildVhostuserCommandLine: Unify -netdev creation (rhbz#1392032)
  - qemuBuildHostNetStr: Support VIR_DOMAIN_NET_TYPE_VHOSTUSER (rhbz#1392032)
  - qemu_hotplug: Support interface type of vhost-user hotplug (rhbz#1392032)
  - qemu: snapshot: Don't attempt to resume cpus if they were not paused (rhbz#1406765)
  - qemuDomainAttachNetDevice: Don't overwrite error on rollback (rhbz#1404186)
  - qemuDomainAttachNetDevice: Enable multiqueue for vhost-user (rhbz#1404186)
  - qemuDomainAttachNetDevice: pass mq and vectors for vhost-user with multiqueue (rhbz#1404186)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-10.el7_3.4
changelog:
  - qemuDomainAttachNetDevice: Avoid @originalError leak (rhbz#1404186)
  - qemu: snapshot: Resume VM after live snapshot (rhbz#1406765)


author: Petr Pisar <ppisar@redhat.com> - 0.9.9-9.1
changelog:
  - Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157670)
  - Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
    (bug #1157670)
  - Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
    handling) (bug #1157670)
  - Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
    (bug #1157670)
  - Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
    handling) (bug #1157670)


author: Jindrich Novy <jnovy@redhat.com> 1.3.2-2
changelog:
  - ship documentation only in -doc subpackage and only license
    in -devel (#540634) - thanks to Edward Sheldrake
  - -devel-doc subpackage requires -devel


author: Ville Skyttä <ville.skytta@iki.fi> - 1:1.3.3-3
changelog:
  - Run test suite during build.
  - Fix doc file permissions and duplicate doc dir ownership.
  - rpmlint warning fixes.


author: Igor Sukhih <igor@virtuozzo.com> 7.0.361
changelog:
  - Host-routed ips are not cleared on online CT migration #PSBM-62644
   - Do not force balloon_ino=12 mount option for real device #PSBM-62582


author: Igor Sukhih <igor@virtuozzo.com> 7.0.362
changelog:
  - Set default processes limit to 128K #PSBM-62805
   - vzctl2_env_set_ramsize(): skip set swappages on ramsize change


author: Igor Sukhih <igor@virtuozzo.com> 7.0.364
changelog:
  - suse-add_netif.sh: ip address is not delleted #PSBM-63215
   - env_configure_systemd_unit(): use CT state to detect systemd state
   - scripts: vz-cpt.in -- Drop old ulimit hack (#PSBM-63002)


author: Igor Sukhih <igor@virtuozzo.com> 7.0.365
changelog:
  - display specific error for VZT_TMPL_NOT_FOUND #PSBM-57361
   - ns_set_memory_param(): log current memory limits on error #PSBM-64043


author: Igor Sukhih <igor@virtuozzo.com> 7.0.367
changelog:
  - Add debug print for catching memory limits setup problem #PSBM-64043
   - vzctl2_set_log_quiet: disable ploop logging


author: Daniil Guzanov <dguzanov@odin.com> 7.0.4
changelog:
  - Fixed access rights for auto-provides generation (Dmitry Mishin
  <dim@parallels.com>)
   - Added generation of libvzevent.so.{major} (Dmitry Mishin <dim@parallels.com>)


author: Dmitry Mishin <dim@parallels.com> 7.0.6
changelog:
  - Added copyright and license headers
   - Added licence to devel package (Daniil Guzanov <dguzanov@odin.com>)


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-1
changelog:
  - upstream release of 2.9.1
  - a couple more API entry point
  - compatibility with python3
  - a lot of bug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6
changelog:
  - Fix missing entities after CVE-2014-3660 fix
  - CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
  - Fix regressions introduced by CVE-2014-0191 patch


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6.2
changelog:
  - Fix a series of CVEs (rhbz#1286496)
  - CVE-2015-7941 Stop parsing on entities boundaries errors
  - CVE-2015-7941 Cleanup conditional section error handling
  - CVE-2015-8317 Fail parsing early on if encoding conversion failed
  - CVE-2015-7942 Another variation of overflow in Conditional sections
  - CVE-2015-7942 Fix an error in previous Conditional section patch
  - Fix parsing short unclosed comment uninitialized access
  - CVE-2015-7498 Avoid processing entities after encoding conversion failures
  - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
  - CVE-2015-5312 Another entity expansion issue
  - CVE-2015-7499 Add xmlHaltParser() to stop the parser
  - CVE-2015-7499 Detect incoherency on GROW
  - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
  - CVE-2015-8242 Buffer overead with HTML parser in push mode
  - CVE-2015-1819 Enforce the reader to run in constant memory


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.9.1-6.3
changelog:
  - Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
  - Bug 763071: Heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071> (CVE-2016-1834)
  - Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (CVE-2016-1840)
  - Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (CVE-2016-1838)
  - Bug 758605: Heap-based buffer overread in xmlDictAddString <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (CVE-2016-1839)
  - Bug 759398: Heap use-after-free in xmlDictComputeFastKey <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (CVE-2016-1836)
  - Fix inappropriate fetch of entities content (CVE-2016-4449)
  - Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
  - Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
  - Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
  - Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
  - Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
  - Avoid building recursive entities (CVE-2016-3627)
  - Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
  - More format string warnings with possible format string vulnerability (CVE-2016-4448)


author: Matthias Clasen <mclasen@redhat.com> - 1.1.28-3
changelog:
  - Don't ship api docs twice (they were included in both
    the main and the devel package, by accident (need to save
    space on the f19 live images)


author: Chris Leech <cleech@redhat.com> - 1.0.1-3.git036e314
changelog:
  - 1273663 sync with upstream v1.0.1-26-g036e314
    system capability incorrect advertised as station only


author: Jaromir Capik <jcapik@redhat.com> - 3.3.4-8
changelog:
  - Fixing use of uninitialized 'vendor_id' value on ppc (#996590)
  - Fixing bogus date in the changelog


author: Martin Sehnoutka <msehnout@redhat.com> - 3.4.0-0.20160601gitf9185e5.1
changelog:
  - New upstream release
  - Drop patches that are already present in upstream
  - Apply upstream fix for systemd paths
  - Resolves: #1297795


author: Jan Kaluza <jkaluza@redhat.com> - 3.8.6-5
changelog:
  - mention copy/copytruncate/renamecopy influence to olddir option (#1175292)
  - delete last log when dateformat cannot be sorted alphabetically (#1174208)
  - mark cron.daily/logrotate as config file (#1174207)
  - create olddir diectory if it does not exist (#1187161)


author: Jan Kaluza <jkaluza@redhat.com> - 3.8.6-8
changelog:
  - fix #1201252 - delete unused entries in state file, fix bad performance
    with big state file
  - fix #1272236 - move logrotate.status to /var/lib/logrotate and add it to rwtab.d


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-10
changelog:
  - fix #1192936 - provide diagnostic in case log does not need rotating
  - fix #1321980 - do not exit if status file is corrupted


author: Tim Niemueller <tim@niemueller.de> - 5.1.4-7
changelog:
  - Add patch to from lua.org with smaller bugfixes
  - sed -i -e 's/5\.1\.3/5.1.4/g' on autotoolize patch, bug #641144


author: pjp <pjp@fedoraproject.org> - r127-1
changelog:
  - Fixed a bug in LZ4 HC streaming mode
  - New lz4frame API integrated into liblz4
  - Fixed a GCC 4.9 bug on highest performance settings


author: pjp <pjp@fedoraproject.org> - r128-1
changelog:
  - lz4cli sparse file support
  - Restored lz4hc compression ratio
  - lz4 cli supports long commands
  - Introduced lz4-static sub package BZ#1208203


author: pjp <pjp@fedoraproject.org> - r129-1
changelog:
  - New LZ4_compress_fast() API.
  - New LZ4 CLI improved performance with multiple files.
  - Other bug fix and documentation updates.


author: pjp <pjp@fedoraproject.org> - r130-1
changelog:
  - Fixed: incompatibility sparse mode vs console.
  - Fixed: LZ4IO exits too early when frame crc not present.
  - Fixed: incompatibility sparse mode vs append mode.
  - Performance fix: big compression speed boost for clang(+30%).


author: pjp <pjp@fedoraproject.org> - r131-1
changelog:
  - New: Dos/DJGPP target #114.
  - Added: Example using lz4frame library #118.
  - Changed: liblz4.a no longer compiled with -fPIC by default.


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-10
changelog:
  - Replace expired certificates in the test suite
  - Fix running the test suite against recent OpenSSL versions


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-12
changelog:
  - Fix occasional spurious failures in test_makefile_timeout_fires
    Resolves: #969077
  - Fix incorrect exception handling of SSL_CTX_new (manifesting in FIPS mode)
    Resolves: #879043
  - Add minimal SNI support, based on a patch by Sander Steffann
    <sander@steffann.nl>
    Resolves: #1038795
  - Use only ECC curves available in Fedora in the test suite
    Related: #1038813
  - Fix terminating test suite helper processes when running in Koji
    Related: #1038813
  - Run test suite in %check, don't ship it in the package.  Based on a patch by
    Matěj Cepl <mcepl@redhat.com>.
    Resolves: #1038813


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-14
changelog:
  - Don't assume that export ciphers are enabled in the test suite
    Resolves: #1048887
  - Let the kernel allocate free ports for use by the test suite
    Resolves: #1048887


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-17
changelog:
  - Fix spurious failures of test_cookie_str_changed_mac
    Resolves: #1073950
  - Add support for IP addresses in subjectAltName
    Resolves: #1080142


author: Peter Schiffer <pschiffe@redhat.com> - 12.5-7
changelog:
  - cleaned .spec file
  - resolves: #805410
    fixed SIGSEGV crash in which_protocol() function
  - updated get-upstream-tarball.sh script and added it as additional source


author: Peter Schiffer <pschiffe@redhat.com> - 12.5-9
changelog:
  - related: #912785
    used -D_FILE_OFFSET_BITS=64 flag at the compile time
  - return error code when TMPDIR is set to an invalid path while sending email
  - added missing -v option to the usage message


author: Petr Machata <pmachata@redhat.com> - 1:3.82-18
changelog:
  - Backport upstream patch that adds wildcard expansion to pattern
    rules. (make-3.82-stem_glob.patch)


author: Petr Machata <pmachata@redhat.com> - 1:3.82-19
changelog:
  - make now restores rlimit to its original values before launching
    subprocess via $(shell) (make-3.82-func_shell-rlimit.patch)
  - Determinize one test (make-3.82-tests-SECONDARY.patch)


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-22
changelog:
  - Check if the target-specific variable is the same as the global
    variable, and if it is, don't free it.  Savannah bug #31743.
    Resolves: #1323206


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-23
changelog:
  - In very obscure situations we may incorrectly write the free token
    back to the pipe.
    Resolves: #1322670


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.3-1
changelog:
  - resolves: #858577
    updated to 2.6.3
  - cleaned .spec file
  - resolves: #855632
    fixed SIGABRT crash
  - adds support for man-pages-overrides


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.3-6
changelog:
  - resolves: #948695
    fixed double free
  - fixed certain man pages to match options with --help and --usage


author: Peter Schiffer <pschiffe@redhat.com> - 3.52-1
changelog:
  - resolves: #981385
    updated to 3.52
  - fixed broken sentence on the futex(7) man page
  - resolves: #885740
    documented O_PATH flag on the open(2) man page


author: Peter Schiffer <pschiffe@redhat.com> - 3.53-5
changelog:
  - resolves: #1058101
    added note about default values to the nscd.conf(5) man page
  - resolves: #1059829
    added three pthread_mutex* man pages from POSIX.1-2008
  - resolves: #1062906
    removed boot(7) man page


author: jchaloup <jchaloup@redhat.com> - 7.1.3-1
changelog:
  - resolver.5 is a redirection to resolv.conf
    upload the latest tarball
    related: #1147718
  - procng-ng contains pl/pkill.1 man page which reffers non-existing one, removing the pl mutation
    related: #1150170


author: jchaloup <jchaloup@redhat.com> - 7.2.0-1
changelog:
  - Upload new tarball
    resolves: #1225032
  - removed bug fixed in original component: #1152066 (bind)
  - removed bug fixed in original component: #1147545 (zsh)
  - backport MT info from man-pages 3.81
    resolves: #1197850
  - fix typoes in mgetty's man pages
    resolves: #1141874
  - fix wrong usage of accept/connect options in stunnel.8
    resolves: #1155977
  - autoconf: add missing config.guess.1 and config.sub.1 (no patch)
    resolves: #1162225
  - rtld-audit.7 fix the correct format for cookies
    resolves: #1222720
  - Don't generate debuginfo subpackage
    resolves: #1179262


author: jchaloup <jchaloup@redhat.com> - 7.2.1-1
changelog:
  - Upload new tarball
    related: #1225032
  - removed bug fixed in original component: #1147556 (mt-st)
  - fix dump utmp name in dump-utmp.8
    resolves: #1164846


author: jchaloup <jchaloup@redhat.com> - 7.2.4-1
changelog:
  - New patch for fpurge with MT introduced since the first evaluation
  - Remove mkfifoat.3 man page
  - Upload new tarball
    related: #1197850


author: Nikola Forró <nforro@redhat.com> - 7.3.0-1
changelog:
  - Upload new tarball
    resolves: #1343004
  - remove bug fixed in original component: #1147538 (xinetd)
  - remove bug fixed in original component: #1147550 (vsftpd)
  - remove bug fixed in original component: #1147551 (vsftpd)
  - remove bug fixed in original component: #1147552 (pam_krb5)
  - remove bug fixed in original component: #1147572 (wget)
  - remove bug fixed in original component: #1155006 (mc)
  - remove bug fixed in original component: #1218284 (stunnel)
  - remove bug fixed in original component: #1147564 (edac-utils)
  - __fpurge.3: add missing man page
    resolves: #1267657
  - cciss.4: replace man page content with notice about driver removal
    resolves: #1112307
  - libpaf-dsc.3, libpaf-ebb.3: fix formatting and examples
    resolves: #1181670
  - captest.8: describe --init-grp option
    resolves: #1255283
  - png.5: fix invalid RFC URL
    resolves: #1263575
  - socket.7: document SO_REUSEPORT option
    resolves: #1269549
  - userhelper.8: fix up exit status description and consistency
    resolves: #1274949
  - recv.2: change description of flags argument to apply also to recvfrom and recvmsg
    resolves: #1278492
  - nsswitch.conf.5: add list of files being read when "files" service is used
    resolves: #1289915
  - prctl.2: add description of Intel MPX calls
    resolves: #1297898
  - iconv.1, locale.1, localedef.1, repertoiremap.5, iconvconfig.8: add new man pages
  - charmap.5, locale.5, charsets.7, locale.7: sync with upstream
    resolves: #1301661
  - tcp.7: document TCP_USER_TIMEOUT
    resolves: #1312875
  - recv.2, cmsg.3: fix type of cmsg_len member of cmsghdr structure
    resolves: #1315605
  - clone.2, fork.2: document ERESTARTNOINTR error code
    resolves: #1330661
  - open.2: document O_TMPFILE option
    resolves: #1330740
  - setfacl.1: document the meaning of '-' in perms
    resolves: #1337039
  - cp.1, install.1, mkdir.1, mkfifo.1, mknod.1: update security context options
    to reflect coreutils change
    resolves: #1263629
  - cp.1, install.1, mkdir.1, mkfifo.1, mknod.1: update security context options
    to reflect coreutils change
    resolves: #1263632
  - cp.1, install.1, mkdir.1, mkfifo.1, mknod.1: update security context options
    to reflect coreutils change
    resolves: #1263635
  - cp.1, install.1, mkdir.1, mkfifo.1, mknod.1: update security context options
    to reflect coreutils change
    resolves: #1263637


author: Nikola Forró <nforro@redhat.com> - 7.3.1-1
changelog:
  - Upload new tarball
    related: #1343004
  - remove bug fixed in original component: #1240948 (psacct)
  - recv.2: add deprecation note about recv() syscall on aarch64
    resolves: #1361588
  - libpng.3: fix invalid RFC URL
    related: #1263575
  - recv.2: change description of flags argument also on aarch64
    related: #1278492
  - localedef.1: add missing --old-style option
    related: #1301661
  - recv.2: fix type of cmsg_len member of cmsghdr structure also on aarch64
    related: #1315605
  - clone.2: document ERESTARTNOINTR error code also on aarch64
    related: #1330661
  - open.2: document O_TMPFILE option also on aarch64
    related: #1330740


author: Nikola Forró <nforro@redhat.com> - 7.3.2-1
changelog:
  - Upload new tarball
    related: #1343004
  - prctl.2, capabilities.7: document ambient capabilities
    resolves: #1360898


author: Jakub Dorňák <jdornak@redhat.com> - 1:5.5.44-3
changelog:
  - MDEV-8827 Duplicate key with auto increment
    fix innodb auto-increment handling three bugs:
      1. innobase_next_autoinc treated the case of current<offset incorrectly
      2. ha_innobase::get_auto_increment didn't recalculate current when increment changed
      3. ha_innobase::get_auto_increment didn't pass offset down to innobase_next_autoinc
    Resolves: #1300621


author: Jakub Dorňák <jdornak@redhat.com> - 1:5.5.47-1
changelog:
  - Rebase to 5.5.47
    Also fixes: CVE-2015-4792 CVE-2015-4802 CVE-2015-4815 CVE-2015-4816
    CVE-2015-4819 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858
    CVE-2015-4861 CVE-2015-4870 CVE-2015-4879 CVE-2015-4913 CVE-2015-7744
    CVE-2016-0505 CVE-2016-0546 CVE-2016-0596 CVE-2016-0597 CVE-2016-0598
    CVE-2016-0600 CVE-2016-0606 CVE-2016-0608 CVE-2016-0609 CVE-2016-0616
    CVE-2016-2047
    Resolves: #1300621


author: Prarit Bhargava <prarit@redhat.com> - 2:1.0-0.13.f30da3d
changelog:
  - Update to upstream commit f30da3d, minor fixes, no features [1085134]
  - Add /var/log/mcelog file [1098864]
  - remove .src.rpm file [1038755]


author: Prarit Bhargava <prarit@redhat.com> - 3:120-1.e7e0ac1
changelog:
  - Add Broadwell-U, Broadwell-DE, and Knights Landing/Xeon Phi Support
  - additional general fixes
  - add mcelog.conf and mcelog.triggers man pages
  - update NVR to 120 to match upstream


author: Prarit Bhargava <prarit@redhat.com> - 3:136-1.e4aca63
changelog:
  - update NVR to 136 to match upstream [1336431]
  - additional general fixes [1336431]
  - Skylake Client support (6,94) (6,78) [1255571]
  - Broadwell SoC/DE, EP & EX support (6,79) [1255572]


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.4-6
changelog:
  - Fix problem with reshaping IMSM arrays, where a new reshape could be
    launched before the first reshape had fully completed, leading to
    unpected results.
  - Resolves rhbz#1347762


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.4-12
changelog:
  - Apply additional required patch to fix buffer overrun using long device
    names
  - Resolves rhbz#1369891


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.4-13
changelog:
  - Make udev-md-array-arrays.rules more resilient to races if arrays are
    assembled and stopped and reassembled quick after each other.
  - Resolves rhbz#1331709


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.4-14
changelog:
  - The fix for 1331709 caused a problem with container arrays (IMSM) as
    these can show up with a valid size of 0. Work around this to only
    exit for non container arrays.
  - Resolves rhbz#1379194


author: Petr Oros <poros@redhat.com> - 2.1-16.1
changelog:
  - Fix issue with hot microcode cpu reload.
  - Move dracut call into posttrans phase.
  - Resolves: #1402512


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 98-2
changelog:
  - Only set the environment variable PKG_CONFIG_LIBDIR when
    using the macros %mingw32_cmake, %mingw32_cmake_kde4,
    %mingw64_cmake or %mingw64_cmake_kde4
  - Fixes FTBFS of the mingw-matahari package


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 99-3
changelog:
  - Own the folders %{mingw32_libdir}/cmake and %{mingw64_libdir}/cmake
  - Own all the locale folders below %{mingw32_datadir}/locale and %{mingw64_datadir}/locale (RHBZ #798329)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 100-1
changelog:
  - Various CMake improvements:
    * The toolchain files /usr/share/data/mingw/toolchain-mingw32.cmake
      and /usr/share/data/mingw/toolchain-mingw64.cmake don't have
      an uppercase character in their file name any more
    * Add CMAKE_SYSTEM_PROCESSOR to the CMake toolchain files
    * Removed Boost_COMPILER from the CMake toolchain files as
      it was unused and broken anyway
    * Made the RPM macros mingw32_cmake, mingw32_cmake_kde4,
      mingw64_cmake and mingw64_cmake_kde4 more generic
    * Removed the rpath references as mingw doesn't support rpath
    * Allow verbose CMake output to be disabled by setting the
      environment variable MINGW_CMAKE_NO_VERBOSE (RHBZ #987644)
    * When calling the mingw32-cmake and mingw64-cmake wrapper
      scripts don't use verbose CMake output by default
    * When using the CMake wrappers, prevent CFLAGS and CXXFLAGS
      from being set unless they're already set in the current
      environment (RHBZ #1136069)
    * Don't set LIB_INSTALL_DIR any more in the CMake macros
      as it breaks CPack and isn't needed by any of the
      Fedora MinGW packages (RHBZ #1152696)
  - Accept empty MINGW{32,64}_{C,CPP,CXX}FLAGS environment variables
  - Removed old _mingw32 macros which have been deprecated since Fedora 17


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 101-1
changelog:
  - Update config.{guess,sub} in %mingw_configure (#1288256)
  - Regenerated list of default win32 DLL's


author: Kalev Lember <kalevlember@gmail.com> - 1.0-8
changelog:
  - Renamed the source package to mingw-srvany (#801031)
  - Modernize the spec file
  - Use mingw macros without leading underscore


author: Richard W.M. Jones <rjones@redhat.com> - 1.0-13
changelog:
  - Switch to upstream version instead of fork.
  - There is no documentation upstream, but include a COPYING file.
  - The program is called 'rhsrvany.exe' (not srvany, which is a MSFT program).
  - Run rpmlint and fix problems.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0-14
changelog:
  - Various packaging fixes (RHBZ#1117291).
  - Put git version into release tag.
    https://fedoraproject.org/wiki/Packaging:NamingGuidelines#Release_Tag


author: Richard W.M. Jones <rjones@redhat.com> - 1.0-15
changelog:
  - Update to 20150115.
  - Includes fix for out of bounds array read (RHBZ#1187226).
  - Set macros so we only build the 32 bit target.


author: Miloslav Trmač <mitr@redhat.com> - 0.24-1
changelog:
  - Update to mlocate-0.24
    Resolves: #675189
  - Explicitly exclude fuse.sshfs.  Ideally we'd like to exclude all fuse.* file
    systems, sshfs is urgent because it it can hang updatedb.
    Resolves: #604145, #608094


author: Miloslav Trmač <mitr@redhat.com> - 0.26-1
changelog:
  - Update to mlocate-0.26
  - Drop no longer necessary %clean and %defattr commands.
  - Enable hardened build
    Resolves: #853189


author: Miloslav Trmač <mitr@redhat.com> - 0.26-3
changelog:
  - Update cron packaging for https://fedoraproject.org/wiki/Packaging:CronFiles
    Notably, the cron script (previously not %config) was renamed.


author: Michal Sekletar <msekleta@redhat.com> - 0.26-6
changelog:
  - index zfs filesystems despite the fact they are marked as nodev (#1304416)
  - add gpfs to PRUNEFS (#1180672)
  - mlocate.db is ghost file created with non-default attrs, list them explicitly so rpm --verify doesn't report errors (#1182306)
  - use more strict permissions for cron script (#1179633)


author: Peter Jones <pjones@redhat.com> - 0.7-7
changelog:
  - Make sure we use the right keys on Aarch64.
    (It's only a demo at this stage.)
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 0.7-8
changelog:
  - Build for aarch64 as well 
    Related: rhbz#1100048
  - out-of-bounds memory read flaw in DHCPv6 packet processing
    Resolves: CVE-2014-3675
  - heap-based buffer overflow flaw in IPv6 address parsing
    Resolves: CVE-2014-3676
  - memory corruption flaw when processing Machine Owner Keys (MOKs)
    Resolves: CVE-2014-3677


author: Peter Jones <pjones@redhat.com> - 0.7-10
changelog:
  - Rebuild for Aarch64 to get \EFI\BOOT\BOOTAA64.EFI named right.
    (I managed to fix the inputs but not the outputs in -9.)
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 0.7-14
changelog:
  - Pull in aarch64 build so they can compose that tree.
    (-14 to match -unsigned)
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 0.9-2
changelog:
  - Apparently I'm *never* going to learn to build this in the right target
    the first time through.
    Related: rhbz#1100048


author: Colin Walters <walters@redhat.com> - 17.0.0-12
changelog:
  - Add patch for aarch64
  - Fix for aarch64 64k pagesize. BZ#1076181 (Mark Salter <msalter@redhat.com>)
  - Resolves: #1027067


author: Colin Walters <walters@redhat.com> - 17.0.0-16
changelog:
  - Add patch for aarch64 48bit VA limits
    This changes the API/ABI only on aarch64, and hence we also bump
    the soname solely on those architectures.  We do retain the same pkg-config
    file name though, so dependencies should only need a rebuild.
  - Resolves: #1324216


author: Michal Sekletar <msekleta@redhat.com> - 2:0.85-3
changelog:
  - migrate from consolehelper to policykit (#1014074)
  - introduce grace period (#1014073)
  - query all ipv6 nameservers (#1014075)
  - add missing documentation (#949030)
  - enable hardened build (#1018907)
  - specfile cleanup


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-5
changelog:
  - libnm,nmtui: fix handling empty cloned-mac-address property (rh#1372799)
  - ibft: grant required CAP_SYS_ADMIN capabilities (rh#1371201)


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-7
changelog:
  - wifi: another fix activation failure due to error changing MAC address (rh#1371623, rh#1374023)
  - dhcp: fix race condition that may cause lost lease events and DHCP timeouts (rh#1373276)


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-8
changelog:
  - libnm: fix crash in nm_vpn_plugin_info_list_get_service_types() (rh#1374526)
  - device: wait for MAC address change before setting up interface (rh#1371623, rh#1374023)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.4.0-9
changelog:
  - clients: handle secret requests only for current connection (rh#1351272)
  - device: fix crash reapplying connection to slave devices (rh#1376784)
  - cli: fix autocompletion after ifname (rh#1375933)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.9-8.20130126
changelog:
  - update to 20130126
  - clear scrollback buffer in clear (#815790)
  - make -base and -term subpackages noarch
  - make some dependencies arch-specific


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-17
changelog:
  - fixed various error codes in Python module (#1064338)
  - fixed net-snmp-config.h header file (#1064437)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-19
changelog:
  - Fixed not-increasing OIDs in IP-FORWARD-MIB::ipCidrRouteTable (#1172013)
  - Fixed HOST-RESOURCES-MIB::hrProcessorTable on machines with >100 CPUs
    (#1070076)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1086606)
  - Added clear error message when port specified in 'clientaddrr' config
    option cannot be bound (#1086925)
  - fixed proxying of out-of-tree GETNEXT requests (#1087801)
  - use python/README to net-snmp-python subpackage (#1158391)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-21
changelog:
  - Fixed crash on reloading 'exec' configuration options (#1228893)
  - Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
  - Fixed storageUseNFS functionality in hrStorageTable (#1193006)
  - Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
  - Fixed hrStorageTable to contain 31 bits integers (#1192221)
  - Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
  - Fixed log level of SMUX messages (#1189393)
  - Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
  - Fixed client utilities reporting 'read_config_store open failure on
    /var/lib/net-snmp/snmpapp.conf' (#1151310)
  - Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
  - Added 'diskio' option to snmpd.conf, it's possible to monitor only
    selected devices in diskIOTable (#1092308)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-23
changelog:
  - Fixed parsing of invalid variables in incoming packets (#1248414)
  - Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
    becomes writable (#1241897)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-24
changelog:
  - Fixed lmSensorsTable not reporting sensors with duplicate names
    (#1252053)
  - Fixed close() overhead of extend commands (#1252048)
  - Fixed out-of-bounds write in python code (#1252034)


author: Jaromír Končický <jkoncick@redhat.com> - 2.0-0.10.20130607git
changelog:
  - use all interfaces instead of default (#1003875)
  - reverted all changes on ether-wake.c and put original file


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-0.13.20131004git
changelog:
  - latest snapshot (#1013530)
  - remove %ifarch alpha condition from %prep
  - improve sctp-statistics.patch (#982638#c10)


author: Laine Stump <laine@redhat.com> - 0.2.3-6
changelog:
  - resolves rhbz#961184
  - wait for IFF_UP and IFF_RUNNING after calling ifup
  - resolves rhbz#1020204
  - remove extraneous quotes from BONDING_OPTS
  - resolves rhbz#1044681
  - eliminate use of uninitialized data when getting mac
  - resolves rhbz#1046594
  - support systemd based netcf transaction


author: Laine Stump <laine@redhat.com> - 0.2.3-8
changelog:
  - resolves rhbz 1060076
  - Transform STP value from yes/no to on/off
  - resolves rhbz 1060317
  - Require bridge-utils for netcf-libs in the specfile


author: Laine Stump <laine@redhat.com> - 0.2.6-1
changelog:
  - resolves rhbz#1115176
   - rebase to upstream 0.2.6
   - allow interleaved elements in interface XML schema
   - allow <link> element in vlan and bond interfaces
   - report link state/speed in interface status
   - change DHCPv6 to DHCPV6C in ifcfg files
   - max vlan id is 4095, not 4096


author: - Laine Stump <laine@redhat.com> 0.2.6-2
changelog:
  - resolves rhbz#1138196
   - report file path and reason when aug_save fails
   - resolves rhbz#1147650
   - recognize IPADDR0/PREFIX0/NETMASK0/GATEWAY0
   - use git to apply patches to source tree


author: Laine Stump <laine@redhat.com> - 0.2.8-1
changelog:
  - Rebase to netcf-0.2.8
   - resolve rhbz#1165965 - CVE-2014-8119
   - resolve rhbz#1159000
   - support multiple IPv4 addresses in interface config (redhat driver)
   - resolve rhbz#1113983
   - allow static IPv4 config simultaneous with DHCPv4 (redhat driver)
   - resolve rhbz#1170941
   - remove extra quotes from IPV6ADDR_SECONDARIES (redhat+suse drivers)
   - resolve rhbz#1090011
   - limit names of new interfaces to IFNAMSIZ characters
   - resolve rhbz#761246
   - properly parse ifcfg files with comments past column 1


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-5
changelog:
  - Fixed SHA-3 implementation to conform to final standard (#1252936)
  - Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
    in secp256r1 and secp384r1 calculations (#1314374)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-8
changelog:
  - Use a cache-silent version of mpz_powm to prevent cache-timing
    attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.13-1
changelog:
  - add support for changing colors in individual labels, scrollbars, entries,
    textboxes and scales, add custom colorsets 
  - add support for NEWT_COLORS and NEWT_COLORS_FILE variables (#689903)
  - allow resizing of form
  - fix errors found by coverity
  - fix va_list usage (Gwenole Beauchesne)
  - fix building and installing on Mac OS X (#652479)
  - check for slang.h header, support DESTDIR variable, add --without-python
    option (Otavio Salvador)
  - add Persian, Low German translations


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.14-1
changelog:
  - fix returning strings in whiptail and whiptcl (#752818)
  - fix configure to work with multiple python versions (#737998)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.15-1
changelog:
  - fix errors found by gcc-with-cpychecker (#800075)
  - fix building with tcl8.6 (#902561)
  - add fallback to python-config (#783627)
  - replace tabs in snack.py (#870647)
  - compile snackmodule.c with flag -fPIC (Kang Kai)
  - include new translations from transifex
  - allow newtWinMenu and newtWinEntries with no buttons or items
  - don't draw scale when not mapped
  - build with large-file support for stat64
  - remove unused variables in test code
  - update FSF address
  - remove obsolete macros
  - make some dependencies arch-specific


author: Steve Dickson <steved@redhat.com> 1.3.0-0.24
changelog:
  - rpcgssd: added upstream debugging support (bz 1273163)
  - start-statd: start rpc.statd only once (bz 1300007)
  - exportfs: Don't stop the server from coming up when exportfs fails (bz 1287468)
  - Changed install permissions on /var/lib/nfs/rpc_pipefs (bz 1291514)
  - nfs.sysconfig: added note about the default keytab needing to exist (bz 1292607)
  - mount.nfs: skip server address resolution on remount (bz 1313550)
  - nfs_connect_nb: handle EINTR during connection establishment (bz 1299003)
  - statd: Update existing record if we rece SM_MON with new cookie (bz 1284576)
  - nfsidmap: updated to add in two new features (bz 1290488)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.25
changelog:
  - mountstats.man:  Remove a few bogus .R macros (bz 1266013)
  - systemd: ensure nfs-config service is re-run as needed (bz 1331460)
  - exportfs: Deal with path's trailing "/"  (bz 1276534)
  - exportfs: replace one xlog(D_GENERAL) in host_canonname() (bz 1331801)
  - exportfs: Fix buf size in test_export() dump() (bz 1243234)
  - blkmapd: Added a usage routine (bz 1001431)
  - rpc.idmapd: Added a usage routine (bz 1001438)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.26
changelog:
  - gssd: use pthreads to handle upcalls (bz 1331540)
  - gssd: Fix inner-loop variable reuse (bz 1334848)
  - mount: run START_STATD fully as root (bz 1275082)
  - lockd: added lockd.conf to set module parameters (bz 1264387)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.27
changelog:
  - nfsd: use correct byte order on rdma port (bz 1310691)
  - blkmapd: Add the -h flag on the man page (bz 1001431)
  - nfsd: Remove some warnings nfsd.c (bz 1336419)
  - mountd.man: Update to change -P option as an alias for -p (bz 1037924)
  - mountd: cleaned up usage message (bz 1003716)
  - mountstats.man: fixed typo in man page (bz 1263966)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.29
changelog:
  - mountd: fix netgroup lookup for resolvable IP addresses (bz 1341908)
  - umount: fixed typo in usage message (bz 1246329)
  - mount.nfs: added usage output when no arguemnts are given (bz 1001443)
  - nfsidmap: added the -h option (bz 1339877)
  - exportfs: Do not fail on empty exports file (bz 1340788)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.30
changelog:
  - statd: suppress a benign log message in nsm_delete_host() (bz 1347030)
  - start-statd: Use flock to serialize the running of this script (bz 1300007)
  - spec: update requires version of libtirpc-devel (bz 1346711)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:6.40-5
changelog:
  - ncat should try to connect to all resolved addresses, not only the first one (#1192143)
  - do not print debug messages during normal use (#1134412)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-2
changelog:
  - Restore previously used s390x patch as it isn't upstream yet
  - Related: rhbz#1031465 - CVE-2013-5607


author: Elio Maldonado <emaldona@redhat.com> 4.10.6-2
changelog:
  - Generic 32/64 bit platform detection (fix ppc64le build)
  - Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le


author: Elio Maldonado <emaldona@redhat.com> - 4.10.6-3
changelog:
  - Restore s390x related patch as it hasn't been applied upstream yet
  - Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269363 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45


author: Daiki Ueno <dueno@redhat.com> - 3.28.2-1.0
changelog:
  - Rebase to NSS 3.28.2
  - Remove NSS_ENABLE_ECC and NSS_ECC_MORE_THAN_SUITE_B setting, which
    is no-op now
  - Enable gtests when requested
  - Remove nss-646045.patch and fix-nss-test-filtering.patch, which are
    not necessary
  - Remove sslauth-no-v2.patch and
    nss-sslstress-txt-ssl3-lower-value-in-range.patch, as SSLv2 is
    already disabled in upstream
  - Remove ssl-server-min-key-sizes.patch, as we decided to support DH
    key size greater than 1023 bits
  - Remove local patches for SHA384 cipher suites (now supported in
    upstream): dhe-sha384-dss-support.patch,
    client_auth_for_sha384_prf_support.patch,
    nss-fix-client-auth-init-hashes.patch, nss-map-oid-to-hashalg.patch,
    nss-enable-384-cipher-tests.patch, nss-fix-signature-and-hash.patch,
    fix-allowed-sig-alg.patch, tests-extra.patch
  - Remove upstreamed patches: rh1238290.patch,
    fix-reuse-of-session-cache-entry.patch, flexible-certverify.patch,
    call-restartmodules-in-nssinit.patch


author: Daiki Ueno <dueno@redhat.com> - 3.28.2-1.2
changelog:
  - Reorder cipher suites for compatibility
  - Re-enable BUILD_OPT, mistakenly disabled in the previous build


author: Daiki Ueno <dueno@redhat.com> - 3.28.2-1.4
changelog:
  - Add patch to fix bash syntax error in tests/ssl.sh
  - Build with support for SSLKEYLOGFILE
  - Disable the use of RSA-PSS with SSL/TLS


author: Daiki Ueno <dueno@redhat.com> - 3.28.2-1.6
changelog:
  - Restore ssl-server-min-key-sizes.patch
  - Disable TLS_ECDHE_{RSA,ECDSA}_WITH_AES_128_CBC_SHA256 by default
  - Enable 4 AES_256_GCM_SHA384 ciphersuites, enabled by the downstream
    patch in the previous release
  - Fix crash with tstclnt -W


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-14
changelog:
  - Pick up upstream freebl patch for CVE-2015-2730
  - Check for P == Q or P ==-Q before adding P and Q


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-1
changelog:
  - Rebase to nss-util from nss 3.21
  - Resolves: Bug 1297940 - Rebase RHEL 7.3 to NSS-util 3.21 in preparation for Firefox 45


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-4
changelog:
  - Manual merge from the rhel-7.2 branch
  - Fix one alias for naming compatibility with prior release
  - Remove an unused patch


author: Daiki Ueno <dueno@redhat.com> - 3.21.3-1
changelog:
  - Rebase to nss-3.21.3
  - Remove patch for CVE-2016-1950, which is included in the release
  - Related: Bug 1347908


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-19
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)
  - don't mobilize passive association when authentication fails (CVE-2014-9296)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-20
changelog:
  - validate lengths of values in extension fields (CVE-2014-9297)
  - drop packets with spoofed source address ::1 (CVE-2014-9298)
  - reject packets without MAC when authentication is enabled (CVE-2015-1798)
  - protect symmetric associations with symmetric key against DoS attack (CVE-2015-1799)
  - fix generation of MD5 keys with ntp-keygen on big-endian systems (CVE-2015-3405)
  - add option to set Differentiated Services Code Point (DSCP) (#1202828)
  - add nanosecond support to SHM refclock (#1117702)
  - allow creating all SHM segments with owner-only access (#1122012)
  - allow different thresholds for forward and backward step (#1193154)
  - allow symmetric keys up to 32 bytes again (#1191111)
  - don't step clock for leap second with -x option (#1191122)
  - don't drop packets with source port below 123 (#1171640)
  - retry joining multicast groups (#1207014)
  - increase memlock limit again (#1053569)
  - warn when monitor can't be disabled due to limited restrict (#1191108)
  - use larger RSA exponent in ntp-keygen (#1191116)
  - fix crash in ntpq mreadvar command (#1180721)
  - move sntp kod database to allow SELinux labeling (#1082934)
  - fix typos in ntpd man page (#1195211)
  - improve documentation of restrict command (#1213953)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-22
changelog:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-24
changelog:
  - fix crash with invalid logconfig command (CVE-2015-5194)
  - fix crash when referencing disabled statistic type (CVE-2015-5195)
  - don't hang in sntp with crafted reply (CVE-2015-5219)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
    CVE-2015-7702)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - check key ID in packets authenticated with symmetric key (CVE-2015-7974)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix infinite loop in ntpq/ntpdc (CVE-2015-8158)
  - fix resetting of leap status (#1242553)
  - extend rawstats log (#1242877)
  - report clock state changes related to leap seconds (#1242935)
  - allow -4/-6 on restrict lines with mask (#1304492)
  - explain synchronised state in ntpstat man page (#1309594)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-25
changelog:
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-25.el7_3.1
changelog:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - fix calculation of root distance again (CVE-2016-7433)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-2.git77d5dac.el7
changelog:
  - aavmf-ArmVirtualizationPkg-VirtFdtDxe-forward-FwCfg-addres.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-introduce-QemuFwCfgLib-instance.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-clone-PlatformIntelBdsLib-from-.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-add-basic-p.patch [bz#1172749]
  - aavmf-OvmfPkg-extract-QemuBootOrderLib.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-featurize-PCI-like-device-p.patch [bz#1172749]
  - aavmf-OvmfPkg-introduce-VIRTIO_MMIO_TRANSPORT_GUID.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-VirtFdtDxe-use-dedicated-VIRTIO.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-widen-ParseUnitAddressHexLi.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-OFW-to-UEFI-translation-for.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-adhere-to-Q.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-identify-new-shell-as-builtin-s.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-Intel-BDS-load-EFI-stubbed-Linu.patch [bz#1172749]
  - aavmf-spec-build-AAVMF-with-the-Intel-BDS-driver-RHELSA-on.patch [bz#1172749]
  - aavmf-Revert-ArmVirtualizationPkg-work-around-cache-incohe.patch [bz#1172910]
  - Resolves: bz#1172749
    (implement fw_cfg, boot order handling, and -kernel booting in ArmVirtualizationQemu)
  - Resolves: bz#1172910
    (revert Acadia-only workaround (commit df7bca4e) once Acadia host kernel (KVM) is fixed)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-3.git77d5dac.el7
changelog:
  - aavmf-OvmfPkg-QemuBootOrderLib-expose-QEMU-s-boot-menu-on-.patch [bz#1172756]
  - aavmf-OvmfPkg-PlatformBdsLib-get-front-page-timeout-from-Q.patch [bz#1172756]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-get-front-p.patch [bz#1172756]
  - Resolves: bz#1172756
    ([RFE]Expose boot-menu shortcut to domain via AAVMF)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-4.git77d5dac.el7
changelog:
  - aavmf-ArmPkg-ArmArchTimerLib-clean-up-comments.patch [bz#1188247]
  - aavmf-ArmPkg-ArmArchTimerLib-use-edk2-conformant-UINT64-UI.patch [bz#1188247]
  - aavmf-ArmPkg-ArmArchTimerLib-conditionally-rebase-to-actua.patch [bz#1188247]
  - aavmf-ArmVirtualizationQemu-ask-the-hardware-for-the-timer.patch [bz#1188247]
  - aavmf-ArmPkg-TimerDxe-smack-down-spurious-timer-interrupt-.patch [bz#1188054]
  - Resolves: bz#1188054
    (guest reboot (asked from within AAVMF) regressed in 3.19.0-0.rc5.58.aa7a host kernel)
  - Resolves: bz#1188247
    (backport "fix gBS->Stall()" series)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-5.git77d5dac.el7_1
changelog:
  - aavmf-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch [bz#1197141]
  - aavmf-ArmPlatformPkg-PEIM-startup-is-not-an-error.patch [bz#1197141]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-lack-of-QEM.patch [bz#1197141]
  - aavmf-ArmVirtualizationPkg-expose-debug-message-bitmask-on.patch [bz#1197141]
  - aavmf-spec-build-and-install-verbose-and-silent-default-AA.patch [bz#1197141]
  - Resolves: bz#1197141
    (create silent & verbose builds)


author: Laszlo Ersek <lersek@redhat.com> - 20150414-1.gitc9e5618.el7
changelog:
  - rebase from upstream 9ece15a to c9e5618
  - adapt .gitignore files
  - update to openssl-0.9.8zf
  - create Logo-OpenSSL.bmp rather than modifying Logo.bmp in-place
  - update to FatPkg SVN r93 (git 8ff136aa)
  - drop the following downstream-only patches (obviated by upstream
    counterparts):
    "tools_def.template: use forward slash with --add-gnu-debuglink (RHEL only)"
    "tools_def.template: take GCC48 prefixes from environment (RHEL only)"
    "OvmfPkg: set video resolution of text setup to 640x480 (RHEL only)"
    "OvmfPkg: resolve OrderedCollectionLib with base red-black tree instance"
    "OvmfPkg: AcpiPlatformDxe: actualize QemuLoader.h comments"
    "OvmfPkg: AcpiPlatformDxe: remove current ACPI table loader"
    "OvmfPkg: AcpiPlatformDxe: implement QEMU's full ACPI table loader interface"
    "OvmfPkg: QemuVideoDxe: fix querying of QXL's drawable buffer size"
    "OvmfPkg: disable stale fork of SecureBootConfigDxe"
    "OvmfPkg: SecureBootConfigDxe: remove stale fork"
    "Try to read key strike even when ..."
    "OvmfPkg: BDS: remove dead call to PlatformBdsEnterFrontPage()"
    "OvmfPkg: BDS: drop useless return statement"
    "OvmfPkg: BDS: don't overwrite the BDS Front Page timeout"
    "OvmfPkg: BDS: optimize second argument in PlatformBdsEnterFrontPage() call"
    'OvmfPkg: BDS: drop superfluous "connect first boot option" logic'
    "OvmfPkg: BDS: drop custom boot timeout, revert to IntelFrameworkModulePkg's"
    "Add comments to clarify mPubKeyStore buffer MemCopy. ..."
    "MdeModulePkg/SecurityPkg Variable: Add boundary check..."
    "OvmfPkg: AcpiPlatformDxe: make dependency on PCI enumeration explicit"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for READ and WRITE"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for other SCSI commands"
  - merge downstream AAVMF patch "adapt packaging to Arm64", which forces us to
    rename the main package from "OVMF" to "ovmf"
  - drop the following ARM BDS specific tweaks (we'll only build the Intel BDS):
    "ArmPlatformPkg/Bds: generate ESP Image boot option if user pref is unset
     (Acadia)"
    "ArmPlatformPkg/Bds: check for other defaults too if user pref is unset
     (Acadia)"
    "ArmPlatformPkg/ArmVirtualizationPkg: auto-detect boot path (Acadia)"
    "ArmPlatformPkg/Bds: initialize ConIn/ConOut/ErrOut before connecting
     terminals"
    "ArmPlatformPkg/Bds: let FindCandidate() search all filesystems"
    "ArmPlatformPkg/Bds: FindCandidateOnHandle(): log full device path"
    "ArmPlatformPkg/Bds: fall back to Boot Menu when no default option was found"
    "ArmPlatformPkg/Bds: always connect drivers before looking at boot options"
  - drop patch "ArmPlatformPkg/ArmVirtualizationPkg: enable DEBUG_VERBOSE (Acadia
    only)", obsoleted by fixed bug 1197141
  - tweak patch "write up build instructions (for interactive, local development)
    (RHELSA)". The defaults in "BaseTools/Conf/target.template", ie.
    ACTIVE_PLATFORM and TARGET_ARCH, are set for OVMF / X64. The AAVMF build
    instructions now spell out the necessary override options (-p and -a,
    respectively).
  - extend patch "build FAT driver from source (RHELSA)" to the Xen build as well
    (only for consistency; we don't build for Xen).
  - drop the following downstream-only AAVMF patches, due to the 77d5dac ->
    c9e5618 AAVMF rebase & join:
    "redhat/process-rh-specific.sh: fix check for hunk-less filtered patches"
    "redhat/process-rh-specific.sh: suppress missing files in final 'rm'"
    "ArmVirtualizationQemu: build UEFI shell from source (Acadia only)"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for READ and WRITE"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for other SCSI commands"
    "ArmVirtualizationPkg: work around cache incoherence on KVM affecting DTB"
    "Changed build target to supp-rhel-7.1-candidate"
    "ArmVirtualizationPkg: VirtFdtDxe: forward FwCfg addresses from DTB to PCDs"
    "ArmVirtualizationPkg: introduce QemuFwCfgLib instance for DXE drivers"
    "ArmVirtualizationPkg: clone PlatformIntelBdsLib from ArmPlatformPkg"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: add basic policy"
    "OvmfPkg: extract QemuBootOrderLib"
    "OvmfPkg: QemuBootOrderLib: featurize PCI-like device path translation"
    "OvmfPkg: introduce VIRTIO_MMIO_TRANSPORT_GUID"
    "ArmVirtualizationPkg: VirtFdtDxe: use dedicated VIRTIO_MMIO_TRANSPORT_GUID"
    "OvmfPkg: QemuBootOrderLib: widen ParseUnitAddressHexList() to UINT64"
    "OvmfPkg: QemuBootOrderLib: OFW-to-UEFI translation for virtio-mmio"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: adhere to QEMU's boot order"
    "ArmVirtualizationPkg: identify "new shell" as builtin shell for Intel BDS"
    "ArmVirtualizationPkg: Intel BDS: load EFI-stubbed Linux kernel from fw_cfg"
    'Revert "ArmVirtualizationPkg: work around cache incoherence on KVM affecting
     DTB"'
    "OvmfPkg: QemuBootOrderLib: expose QEMU's "-boot menu=on[, splash-time=N]""
    "OvmfPkg: PlatformBdsLib: get front page timeout from QEMU"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: get front page timeout from QEMU"
    "ArmPkg: ArmArchTimerLib: clean up comments"
    "ArmPkg: ArmArchTimerLib: use edk2-conformant (UINT64 * UINT32) / UINT32"
    "ArmPkg: ArmArchTimerLib: conditionally rebase to actual timer frequency"
    "ArmVirtualizationQemu: ask the hardware for the timer frequency"
    "ArmPkg: DebugPeCoffExtraActionLib: debugger commands are not errors"
    "ArmPlatformPkg: PEIM startup is not an error"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: lack of QEMU kernel is no error"
    "ArmVirtualizationPkg: expose debug message bitmask on build command line"
  - tweak patch "rebase to upstream 77d5dac (Acadia only)": update spec changelog
    only
  - tweak patch "spec: build AAVMF with the Intel BDS driver (RHELSA only)":
    apply "-D INTEL_BDS" to manual build instructions in redhat/README too
  - tweak patch "spec: build and install verbose and silent (default) AAVMF
    binaries": apply DEBUG_PRINT_ERROR_LEVEL setting to interactive build
    instructions in redhat/README too
  - install OVMF whitepaper as part of the OVMF build's documentation
  - Resolves: bz#1211337
    (merge AAVMF into OVMF)
  - Resolves: bz#1206523
    ([AAVMF] fix missing cache maintenance)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20150414-2.gitc9e5618.el7
changelog:
  - ovmf-OvmfPkg-PlatformPei-set-SMBIOS-entry-point-version-d.patch [bz#1232876]
  - Resolves: bz#1232876
    (OVMF should install a version 2.8 SMBIOS entry point)


author: Roman Kagan <rkagan@virtuozzo.com> - 20150414-2.gitc9e5618.vz7.2
changelog:
  - OvmfPkg: VirtioScsiDxe: reset device at ExitBootServices() #PSBM-40665
  - OvmfPkg: VirtioBlkDxe: reset device at ExitBootServices() #PSBM-40665


author: Roman Kagan <rkagan@virtuozzo.com> - vz-20150414-2.gitc9e5618.vz7.4
changelog:
  - OvmfPkg: PlatformPei: beautify memory HOB order in QemuInitializeRam()
  - OvmfPkg: PlatformPei: invert MTRR setup in QemuInitializeRam()


author: Ledvinka Ales <aledvink@redhat.com> - 2.0.19-7
changelog:
  - Hint compilation to avoid strict aliasing and prevent type-punned pointer issues.
  - Fix rPath regression for OpenIPMI-perl library.


author: Boris Ranto <branto@redhat.com> - 2.0.19-12
changelog:
  - New release
  - Move OpenIPMI modprobe conf to /usr/lib/modprobe.d/ (#1195289)
  - Avoid warning on update/removal (#1256798)
  - Stop manually creating and shipping /var/run/OpenIPMI (#1296560)


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.2-2
changelog:
  - add missing requires(post) on killall, which we use to poke the message
    bus daemon to get it to reload its configuration, spotted by rcritten


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.3-2
changelog:
  - use %systemd_postun_with_restart instead of plain old %systemd_postun,
    because we can be restarted in the %postun


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.4-1
changelog:
  - add an [Install] section containing WantedBy=sysinit.target to the systemd
    unit file (#963722), allowing it to actually be "enabled"


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.5-1
changelog:
  - add man(5) pages for the configuration files that we include which get
    included by others, just to be tidy (#884552)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.31.5-4
changelog:
  - correctly check the error returned from getpwnam_r(), so that we don't
    miss an ERANGE error (#1098616, part of #1108398)
  - add a note to pam_oddjob_mkhomedir's manual pointing to where the
    configuration would actually go (part of #1108398)
  - stop overriding the system-wide UMASK default in our default
    oddjobd-mkhomedir.conf file (#995097,#1123860), and stop using its
    proprocessor-input file as a reference, since we're patching it now


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-5
changelog:
  - enhancement: support TLS 1.1 and later (#1231522,#1160467)
  - fix: openldap ciphersuite parsing code handles masks incorrectly (#1231522)
  - fix the patch in commit da1b5c (fix: OpenLDAP crash in NSS shutdown handling) (#1231228)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-7
changelog:
  - Merge two MozNSS cipher suite definition patches into one. (#1245279)
  - Use what NSS considers default for DEFAULT cipher string. (#1245279)
  - Remove unnecesary defaults from ciphers' definitions (#1245279)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-8
changelog:
  - NSS does not support string ordering (#1231522)
  - implement and correct order of parsing attributes (#1231522)
  - add multi_mask and multi_strength to correctly handle sets of attributes (#1231522)
  - add new cipher suites and correct AES-GCM attributes (#1245279)
  - correct DEFAULT ciphers handling to exclude eNULL cipher suites (#1245279)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-10
changelog:
  - fix: slapd fails to start on boot (#1315958)
  - fix: id_query option is not available after rebasing openldap to 2.4.39 (#1311832)
  - Include sha2 module (#1292568)
  - Compile AllOp together with other overlays (#990893)
  - Missing mutex unlock in accesslog overlay (#1261003)
  - ITS#8337 fix missing olcDbChecksum config attr (#1292590)
  - ITS#8003 fix off-by-one in LDIF length (#1292619)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-12
changelog:
  - fix: slapd crash in do_search (#1316450)
  - fix: Setting olcTLSProtocolMin does not change supported protocols (#1249093)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-13
changelog:
  - fix: Bad log levels in check_password module
  - fix: We can't search expected entries from LDAP server
  - fix: OpenLDAP ciphersuite parsing doesn't match OpenSSL ciphers man page
    + Add TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 to list of ciphers
    + Add DH cipher string parsing option
    + Correct handling kECDH ciphers with aRSA or aECDSA


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-26 + 0.9.3-9
changelog:
  - Drop glob patch for sftp client preventing listing many files (#1310303)
  - Fix race condition between audit messages from different processes (#1310684)
  - Make systemd service forking to properly report state (#1291172)
  - Get rid of rpm triggers for openssh-5.x (#1312013)
  - Generate the host keys when the key files are empty (#1266043)
  - pam_ssh_agent_auth: authorized_keys_command option (#1317858)
  - Don't use MD5 digest from pam_ssh_agent_auth in FIPS mode (#1317952)


author: Jakub Jelen <jjelen@redhat.com> - 6.6.1p1-27 + 0.9.3-9
changelog:
  - Coverity and RPMDiff build issues (#1334326)
  - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (#1329191)
  - Check for real location of .k5login file (#1328243)
  - close ControlPersist background process stderr (#1335540)


author: Jakub Jelen <jjelen@redhat.com> - 6.6.1p1-28 + 0.9.3-9
changelog:
  - SFTP force permission collision with umask (#1344614)
  - Make closefrom() ignore FD's to /dev/ devices on s390 (#1318760)
  - Create a default value for AuthenticationMethods any (#1237129)
  - Fix ssh-copy-id with LogLevel=quiet (#1349556)
  - Expose more information to PAM (#1312304)
  - Move MAX_DISPLAYS to a configuration option (#1341302)
  - Add a wildcard option to PermitOpen directive (host) (#1344106)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-50
changelog:
  - improved fix for CVE-2015-1791
  - add missing parts of CVE-2015-0209 fix for corectness although unexploitable


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-52
changelog:
  - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
  - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
  - fix CVE-2015-3196 - race condition when handling PSK identity hint


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-55
changelog:
  - fix CVE-2016-0702 - side channel attack on modular exponentiation
  - fix CVE-2016-0705 - double-free in DSA private key parsing
  - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-56
changelog:
  - fix 1-byte memory leak in pkcs12 parse (#1312112)
  - document some options of the speed command (#1312110)
  - fix high-precision timestamps in timestamping authority
  - enable SCTP support in DTLS 
  - use correct digest when exporting keying material in TLS1.2 (#1289620)
  - fix CVE-2016-0799 - memory issues in BIO_printf
  - add support for setting Kerberos service and keytab in
    s_server and s_client


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-57
changelog:
  - fix CVE-2016-2105 - possible overflow in base64 encoding
  - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
  - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-60
changelog:
  - fix CVE-2016-2177 - possible integer overflow
  - fix CVE-2016-2178 - non-constant time DSA operations
  - fix CVE-2016-2179 - further DoS issues in DTLS
  - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
  - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
  - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
  - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
  - fix CVE-2016-6304 - unbound memory growth with OCSP status request
  - fix CVE-2016-6306 - certificate message OOB reads
  - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
    112 bit effective strength


author: David Sommerseth <dazo@eurephia.org> - 2.4.1-1
changelog:
  - Updating to upstream release, v2.4.1
  - Removed no-functional ./configure options
  - Use upstream tmfiles.d/openvpn
  - Package newer openvpn-client/server@.service unit files
  - Fedora EPEL exception: Re-introduce --tls-remote feature
  - Package management-notes.txt, describing the management interface


author: Artem Pavlenko <apavlenko@odin.com> 7.0.16
changelog:
  - Removed a mention of user bean counters
   - Fixed #PSBM-35265, #PSBM-35267, #PSBM-35268
   - A minor correction.
   - Minor corrections
   - Minor corrections
   - Fixed #PSBM-24380, #PSBM-24383, #PSBM-27287, #PSBM-33727, #PSBM-35211,
  <root@dhcp-10-30-25-56.sw.ru>)
   - A minor tweak for building webhelp with xsltproc.


author: Daniil Guzanov <dguzanov@odin.com> 7.0.17
changelog:
  - Makefile: remove target for build.xml
   - Makefile doesn't use saxon anymore (#PSBM-35186)
   - Remove ant dep


author: Artem Pavlenko <apavlenko@odin.com> 7.0.20
changelog:
  - Fixes PSBM-35260, PSBM-35245 (Alena Migai <amigai@odin.com>)
   - Removed period after list title
   - Minor corrections (Alena Migai <amigai@odin.com>)
   - Added information about virtual machines. Fixes PSBM-40486. References
  PSBM-24380 (root <root@localhost.localdomain>)
   - Minor formatting corrections
   - Minor formatting corrections
   - Corrected formatting, replaced a GIF with a PNG for PDF
   - Fixed a broken link
   - Formatting corrections
   - Replaced the GIF image with a PNG one for better DPI handling in PDF
   - Formatting corrections
   - Minor formatting correction
   - Corrected formatting
   - Changed DPI to 96
   - Initial commit
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)


author: Artem Pavlenko <apavlenko@odin.com> 7.0.21
changelog:
  - Fixed broken search in webhelp
   - Minor corrections
   - Fixes PSBM-35260, PSBM-35245 (Alena Migai <amigai@odin.com>)
   - Removed period after list title
   - Minor corrections (Alena Migai <amigai@odin.com>)
   - Added information about virtual machines. Fixes PSBM-40486. References
  PSBM-24380 (root <root@localhost.localdomain>)
   - Minor formatting corrections
   - Minor formatting corrections
   - Corrected formatting, replaced a GIF with a PNG for PDF
   - Fixed a broken link
   - Formatting corrections
   - Replaced the GIF image with a PNG one for better DPI handling in PDF
   - Formatting corrections
   - Minor formatting correction
   - Corrected formatting
   - Changed DPI to 96
   - Initial commit
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)
   - Initial commit (Alena Migai <amigai@odin.com>)


author: Artem Pavlenko <apavlenko@odin.com> 7.0.22
changelog:
  - Updated traffic shaping section (references PSBM-24239), removed the section
  on migration
   - Added Network Bandwidth Management. Fixes PSBM-24239, PSBM-41619. Formatting
  corrections. (Alena Migai <amigai@odin.com>)
   - Additions to PSBM-41619. Minor formatting corrections. (Alena Migai
  <amigai@odin.com>)
   - Added information about Network Bandwidth Management. Fixes PSBM-24239,
  PSBM-41619. Minor formatting corrections. (Alena Migai <amigai@odin.com>)
   - Fixes PSBM-24380
   - References PSBM-39259
   - Changed title for beta 2
   - Corrected the VM networking section
   - Minor corrections (Alena Migai <amigai@odin.com>)
   - Minor corrections (Alena Migai <amigai@odin.com>)
   - A minor formatting correction (Alena Migai <amigai@odin.com>)
   - Corrections to PSBM-41393 (Alena Migai <amigai@odin.com>)
   - Fixes PSBM-41393. Minor corrections (Alena Migai <amigai@odin.com>)
   - Fixes PSBM-41393. Minor corrections (Alena Migai <amigai@odin.com>)
   - Moved Google Analytics tracking code to </head>.
   - Added Google Analytics tracking code.
   - Added Google Analytics tracking code.
   - Added the reference guide, removed upgrade guide (for the time being).
   - Make new Virtuozzo guides available via index page (Sergey Bronnikov
  <sergeyb@openvz.org>)


author: Artem Pavlenko <apavlenko@odin.com> 7.0.29
changelog:
  - Minor changes
   - Corrected the list of supported guest OSs.
   - Corrected the list of supported guest OSs.
   - Updated for the beta. Fixes PSBM-41974.
   - Minor correction.
   - Minor changes.
   - Updated screenshots.
   - Fixes PSBM-43211
   - A minor formatting correction.
   - Described simfs support in known issues. References PSBM-40762
   - Changed product name to beta.
   - Fixes PSBM-43331, PSBM-43324, PSBM-40179
   - Updated the company website and the copyright year. (root
  <root@localhost.localdomain>)
   - Corrected path for HTML docs


author: Konstantin Volkov <wolf@virtuozzo.com> 7.0.32
changelog:
  - Updated readme for RTM (Artem Pavlenko <apavlenko@virtuozzo.com>)
   - Corrected the swap formula (Artem Pavlenko <apavlenko@virtuozzo.com>)
   - Removed obsolete guides. (Artem Pavlenko <apavlenko@virtuozzo.com>)
   - Removed mentions of 'beta'. (Artem Pavlenko <apavlenko@virtuozzo.com>)
   - Updated the installation guide for VZ7. Fixes PSBM-45045. (Artem Pavlenko
  <apavlenko@virtuozzo.com>)
   - Corrections to memory management section. References PSBM-45034. (Artem
  Pavlenko <apavlenko@virtuozzo.com>)
   - Added a section on how to configure autoballooning. References PSBM-45034.
  (Artem Pavlenko <apavlenko@virtuozzo.com>)
   - Corrections to PSBM-47492 (Artem Pavlenko <apavlenko@virtuozzo.com>)
   - References PSBM-45034 (Artem Pavlenko <apavlenko@virtuozzo.com>)
   - References PSBM-45043 (Artem Pavlenko <apavlenko@virtuozzo.com>)
   - Minor correction for PSBM-24223 (Artem Pavlenko <apavlenko@virtuozzo.com>)
   - Corrections to backup restore sections (Artem Pavlenko
  <apavlenko@virtuozzo.com>)
   - Added a section on ovztransfer. (Artem Pavlenko <apavlenko@virtuozzo.com>)
   - Added description of --remove-src. (Artem Pavlenko <apavlenko@virtuozzo.com>)
   - Intermediate commit for the license-related sections. (Artem Pavlenko
  <apavlenko@virtuozzo.com>)
   - Added a section on OpenVZ to VZ migration (Artem Pavlenko
  <apavlenko@virtuozzo.com>)
   - Corrections to the readykernel sections (Artem Pavlenko
  <apavlenko@virtuozzo.com>)
   - Sync with git.sw.ru/vz-docs (Artem Pavlenko <apavlenko@virtuozzo.com>)
   - Fixes PSBM-45033 (Artem Pavlenko <apavlenko@virtuozzo.com>)


author: Artem Pavlenko <apavlenko@virtuozzo.com> 7.0.34
changelog:
  - Corrections
   - Restored accidentally deleted information
   - Correction
   - Added a known issue. Added a section on OpenStack
   - Sync with vz-docs
   - Fixes PSBM-49712
   - Added a section on virt-manager. Fixes PSBM-49608
   - Corrections
   - Fixes PSBM-49568
   - Corrections
   - Fixes PSBM-49373
   - Fixes PSBM-49520. Corrections
   - Install afterboot man page, see #PSBM-39305 (Konstantin Volkov
  <wolf@virtuozzo.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 7.0.4-18
changelog:
  - Do not enable direct sshd - by default for public zone, see #PSBM-65376
  - Split venet-related and host-related rules


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.57-2
changelog:
  - Fix a bug in recent btrfs patch when an extended partition is examined. 
    (H.J. Lu) (bug #906847)
  - Fix naming of /boot partitions according to their fstab entry (bug #893472)
  - Don't generate .btrfsfix files which will be included in final rpm
  - Fix wrong boot partition set by linux-boot-prober when / and /boot are
    mounted (bug #906886)
  - Factor out 'logger', so that it is run once and logs are piped to it (John
    Reiser) (bug #875356)


author: rmarshall@redhat.com - 1.58-6
changelog:
  - Adding handling to skip probing extended dos partitions
    Resolves: rhbz#1322957
  - Improve Windows detection for dual boot and support Windows 10
    Resolves: rhbz#1322956
  - Suppress non-blocking dmraid sector size warning message
    Resolves: rhbz#1198918


author: rmarshall@redhat.com - 1.58-7
changelog:
  - Do not resolve device mapper links when generating stanzas
    for bootloader.
    Resolves: rhbz#1300262


author: rmarshall@redhat.com - 1.58-8
changelog:
  - Resolve some coverity concerns with how the previous patch detected
    whether or not a partition was a device mapper device.
    Related: rhbz#1300262


author: rmarshall@redhat.com - 1.58-9
changelog:
  - Fix regular expression that missed a corner case when detecting
    extended dos partitions.
    Resolves: rhbz#1322957


author: Stef Walter <stefw@redhat.com> - 0.20.7-1
changelog:
  - Update to upstream stable 0.20.7 release
  - Expose pkcs11x.h header and defines for attached extensions rhbz#1142305


author: Sérgio Basto <sergio@serjux.com> - 15.09-6
changelog:
  - Stating in License.txt file that we removed non-Free unrar code
    from sources (#190277)
  - Fix incorrect fsf address in the license files.
  - Add p7zip_15.09-no7zG_and_7zFM.patch in a diferent patch.


author: Sérgio Basto <sergio@serjux.com> - 15.14-1
changelog:
  - Update to 15.14 .
  - Rebase norar_cmake.patch
  - Minor improvement in snippet of documentation.
  - Drop patch1, from changelog build on s390 is fixed.
  - Drop p7zip-15.09-CVE-2015-1038.patch, from changelog if fixed.
  - Drop upstreamed p7zip_15.09-incorrect-fsf-address.patch .
  - Drop p7zip_15.09-no7zG_and_7zFM.patch, p7zip build is fixed.
  - Add sub-package p7zip-gui with 7zG.


author: Sérgio Basto <sergio@serjux.com> - 15.14-2
changelog:
  - Fix non-executable-in-bin for p7zipForFilemanager.
  - Remove p7zip_compress2.desktop to not duplicate the menu entries.
  - Also build 7zFM, rebuild p7zip_15.14_src_all-norar.tar.bz2, to build 7zFM
    instead 7zFM_do_not_use.


author: Sérgio Basto <sergio@serjux.com> - 15.14.1-1
changelog:
  - Update to 15.14.1
  - Revert 7zFM build, upstream recomends not build it
    http://sourceforge.net/p/p7zip/bugs/175/


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-8
changelog:
  - Quote timestamp-format correctly in alert_snmp.sh.sample
  - Unregister CIB callbacks correctly
  - Print resources section heading consistently in crm_mon output
  - Resolves: rhbz#773656
  - Resolves: rhbz#1361533


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-10
changelog:
  - Only clear remote node operation history on startup
  - Resend a lost shutdown request
  - Correctly detect and report invalid configurations
  - Don't include manual page for resource agent that isn't included
  - Resolves: rhbz#1288929
  - Resolves: rhbz#1310486
  - Resolves: rhbz#1352039


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-11
changelog:
  - Sanitize readable CIB output collected by crm_report
  - Document crm_report --sos-mode option
  - Speed up crm_report on Pacemaker Remote nodes
  - Avoid sbd fencing when upgrading pacemaker_remote package
  - Resolves: rhbz#1219188
  - Resolves: rhbz#1235434
  - Resolves: rhbz#1323544
  - Resolves: rhbz#1372009


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-9
changelog:
  - fix CVE-2014-2583: potential path traversal issue in pam_timestamp
  - pam_pwhistory: call the helper if SELinux enabled


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-11
changelog:
  - be tolerant to corrupted opasswd file
  - audit the module names that granted access
  - pam_userdb: correct the example in man page (#1078784)
  - pam_limits: check whether the utmp login entry is valid (#1080023)
  - pam_console_apply: do not print error if console.perms.d is empty
  - pam_limits: nofile refers to open file descriptors (#1111220)
  - apply PIE and full RELRO to all binaries built


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-14
changelog:
  - pam_unix: add no_pass_expiry option for ignoring password
    expiration in crond and sshd with public key authentication
  - add manual page for environment(5) (#1110257)
  - pam_loginuid: log if auditd not detected
  - always ignore audit error when -EPERM is returned (#1287800)
  - pam_lastlog: fix possible NULL dereference when localtime fails (#1313537)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.6-1
changelog:
  - handle ccache creation correctly for users who are mapped to principal
    names in realms other than the default (#999604)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.7-1
changelog:
  - drop some no-longer-necessary code to cede ownership of keyring ccaches
    to an unprivileged user at login-time to work better with upcoming changes
    to libkrb5's keyring ccache support (libkrb5: #991148, this one's #1005376)
  - if we don't have a ccname_template, if we're built against a libkrb5 that
    provides interfaces for reading its configuration files, try to read the
    default_ccache_name value from the [libdefaults] section before falling
    back to the default we've set at compile-time (#more of #1005376)
  - stop specifying a default ccache location at compile-time on F21 and later,
    to make our unconfigured default better line up with libkrb5's unconfigured
    default


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.8-4
changelog:
  - fix to only prompt for passwords when obtaining credentials for performing
    password changes by toggling the subsequent_prompt default to off when
    called to perform a password change (#1063933)


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-22
changelog:
  - Don't rebuild documentation for each platform. Doing so creates unique 
  document files which are shared and conflict on multilib installations.


author: Brian C. Lane <bcl@redhat.com> 3.1-21
changelog:
  - Backport fix for 1 sector logical partition separation from start of extended
    Resolves: rhbz#1212323


author: Brian C. Lane <bcl@redhat.com> 3.1-22
changelog:
  - Use 512b sector size when communicating with device-mapper
    Resolves: rhbz#1188431
  - Add a test to make sure partitions are the correct size on device-mapper
    Related: rhbz#1188431


author: Brian C. Lane <bcl@redhat.com> 3.1-23
changelog:
  - libparted: Use read only when probing devices on linux
    Resolves: rhbz#1245144
  - tests: Use wait_for_dev_to_ functions
    Related: rhbz#1245144


author: Brian C. Lane <bcl@redhat.com> 3.1-24
changelog:
  - tests: Add udevadm settle to wait_for_ loop
    Related: rhbz#1260664
  - tests: Add-wait-to-t9042
    Resolves: rhbz#1257415
  - tests: Fix t1700 failing on a host with a 4k xfs file
    Related: rhbz#1260664


author: Brian C. Lane <bcl@redhat.com> 3.1-25
changelog:
  - docs: Add list of filesystems for fs-type
    Resolves: rhbz#1311596
  - libparted: Remove fdasd geometry code from alloc_metadata
    Resolves: rhbz#1244833


author: Tomas Mraz <tmraz@redhat.com> 0.78.99-1
changelog:
  - use better (auditable) libselinux calls for checking
    the access to passwd (#518268)
  - add support for the -e option as seen on Debian passwd
  - make the binary PIE and full RELRO (#784483)


author: Igor Sukhih <igor@parallels.com> 7.0.4
changelog:
  - Make description of DELTA parameter more precise #PSBM-38870 #PSBM-38871
   - pcompact doesn't free disk space #PSBM-18690


author: Konstantin Volkov <wolf@virtuozzo.com> 7.0.10
changelog:
  - Move branding to separate file, see #PSBM-58317
   - Correct install stage in Makefile
   - Call make install from sources


author: Petr Pisar <ppisar@redhat.com> - 8.32-13
changelog:
  - Disable unsupported JIT mode on little-endian 64-bit PowerPC platform
    (bug #1125642)
  - Raise optimization level to 3 on little-endian 64-bit PowerPC (bug #1123498)


author: Petr Pisar <ppisar@redhat.com> - 8.32-15
changelog:
  - Fix compiling expression where start-anchored character with more than one
    other case follows circumflex in multiline UTF mode (bug #1110621)
  - Fix character class with a literal quotation (bug #1111091)
  - Fix empty-matching possessive zero-repeat groups in interpreted mode
    (bug #1119320)
  - Fix compiler crash for zero-repeated groups with a recursive back reference
    (bug #1119356)
  - Reset non-matched groups within capturing group up to forced match
    (bug #1161597)
  - Fix static linking (bug #1217111)
  - Package pcredemo.c as a documentation for pcre-devel (bug #1217118)


author: Petr Pisar <ppisar@redhat.com> - 8.32-15.1
changelog:
  - Fix CVE-2015-2328 (infinite recursion compiling pattern with recursive
    reference in a group with indefinite repeat) (bug #1330508)
  - Fix CVE-2015-8385 (buffer overflow caused by named forward reference to
    duplicate group number) (bug #1330508)
  - Fix CVE-2015-8386 (buffer overflow caused by lookbehind assertion)
    (bug #1330508)
  - Fix CVE-2015-3217 (stack overflow caused by mishandled group empty match)
    (bug #1330508)
  - Fix CVE-2015-5073 and CVE-2015-8388 (buffer overflow for forward reference
    within backward assertion with excess closing parenthesis) (bug #1330508)
  - Fix CVE-2015-8391 (inefficient posix character class syntax check)
    (bug #1330508)
  - Fix CVE-2016-3191 (workspace overflow for (*ACCEPT) with deeply nested
    parentheses) (bug #1330508)


author: Ivan Devat <idevat@redhat.com> - 0.9.152-5
changelog:
  - Fixed traceback when stopping pcsd shortly after start
  - Fixed removing a dead node from a cluster
  - Added support for clufter's 'dist' parameter
  - Fixed filtering by property name in "pcs property show"
  - Fixed an error in web UI when removing resources takes a long time
  - Fixed occasional missing optional arguments of resources in web UI
  - Improved help for alerts
  - Fixed recreating a remote node resource
  - Fixed exceptions when authenticating cluster nodes
  - Fixed permissions for bash completion file
  - Resolves: rhbz#1348579 rhbz#1225423 rhbz#1357945 rhbz#1302010 rhbz#1301993 rhbz#1346852 rhbz#1231858 rhbz#1315371 rhbz#1303136 rhbz#1329472 rhbz#1359154 rhbz#1349465


author: Ivan Devat <idevat@redhat.com> - 0.9.152-6
changelog:
  - Fixed documentation regarding clufter
  - Added possibility to change order of resources in a group in web UI
  - Added support for unmanaged resources in web UI
  - Added support for booth (cluster ticket manager)
  - Resolves: rhbz#1357945 rhbz#1281391 rhbz#1264360 rhbz#1308514


author: Ivan Devat <idevat@redhat.com> - 0.9.152-7
changelog:
  - Added possibility to hide inactive resources in "pcs resource show" command
  - Fixed exceptions handling when waiting for response from user in command line
  - Fixed nonexisting resource detection in pcsd
  - Fixed SBD_WATCHDOG_TIMEOUT option value validation
  - Removed possibility to change SBD_PACEMAKER
  - Fixed exception when disabling service on systemd systems
  - Added automatic auto_tie_breaker quorum option set whenever it is needed for SBD to work
  - Fixed setting sbd watchdog in config
  - Fixed error handling when upgrading cib schema
  - Improved consistency of syntax 'pcs alert recipient add' command
  - Resolves: rhbz#1298585 rhbz#1354498 rhbz#1346852 rhbz#1164402 rhbz#1315371 rhbz#1366307


author: Ivan Devat <idevat@redhat.com> - 0.9.152-8
changelog:
  - Fixed error message in node maintenance/unmaintenance commands
  - Fixed missing line at the end of booth config 
  - Fixed documentation regarding booth
  - Fixed remove multiple booth resources with "--force" flag
  - Fixed cleanup of ip resource if it fails to create booth resource
  - Added bash completion for booth
  - Fixed display full booth configuration
  - Added ability to display booth config from remote node
  - Added support for ticket options during adding booth ticket
  - Fixed adding node to cluster when booth is not installed
  - Added restart command for booth
  - Fixed check if auto_tie_breaker is required when enabling sbd
  - Improved way of displaying status of unmanaged primitive resources in web UI
  - Resolves: rhbz#1247088 rhbz#1308514 rhbz#1164402 rhbz#1264360


author: Ivan Devat <idevat@redhat.com> - 0.9.152-9
changelog:
  - Added warning when stopping/destroying qdevice instance which is being used 
  - Fiexed removing qdevice from a cluster which uses sbd
  - Fixed re-running "pcs cluster node add" if it failed due to qdevice
  - Fixed documentation regarding booth
  - Added warning when using unknown booth ticket option
  - Added constraint ticket remove command
  - Fixed return code and message when displaying node utilization for nonexistent node
  - Fixed setting utilization attributes in web UI
  - Fixed support for node utilization on remote node
  - Fixed updating of selected group when displaying new resource dialog
  - Fixed group list when managing cluster running older pcs in web UI 
  - Fixed displaying unmanaged status for resources for older pcs in web UI
  - Fixed clone/master/unclone group/ungroup buttons for older pcs in web UI
  - Fixed node standby/unstandby for older pcs in web UI
  - Resolves: rhbz#1158805 rhbz#1308514 rhbz#1305049 rhbz#1158500 rhbz#1231858


author: Ivan Devat <idevat@redhat.com> - 0.9.152-10
changelog:
  - Fixed error when stopping qdevice if is not running
  - Fixed removing qdevice from a cluster
  - Fixed documentation regarding booth
  - Fixed return code when no matching ticket constraint found during remove
  - Resolves: rhbz#1158805 rhbz#1305049


author: Ivan Devat <idevat@redhat.com> - 0.9.152-10.el7_3.1
changelog:
  - Fixed resolving resource agent name containing systemd service instance
  - Added posibility to push only diff of cib in 'cluster cib push'
  - Resolves: rhbz#1408476 rhbz#1404233


author: Ivan Devat <idevat@redhat.com> - 0.9.152-10.el7_3.3
changelog:
  - Provide a better error message in `pcs cluster cib-push` when the diff of the old and the new CIB is empty
  - Resolves: rhbz#1420757


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-284
changelog:
  - Use a macro to cover all 64-bit PowerPC architectures (bug #1061792)
  - Declare dependencies for cpan tool (bug #1122368)
  - Use stronger algorithm needed for FIPS in t/op/crypt.t (bug #1084796)
  - Make *DBM_File desctructors thread-safe (bug #1107542)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-286
changelog:
  - Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
  - Rebuild with corrected binutils to fix systemtap support (bug #1238472)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-288
changelog:
  - Fix CRLF conversion in ASCII FTP upload (bug #1263734)
  - Don't leak the temp utf8 copy of namepv (bug #1063330)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-291
changelog:
  - Backported and sub-packaged libraries historically supplied with Perl 4
    into perl-Perl4-CoreLibs


author: Paul Howarth <paul@city-fan.org> - 2.05.03-3
changelog:
  - Don't BR: perl(LWP::Simple) for optional tests when bootstrapping; this is a
    cleaner fix than nobbling perl-URI's runtime dependencies


author: Paul Howarth <paul@city-fan.org> - 20081208-8
changelog:
  - Clean up for modern rpmbuild:
    - Drop BuildRoot specification
    - Drop %clean section
    - Don't bother cleaning buildroot in %install section
    - Make %files list more explicit
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Use %{_fixperms} macro rather than our own chmod incantation
    - Replace provides filter with version that works with rpm ≥ 4.9
  - Include tests as %doc since they're referred to by examples/README


author: Paul Howarth <paul@city-fan.org> - 20120719-1
changelog:
  - Update to 20120719:
    - Support using data from RangeMessage.xml, so you can use the latest data
      from ISBN without updating this module
  - Fix shellbang and permissions of make_data.pl script to placate rpmlint
  - Filter dependency on perl(LWP::Simple), required only by make_data.pl script,
    not in normal operation
  - Don't need to remove empty directories from the buildroot
  - BR: perl(Carp), perl(File::Spec::Functions) and perl(Test::Manifest) ≥ 1.14
  - BR: at least version 1.00 of perl(Test::Pod)


author: Paul Howarth <paul@city-fan.org> - 20120719.001-1
changelog:
  - Update to 20120719.001:
    - Require Test::More ≥ 0.95 for subtest support
    - No code or feature changes
  - Bump Test::Manifest version requirement to 1.21
  - Bump Test::More version requirement to 0.95
  - Drop redundant buildreq perl(Test::Prereq)


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - Fix misuse of magic in API (CPAN RT#78080)
  - Drop redundant explicit requires for perl(Exporter) and perl(File::Temp)


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - Compress::Raw::Bzip2 needs to use PERL_NO_GET_CONTEXT (CPAN RT#80318)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79811)
    - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78080)


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - Compress::Raw::Zlib needs to use PERL_NO_GET_CONTEXT (CPAN RT#80319)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79812)
    - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78079)


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
  - Update to 2.061
    - Include zlib 1.2.8 source
    - Typo fix (CPAN RT#85431)
    - Silence compiler warning by making 2nd parameter to DispStream a const char*


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.135.07-240
changelog:
  - update the version to override the module from perl.srpm
  - bump release to override sub-package from perl.spec


author: Petr Pisar <ppisar@redhat.com> - 2.51-6
changelog:
  - Rebuild against "file" package fixed by Jan Kaluza to correct run-time
    dependencies (bug #1048910)


author: Paul Howarth <paul@city-fan.org> - 3.20-10
changelog:
  - Clean up spec file for modern rpmbuild:
    - Drop BuildRoot definition
    - Drop %defattr
    - Drop %clean section
    - Drop cleaning of buildroot in %install
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Use %{_fixperms} macro rather than our own chmod incantation
    - Don't use macros for commands
  - Break build dependency loop by only using perl(Test::Pod) if we're not
    bootstrapping
  - BR: perl(Test::More)


author: Petr Pisar <ppisar@redhat.com> 6.00-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Remove BuildRoot stuff
  - Conflicts with perl-libwww-perl-5* and older


author: Petr Pisar <ppisar@redhat.com> - 0.033-2
changelog:
  - Croak on failed write into a file (bug #1031096)
  - Do not use already existing temporary files (bug #1031096)


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - FAQ: added a few paragraphs on how to deal with pbzip2 files
      (CPAN RT#77743)
    - Compress::Zip: speed up compress, uncompress, memGzip and memGunzip
      (CPAN RT#77350)
  - BR: perl(lib)
  - Drop BR: perl(Test::Builder) and perl(Test::More) as they're bundled
  - Drop BR: perl(Config), perl(Fcntl), perl(File::Copy), perl(File::Glob),
    perl(POSIX) and perl(Symbol) as they're not dual-lived
  - Drop redundant explicit require for perl(Exporter)
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - IO::Compress::Zip
      - Allow member name and Zip Comment to be "0"
    - IO::Compress::Base::Common
      - Remove "-r" test - the file open will catch this
      - IO::Compress::Base::Common returned that it could not read readable files
        in NFS (CPAN RT#80855)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79820)
    - General performance improvements
    - Fix failing 01misc.t subtest introduced in 2.057 (CPAN RT#81119)
  - Explicitly install to 'perl' directories


author: Paul Howarth <paul@city-fan.org> - 2.059-1
changelog:
  - Update to 2.059
    - IO::Compress::Base
      - Added "Encode" option (fixes the encoding half of CPAN RT#42656)


author: Paul Howarth <paul@city-fan.org> - 2.060-1
changelog:
  - Update to 2.060
    - Updated POD
      - CPAN RT#82138: Example code not clear - gunzip() takes filenames!
    - IO::Compress::Base
      - Remove the flush call when opening a filehandle


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
  - Update to 2.061
    - zipdetails (1.06)
      - Get it to cope with Android 'zipalign' non-standard extra fields; these
        are used to make sure that a non-compressed member starts on a 4 byte
        boundary
    - unzip example with IO::Uncompress::Unzip (CPAN RT#84647)


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Support more digests, especially SHA-2 (CPAN RT#85290)
    - Added support for easy SSL interception (man in the middle) based on ideas
      found in mojo-mitm proxy
    - Make 1.46 the minimal required version for Net::SSLeay, because it
      introduced lots of useful functions
  - BR:/R: openssl ≥ 0.9.7e for P_ASN1_TIME_(get,set)_isotime in Net::SSLeay


author: Paul Howarth <paul@city-fan.org> - 1.91-1
changelog:
  - Update to 1.91
    - Added IO::Socket::SSL::Utils for easier manipulation of certificates and
      keys
    - Moved SSL interception into IO::Socket::SSL::Intercept and simplified it
      using IO::Socket::SSL::Utils
    - Enhance meta information in Makefile.PL
  - Bump openssl version requirement to 0.9.8a
  - Need at least version 6.58 of ExtUtils::MakeMaker (CPAN RT#85739)


author: Paul Howarth <paul@city-fan.org> - 1.92-1
changelog:
  - Update to 1.92
    - Intercept: use sha1-fingerprint of original cert for id into cache unless
      otherwise given
    - Fix pod error in IO::Socket::SSL::Utils (CPAN RT#85733)


author: Paul Howarth <paul@city-fan.org> - 1.93-1
changelog:
  - Update to 1.93
    - Need at least OpenSSL version 0.9.8 now, since last 0.9.7 was released 6
      years ago; remove code to work around older releases
    - Changed AUTHOR in Makefile.PL from array back to string, because the array
      feature is not available in MakeMaker shipped with 5.8.9 (CPAN RT#85739)
  - Set openssl version requirement to 0.9.8
  - Drop ExtUtils::MakeMaker version requirement back to 6.46


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Makefile.PL reported wrong version of openssl if Net::SSLeay was not
      installed, instead of reporting a missing dependency of Net::SSLeay


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-4
changelog:
  - Respect OpenSSL default ciphers and protocol versions (bug #1127322)
  - Fix typo in Utils.pm (bug #1097710)


author: Petr Pisar <ppisar@redhat.com> 6.01-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Remove BuildRoot stuff
  - Conflicts with perl-libwww-perl 5* and older


author: Paul Howarth <paul@city-fan.org> - 1.49-1
changelog:
  - update to 1.49
    - fixed problem where on some platforms test t/local/07_tcpecho.t would bail
      out if it could not bind port 1212; it now tries a number of ports to bind
      to until successful
    - improvements to unsigned casting
    - improvements to Net::SSLeay::read to make it easier to use with
      non-blocking IO: it modifies Net::SSLeay::read() to return the result from
      SSL_read() as the second return value, if Net::SSLeay::read() is called in
      list context (its behavior should be unchanged if called in scalar or void
      context)
    - fixed a problem where t/local/kwalitee.t fails with
      Module::CPANTS::Analyse 0.86
    - fixed a number of typos
    - fixed a compiler warning from Compiling with gcc-4.4 and -Wall
    - Fixed problems with get_https4: documentation was wrong, $header_ref was
      not correctly set and $server_cert was not returned
    - fixed a problem that could cause a Perl exception about no blength method
      on undef (CPAN RT#79309)
    - added documentation about how to mitigate various SSL/TLS vulnerabilities
    - SSL_MODE_* are now available as constants
  - drop upstreamed pod encoding patch


author: Paul Howarth <paul@city-fan.org> - 1.50-1
changelog:
  - update to 1.50
    - fixed a problem where t/handle/external/50_external.t would crash if any of
      the test sites were not contactable
    - now builds on VMS, added README.VMS
    - fixed a few compiler warnings in SSLeay.xs; most of them are just
      signed/unsigned pointer mismatches but there is one that actually fixes
      returning what would be an arbitrary value off the stack from
      get_my_thread_id if it happened to be called in a non-threaded build
    - added SSL_set_tlsext_host_name, SSL_get_servername, SSL_get_servername_type,
      SSL_CTX_set_tlsext_servername_callback for server side Server Name
      Indication (SNI) support
    - fixed a problem with C++ comments preventing builds on AIX and HPUX
    - perdition.org not available for tests, changed to www.open.com.au
    - added SSL_FIPS_mode_set
    - improvements to test suite so it succeeds with and without FIPS mode
      enabled
    - added documentation, warning not to pass UTF-8 data in the content
      argument to post_https


author: Paul Howarth <paul@city-fan.org> - 1.51-1
changelog:
  - update to 1.51
    - fixed a problem where SSL_set_SSL_CTX is not available with
      OpenSSL < 0.9.8f (CPAN RT#81940)
  - fix bogus date in spec changelog


author: Paul Howarth <paul@city-fan.org> - 1.52-1
changelog:
  - update to 1.52
    - rebuild package with gnu format tar, to prevent problems with unpacking on
      other systems such as old Solaris


author: Paul Howarth <paul@city-fan.org> - 1.54-1
changelog:
  - update to 1.54
    - added support for SSL_export_keying_material where present (i.e. in OpenSSL
      1.0.1 and later)
    - changed t/handle/external/50_external.t to use www.airspayce.com instead of
      perldition.org, who no longer have an https server
    - patch to fix a crash: P_X509_get_crl_distribution_points on an X509
      certificate with values in the CDP extension that do not have an ia5 string
      would cause a segmentation fault when accessed
    - change in t/local/32_x509_get_cert_info.t to not use
      Net::SSLeay::ASN1_INTEGER_get, since it works differently on 32 and 64 bit
      platforms
    - updated author and distribution location details to airspayce.com
    - improvement to test 07_sslecho.t so that if set_cert_and_key fails we can
      tell why


author: Paul Howarth <paul@city-fan.org> - 1.55-1
changelog:
  - update to 1.55
    - added support for TLSV1_1 and TLSV1_2 methods with SSL_CTX_tlsv1_1_new(),
      SSL_CTX_tlsv1_2_new(), TLSv1_1_method() and TLSv1_2_method(), where
      available in the underlying openssl
    - added CRL support functions X509_CRL_get_ext(), X509_CRL_get_ext_by_NID(),
      X509_CRL_get_ext_count()
    - fixed a problem that could cause content with a value of '0' to be
      incorrectly encoded by do_httpx3 and friends (CPAN RT#85417)
    - added support for SSL_get_tlsa_record_byname() required for DANE support in
      openssl-1.0.2 and later
    - testing with openssl-1.0.2-stable-SNAP-20130521
    - added X509_NAME_new and X509_NAME_hash


author: Daniel P. Berrange <berrange@redhat.com> - 1.2.8-4
changelog:
  - Add agent lifecycle event callbacks & constants (rhbz #1167392)
  - Fix docs for get_time method (rhbz #1164972)
  - Fix docs for GET_ALL_STATS constnats (rhbz #1170481)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:1.20-10
changelog:
  - Remove perl(base) from BR
  - Package README and ChangeLog
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Remove deleting empty directories


author: Paul Howarth <paul@city-fan.org> - 1.59-3
changelog:
  - Break build dependency loop by only using perl(Business::ISBN) if we're not
    bootstrapping
  - BR: perl(Carp) and perl(Exporter)
  - Make %files list more explicit
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 1.60-1
changelog:
  - Update to 1.60
    - Do not reverse the order of new parameters
    - Avoid test failure if the local hostname is 'foo' (CPAN RT#75519)
    - Work around a stupid join bug in 5.8.[12] (CPAN RT#59274)
    - Updated repository URL
  - Don't need to remove empty directories from buildroot
  - BR: perl(constant)


author: Paul Howarth <paul@city-fan.org> - 1.60-8
changelog:
  - Retain runtime dependency of perl(Business::ISBN) when bootstrapping; a
    better fix for the build dependency cycle was to drop LWP::Simple as a
    buildreq of perl-Business-ISBN (needed only for optional tests) when
    bootstrapping


author: Marcela Mašláňová <mmaslano@redhat.com> - 1:0.225-4
changelog:
  - Install to vendor directories rather than perl core directories so as to
    avoid conflicts between our debuginfo and the main perl-debuginfo package


author: Paul Howarth <paul@city-fan.org> - 1:0.225-6
changelog:
  - Reinstate compatibility with old distributions like EL-5
    - Add back buildroot definition and cleaning
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Make %files list more explicit
  - Drop redundant %{?perl_default_filter}
  - Don't use macros for commands
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 1:0.225-242
changelog:
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.42-2
changelog:
  - Add BR perl(File::Spec)
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Remove deleting empty directories
  - Remove defattr


author: Pavel Vokhmyanin <pvokhmyanin@virtuozzo.com> 0.1.26
changelog:
  - fix --auto_dedup forward compatibility (Pavel Tikhomirov
  <ptikhomirov@virtuozzo.com>) (#PSBM-60489)


author: Konstantin Volkov <wolf@virtuozzo.com> 7.0.82-3
changelog:
  - Place package definitions and files lists in right order
  - Move license installation inside sources Makefile, see #PSBM-58317


author: Igor Sukhih <igor@virtuozzo.com> 7.0.84
changelog:
  - preserve CBT on offline snapshot creation #PSBM-62562
   - tools/ploop-cbt.c: show dump usage
   - tools/ploop.c: added -o - offline snapshot creation


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.25.20140113
changelog:
  - Read OS string from PRETTY_NAME instead of REDHAT_BUGZILLA_PRODUCT
    again, this time munging it to get rid of parts we want to hide.
    Related: #911553
    Resolves: #1306543


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.26.20140113
changelog:
  - Fix color of text progress bar
    Related: #1167735
  - Fix escape key during media check of live image
    Resolves: #1167735


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - sepolgen: Add support for TYPEBOUNDS statement in INTERFACE policy
    files (#1319338)
  - Add documentation for MCS separated domains
  - Move svirt man page out of libvirt into its own


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Update sandbox types in sandbox manual
  - Fix typos in semanage manpages
  - Fix the documentation of -l,--list for semodule
  - Minor fix in a French translation
  - Fix the extract example in semodule.8
  - Update sandbox.8 man page
  - Remove typos from chcat --help
  - Fix multiple spelling errors
  - hll/pp: Warn if module name different than output filename


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6.2
changelog:
  - open_init_pty: Do not error on EINTR
  - Fix [-s STORE] typos in semanage
  - Don't use subprocess.getstatusoutput() in Python 2 code


author: Petr Lautrbach <plautrba@redhat.com> 2.5-7
changelog:
  - fixfiles: Pass -n to restorecon for fixfiles check
  - sepolicy: Check get_rpm_nvr_list() return value
  - Don't use subprocess.getstatusoutput() in Python 2 code
  - semanage: Add auditing of changes in records
  - Remove unused 'q' from semodule getopt string


author: Petr Lautrbach <plautrba@redhat.com> 2.5-8
changelog:
  - audit2allow: tests should use local copy not system
  - audit2allow: remove audit2why so that it gets symlinked
  - semanage: fix man page and help message for import option
  - semanage: fix error message for fcontext -m
  - semanage: Fix semanage fcontext -D
  - semanage: Correct fcontext auditing
  - semanage: Default serange to "s0" for port modify
  - semanage: Use socket.getprotobyname for protocol
  - semanage: fix modify action in node and interface


author: Petr Lautrbach <plautrba@redhat.com> 2.5-9
changelog:
  - sandbox: create a new session for sandboxed processes - CVE-2016-7545
  - sandbox: do not try to setup directories without -X or -M


author: Miloslav Trmač <mitr@redhat.com> - 0.112-2
changelog:
  - Workaround pam_systemd setting broken XDG_RUNTIME_DIR
    Resolves: #1033774
  - Always use mozjs-17.0 even if js-devel is installed


author: Miloslav Trmač <mitr@redhat.com> - 0.1-2
changelog:
  - Add a comment above License about SRPM-only licenses
  - Reword Summary: to avoid a rpmlint warning
  - Move INSTALL= to the %install section


author: Panu Matilainen <pmatilai@redhat.com> - 1.13-12
changelog:
  - Hack poptBadOption() to return something semi-meaningful on exec alias
    failures (#697435, #710267)
  - Run internal test-suite on build, minimal as it might be


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.10.0-2
changelog:
  - Fixed systemd error message regarding chroot-update, patch provided
    by John Heidemann <johnh@isi.edu>
    Resolves: rhbz#917463


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-29
changelog:
  - make radius plugin config parser less strict
  - add creation of dip system group
  - resolves : #906913, #918296


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-30
changelog:
  - don't ship /var/lock/ppp in rpm payload and create it in %post instead
  - fix installation of tmpfiles.d configuration
  - enable hardened build
  - fix bogus dates in changelog
  - compile all binaries with hardening flags
  - fix possible NULL pointer dereferencing


author: Jakub Jelinek <jakub@redhat.com> 0.5.0-3
changelog:
  - fix R_390_IRELATIVE handling on s390/s390x (#973259, #1010392, #1010398)
  - change cron.daily/prelink permissions to rwxr-x--- (#1012538)


author: Maxim Perevedentsev <mperevedentsev@virtuozzo.com> 7.0.26
changelog:
  - Implement compact --info for ploop, #PSBM-50611
   - Refactor, #PSBM-50611
   - Move human-readable-units parser to util, #PSBM-50611
   - Extract CompactData, #PSBM-50611


author: Dmitry Mishin <dim@virtuozzo.com> 7.0.27
changelog:
  - bug #PSBM-55815 aka /usr/bin/virt-resize tool not responding. Terminate it
  now (Sergey Galas <shrike@virtuozzo.com>)


author: Inga Pyass <ipyass@virtuozzo.com> 7.0.33
changelog:
  - Do not use timeout for compact action #PSBM-59413 (Igor Sukhih
  <igor@virtuozzo.com>)
   - Restore C++ style comments, we don't need that much copyright unification
  across OpenVZ projects (Andrey Bondrov <abondrov@virtuozzo.com>)
   - Update copyrights ( #PSBM-58317 ) (Andrey Bondrov <abondrov@virtuozzo.com>)
   - References PSBM-59958 (Artem Pavlenko <apavlenko@virtuozzo.com>)
   - References PSBM-59958 (Artem Pavlenko <apavlenko@virtuozzo.com>)


author: Inga Pyass <ipyass@virtuozzo.com> 7.0.35
changelog:
  - Set mbr id only if it is different from current one #PSBM-63000 (Pavel
  Vokhmyanin <pvokhmyanin@virtuozzo.com>)
   - print warning if filesystem isn't supported (PSBM-52674) (Pavel Ganyushin
  <pganyushin@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.660
changelog:
  - bug #PSBM-65363 aka Internal Protocol Error on attempting to backup VM with
  disabled hdd0 (Sergey Galas <shrike@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.661
changelog:
  - bug #PSBM-65408 aka Deleting VM backup with --keep-chain failed due to
  timeout (Sergey Galas <shrike@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.662
changelog:
  - BUGFIX PSBM-65004 - return back 1MB cluster size (bkbbkb <bkb@virtuozzo.com>)
   - Drop cep-collector requires, see #PSBM-63866 (Konstantin Volkov
  <wolf@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.663
changelog:
  - bug #PSBM-64981 aka virProcessKillPainfully:404 : Failed to terminate process
  53988 with SIGKILL: Device or resource busy (Sergey Galas
  <shrike@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.664
changelog:
  - revert iothreads support (Sergey Galas <shrike@virtuozzo.com>)
   - Revert "bug #PSBM-62895 aka unsupported configuration: Disk iothread '1'"
  (Sergey Galas <shrike@virtuozzo.com>)


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.665
changelog:
  - disable iothreads (Sergey Galas <shrike@virtuozzo.com>)
   - revert iothreads support (Sergey Galas <shrike@virtuozzo.com>)
   - Revert "bug #PSBM-62895 aka unsupported configuration: Disk iothread '1'"
  (Sergey Galas <shrike@virtuozzo.com>)


author: Dmitry Mishin <dim@virtuozzo.com> 7.0.5
changelog:
  - Fix 0-sized clipboard-copy on a single click in terminal in
      vzvncserver #PSBM-45341 (Pavel Vokhmyanin <pvokhmyanin@virtuozzo.com>)


author: Inga Pyass <ipyass@virtuozzo.com> 7.0.7
changelog:
  - Do not remove lines that are higher than current cursor position + fix sanity
  condition
   - BUGFIX PSBM-58281 Add sanity checks for number of inserted/delete lines and
  chars
   - BUGFIX PSBM-58281 Make escparams unsigned and add a check for invalid
  coordinates in setting scroll region
   - Fix potential escparms[] buffer overflow PSBM-58280
   - Use memmove() instead of memcpy() on overlapping memory areas PSBM-58282
   - Revert "AUTO version bump to 7.0.7"


author: Inga Pyass <ipyass@virtuozzo.com> 7.0.8
changelog:
  - Add sanity checks for memory allocations (#PSBM-58099)
   - Add copyright holder information (#PSBM-57674)


author: Igor Sukhih <igor@virtuozzo.com> 7.0.120
changelog:
  - prlctl statistics doesn't work correctly #PSBM-60575
   - Outdated advice for the --vnc-ssl-certificate #PSBM-63195


author: Igor Sukhih <igor@virtuozzo.com> 7.0.124
changelog:
  - style: remove parallels  word from sources #PSBM-64372
   - prlctl.8: update --memguarantee auto description #PSBM-59479


author: Jaromir Capik <jcapik@redhat.com> - 3.3.10-1
changelog:
  - Upgrading to 3.3.10
  - top.1: physical memory - has used / is using (#1119263)
  - Include man pages for openproc, readproc and readproctab (#1119260)
  - ps -p cycles over all PIDs instead of just one (#1060715)
  - Remove explicit dependency on systemd-libs package (#1113206)
  - Allow longer usernames to display in ps output (#1112734)
  - w doesn't display FROM by default (#1078310)
  - Return value of pgrep is incorrect (#1116309)
  - Should shared memory be accounted in cached in free output? (#1070736)
  - Resolves: rhbz#1119263 rhbz#1119260 rhbz#1060715 rhbz#1113206
  - Resolves: rhbz#1112734 rhbz#1078310 rhbz#1116309 rhbz#1070736


author: Jaromir Capik <jcapik@redhat.com> - 3.3.10-2
changelog:
  - Replacing RC tarball with final 3.3.10 release
  - Related: rhbz#1119263 rhbz#1119260 rhbz#1060715 rhbz#1113206
  - Related: rhbz#1112734 rhbz#1078310 rhbz#1116309 rhbz#1070736


author: Jaromir Capik <jcapik@redhat.com> - 3.3.10-3
changelog:
  - Disabling translated man pages due to conflicts with man-pages-*
  - Removing /etc/sysctl.d (quietly stolen by systemd)
  - Related: rhbz#1119263 rhbz#1119260 rhbz#1060715 rhbz#1113206
  - Related: rhbz#1112734 rhbz#1078310 rhbz#1116309 rhbz#1070736


author: Jan Rybar <jrybar@redhat.com> - 3.3.10-7
changelog:
  - Fixing sysinfo - devices with length exceeding 15 chars are not displayed in vmstat -d
  - Resolves: #1169349


author: Jan Rybar <jrybar@redhat.com> - 3.3.10-9
changelog:
  - Fixes showing same cgroups for threads under process by adding format option
  - Resolves: rhbz#1284087


author: Jan Rybar <jrybar@redhat.com> - 3.3.10-10
changelog:
  - Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
  - Resolves: rhbz#1169349


author: Adrian Reber <areber@redhat.com> - 1.0.2-1
changelog:
  - new upstream release
  - split off protoc-c into protobuf-c-compiler to reduce runtime
    dependencies of the main package


author: Conrad Meyer <cemeyer@uw.edu> - 2.5.0-2
changelog:
  - Remove changelog history from before 2010
  - This spec already runs autoreconf -fi during %build, but bump build for
    rhbz #926374


author: Jaromir Capik <jcapik@redhat.com> - 22.20-6
changelog:
  - Fixing null pointer dereference introduced with namespaces
  - Fixing bogus dates in the changelog
  - Related: rhbz#980514


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.7-19
changelog:
  - Build with -D_FILE_OFFSET_BITS=64 to get stat64 in pth_high.c
  - Guard the ARM CFLAGS sed substitution.


author: Wim Taymans <wtaymans@redhat.com> - 6.0-4
changelog:
  - Add more Requires to avoid testing multiple versions
  - enable hardened build
  - Fix missing %endif
  - Resolves: #1174548


author: Rex Dieter <rdieter@fedoraproject.org> - 6.0-7
changelog:
  - better autostart.patch, handle case were autospawn is disabled
    (or otherwise doesn't work, like for root user)
  - Resolves: #1269104


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.6-2
changelog:
  - disable introspection in anticipation of pygobject3
  - https://bugzilla.redhat.com/show_bug.cgi?id=731851
  - pygobject2 now becomes legacy for static binding support (e.g. PyGTK)


author: Colin Walters <walters@redhat.com> - 2.28.6-8
changelog:
  - Add various missing BuildRequires, switch to pkgconfig() syntax
  - Backport upstream patch which fixes a crasher in some applications


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.3-1
changelog:
  - New upstream release
  - Build a python3 subpackage
  - Run the test suite even though we ignore the output


author: Miloslav Trmač <mitr@redhat.com> - 0.3-5
changelog:
  - Disable -fstrict-aliasing (see http://www.python.org/dev/peps/pep-3123/ for
    rationale)
  - Don't ship .pyc files from the test suite in %doc, to avoid multilib
    conflicts


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-39
changelog:
  - Removal of the '$Date$' placeholder on the python(1) man page footer,
  which does not expand during build
  Resolves: rhbz#1268310


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-45
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346357


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-46
changelog:
  - Drop patch 221 that backported sslwrap function since it was introducing regressions
  - Refactor patch 227
  Resolves: rhbz#1331425


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-47
changelog:
  - Fix for CVE-2016-5636: possible integer overflow and heap corruption in zipimporter.get_data()
  Resolves: rhbz#1356364


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.57.0-1
changelog:
  - bump upstream package, see https://pagure.io/clufter/releases
  - generate man pages also for offered commands
  - auto-generate SEE ALSO sections for the man pages
  - move entry_points.txt to clufter-cli sub-package
  - general spec file refresh (pagure.io as a default project base, etc.)
  - make Python interpreter execution sane
  - fix *2pcscmd* commands so they do not suggest
    "pcs cluster cib <file> --config" that doesn't currently
    work for subsequent local-modification pcs commands
    [rhbz#1328078]
  - add support for ticket constraints to *2pcscmd commands
    [rhbz#1340243]


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.58.0-1
changelog:
  - fix Python interpreter propagated as enquoted string with old setuptools
  - bump upstream package, see https://pagure.io/clufter/releases


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.59.0-1
changelog:
  - add ability to borrow validation schemas from pacemaker installed along
  - bump upstream package, see https://pagure.io/clufter/releases


author: Luke Macken <lmacken@redhat.com> - 4.7.0-2
changelog:
  - Merge a bunch of changes from Gareth Armstrong <gareth.armstrong@hp.com>
      - The src zip file should come either from http://www.voidspace.org.uk/
        downloads/ or http://code.google.com/p/configobj/ as the PyPI tarball is
        not complete.  No docs and no test code.
      - Added docs
      - Remove BR on python-setuptools-devel


author: José Matos <jamatos@fedoraproject.org> - 3.5.0b2-0.2
changelog:
  - Improve description to make it clear that this package in only needed for python 2.7
  - Make the license tag information more explicit.


author: Avram Lubkin <aviso@fedoraproject.org> - 3.5.0b2-1
changelog:
  - Updated to build for el6
  - Updated to build Python3 packages
  - Changed Python2 package name to python2-configparser for Fedora 24+
  - Updated description
  - Removed license comments


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.5-1
changelog:
  - New upstream release
  - Fix UTF8 encoding correctly
  - Drop buildroot, clean, defattr and use macro for Source


author: David Sommerseth <davids@redhat.com> - 0.7-1
changelog:
  - Fixed several memory leaks (commit aa2c20e697af, abc7f912f66d)
  - Improved error checking towards NULL values(commit 4e928d62a8e3)
  - Fixed typo in pethtool --help (commit 710766dc722)
  - Only open a NETLINK connection when needed (commit 508ffffbb3c)
  - Added man page for pifconfig and pethtool (commit 9f0d17aa532, rhbz#638475)
  - Force NETLINK socket to close on fork() using FD_CLOEXEC (commit 1680cbeb40e)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.8-2
changelog:
  - Fixed reporting of more IPv4 addresses per interface
  Resolves: rhbz#1027685
  - Make get_active_devices() return IPv6-only devices, too
  Resolves: rhbz#1027678


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.2.4-1
changelog:
  - Upstream update 0.2.4
    - Changes i18n.easy_gettext_setup() to return lgettext functions when
      byte strings are requested.


author: Jeffrey Ollie <jeff@ocjtech.us> - 2.3.5-1
changelog:
  - Bugs fixed
  -
  -  * Crash when merging text nodes in element.remove().
  -  * Crash in sax/target parser when reporting empty doctype.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.0-1
changelog:
  - 3.0 (2012-10-08)
  - ================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * End-of-file handling was incorrect in iterparse() when reading from
  -   a low-level C file stream and failed in libxml2 2.9.0 due to its
  -   improved consistency checks.
  -
  - Other changes
  - -------------
  -
  - * The build no longer uses Cython by default unless the generated C files
  -   are missing.  To use Cython, pass the option "--with-cython".  To ignore
  -   the fatal build error when Cython is required but not available (e.g. to
  -   run special setup.py commands that do not actually run a build), pass
  -   "--without-cython".
  -
  -
  - 3.0beta1 (2012-09-26)
  - =====================
  -
  - Features added
  - --------------
  -
  - * Python level access to (optional) libxml2 memory debugging features
  -   to simplify debugging of memory leaks etc.
  -
  - Bugs fixed
  - ----------
  -
  - * Fix a memory leak in XPath by switching to Cython 0.17.1.
  -
  - * Some tests were adapted to work with PyPy.
  -
  - Other changes
  - -------------
  -
  - * The code was adapted to work with the upcoming libxml2 2.9.0 release.
  -
  -
  - 3.0alpha2 (2012-08-23)
  - ======================
  -
  - Features added
  - --------------
  -
  - * The .iter() method of elements now accepts tag arguments like "{*}name"
  -   to search for elements with a given local name in any namespace.  With
  -   this addition, all combinations of wildcards now work as expected:
  -   "{ns}name", "{}name", "{*}name", "{ns}*", "{}*" and "{*}*".  Note that
  -   "name" is equivalent to "{}name", but "*" is "{*}*".  The same change
  -   applies to the .getiterator(), .itersiblings(), .iterancestors(),
  -   .iterdescendants(), .iterchildren() and .itertext() methods,  the
  -   strip_attributes(), strip_elements() and strip_tags() functions as well
  -   as the iterparse() function.
  -
  - * C14N allows specifying the inclusive prefixes to be promoted to
  -   top-level during exclusive serialisation.
  -
  - Bugs fixed
  - ----------
  -
  - * Passing long Unicode strings into the feed() parser interface failed to
  -   read the entire string.
  -
  - Other changes
  - -------------
  -
  -
  - 3.0alpha1 (2012-07-31)
  - ======================
  -
  - Features added
  - --------------
  -
  - * Initial support for building in PyPy (through cpyext).
  -
  - * DTD objects gained an API that allows read access to their
  -   declarations.
  -
  - * xpathgrep.py gained support for parsing line-by-line (e.g.
  -   from grep output) and for surrounding the output with a new root
  -   tag.
  -
  - * E-factory in lxml.builder accepts subtypes of known data
  -   types (such as string subtypes) when building elements around them.
  -
  - * Tree iteration and iterparse() with a selective tag
  -   argument supports passing a set of tags.  Tree nodes will be
  -   returned by the iterators if they match any of the tags.
  -
  - Bugs fixed
  - ----------
  -
  - * The .find*() methods in lxml.objectify no longer use XPath
  -   internally, which makes them faster in many cases (especially when
  -   short circuiting after a single or couple of elements) and fixes
  -   some behavioural differences compared to lxml.etree.  Note that
  -   this means that they no longer support arbitrary XPath expressions
  -   but only the subset that the ElementPath language supports.
  -   The previous implementation was also redundant with the normal
  -   XPath support, which can be used as a replacement.
  -
  - * el.find('*') could accidentally return a comment or processing
  -   instruction that happened to be in the wrong spot.  (Same for the
  -   other .find*() methods.)
  -
  - * The error logging is less intrusive and avoids a global setup where
  -   possible.
  -
  - * Fixed undefined names in html5lib parser.
  -
  - * xpathgrep.py did not work in Python 3.
  -
  - * Element.attrib.update() did not accept an attrib of
  -   another Element as parameter.
  -
  - * For subtypes of ElementBase that make the .text or .tail
  -   properties immutable (as in objectify, for example), inserting text
  -   when creating Elements through the E-Factory feature of the class
  -   constructor would fail with an exception, stating that the text
  -   cannot be modified.
  -
  - Other changes
  - --------------
  -
  - * The code base was overhauled to properly use 'const' where the API
  -   of libxml2 and libxslt requests it.  This also has an impact on the
  -   public C-API of lxml itself, as defined in etreepublic.pxd, as
  -   well as the provided declarations in the lxml/includes/ directory.
  -   Code that uses these declarations may have to be adapted.  On the
  -   plus side, this fixes several C compiler warnings, also for user
  -   code, thus making it easier to spot real problems again.
  -
  - * The functionality of "lxml.cssselect" was moved into a separate PyPI
  -   package called "cssselect".  To continue using it, you must install
  -   that package separately.  The "lxml.cssselect" module is still
  -   available and provides the same interface, provided the "cssselect"
  -   package can be imported at runtime.
  -
  - * Element attributes passed in as an attrib dict or as keyword
  -   arguments are now sorted by (namespaced) name before being created
  -   to make their order predictable for serialisation and iteration.
  -   Note that adding or deleting attributes afterwards does not take
  -   that order into account, i.e. setting a new attribute appends it
  -   after the existing ones.
  -
  - * Several classes that are for internal use only were removed
  -   from the lxml.etree module dict:
  -   _InputDocument, _ResolverRegistry, _ResolverContext, _BaseContext,
  -   _ExsltRegExp, _IterparseContext, _TempStore, _ExceptionContext,
  -   __ContentOnlyElement, _AttribIterator, _NamespaceRegistry,
  -   _ClassNamespaceRegistry, _FunctionNamespaceRegistry,
  -   _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
  -   _FileReaderContext, _ParserContext, _PythonSaxParserTarget,
  -   _TargetParserContext, _ReadOnlyProxy, _ReadOnlyPIProxy,
  -   _ReadOnlyEntityProxy, _ReadOnlyElementProxy, _OpaqueNodeWrapper,
  -   _OpaqueDocumentWrapper, _ModifyContentOnlyProxy,
  -   _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
  -   _AppendOnlyElementProxy, _SaxParserContext, _FilelikeWriter,
  -   _ParserSchemaValidationContext, _XPathContext,
  -   _XSLTResolverContext, _XSLTContext, _XSLTQuotedStringParam
  -
  - * Several internal classes can no longer be inherited from:
  -   _InputDocument, _ResolverRegistry, _ExsltRegExp, _ElementUnicodeResult,
  -   _IterparseContext, _TempStore, _AttribIterator, _ClassNamespaceRegistry,
  -   _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
  -   _FileReaderContext, _PythonSaxParserTarget, _TargetParserContext,
  -   _ReadOnlyPIProxy, _ReadOnlyEntityProxy, _OpaqueDocumentWrapper,
  -   _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
  -   _AppendOnlyElementProxy, _FilelikeWriter, _ParserSchemaValidationContext,
  -   _XPathContext, _XSLTResolverContext, _XSLTContext,
  -   _XSLTQuotedStringParam, _XSLTResultTree, _XSLTProcessingInstruction


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.0.1-1
changelog:
  - 3.0.1 (2012-10-14)
  - Bugs fixed
  -
  -  * LP#1065924: Element proxies could disappear during garbage collection
  -    in PyPy without proper cleanup.
  -  * GH#71: Failure to work with libxml2 2.6.x.
  -  * LP#1065139: static MacOS-X build failed in Py3.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.1.0-1
changelog:
  - 3.1.0 (2013-02-10)
  - ==================
  -
  - Features added
  - --------------
  -
  - * GH#89: lxml.html.clean allows overriding the set of attributes that it
  -   considers 'safe'.  Patch by Francis Devereux.
  -
  - Bugs fixed
  - ----------
  -
  - * LP#1104370: ``copy.copy(el.attrib)`` raised an exception.  It now returns
  -   a copy of the attributes as a plain Python dict.
  -
  - * GH#95: When used with namespace prefixes, the  ``el.find*()`` methods
  -   always used the first namespace mapping that was provided for each
  -   path expression instead of using the one that was actually passed
  -   in for the current run.
  -
  - * LP#1092521, GH#91: Fix undefined C symbol in Python runtimes compiled
  -   without threading support.  Patch by Ulrich Seidl.
  -
  - Other changes
  - -------------
  -
  -
  - 3.1beta1 (2012-12-21)
  - =====================
  -
  - Features added
  - --------------
  -
  - * New build-time option ``--with-unicode-strings`` for Python 2 that
  -   makes the API always return Unicode strings for names and text
  -   instead of byte strings for plain ASCII content.
  -
  - * New incremental XML file writing API ``etree.xmlfile()``.
  -
  - * E factory in lxml.objectify is callable to simplify the creation of
  -   tags with non-identifier names without having to resort to getattr().
  -
  - Bugs fixed
  - ----------
  -
  - * When starting from a non-namespaced element in lxml.objectify, searching
  -   for a child without explicitly specifying a namespace incorrectly found
  -   namespaced elements with the requested local name, instead of restricting
  -   the search to non-namespaced children.
  -
  - * GH#85: Deprecation warnings were fixed for Python 3.x.
  -
  - * GH#33: lxml.html.fromstring() failed to accept bytes input in Py3.
  -
  - * LP#1080792: Static build of libxml2 2.9.0 failed due to missing file.
  -
  - Other changes
  - -------------
  -
  - * The externally useless class ``_ObjectifyElementMakerCaller`` was
  -   removed from the module API of lxml.objectify.
  -
  - * LP#1075622: lxml.builder is faster for adding text to elements with
  -   many children.  Patch by Anders Hammarquist.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.2.0-1
changelog:
  - 3.2.0 (2013-04-28)
  - ==================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * LP#690319: Leading whitespace could change the behaviour of the string
  -   parsing functions in ``lxml.html``.
  -
  - * LP#599318: The string parsing functions in ``lxml.html`` are more robust
  -   in the face of uncommon HTML content like framesets or missing body tags.
  -   Patch by Stefan Seelmann.
  -
  - * LP#712941: I/O errors while trying to access files with paths that
  -   contain non-ASCII characters could raise ``UnicodeDecodeError`` instead
  -   of properly reporting the ``IOError``.
  -
  - * LP#673205: Parsing from in-memory strings disabled network access in the
  -   default parser and made subsequent attempts to parse from a URL fail.
  -
  - * LP#971754: lxml.html.clean appends 'nofollow' to 'rel' attributes instead
  -   of overwriting the current value.
  -
  - * LP#715687: lxml.html.clean no longer discards scripts that are explicitly
  -   allowed by the user provided whitelist.  Patch by Christine Koppelt.
  -
  - 3.1.2 (2013-04-12)
  - ==================
  -
  - Bugs fixed
  - ----------
  -
  - * LP#1136509: Passing attributes through the namespace-unaware API of
  -   the sax bridge (i.e. the ``handler.startElement()`` method) failed
  -   with a ``TypeError``.  Patch by Mike Bayer.
  -
  - * LP#1123074: Fix serialisation error in XSLT output when converting
  -   the result tree to a Unicode string.
  -
  - * GH#105: Replace illegal usage of ``xmlBufLength()`` in libxml2 2.9.0
  -   by properly exported API function ``xmlBufUse()``.
  -
  - 3.1.1 (2013-03-29)
  - ==================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * LP#1160386: Write access to ``lxml.html.FormElement.fields`` raised
  -   an AttributeError in Py3.
  -
  - * Illegal memory access during cleanup in incremental xmlfile writer.
  -
  - Other changes
  - -------------
  -
  - * The externally useless class ``lxml.etree._BaseParser`` was removed
  -   from the module dict.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.2.1-1
changelog:
  - 3.2.1 (2013-05-11)
  - ==================
  -
  - Features added
  - --------------
  -
  - * The methods ``apply_templates()`` and ``process_children()`` of XSLT
  -   extension elements have gained two new boolean options ``elements_only``
  -   and ``remove_blank_text`` that discard either all strings or
  -   whitespace-only strings from the result list.
  -
  - Bugs fixed
  - ----------
  -
  - * When moving Elements to another tree, the namespace cleanup mechanism
  -   no longer drops namespace prefixes from attributes for which it finds
  -   a default namespace declaration, to prevent them from appearing as
  -   unnamespaced attributes after serialisation.
  -
  - * Returning non-type objects from a custom class lookup method could lead
  -   to a crash.
  -
  - * Instantiating and using subtypes of Comments and ProcessingInstructions
  -   crashed.


author: Kamil Dudka <kdudka@redhat.com> - 7.19.0-15
changelog:
  - allow to return -1 from the write callback (#857875) 
  - remove the patch for curl-config --static-libs no longer needed
  - run the tests against the just built pycurl, not the system one


author: Ralph Bean <rbean@redhat.com> - 1.1.0-1
changelog:
  - Latest upstream.
  - Relicense to ASL 2.0 with upstream.
  - Removed cookie handling patch (fixed in upstream tarball).
  - Updated cert unbundling patch to match upstream.
  - Added check section, but left it commented out for koji.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-2
changelog:
  - Unbundled python-charade/chardet.  Using system python-chardet now.
  - Removed deprecated comments and actions against oauthlib unbundling.
    Those are no longer necessary in 1.1.0.
  - Added links to bz tickets over Patch declarations.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-3
changelog:
  - Unbundled python-urllib3.  Using system python-urllib3 now.
  - Conditionally include python-ordereddict for el6.


author: Alex Wood <awood@redhat.com> 1.14.2-1
changelog:
  - 1195446: Only set global socket timeout on RHEL 5. (alikins@redhat.com)
  - Cleanup up connection logging. (alikins@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.14.3-1
changelog:
  - 1225600: Default config entry needs to include the substitution string
    (wpoteat@redhat.com)
  - Add F22 to Fedora branches. (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 1.15.1-1
changelog:
  - Move Python.h include to be first include (alikins@redhat.com)
  - 1092564: Provide LDFLAGS to setup.py to enable hardened build.
    (awood@redhat.com)
  - Bump version to 1.15 (wpoteat@redhat.com)
  - Do not process proxy environment variables if host is in no_proxy
    (martin.matuska@axelspringer.de)


author: Chris Rog <crog@redhat.com> 1.15.2-1
changelog:
  - Added releaser configuration for RHEL 7.2 (crog@redhat.com)
  - Use non-deprecated Tito properties. (awood@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.15.3-1
changelog:
  - Define global_ld_flags when not already defined. (awood@redhat.com)
  - Adding tests for 202s from alikins/AsyncBind (csnyder@redhat.com)
  - Updates to accomodate candlepin/virt-who/csnyder/new_report_api
    (csnyder@redhat.com)
  - Adding jobStatus helper methods from alikins/AsyncBind (csnyder@redhat.com)
  - HypervisorCheckIn now uses the new API, if available (csnyder@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.4-3
changelog:
  - Add user-agent to rhsm requests. (alikins@redhat.com)
  - 1247890: KeyErrors are now caught when checking manager capabilities
    (csnyder@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.4-4
changelog:
  - Adds RateLimitExceededException which is raised in response to 429 from the
    remote host (csnyder@redhat.com)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.8-1
changelog:
  - Switch source from distribute to setuptools, that are now uptodate and supported.
  - Update to setuptools 0.8.0.
  - Specfile cleanup (unnecessary Python 3 logic, old RPM stuff, bogus changelog dates)


author: Nils Philippsen <nils@redhat.com> - 0.2.17-1
changelog:
  - fix default timeouts of None in bus objects (#716620)
  - reduce proxy method calling overhead a bit more


author: Nils Philippsen <nils@redhat.com> - 0.2.19-1
changelog:
  - allow service object methods to be called locally
  - preserve signature, docstrings, etc. of decorated methods


author: Nils Philippsen <nils@redhat.com> - 0.4.0-1
changelog:
  - version 0.4.0:
    - get rid of (ancient) PolicyKit-0.x support
    - add basic (experimental, unstable) dbus introspection support
    - learn to cope with polkitd being restarted


author: jortel <jortel@redhat.com> - 0.3.7-1
changelog:
  - Better soap header support
  - Added new transport HttpAuthenticated for active (not passive) basic authentication.
  - New options (prefixes, timeout, retxml)
  - WSDL processing enhancements.
  - Expanded builtin XSD type support.
  - Fixed <xs:iniclude/>
  - Better XML date/datetime conversion.
  - Client.clone() method added for lightweight copy of client object.
  - XSD processing fixes/enhancements.
  - Better <simpleType/> by <xs:restriction/> support.
  - Performance enhancements. 
  - Fixed tickets: #65, #232, #233, #235, #241, #242, #244, #247, #254, #254, #256, #257, #258


author: jortel <jortel@redhat.com> - 0.3.8-1
changelog:
  - Includeds Windows NTLM Transport.
  - Add missing self.messages in Client.clone().
  - Changed default behavior for WSDL PartElement to be optional.
  - Add support for services/ports defined without <address/> element in WSDL.
  - Fix sax.attribute.Element.attrib() to find by name only when ns is not specified; renamed to Element.getAttribute().
  - Update HttpTransport to pass timeout parameter to urllib2 open() methods when supported by urllib2.
  - Add null class to pass explicit NULL values for parameters and optional elements.
  - Soap encoded array (soap-enc:Array) enhancement for rpc/encoded.
    Arrays passed as python arrays - works like document/literal now.
    No more using the factory to create the Array.
    Automatically includes arrayType attribute.  Eg: soap-enc:arrayType="Array[2]".
    Reintroduced ability to pass complex (objects) using python dict instead of suds object via factory.
  - Fixed tickets: #84, #261, #262, #263, #265, #266, #278, #280, #282.


author: jortel <jortel@redhat.com> - 0.3.9-1
changelog:
  - Bumped python requires to 2.4
  - Replaced stream-based caching in the transport package with document-based caching.
  - Caches pickled Document objects instead of XML text. 2x Faster!
  - No more SAX parsing exceptions on damaged or incomplete cached files. 
  - Cached WSDL objects. Entire Definitions object including contained Schema object cached via pickle.
  - Copy of soap encoding schema packaged with suds.
  - Refactor Transports to use ProxyHandler instead of urllib2.Request.set_proxy().
  - Added WSSE enhancements <Timestamp/> and <Expires/> support. See: Timestamp token. 
  - Fixed Tickets: #256, #291, #294, #295, #296


author: jortel <jortel@redhat.com> - 0.4-1
changelog:
  - Fix spelling errors in spec description.
  - Fix source0 URL warning.
  - Updated caching to not cache intermediate wsdls.
  - Added DocumentCache which caches verified XML documents as text. User can choose.
  - Added cachingpolicy option to allow user to specify whether to cache XML documents or the WSDL object.
  - Provided for repeating values in reply for message parts consistent with way handled in nested objects.
  - Added charset=utf-8 to stock content-type http header.
  - Added <?xml version="1.0" encoding="UTF-8"?> to outgoing SOAP messages.
  - Detection of faults in successful (http=200) replies and raise WebFault. Search for <soapenv:Fault/>.
  - Add plugins facility. 
  - Fixed Tickets: #251, #313, #314, #334


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.04.7-7
changelog:
  - This package does not use setuptools.  Remove the BR for that.  Also correct the
    %files list -- The egg-info is a file, not a directory (b/c it is created by
    distutils, not by setuptools.)  Older rpms fixed up the entry behind the
    scenes.  Newer ones fail so we need to correct it explicitly.


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.10-0
changelog:
  - clamp timestamps from the future.  BZ 894630, 1013733
  - Fix the condition to enter single-connection mode. BZ 853432
  - Fix unit tests


author: Ralph Bean <rbean@redhat.com> - 1.5-3
changelog:
  - Renamed patches to python-urllib3-*
  - Fixed ssl check patch to use the correct cert path for Fedora.
  - Included dependency on ca-certificates
  - Cosmetic indentation changes to the .spec file.


author: Ralph Bean <rbean@redhat.com> - 1.5-4
changelog:
  - Upstream patch to fix Accept header when behind a proxy.
  - Reorganize patch numbers to more clearly distinguish them.


author: bkabrda <bkabrda@redhat.com> - 1.10.2-2
changelog:
  - Fix the way we unbundle six to make ovirt work even when they remove .py files
  Resolves: rhbz#1247189


author: Stas <sfomin@virtuozzo.com> 0.3.44
changelog:
  - VZP-396 (Stas <stas-fomin@yandex.ru>)
   - PSBM-46754 (Stas <stas-fomin@yandex.ru>)
   - VZP-465 (Stas <stas-fomin@yandex.ru>)
   - PSBM-54537 (Stas <stas-fomin@yandex.ru>)
   - VZP-484 info: re-arranged what is considered verbose output (Valentin Kulesh
  <valentin.kulesh@virtuozzo.com>)


author: Stas <sfomin@virtuozzo.com> 0.3.46
changelog:
  - VZP-396 (Stas <stas-fomin@yandex.ru>)
   - VZP-396 (Stas <stas-fomin@yandex.ru>)
   - VZP-396 (Stas <stas-fomin@yandex.ru>)
   - PSBM-46754 (Stas <stas-fomin@yandex.ru>)
   - VZP-465 (Stas <stas-fomin@yandex.ru>)
   - PSBM-54537 (Stas <stas-fomin@yandex.ru>)
   - VZP-396 (Stas <stas-fomin@yandex.ru>)
   - VZP-484 info: re-arranged what is considered verbose output (Valentin Kulesh
  <valentin.kulesh@virtuozzo.com>)


author: Stas <sfomin@virtuozzo.com> 0.3.47
changelog:
  - VZP-467 (Stas <stas-fomin@yandex.ru>)
   - VZP-396 (Stas <stas-fomin@yandex.ru>)
   - PSBM-46754 (Stas <stas-fomin@yandex.ru>)
   - VZP-465 (Stas <stas-fomin@yandex.ru>)
   - PSBM-54537 (Stas <stas-fomin@yandex.ru>)
   - VZP-396 (Stas <stas-fomin@yandex.ru>)
   - VZP-484 info: re-arranged what is considered verbose output (Valentin Kulesh
  <valentin.kulesh@virtuozzo.com>)
   - VZP-467 (Stas Fomin <stas-fomin@yandex.ru>)
   - VZP-467 (Stas Fomin <stas-fomin@yandex.ru>)


author: Stas <sfomin@virtuozzo.com> 0.3.48
changelog:
  - VZP-467 (Stas <stas-fomin@yandex.ru>)
   - VZP-396 (Stas <stas-fomin@yandex.ru>)
   - VZP-396 (Stas <stas-fomin@yandex.ru>)
   - VZP-396 (Stas <stas-fomin@yandex.ru>)
   - PSBM-46754 (Stas <stas-fomin@yandex.ru>)
   - VZP-465 (Stas <stas-fomin@yandex.ru>)
   - PSBM-54537 (Stas <stas-fomin@yandex.ru>)
   - VZP-396 (Stas <stas-fomin@yandex.ru>)
   - VZP-484 info: re-arranged what is considered verbose output (Valentin Kulesh
  <valentin.kulesh@virtuozzo.com>)
   - VZP-467 (Stas Fomin <stas-fomin@yandex.ru>)
   - VZP-467 (Stas Fomin <stas-fomin@yandex.ru>)
   - VZP-467 (Stas Fomin <stas-fomin@yandex.ru>)


author: Stas <sfomin@virtuozzo.com> 0.3.49
changelog:
  - VZP-467 (Stas <stas-fomin@yandex.ru>)
   - VZP-396 (Stas <stas-fomin@yandex.ru>)
   - PSBM-46754 (Stas <stas-fomin@yandex.ru>)
   - VZP-465 (Stas <stas-fomin@yandex.ru>)
   - PSBM-54537 (Stas <stas-fomin@yandex.ru>)
   - VZP-484 info: re-arranged what is considered verbose output (Valentin Kulesh
  <valentin.kulesh@virtuozzo.com>)


author: Stas <sfomin@virtuozzo.com> 0.3.51
changelog:
  - VZP-567: NameError around inj (subscription_manager.injection) (Valentin
  Kulesh <valentin.kulesh@virtuozzo.com>)
   - VZP-555: Poll is a bad idea (Valentin Kulesh <valentin.kulesh@virtuozzo.com>)
   - Fix logger (Valentin Kulesh <valentin.kulesh@virtuozzo.com>)


author: Stas <sfomin@virtuozzo.com> 0.3.52
changelog:
  - VZP-467: first round of Unicode characters cleanup (Valentin Kulesh
  <valentin.kulesh@virtuozzo.com>)


author: Tomas Orsava <torsava@redhat.com> - 8.1.2-1
changelog:
  - Update to 8.1.2
  - Moved to a new PyPI URL format
  - Updated the prefix-stripping patch because of upstream changes in pip/wheel.py


author: Marcin Zajaczkowski <mszpak ATT wp DOTT pl> - 0.5.0-5
changelog:
  - remove prodive/obsolete of python-xattr (bug 781838)
  - fix problem with mixed use of tabs and spaces


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-118.el7
changelog:
  - kvm-util-introduce-MIN_NON_ZERO.patch [bz#1318199]
  - kvm-BlockLimits-introduce-max_transfer_length.patch [bz#1318199]
  - kvm-block-backend-expose-bs-bl.max_transfer_length.patch [bz#1318199]
  - kvm-scsi-generic-Merge-block-max-xfer-len-in-INQUIRY-res.patch [bz#1318199]
  - kvm-raw-posix-Fetch-max-sectors-for-host-block-device.patch [bz#1318199]
  - kvm-scsi-Advertise-limits-by-blocksize-not-512.patch [bz#1318199]
  - kvm-util-Fix-MIN_NON_ZERO.patch [bz#1318199]
  - Resolves: bz#1318199
    (expose host BLKSECTGET limit in scsi-block (qemu-kvm))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-119.el7
changelog:
  - kvm-qxl-factor-out-qxl_get_check_slot_offset.patch [bz#1355730]
  - kvm-qxl-store-memory-region-and-offset-instead-of-pointe.patch [bz#1355730]
  - kvm-qxl-fix-surface-migration.patch [bz#1355730]
  - kvm-qxl-fix-qxl_set_dirty-call-in-qxl_dirty_one_surface.patch [bz#1355730]
  - Resolves: bz#1355730
    (spice-gtk shows outdated screen state after migration [qemu-kvm])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-120.el7
changelog:
  - kvm-Add-install-dependency-to-newer-libusbx-version.patch [bz#1351106]
  - kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch [bz#1359729]
  - Resolves: bz#1351106
    (symbol lookup error: /usr/libexec/qemu-kvm: undefined symbol: libusb_get_port_numbers)
  - Resolves: bz#1359729
    (CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS [rhel-7.3])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-121.el7
changelog:
  - kvm-json-parser-drop-superfluous-assignment-for-token-va.patch [bz#1276036]
  - kvm-qjson-Apply-nesting-limit-more-sanely.patch [bz#1276036]
  - kvm-qjson-Don-t-crash-when-input-exceeds-nesting-limit.patch [bz#1276036]
  - kvm-check-qjson-Add-test-for-JSON-nesting-depth-limit.patch [bz#1276036]
  - kvm-qjson-Spell-out-some-silent-assumptions.patch [bz#1276036]
  - kvm-qjson-Give-each-of-the-six-structural-chars-its-own-.patch [bz#1276036]
  - kvm-qjson-Inline-token_is_keyword-and-simplify.patch [bz#1276036]
  - kvm-qjson-Inline-token_is_escape-and-simplify.patch [bz#1276036]
  - kvm-qjson-replace-QString-in-JSONLexer-with-GString.patch [bz#1276036]
  - kvm-qjson-Convert-to-parser-to-recursive-descent.patch [bz#1276036]
  - kvm-qjson-store-tokens-in-a-GQueue.patch [bz#1276036]
  - kvm-qjson-surprise-allocating-6-QObjects-per-token-is-ex.patch [bz#1276036]
  - kvm-qjson-Limit-number-of-tokens-in-addition-to-total-si.patch [bz#1276036]
  - kvm-json-streamer-Don-t-leak-tokens-on-incomplete-parse.patch [bz#1276036]
  - kvm-json-streamer-fix-double-free-on-exiting-during-a-pa.patch [bz#1276036]
  - kvm-trace-remove-malloc-tracing.patch [bz#1360137]
  - Resolves: bz#1276036
    (Crash on QMP input exceeding limits)
  - Resolves: bz#1360137
    (GLib-WARNING **: gmem.c:482: custom memory allocation vtable not supported)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-122.el7
changelog:
  - kvm-virtio-validate-the-existence-of-handle_output-befor.patch [bz#1367040]
  - Resolves: bz#1367040
    (QEMU crash when guest notifies non-existent virtqueue)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-123.el7
changelog:
  - kvm-Fix-backport-of-target-i386-add-feature-flags-for-CP.patch [bz#1371619]
  - kvm-Add-skip_dump-flag-to-ignore-memory-region-during-du.patch [bz#1373088]
  - Resolves: bz#1371619
    (Flags xsaveopt xsavec xgetbv1 are missing on qemu-kvm)
  - Resolves: bz#1373088
    ([FJ7.3 Bug]: virsh dump with both --memory-only and --format option fails)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-124.el7
changelog:
  - kvm-target-i386-Add-support-for-FEAT_7_0_ECX.patch [bz#1372459]
  - kvm-target-i386-Add-more-Intel-AVX-512-instructions-supp.patch [bz#1372459]
  - Resolves: bz#1372459
    ([Intel 7.3 Bug] SKL-SP Guest cpu doesn't support avx512 instruction sets(avx512bw, avx512dq and avx512vl) (qemu-kvm))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-125.el7
changelog:
  - kvm-nbd-server-Set-O_NONBLOCK-on-client-fd.patch [bz#1285453]
  - Resolves: bz#1285453
    (An NBD client can cause QEMU main loop to block when connecting to built-in NBD server)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-126.el7
changelog:
  - kvm-virtio-recalculate-vq-inuse-after-migration.patch [bz#1376542]
  - Resolves: bz#1376542
    (RHSA-2016-1756 breaks migration of instances)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-126.el7_3.1
changelog:
  - kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1393042]
  - kvm-hw-i386-regenerate-checked-in-AML-payload-RHEL-only.patch [bz#1392027]
  - kvm-SPEC-file-flip-the-build-from-IASL-to-checked-in-AML.patch [bz#1392027]
  - Resolves: bz#1392027
    (shutdown rhel 5.11 guest failed and stop at "system halted")
  - Resolves: bz#1393042
    (system_reset should clear pending request for error (IDE))


author: Denis V. Lunev <den@openvz.org> - vz-2.6.0-28.3.6.vz7.49
changelog:
  - qcow2: fix misleading comment about L2 linking
  - qcow2-cache: split out function to find offset in a cache
  - qcow2: split large deep-nested functions in several
  - qcow2: change L2 table cache granularity #PSBM-62402 #PSBM-64771
  - qcow2: rename variables l2table->l2subtable
  - qcow2-cache: remove arguments unused by functions
  - qcow2: specify default L2 cache size in cache chunks not clusters
  - qcow2: prevent double zeroing in qcow2_cache_cluster_init_zero()


author: Roman Kagan <rkagan@virtuozzo.com> - vz-2.6.0-28.3.9.vz7.49
changelog:
  - merge rhev-2.6.0-28.el7_3.9, original changelog:
    * Fri Mar 24 2017 Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-28.el7_3.9
    - kvm-block-gluster-memory-usage-use-one-glfs-instance-per.patch [bz#1413044]
    - kvm-gluster-Fix-use-after-free-in-glfs_clear_preopened.patch [bz#1413044]
    - kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430061]
    - kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430061]
    - kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430061]
    - kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430061]
    - kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430061]
    - kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430061]
    - kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430061]
    - kvm-file-posix-Consider-max_segments-for-BlockLimits.max.patch [bz#1431149]
    - kvm-file-posix-clean-up-max_segments-buffer-termination.patch [bz#1431149]
    - kvm-file-posix-Don-t-leak-fd-in-hdev_get_max_segments.patch [bz#1431149]
    - Resolves: bz#1413044
      (block-gluster: use one glfs instance per volume)
    - Resolves: bz#1430061
      (CVE-2016-9603 qemu-kvm-rhev: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.3.z])
    - Resolves: bz#1431149
      (VMs pause when writing to Virtio-SCSI direct lun with scsi passthrough enabled via an Emulex HBA)

    * Tue Mar 21 2017 Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-28.el7_3.8
    - kvm-target-i386-present-virtual-L3-cache-info-for-vcpus.patch [bz#1430802]
    - Resolves: bz#1430802
      (Enhance qemu to present virtual L3 cache info for vcpus)

    * Wed Mar 15 2017 Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-28.el7_3.7
    - kvm-block-check-full-backing-filename-when-searching-pro.patch [bz#1425125]
    - kvm-qemu-iotests-Don-t-create-fifos-pidfiles-with-protoc.patch [bz#1425125]
    - kvm-qemu-iotest-test-to-lookup-protocol-based-image-with.patch [bz#1425125]
    - kvm-target-i386-Don-t-use-cpu-migratable-when-filtering-.patch [bz#1413897]
    - Resolves: bz#1413897
      (cpu flag nonstop_tsc is not present in guest with host-passthrough and feature policy require invtsc)
    - Resolves: bz#1425125
      (qemu fails to recognize gluster URIs in backing chain for block-commit operation)


author: Denis V. Lunev <den@openvz.org> - vz-2.6.0-28.3.9.vz7.51
changelog:
  - DROP: qcow2: fix misleading comment about L2 linking
  - DROP: qcow2-cache: split out function to find offset in a cache
  - DROP: qcow2: split large deep-nested functions in several
  - DROP: qcow2: change L2 table cache granularity #PSBM-62402 #PSBM-64771
  - DROP: qcow2: rename variables l2table->l2subtable
  - DROP: qcow2-cache: remove arguments unused by functions
  - DROP: qcow2: specify default L2 cache size in cache chunks not clusters
  - DROP: qcow2: prevent double zeroing in qcow2_cache_cluster_init_zero()
  - hw/vmbus: remove signal event error messaging
  - hw/vmbus/storvsc: handle cancelled scsi requests


author: Denis V. Lunev <den@openvz.org> - vz-2.6.0-28.3.9.vz7.54
changelog:
  - qcow2-refcount: fix wrong offset for preallocation check
  - qcow2: make sure prealloc check arguments are cluster-aligned #PSBM-64568
  - qcow2: fix misleading comment about L2 linking
  - qcow2-cache: split out function to find offset in a cache
  - qcow2: split large deep-nested functions in several
  - qcow2: change L2 table cache granularity #PSBM-62402 #PSBM-64771
  - qcow2: rename variables l2table->l2subtable
  - qcow2-cache: remove arguments unused by functions
  - qcow2: specify default L2 cache size in cache chunks not clusters
  - qcow2: prevent double zeroing in qcow2_cache_cluster_init_zero()
  - nbd: add wait_on_nothing argument to nbd_wr_syncv()
  - nbd-client: fix client request receiving #PSBM-64582
  - nbd: add traces to nbd_wr_syncv()
  - nbd-client: fix nbd_co_receive_reply()
  - nbd-client: fix nbd_client_co_cmd_block_status() #PSBM-64582


author: Denis V. Lunev <den@openvz.org> - vz-2.6.0-28.3.9.vz7.55
changelog:
  - iotest 026: fix reference output
  - ui: avoid crash if vnc client disconnects with writes pending #PSBM-65541
  - block: log i/o errors #PSBM-60862
  - qmp: add offset and size to BLOCK_IO_ERROR event


author: Matthieu Saulnier <fantom@fedoraproject.org> - 3.2.0-1
changelog:
  - update to 3.2.0
  - remove BuildRoot tag in spec file
  - remove "rm -rf $RPM_BUILD_ROOT" at the beginning of %install section
  - remove %clean section
  - remove %defattr lines
  - add a joker for libqrencode.so.* files


author: Peter Gordon <peter@thecodergeek.com> - 3.2.0-2
changelog:
  - Add patch to fix improper LIBPTHREAD macro in the pkgconfig file:
    + fix-LIBPTHREAD-macro.patch
  - Resolves: #795582 (qrencode-devel: Malformed pkgconfig file causes build to
    fail ("@LIBPTHREAD@: No such file or directory"))


author: Matthieu Saulnier <fantom@fedoraproject.org> - 3.3.1-1
changelog:
  - update to 3.3.1
  - remove "Group" tag in spec file
  - fix manfile suffix
  - remove patch to fix improper LIBPTHREAD macro in the pkgconfig file:
    - upstream issue


author: Jan Grulich <jgrulich@redhat.com> - 1:4.8.5-12
changelog:
  - Revert upstream fix for QTBUG-15319
    Resolves: bz#1259675
  - Do not use nonstandard linux-g++-aarch64
    Resolves: bz#1291461


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-6
changelog:
  - Add LGPLv2+ and GPLv2 to license declaration
  - Correct changelog dates
  - Package additional LDAP scripts as a documentation
  - Package XFS-specific tools


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-9
changelog:
  - Move /sbin/* files under /usr (bug #983179)
  - Harden executables due to rpc.rquotad and quota_nld daemons (bug #983179)
  - Document quotagrpadmins(5), quotatab(5), warnquota.conf(5), rcp.rquota(8)
    (bug #983179)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-12
changelog:
  - Do not warn if rquotad RPC service is not registered (bug #1155584)
  - Query kernel for next quota on XFS or file system with hidden quota files
    (bug #1305968)
  - Add rpc-rquotad.service file which was known as nfs-rquotad.service
    in nfs-utils (bug #1207239)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-14
changelog:
  - Add nfs-rquotad.service alias for backward compatibility (bug #1207239)
  - Start rpc-rquotad.service when starting nfs-server.service (bug #1207239)


author: Michal Schmidt <mschmidt@redhat.com> - 7.2_3.17-2
changelog:
  - udev rules: Defer setting of node description to rdma-ndd if it is
    installed.
  - Related: bz1169968


author: Jarod Wilson <jarod@redhat.com> - 7.3_4.7-rc2-1
changelog:
  - Bump version to reflect rdma stack backport target level in 7.3
  - Verify fix to ensure all rdma drivers get into initrd
  - Related: bz1303589


author: Jarod Wilson <jarod@redhat.com> - 7.3_4.7-rc2-3
changelog:
  - Add target modules to initrd module include list for rdma service start in initrd
  - Add iscsi modules to allow iser/iscsi network install/boot
  - Resolves: bz1347548, bz1093972


author: Jarod Wilson <jarod@redhat.com> - 7.3_4.7-rc2-5
changelog:
  - Add a knob for loading on tech preview (i40iw) hardware
  - Make "is module loaded" function name more accurate
  - Related: bz1263936


author: Dmitry Andreev <dandreev@virtuozzo.com> - 7-11
changelog:
  - check-update: check license and print package name if available (#VZP-479)
  - autoupdate: randomize time in 15 min interval (#PSBM-54334)


author: Denis Silakov <dsilakov@virtuozzo.com> - 7-15
changelog:
  - conflict with old kpatch from Virtuozzo which had a dummy
    version of readykernel utility (#VZP-509)
  - conflict with old kpatch-rk, as well


author: Dmitry Andreev <dandreev@virtuozzo.com> - 7-18
changelog:
  - merge changes from vl72
  - check_update: fix typos in messages #VZP-587
  - create_report: add readykernel logs to a report
  - use /usr/sbin/kpatch-with-retries binary for kpatch commands
  - update: try to replace a patch on update #VZP-588
  - info: fix patch package name printing #VZP-549
  - spec: create directory for logs #VZP-534
  - add configuration file for logrotate #VZP-534
  - add basic logging #VZP-534


author: Denis Silakov <dsilakov@virtuozzo.com> 0.7
changelog:
  - Added basic self-test
   - Add possibility to use distname/kver from env variables
   - Improve output
   - Fix summary dump


author: Stef Walter <stefw@redhat.com> - 0.16.0-1
changelog:
  - Updated to upstream 0.16.0
  - Resolves: rhbz#1174911
  - Resolves: rhbz#1142191
  - Resolves: rhbz#1142148


author: Sumit Bose <sbose@redhat.com> - 0.16.1-6
changelog:
  - Resolves: rhbz#1258745
  - Resolves: rhbz#1258488
  - Resolves: rhbz#1267563
  - Resolves: rhbz#1293390
  - Resolves: rhbz#1273924
  - Resolves: rhbz#1274368
  - Resolves: rhbz#1291924


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-78
changelog:
  - nfsserver: fix monitor issues causing NFS to start on
    "debug-monitor" and "resource cleanup"
  - nfsserver: remove "up to 10 tries" on start to avoid issues with
    some services taking longer to start
  - nfsserver: stop rpc-gssd to allow unmounting of "rpcpipefs_dir"

    Resolves: rhbz#1356866
    Resolves: rhbz#1126073
    Resolves: rhbz#1346733


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-81
changelog:
  - oracle: fix issue with C## in monprofile and inform user that
    monuser must start with C## as well for container databases

    Resolves: rhbz#1328386


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-82
changelog:
  - portblock: create tickle_dir if it doesn't exist
  - tomcat: use systemd if available

    Resolves: rhbz#1303037
    Resolves: rhbz#1249430


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-1
changelog:
  - rebase to most up2date upstream tarball, remove patches already upstream, fix
    code movements in patches (#928758)
  - fix man-page-day objections (private #948866)
  - fix the build for aarch64 (#926571)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-2
changelog:
  - package spax and scpio separately (#959917)
  - fedora-review fixes, unapplied patch
  - make the spax to be pax alternative (#960007)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-7
changelog:
  - we should provide /etc/rmt symlink for a while (related to #968980)
  - use the ssh as the default remote access method


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-2
changelog:
  - Add dist tag, fix a few rpmlint issues, rebuild due to
    wrong vendor (#451229)
  - Added ncurses requirement(#469390)


author: Phil Knirsch <pknirsch@redhat.com> - 8.1-4
changelog:
  - Added the "we-are-upstream" comments according to Fedora review (#226376)
  - Added -p option to install to preserve timestamps (#226376)


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-5
changelog:
  - removed clear from dot-bash_logout (synchronized with bash,
    related to #429406)
  - removed unset USERNAME from dot-bash_profile (synchronized with
    bash, related to #196735)


author: Steve Dickson <steved@redhat.com> - 0.2.0-29
changelog:
  - Change RPCBDIR to be /run since that will exist after a
    reboot and bindings wil be perserved during upgrades
    but not reboots. (bz 1240817)


author: Steve Dickson <steved@redhat.com> - 0.2.0-35
changelog:
  - Restart rpcbind.socket on restarts (bz 1303751)
  - Added localhost:111 to rpcbind socket activation (bz 1293430)
  - Soft static allocate rpc uid/gid (bz 1321279)


author: Florian Festi <ffesti@redhat.com> - 4.11.3-14
changelog:
  - Enable plugin system but disable collection plugins. Needed for
    systemd-inhibit plugin (#1160401)
  - Move systemd-inhibit plugin into its own sub packge


author: Florian Festi <ffesti@redhat.com> - 4.11.3-18
changelog:
  - Fixed failing upstream test 257 on big endian systems (#1264463)
  - Fixed problems with perl.req script (#1320214, #1275551)
  - Fixed race condition in rpm file deployment when updating an existing file
    (#1320181)
  - Move bdb warnings from stdin to stdout (#1297793)
  - Add --justdb to the erase section of the man page, too (#1310561)
  - Backport support for multi threaded xz compression (#1278924)
  - Update config.guess (#1291377)
  - Add --noplugins option (#1264031)
  - Overwrite a file if it is not marked as config any more (#1290463)
  - Add man page for systemd-inhibit plugin (#1265578)


author: Michal Sekletar <msekleta@redhat.com> - 0.17-71
changelog:
  - resolves: RHBZ #737244 #896583 #947213
  - migrate from xinetd to systemd configuration
  - close pam session correctly when client does not ask for separate error channel
  - fix pty handling which was broken by changes in /bin/login


author: Michal Sekletar <msekleta@redhat.com> - 0.17-72
changelog:
  - unit files must not be marked as config files
  - fix handling of non-native IPv6 connections via AF_INET6 socket


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-8
changelog:
  - modify the service file to automatically restart rsyslog on failure
    resolves: rhbz#1061322
  - add explicitly versioned dependencies on libraries which do not have
    correctly versioned sonames
    resolves: rhbz#1107839
  - make logrotate tolerate missing log files
    resolves: rhbz#1144465
  - backport the mmcount plugin
    resolves: rhbz#1151037
  - set the default service umask to 0066
    resolves: rhbz#1228192
  - add a patch to make imjournal sanitize messages as imuxsock does it
    resolves: rhbz#743890
  - add a patch to fix a bug preventing certain imuxsock directives from
    taking effect
    resolves: rhbz#1184410
  - add a patch to fix a race condition in directory creation
    resolves: rhbz#1202489


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-9
changelog:
  - update the patch fixing a race condition in directory creation
    resolves: rhbz#1202489
  - improve provided documentation
    - move documentation from all subpackages under a single directory
    - add missing images
    - remove doc files without content
    - add a patch making various corrections to the HTML documentation
    resolves: rhbz#1238713
  - add a patch to prevent division-by-zero errors
    resolves: rhbz#1078878
  - add a patch to clarify usage of the SysSock.Use option
    resolves: rhbz#1143846
  - add a patch to support arbitrary number of listeners in imuxsock
    - drop patch for rhbz#1053669 as it has been merged into this one
    resolves: rhbz#1151041


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-10
changelog:
  - add a patch to prevent field truncation in imjournal
    resolves: rhbz#1101602
  - add a patch to enable setting a default TAG
    resolves: rhbz#1188503
  - add a patch to fix a nonfunction hostname setting in imuxsock
    resolves: rhbz#1184402


author: Radovan Sroka <rsroka@redhat.com> 7.4.7-11
changelog:
  - add patch that resolves config.guess system-recognition on ppc64le architecture
    resolves: rhbz:1254511


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-13
changelog:
  - add a patch to prevent crashes when using multiple rulesets
    resolves: rhbz#1224336
  - add a patch to keep the imjournal state file updated
    resolves: rhbz#1216957
  - add a patch to fix an undefined behavior caused by the maxMessageSize directive
    resolves: rhbz#1214257
  - add a patch to prevent crashes when using rulesets with a parser
    resolves: rhbz#1282687


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-14
changelog:
  - add a patch to prevent loss of partial messages
    resolves: rhbz#1312459
  - add a patch to allow multiple rulesets in imrelp
    resolves: rhbz#1223566
  - add a patch to fix a race condition during shutdown
    resolves: rhbz#1295798
  - add a patch to backport the mmutf8fix plugin
    resolves: rhbz#1146237
  - add a patch to order service startup after the network
    resolves: rhbz#1263853


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-15
changelog:
  - add a patch to make state file handling in imjournal more robust
    resolves: rhbz#1245194
  - add a patch to support wildcards in imfile
    resolves: rhbz#1303617


author: Josef Stribny <jstribny@redhat.com> - 2.0.0.353-22
changelog:
  - Fix FTBFS with new tzdata
    Resolves: rhbz#1144023
  - Fix FTBFS due to a support for RFC 5649 in OpenSSL
    Resolves: rhbz#1145692


author: Josef Stribny <jstribny@redhat.com> - 2.0.0.353-23
changelog:
  - Add missing patch for new tzdata
    Related: rhbz#1144023
  - Add missing patch for RFC 5649 in OpenSSL
    Related: rhbz#1145692


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.598-24
changelog:
  - Rebased to Ruby 2.0.0-p598.
    * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
        default-.gems.patch; subsumed
    * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
        subsumed
    * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
        -succ.patch; subsumed
    * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
    Resolves: rhbz#1071187
  - Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
    Resolves: rhbz#1164000
  - Fix for Proxy Realm feature.
    Resolves: rhbz#1122140
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164000


author: Pavel Valena <pvalena@redhat.com> - 2.0.0.648-26
changelog:
  - Rebase to Ruby 2.0.0-p648
    Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
    * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
        with-DESTDIR.patch; subsumed
    * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
    * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
        fails.patch; subsumed
  - Remove tests depending on europe/moscow to avoid failures due to tzdata change
    https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
  - Add checks for systemtap, abrt hook and rubygems version
  - Fix significant hash table performance slowdown on ppc64le
    Resolves: rhbz#1163032
  - Support in no_proxy for domain names with whitespaces and leading dots
    Resolves: rhbz#1300433


author: Martin Milata <mmilata@redhat.com> - 0.13-5
changelog:
  - Fix minor bugs found by static analyzers
    - Resolves: #1142856
  - Return empty duphash for koopses with no reliable frames
    - Resolves: #1123262
  - Fix parsing of python SyntaxError exceptions
    - Resolves: #1142339
  - Fix parsing of ppc64 gdb stacktraces
    - Resolves: #1142338
  - Limit the depth of generated stacktrace to avoid huge reports
    - Resolves: #1142346
  - Add authentication support to uReport, needed for reporting to customer portal
    - Resolves: #1139555


author: Matej Habrnal <mhabrnal@redhat.com> - 0.13-13
changelog:
  - add support for Ruby
    - Related: #1334604
  - actualize list of normalization function in satyr
    - Related: #1332869
  - fix defects found by coverity
    - Related: #1336390


author: Lubos Kardos <lkardos@redhat.com> - 20130529-10
changelog:
  - Allow to use vendor prefix in packages names
  - Include %nfsmountable macro into scl's rpm macros file


author: Jan Zeleny <jzeleny@redhat.com> - 20130529-13
changelog:
  - bump the version to get in sync with 7.1 branch
  - Reflect the state of %nfsmountable macro in collections' rpm macro files
  - escape all the % chars in changelog


author: Petr Hracek <phracek> - 4.1.0-0.20.20120314git3c2946
changelog:
  - Multiple packages are installing files under /etc/tmpfiles.d
  - comply http://fedoraproject.org/wiki/Packaging:Guidelines#Tmpfiles.d
  - Resolves: rhbz#1121958


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.1-5.el7
changelog:
  - seabios-pci-don-t-map-virtio-1.0-storage-devices-above-4G.patch [bz#1373154]
  - Resolves: bz#1373154
    (Guest fails boot up with ivshmem-plain and virtio-pci device)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.1-5.el7_3.1
changelog:
  - seabios-vgabios-Reorder-video-modes-to-work-around-a-Windows.patch [bz#1392028]
  - Resolves: bz#1392028
    ([virtio-win][svvp][ws2016] cannot generate dump file when using nmi on ws2016 and win10-32/64)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.1-5.el7_3.2
changelog:
  - seabios-acpi_extract-Move-main-code-to-new-function-main.patch [bz#1400102]
  - seabios-acpi_extract-Make-the-generated-.hex-files-more-huma.patch [bz#1400102]
  - seabios-acpi_extract-Don-t-generate-unused-and-empty-q35-acp.patch [bz#1400102]
  - seabios-acpi-Don-t-build-SSDT-files-on-every-build-store-the.patch [bz#1400102]
  - Resolves: bz#1400102
    (decouple the SeaBIOS build from iasl)


author: Roman Kagan <rkagan@virtuozzo.com> - vz-1.9.1-5.3.2.vz7.1
changelog:
  - blockcmd: accept only disks and CD-ROMs
  - blockcmd: generic SCSI luns enumeration
  - virtio-scsi: enumerate luns with REPORT LUNS
  - esp-scsi: enumerate luns with REPORT LUNS
  - usb-uas: enumerate luns with REPORT LUNS
  - pvscsi: fix the comment about lun enumeration
  - lsi-scsi: reset in case of a serious problem
  - lsi-scsi: try to enumerate luns with REPORT LUNS
  - add helper for uuid formatting
  - add Hyper-V definitions
  - hyperv: add basic infrastructure and setup
  - vmbus: add infrastructure and setup
  - add support for Hyper-V/VMBus storage controller
  - hv_scsi: handle bootprio from fw_cfg


author: Roman Kagan <rkagan@virtuozzo.com> - vz-1.9.1-5.3.2.vz7.2
changelog:
  - DROP: hyperv: add basic infrastructure and setup
  - DROP: vmbus: add infrastructure and setup
  - DROP: add support for Hyper-V/VMBus storage controller
  - hyperv: add basic infrastructure and setup
  - vmbus: add infrastructure and setup
  - add support for Hyper-V/VMBus storage controller


author: Roman Kagan <rkagan@virtuozzo.com> - vz-1.9.1-5.3.2.vz7.3
changelog:
  - DROP: hyperv: add basic infrastructure and setup
  - hyperv: add basic infrastructure and setup
  - hyperv: leave clear SIMP and SIEFP msrs to OS loader


author: Roman Kagan <rkagan@virtuozzo.com> - vz-1.9.1-5.3.2.vz7.6
changelog:
  - hyperv_defs.h: add legal header
  - hyperv.[ch]: add legal header
  - vmbus.[ch]: add legal header
  - hv_scsi.[ch]: add legal header


author: Martin Briza <mbriza@redhat.com> - 4.2.1-9
changelog:
  - Backported commit from upstream to fix treating "x26" as "&" character
  - Added virtual provide for gnulib according to http://fedoraproject.org/wiki/Packaging:No_Bundled_Libraries 
    Resolves: #812067 #821776


author: Martin Briza <mbriza@redhat.com> - 4.2.2-1
changelog:
  - New release
  - Dropping included patches: sed-4.2.1-data-loss.patch sed-4.2.1-fix-0x26-on-RHS.patch sed-4.2.1-makecheck.patch
  - Dropping unused patch sed-4.2.1-dummyparam.diff
  - Regenerated sed-4.2.{1,2}-copy.patch
  - Minor change to patching (creating backup files)


author: Jan Pacner <jpacner@redhat.com> - 4.2.2-5
changelog:
  - Related: #948598 (Man page scan results for sed; introduce -c argument, add
    help for -b --binary arguments, cleanup arguments & help)


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-102.7
changelog:
  - Update systemd on RHEL-7.2 box to version from RHEL-7.3 and then as a separate yum command update the selinux policy systemd will start generating USER_AVC denials and will start returning "Access Denied" errors to DBus clients.
  Resolves: rhbz#1394715


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-102.8
changelog:
  - Allow puppetagent_t to access timedated dbus. Use the systemd_dbus_chat_timedated interface to allow puppetagent_t the access.
  Resolves: rhbz#1400505


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-102.12
changelog:
  - Allow glusterd_t to bind on glusterd_port_t udp ports.
  Resolves: rhbz#1408128
  - Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
  Resolves: rhbz#1408128
  - Fixes for containers
  - Allow containers to attempt to write to unix_sysctls.
  - Allow cotainers to use the FD's leaked to them from parent processes.
  Resolves: rhbz#1408126
  - Allow systemd to stop glusterd_t domains.
  Resolves: rhbz#1408125


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-102.13
changelog:
  - Allow systemd container to read/write usermodehelperstate
  Resolves: rhbz#1408126
  - Allow glusterd_t to bind on glusterd_port_t udp ports.
  Resolves: rhbz#1408128


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-102.16
changelog:
  - Allow openvswitch read script state.
  - Allow openvswitch exec hostname and readinitrc_t files
  Resolves: rhbz#1430751


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.6-2
changelog:
  - Fixed milter_helo regression (milter-helo-fix patch)
    Resolves: rhbz#895552
  - Fixed bogus dates in changelog


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-3
changelog:
  - add more securetty required for mainframes (#1067347)
  - set SHELL envvar to /bin/bash in bashrc (#1063552)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-5
changelog:
  - reserve uidgid pair 142:142 for activemq (#1086923)
  - add xfs to /etc/filesystems, fallback to /proc/filesystems
    (#1123832)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-6
changelog:
  - change reservation of 185:185 to jboss user (#1192413)
  - reserve uidgid pair 167:167 for ceph (#1221043)
  - reserve uidgid for systemd-network(192:192) (#1213820)
  - reserve uidgid for systemd-resolve(193:193) (#1213820)
  - mention systemd-jounal-gateway can be dynamic (#1213820)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-7
changelog:
  - add basic empty subuid/subgid files for docker (#1311278)
  - specify full path to utilities in /etc/profile and /etc/bashrc
    (#1331871)


author: Dan Horák <dan@danny.cz> - 1.37-5
changelog:
  - fix various man pages (#948463)
  - add man page for the rescan-scsi-bus.sh script (#948463)
  - Resolves: #948463


author: David Sommerseth <davids@redhat.com> - 1.37-7
changelog:
  - Avoid deletion of /dev/null (#1298737)
  - Fix syntax error in rescan-scsi-bus related to multipath flushing (#1255564)
  - Add upstream updates to sg_inq, sg_rdac and sg_vpd (#1170719)


author: Richard W.M. Jones <rjones@redhat.com> - 0-1.1.20110622svn
changelog:
  - Fix date in release string.
    NB: To make this version > than the previous, I had to use 1.1.20110622
    instead of 0.1.20110622, since the old second field was 20110623.
  - Unset MAKEFLAGS, since parallel make breaks the build.
  - Bring the spec file up to modern standards.


author: Jan Synáček <jsynacek@redhat.com> - 1.2.0.10-9
changelog:
  - dos2unix'ed the patch
  - Call dos2unix before patching and dos2unix Makefile as well
  - Use %{_sbindir} instead of '/sbin'


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-14
changelog:
  - label the newly created home dir correctly (#1077809)
  - mention that chage -d 0 forces password change (#1135010)
  - improve date parsing and error detecting in chage
  - avoid full group database scanning in newgrp in most common case
  - report error if usermod asked for moving homedir and it does not exist


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-16
changelog:
  - update auditing to cover more events and fix some incorrect audit
    records - patch by Steve Grubb (#1151580)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-19
changelog:
  - documentation fixes (#1292820)
  - usermod: make password unlocking compatible with passwd (#1185425)
  - usermod: disallow ':' in raw password setting (#1292815)
  - improve the gid and uid allocation mechanism (#1279321)
  - lastlog: add options to unexpire unused accounts (#1285547)


author: Paul Wouters <paul@nohats.ca> - 1.7.2.0-1
changelog:
  - Upgraded to 1.7.2.0 which allows tun/tap interfaces without IP address
    and introduces options openssl-compress and max-children.


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.1-1
changelog:
  - Updated to 1.7.2.1 for CVE-2012-0219, rhbz#821553, rhbz#821688
  - Remove patch merged upstream
  - Remove --disable-fips from configure


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.2-2
changelog:
  - Resolves: rhel#1017015 Use readline, not compat-readline5-devel
  - Added two patches fixing -Wformat issues
  - Enable hardened build
  - Cleanup obsolete spec file lines


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-36
changelog:
  - [ceph] collect /var/lib/ceph and /var/run/ceph
    Resolves: bz1260607
  - [sosreport] prepare report in a private subdirectory
    Resolves: bz1290955


author: Pavel Moravec <pmoravec@redhat.com> = 3.3-2
changelog:
  - [grub2] grub2-mkconfig loads ext4 and brctl kernel
    Resolves: bz1116670
  - [ceph] skip collecting of all keyring and bindpass files
    Resolves: bz1260607
  - [omsa] add omreport storage controller
    Resolves: bz1299603
  - [atomichost] fix collection of 'docker info' output
    Resolves: bz1302146
  - [monit] fix add_copy_spec() arguments
    Resolves: bz1356945
  - [virtwho] add new plugin for virt-who agent
    Resolves: bz1353552


author: Pavel Moravec <pmoravec@redhat.com> = 3.3-3
changelog:
  - [nodejs][nms]: new plugins
    Resolves: bz1368393
  - [docker]: Gather more data and expand plugin options
    Resolves: bz1351647


author: Stanislav Kinsburskiy <skinsbursky@virtuozzo.com> 0.08.016
changelog:
  - swapfd: check, that mapping is accessible ater replace
   - swapfd: mem_read helper introduced
   - swapfd: open_pid_mem helper introduced


author: Stanislav Kinsburskiy <skinsbursky@virtuozzo.com> 0.08.017
changelog:
  - swapfd: sync all the private file mappings (#PSBM-53303)
   - Makefile: remove explicit path to libnl3 headers from flags
   - autoconf.sh: new helper to configure and build with libnl3
   - configure: add check for libnl3/netlink/msg.h header
   - configure: add check for sys/capability.h header


author: Stanislav Kinsburskiy <skinsbursky@virtuozzo.com> 0.08.020
changelog:
  - manager: allow SPFS mount on top on non-empty directory
   - spfs: add carriage return to error message
   - manager: move SPFS process to target VE (#PSBM-58606)


author: Stanislav Kinsburskiy <skinsbursky@virtuozzo.com> 0.08.021
changelog:
  - manager: move to target VE on init
   - manager: revert commit ce578e797811554ae693d9b76fde67326ccbc16c


author: Stanislav Kinsburskiy <skinsbursky@virtuozzo.com> 0.08.022
changelog:
  - manager: use current directory as logging directory, if not provided
   - manager: add "log-dir" option


author: Stanislav Kinsburskiy <skinsbursky@virtuozzo.com> 0.08.023
changelog:
  - nfs tests: add "sk-unix01" to supported list
   - unix sockets: restore socket rqueue even if already opened
   - unix sockets: restore DGRAM socket connections properly (#PSBM-65010)
   - manager: unix_dgram_peer() helper added
   - manager: move DGRAM sockets handling to separated helper
   - manager: open unix sockets in corresponding handlers
   - manager: return socket fd, if already set
   - unix sockets: alloc_unix_sk() helper introduced
   - unix-sockets: do not try to delete already unlinked socket


author: Stanislav Kinsburskiy <skinsbursky@virtuozzo.com> 0.08.024
changelog:
  - manager: create new path if "link-remap"'ed exists (#PSBM-64299)
   - manager: don't close file object fd if negative


author: Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-11
changelog:
  - Don't assert on invalid client message
    Resolves: rhbz#1227410
  - Don't truncate large 'now' values in _spice_timer_set
    Resolves: rhbz#1227408
  - Avoid race conditions reading monitor configs from guest
    Resolves: rhbz#1239128
  - Lock the pixmap image cache for the entire fill_bits call
    Resolves: rhbz#1235443


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-16
changelog:
  - Use autosetup
    Related: CVE-2016-0749
  - Fix heap-based memory corruption within smartcard handling
    Resolves: CVE-2016-0749
  - Fix host memory access from guest with invalid primary surface parameters
    Resolves: CVE-2016-2150


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-17
changelog:
  - Fix crash when the client sends a wrong header (for example when using spice-html5)
    Resolves: rhbz#1281442
  - Fix crash when guest provides wrong address
    Resolves: rhbz#1264356
  - Fix thread-safety issue causing a crash when playing a Youtube video spanning
    multiple monitors
    Resolves: rhbz#1253375
  - Add patches reducing QEMU wake-ups
    Related: rhbz#912763, rhbz#1186146
  - Fix use-after-free after resetting a VM
    Resolves: rhbz#1281455
  - Send KeepAlive probes every 10 minutes
    Resolves: rhbz#1298590
  - Add client to guest volume synchronization
    Resolves: rhbz#1264107


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-18
changelog:
  - Fix crash when connecting to VM using smartcard passthrough
    Resolves: rhbz#1340899
  - Fix hang after unredirecting a USB device
    Resolves: rhbz#1338752
  - Backport spice_qxl_set_max_monitors()
    Resolves: rhbz#1283202


author: Frediano Ziglio <fziglio@redhat.com> - 0.12.4-20
changelog:
  - Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
    messages.
    Resolves: CVE-2016-9577
  - Fix remote DoS via crafted message.
    Resolves: CVE-2016-9578


author: Jeff Law <ldv@altlinux.org> - 4.8-2
changelog:
  - Don't dereference dropped TCP (#971352).  From
    Jan Stancek.  Merged into patch for 851457.
  - Disable "net" test as it is highly timing dependent
    Merge into patch 851457.
  - Bring forward patches lost after resyncing with Fedora.
    - Patch to avoid strict aliasing warnings
    - Patch to add man page for strace-log-merge (#948577)
    - Patch to improve scheduling fairness (#851457)


author: Avesh Agarwal <avagarwa@redhat.com> - 4.55-1
changelog:
  - New upstream realease 4.55
  - Updated local patches
  - enabled fips mode
  - Fixed for pod2man as it build-requires perl-podlators


author: Avesh Agarwal <avagarwa@redhat.com> - 4.56-1
changelog:
  - New upstream realease 4.56.
  - Updated local patches.
  - Fixed upstream URL in spec file.
  - Sourced URL of sha256 hash file in spec file.


author: Tomáš Mráz <tmraz@redhat.com> - 4.56-5
changelog:
  - Allow TLS 1.1 and TLS 1.2 in FIPS mode
  - Documentation fixes of curve and accept/connect options (#1197340)
  - Add negotiated protocol version to the logs (#1275613)


author: Chris Rog <crog@redhat.com> 1.15.9-12
changelog:
  - 1261006: Handle multiple nav button clicks (alikins@redhat.com)
  - 1242998, 1254550: Fix "already reg'ed" in initial-setup (alikins@redhat.com)
  - 1249012: fix start-end date original color FIXME (vrjain@redhat.com)
  - 1249012: Start-End Date of expired subscription is now in red status
    (vrjain@redhat.com)
  - 884288: Make register widgets handle resizing. (alikins@redhat.com)
  - 1265347, 1265371: Updated translations with whitespace corrections
    (crog@redhat.com)
  - 1257943:Adding a warning to repo-override command when manage_repos = 0
    (fnguyen@redhat.com)
  - Set help file name for the Subscription Manager spoke
    (martin.kolman@gmail.com)
  - 1246680: Hide rhsm-debug --subscriptions options (alikins@redhat.com)
  - 1246680: Remove subscriptions from rhsm-debug (wpoteat@redhat.com)
  - 1185958: Quieter ostree plugin sans ostree (alikins@redhat.com)
  - 1168268: Add rhsm.conf proxy info to ostree repo (alikins@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-13
changelog:
  - 1266480: Refresh TreeView selection after subscriptions are removed.
    (awood@redhat.com)
  - 1267034: Handle 401 with cert based auth (alikins@redhat.com)
  - Allow 'back' to go back multiple times. (alikins@redhat.com)
  - 1262075,1267179,1243707: Fix back/cancel nav (alikins@redhat.com)
  - 1267287: Fix allsubs tab ui regression (alikins@redhat.com)
  - 1266994: Use our icon for initial-setup spoke icon (alikins@redhat.com)
  - 1265347, 1265371: More translations whitespace corrections (crog@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-14
changelog:
  - 1268102: Stop main window from opening duplicate dialogs. (awood@redhat.com)
  - 1268088: Changes the rhsm spoke display message to end with "registered"
    (csnyder@redhat.com)
  - 1268095: Replace SLA radio buttons w/ combobox (alikins@redhat.com)
  - 1268028: Fix skipped auto attach in registergui (alikins@redhat.com)
  - 1268060: Add 'cancel' back to s-m-gui register. (alikins@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-15
changelog:
  - 1254460: Fixed the credits button in the about dialog in subman GUI
    (crog@redhat.com)
  - 1251853: Fix errors if "manage_repos = " in cfg (alikins@redhat.com)
  - 1270204: Crash report no longer sent when widget is none (csnyder@redhat.com)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-12
changelog:
  - RHEL 7.1 erratum
    - don't retry authentication when ctrl-c pressed
    - fix double-quote processing in Defaults options
    - handle the "(none)" hostname correctly
    - SSSD: fix sudoUser netgroup specification filtering
    - SSSD: list correct user when -U <user> -l specified
    - SSSD: show rule names on long listing (-ll)
    - fix infinite loop when duplicate entries are specified on the
      sudoers nsswitch.conf line
    Resolves: rhbz#1084488
    Resolves: rhbz#1088464
    Resolves: rhbz#1088825
    Resolves: rhbz#1092499
    Resolves: rhbz#1093099
    Resolves: rhbz#1096813
    Resolves: rhbz#1147497
    Resolves: rhbz#1147557


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-14
changelog:
  - RHEL 7.2 erratum
    - backported command digest specification
    - fixed CVE-2014-9680 sudo: unsafe handling of TZ environment variable
    - fixed typos in sudoers.ldap man page
    - fixed handling of double-quoted sudoOption values in ldap, sssd sources
    - fixed numeric uid specification support in ldap source
    - fixed authentication flag logic in ldap source
    - added the systemctl command to the SERVICES alias in the default sudoers file
    Resolves: rhbz#1144446
    Resolves: rhbz#1235570
    Resolves: rhbz#1138259
    Resolves: rhbz#1183818
    Resolves: rhbz#1233607
    Resolves: rhbz#1144419
    Resolves: rhbz#1135539
    Resolves: rhbz#1215400


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-15
changelog:
  - RHEL 7.2 erratum
    - fixed compilation of testing binaries during make check
    - added legacy group processing patch
    - replaced buggy base64 decoder with a public domain implementation
    Resolves: rhbz#1254621
    Resolves: rhbz#1183818
    Resolves: rhbz#1247591


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-18
changelog:
  - RHEL 7.3 erratum
    - removed requiretty flag from the default sudoers policy
    - backported pam_service and pam_login_service defaults options
    - implemented netgroup_tuple defaults option for changing netgroup
      processing semantics
    - fixed user matching logic in the LDAP nss backend
    - don't allow visudo to accept an invalid sudoers file
    - fixed a bug causing that non-root users can list privileges of
      other users
    - modified digest check documentation to mention the raciness of
      the checking mechanism
    Resolves: rhbz#1196451
    Resolves: rhbz#1247230
    Resolves: rhbz#1334331
    Resolves: rhbz#1334360
    Resolves: rhbz#1261998
    Resolves: rhbz#1313364
    Resolves: rhbz#1312486
    Resolves: rhbz#1268958
    Resolves: rhbz#1335039
    Resolves: rhbz#1335042
    Resolves: rhbz#1335045
    Resolves: rhbz#1273243
    Resolves: rhbz#1299883


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-19
changelog:
  - RHEL 7.3 erratum
    - removed INPUTRC from env_keep to prevent a potential info leak
    Resolves: rhbz#1340700


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.9-1.4
changelog:
  - Completely remove dependency on prelink/execstack (RHBZ#1093261).
  - Rebuild for aarch64 and ppc64le (1125690).


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-1
changelog:
  - Rebase to supermin 5.1.15.
    resolves: rhbz#1271255
  - Create supermin5-devel package containing RPM dependency generator.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-3
changelog:
  - Add all upstream patches since 5.1.15 was released.
  - These should improve boot performance and initrd size.


author: Tim Waugh <twaugh@redhat.com> 1.4-4
changelog:
  - Applied patches from Jiri Popelka:
    - Fix off-by-one error in call to readlink.
    - Fix possible buffer overrun found by coverity.


author: Peter Jones <pjones@redhat.com> - 4.05-4
changelog:
  - Fix build problem from kernel-headers' removeal of ext2_fs.h
    (fix backported from as-yet-unreleased upstream version.)


author: Peter Jones <pjones@redhat.com> - 4.05-12
changelog:
  - Toolchain changes between when this originally got built and 4.05-9 means
    4.05-9 - 4.05-11 don't actually work.
    Related: rhbz#1085434


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-5
changelog:
  - resolves: #1100365
    fixed issue when sa data files weren't correctly overwritten in some cases
  - resolves: #1097294
    count with xz compressed files as well in sa2 script
  - resolves: #1097292
    fix file mode of sysstat cron file
  - resolves: #1128569
    added workaround for dyn-tick kernel feature which makes /proc/stat file
    unreliable under certain circumstances
  - resolves: #1110852
    added better explanation of HISTORY setting to sysstat(5) man page
  - resolves: #1102610
    added possibility to set compress method in /etc/sysconfig/sysstat file


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-6
changelog:
  - resolves: #1146081
    fixed issue when cifsiostat and nfsiostat were reporting incorrect statistics
    on a single CPU machines


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-8
changelog:
  - resolves: #846699
    renamed nfsiostat to nfsiostat-sysstat, as nfsiostat is also provided
    by the nfs-utils package
  - resolves: #1224882
    fixed bug when pidstat could run out of pre-allocated space for PIDs
  - resolves: #1258990
    added support for more CPUs
  - resolves: #1267972
    fixed bug when iostat didn't display the full device name if it's too long
  - resolves: #1328490
    fixed bug, when sadc could forward SIGINIT to init process and couse reboot


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-9
changelog:
  - related: #846699
    do the renaming of nfsiostat properly, with patch
  - resolves: #1332662
    added tapestat utility for monitoring tape drives


author: Thomas Woerner <twoerner@redhat.com> 1.2.29-4
changelog:
  - fixed possible privilege escalation flaw via use of python pickle
    (CVE-2011-2520), replaced pickle by json (rhbz#717985) and (rhbz#722991)
  - stop D-BUS firewall mechanism on update


author: Frank Ch. Eigler <fche@redhat.com> - 3.0-3
changelog:
  - rhbz1346112 delay tls cert creation
  - rhbz1269062 null elevator
  - rhbz1337416 'count' tapset variable - autocast/@defined


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-37
changelog:
  - Improve message with response directions to reflect new option
    for user names with dot character


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-42
changelog:
  - Add systemd support (thanks to Zbigniew Jędrzejewski-Szmek and Jóhann B. Guðmundsson)
    Resolves: #737219


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-23
changelog:
  - use /usr/bin/ssh as the default remote shell binary (#969015)
  - do not verbose-print xattrs when --no-xattrs option is used
  - do not override the config.{guess,sub} twice, this is already done by the
    redhat-rpm-config package (#951442)


author: Pavel Raiskup <praiskup@redhat.com> - 1.26-25
changelog:
  - the /etc/rmt seems to be the best place where to look for rmt binary (see the
    commit message in Fedora's cpio.git for more info)


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.4-1
changelog:
  - Upgrade 1.9.4 release
  - Fixed bad day-of-week of first entry in changelog
  - Do not install on systems with efi partition
    See https://access.redhat.com/articles/2217041
    Resolves: rhbz#1275031
    Resolves: rhbz#1293526
    Resolves: rhbz#1307176
    Resolves: rhbz#1313876
    Resolves: rhbz#1332691


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.4-2
changelog:
  - Test for UEFI system with /sys/firmware/efi, rather than looking in
    the boot directory for an efi directory.
  - Allow install on UEFI platform, but with warning message, in order to
    permit completion of provisioning.
    Resolves: rhbz#1356571


author: Michal Sekletar <msekleta@redhat.com> - 14:4.5.1-3
changelog:
  - add support for nano second timestamps (#1151406)
  - fix cdp dissector, allow zero-length data frames (#1231246)


author: Jaromír Končický <jkoncick@redhat.com> - 6.18.01-5
changelog:
  - Readded reverse-history-handling-in-loops patch which was created for
    tcsh version 6.17.00 in RHEL 6.4 to fix bug #814069
    Resolves: #1035235


author: David Kaspar <dkaspar@redhat.com> - 6.18.01-8
changelog:
  - Upstream's $anyerror variable re-introduced. (#1123854)
  - Fix for hang inside the 'wait' built-in of tcsh added. (#1181682)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.18.01-9
changelog:
  - 'if statement' parsing fixed when the space is missing after ')'. (#1273892)
  - Quote backslashes properly to preserve them in `...` expressions. (#1319816)
  - Fix for tcsh being interruptible while waiting for child process. (#1269370)
  - Fix of memory leak when using the 'source' built-in command.      (#1273513)
  - Print error message on stderr (instead of stdout).                (#1273498)
  - Use GLIBC's malloc instead of builtin malloc.                     (#1315713)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.18.01-12
changelog:
  - Fix another regression in tcsh-6.18.01-quote-backslashes-properly.patch
    Related: #1334751

  - Fix regression in tcsh-6.18.01-use-stderr-upon-error.patch
    Related: #1273498


author: Adam Tkac <atkac redhat com> 1:0.17-51
changelog:
  - add "-debug6" option to telnetd (#rh674942)
  - telnet wasn't interruptable (^C) when started with specious -b argument (#704604)


author: Martin Sehnoutka <msehnout@redhat.com> - 1:0.17-60
changelog:
  - Introduce new -i switch
  - ip addresses will be logged into utmp instead of hostname
  - Resolves: #1323094


author: Petr Pisar <ppisar@redhat.com> - 1.7-39
changelog:
  - Fix maximal RSS report (bug #702826)
  - Clean spec file
  - Recompute CPU usage at finer level (bug #527276)


author: Miloslav Trmač <mitr@redhat.com> - 2.11-3
changelog:
  - Drop the cron.daily script, systemd default configuration handles the same
    places.
    Resolves: #906455


author: Sven Lankes <sven@lank.es> 1.5-1
changelog:
  - New upstream release
  - Do the right thing (tm) and revert to $upstream-behaviour: 
     No longer install tmux setgid and no longer use /var/run/tmux 
     for sockets. Use "tmux -S /var/run/tmux/tmux-`id -u`/default attach"
     if you need to access an "old" tmux session
  - tmux can be used as a login shell so add it to /etc/shells


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-5
changelog:
  - fixed various verification issues (by verification-fixes patch)
    resolves: rhbz#1252153
  - realtime profile now sets cpumask of unbound workqueues
    (by realtime-set-unbound-workqueues patch)
    resolves: rhbz#1259043
  - fixed lapic_timer_adv_ns cache in realtime-virtual-host profile
    (by lapic-timer-adv-ns-cache-fix patch)
    resolves: rhbz#1259452
  - fixed find-lapictscdeadline-optimal-fix in realtime-virtual-host profile
    (by find-lapictscdeadline-optimal-fix patch)
    resolves: rhbz#1267284
  - removed nohz_full from the realtime profile (by realtime-remove-nohz-full
    patch)
    resolves: rhbz#1274486


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-6
changelog:
  - fixed race in modprobe in realtime-virtual-host profile and extended
    stop action to have hint why it is called
    resolves: rhbz#1292117


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.0-1
changelog:
  - new-release
    - rebase tuned to latest upstream
      resolves: rhbz#1289048
    - gui: fixed save profile
      resolves: rhbz#1242491
    - tuned-adm: added --ignore-missing parameter
      resolves: rhbz#1243807
    - plugin_vm: added transparent_hugepage alias
      resolves: rhbz#1249610
    - plugins: added modules plugin
      resolves: rhbz#1249618
    - plugin_cpu: do not show error if cpupower or x86_energy_perf_policy are
      missing
      resolves: rhbz#1254417
    - tuned-adm: fixed restart attempt if tuned is not running
      resolves: rhbz#1258755
    - nfv: avoided race condition by using synchronous mode
      resolves: rhbz#1259039
    - realtime: added check for isolcpus sanity
      resolves: rhbz#1264128
    - pm_qos: fixed exception if PM_QoS is not available
      resolves: rhbz#1296137
    - plugin_sysctl: reapply system sysctl after Tuned sysctl are applied
      resolves: rhbz#1302953
    - atomic: increase number of inotify watches
      resolves: rhbz#1322001
    - realtime-virtual-host/guest: added rcu_nocbs kernel boot parameter
      resolves: rhbz#1334479
    - realtime: fixed kernel.sched_rt_runtime_us to be -1
      resolves: rhbz#1346715
    - tuned-adm: fixed detection of no_daemon mode
      resolves: rhbz#1351536
    - plugin_base: correctly strip assignment modifiers even if not used
      resolves: rhbz#1353142
    - plugin_disk: try to workaround embedded '/' in device names
      related: rhbz#1353142
    - sap-hana: explicitly setting kernel.numa_balancing = 0 for better performance
      resolves: rhbz#1355768
    - libexec: fixed listdir and isdir in defirqaffinity.py
      resolves: rhbz#1252160
    - plugin_cpu: save and restore only intel pstate attributes that were changed
      resolves: rhbz#1252156
    - functions: fixed sysfs save to work with options
      resolves: rhbz#1251507
    - functions: fixed restore_logs_syncing to preserve SELinux context on rsyslog.conf
      resolves: rhbz#1268901
    - spec: correctly remove tuned footprint from /etc/default/grub
      resolves: rhbz#1268845
    - gui: fixed creation of new profile
      resolves: rhbz#1274609


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.1-1
changelog:
  - - new-release
    - rebase tuned to latest upstream
      resolves: rhbz#1289048
    - gui: fixed traceback caused by DBus paths copy&paste error
      related: rhbz#1356369
    - tuned-adm: fixed traceback of 'tuned-adm list' if daemon is not running
      resolves: rhbz#1358857


author: Patsy Franklin <pfrankli@redhat.com> - 2016f-1
changelog:
  - Rebase to 2016f
    - Egypt cancelled DST.
    - Asia/Novosibirsk transitions from +06 to +07 on 2016-07-24 at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016g-1.prerelease
changelog:
  - Rebase to prerelease version of tzdata-2016g.
    - Turkey changed from EET/EEST (+02/+03) to permanent +03,
      on 2016-09-07. 
    - A new leap second will be added on 2016-12-31 23:59:60 UTC.


author: Patsy Franklin <pfrankli@redhat.com> - 2016g-2
changelog:
  - Rebase to tzdata-2016g.
    - Turkey changed from EET/EEST (+02/+03) to permanent +03,
      on 2016-09-07.
    - A new leap second will be added on 2016-12-31 23:59:60 UTC.


author: Patsy Franklin <pfrankli@redhat.com> - 2016i-1
changelog:
  - Rebase to tzdata-2016i:
    - Cyprus is now split into two time zones as of 2016-10-30
    - Tonga will reintroduce DST on 2016-11-06


author: Patsy Franklin <pfrankli@redhat.com> - 2016j-1
changelog:
  - Rebase to tzdata-2016ij
    - Saratov region of Russia is moving from +03 offset to +04 offset
      on 2016-12-04.


author: Patsy Franklin <pfrankli@redhat.com> - 2017a-1
changelog:
  - Rebase to tzdata-2017a.
    - Mongolia no longer observes DST. (BZ #1425214)
    - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
  - Add zone1970.tab file to the install list. (BZ #1414829)


author: Tomas Hozza <thozza@redhat.com> - 1.4.20-20
changelog:
  - Install tmpfiles configuration into /usr/lib/tmpfiles.d (#1180995)
  - Fix root key management to comply to RFC5011 (#1180267)


author: Tomas Hozza <thozza@redhat.com> - 1.4.20-26
changelog:
  - Added Conficts on redhat-release packages without unbound-anchor.timer in presets (Related #1215645)


author: Tom Callaway <spot@fedoraproject.org> - 6.0-9
changelog:
  - Apply changes to match.c to sync with recmatch from util.c (from zip 3.0)
    This also resolves the license issue in that file.


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-15
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196134 #1196122 #1196126 #1196130


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-16
changelog:
  - Added patch for build option "-Werror=format-security"
  - Added support of non-unicode non-latin charset
  - Fix print of non-ascii filenames
  - Fix troubles with symlinks for archives with many files
    Resolves: rhbz#1276746, rhbz#1286165, rhbz#1276744


author: Thomas Haller <thaller@redhat.com> 1.2.7-3
changelog:
  - Add manual page for usb_modeswitch_dispatcher and fix errors in
    manual page of usb_modeswitch (rhbz#948451, rhbz#884203).


author: Lubomir Rintel <lkundrak@v3.sk> - 2.4.0-2
changelog:
  - Add the previously omitted systemd service file (rh #1352055)
  - Fix crash with invalid arguments (rh #1358472)


author: Hans de Goede <hdegoede@redhat.com> - 0.6-3
changelog:
  - Fix usbredirserver not listening for ipv6 connections (rhbz#957470)
  - Fix a few (harmless) coverity warnings


author: Hans de Goede <hdegoede@redhat.com> - 0.6-5
changelog:
  - Use the new libusb autodetach kernel driver functionality
  - Fix a usbredirparser bug which causes tcp/ip redir to not work (rhbz#1005015)


author: Victor Toso <victortoso@redhat.com> - 0.6-8
changelog:
  - Fix migration due lack of capabilities from source host
    Resolves: rhbz#1185167
  - New callback to drop isoc packets in order to avoid high memory
    consumption in the client
    Resolves: rhbz#1312913


author: Miloslav Trmač <mitr@redhat.com> - 1.110-1
changelog:
  - Update to usermode-1.110.
    Note that this drops halt/poweroff/reboot helpers, the respective
    implementations in systemd now include PolicyKit support.  Spec file change
    based on a patch by Lennart Poettering <lpoetter@redhat.com>.
    Resolves: #804088, #849208


author: Konstantin Neumoin <kneumoin@virtuozzo.com> 7.0.133
changelog:
  - remove workers
   - remove request decorator
   - log possible typos and missing cgroups (Derbyshev Dmitry
  <dderbyshev@virtuozzo.com>) (#PSBM-58041)
   - print script's stdout (Derbyshev Dmitry <dderbyshev@virtuozzo.com>) (#PSBM-58041)


author: Konstantin Neumoin <kneumoin@virtuozzo.com> 7.0.135
changelog:
  - set-policy fixes (Derbyshev Dmitry <dderbyshev@virtuozzo.com>) (#PSBM-59885)
   - minor cleanup
   - path for vstorage


author: Konstantin Neumoin <kneumoin@virtuozzo.com> 7.0.136
changelog:
  - not rely to libvirt version when parse qemu cmdline (#PSBM-60274)
   - catch Error exception in nr_cpus & set_config (#PSBM-60274)
   - vz script swap and vram zero-value fix (Derbyshev Dmitry
  <dderbyshev@virtuozzo.com>)


author: Konstantin Neumoin <kneumoin@virtuozzo.com> 7.0.137
changelog:
  - Add rebranding macroses, see #PSBM-58317 (Konstantin Volkov
  <wolf@virtuozzo.com>)
   - Drop systemd unit installation - moved to sources, see #PSBM-58317
  (Konstantin Volkov <wolf@virtuozzo.com>)


author: Konstantin Neumoin <kneumoin@virtuozzo.com> 7.0.140
changelog:
  - add workaround to disable tcache for vstorage (#PSBM-64068)
   - add option for error message in get_rss


author: Petr Pisar <ppisar@redhat.com> - 1.9-14
changelog:
  - Fix a security warning by compiler (bug #1037376)
  - Move the executable to /usr/sbin
  - Modernize the spec file


author: Karsten Hopp <karsten@redhat.com> 7.4.5-1
changelog:
  - patchlevel 5
  - when closing a window fails ":bwipe" may hang
  - "vaB" while 'virtualedit' is set selects the wrong area


author: Karsten Hopp <karsten@redhat.com> 7.4.009-1
changelog:
  - patchlevel 009
    mkdir("foo/bar/", "p") gives an error message
    creating a preview window on startup messes up the screen
    new regexp engine can't be interrupted
    too easy to write a file was not decrypted (yet)


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-2
changelog:
  - Include two upstream patches for detecting Xen and Linux VServer better
    (RHBZ#973663).
  - Modernize the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-3
changelog:
  - Suppress warning message on Amazon EC2:
    "grep: /proc/xen/capabilities: No such file or directory"


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-7
changelog:
  - Add support for detecting POWER KVM and LPAR
    resolves: rhbz#1147876
  - Detect RHEV/oVirt
    resolves: rhbz#1249438
  - Detect ACPI boot aarch64 guest
    resolves: rhbz#1275349
  - Fix typo in manual page
    resolves: rhbz#1099289


author: Sergey Galas' <shrike@virtuozzo.com> 7.0.6
changelog:
  - bug #PSBM-62160 aka Successfully logged in using empty password for VM
  (Sergey Galas <shrike@virtuozzo.com>)


author: Konstantin Vlasov <konstantin.vlasov@virtuozzo.com> 0.10-98
changelog:
  - Fixed: Installer showed "Done!" even when there were errors.
  - Improved DEB package matching when searching for installed packages, #PSBM-65075


author: Denis Silakov <dsilakov@virtuozzo.com> 1.0.20
changelog:
  - Force overwrite of  install-tools script when updating through exec
  (#PSBM-64116)
   - More logging for #PSBM-64116


author: Denis Silakov <dsilakov@virtuozzo.com> 1.0.22
changelog:
  - Deb 7 suffers from the same udev problem as CentOS 6 (#PSBM-64906)
   - Fix typo in CentOS 6 detection (#PSBM-64889)
   - Force overwrite of  install-tools script when updating through exec
  (#PSBM-64116)
   - More logging for #PSBM-64116


author: Denis Silakov <dsilakov@virtuozzo.com> 1.0.23
changelog:
  - Treat all tools with 2.5* version as 'bad udev', fix processing of vms with
  auto-update set to off, add more logging


author: Konstantin Vlasov <konstantin.vlasov@virtuozzo.com> 0.48-8
changelog:
  - Added VERSION file for overriding GA version reporting, #PSBM-56747
  - Updated qemu package version
  - Added certificates to floppy images to fix autoinstallation, #PSBM-58681


author: Konstantin Vlasov <konstantin.vlasov@virtuozzo.com> 0.48-9
changelog:
  - Fixed upgrading Virtuozzo Tools MSI package (version number changed), #PSBM-17703
  - Fixed upgrading qemu-ga MSI package (uninstalling it first), #PSBM-17703
  - Added installation of DigiCert CA to make timestamp trusted on win2008.


author: Konstantin Vlasov <konstantin.vlasov@virtuozzo.com> 0.48-11
changelog:
  - Adapted to new version of drivers.
  - Fixed: VERSION file was not copied first time (directory missing).


author: Konstantin Vlasov <konstantin.vlasov@virtuozzo.com> 0.48-12
changelog:
  - Reverted to virtio drivers 7.3.13 (7.4 hang the OS installation).
  - Added Guest Tools Monitor service, #PSBM-60739


author: Igor Sukhih <igor@virtuozzo.com> 7.0.140
changelog:
  - vzlist: sKip processing 127/8 loopback network #PSBM-60294
   - vzauth: show proper error if .psa.shadow is absent #PVA-36225


author: Konstantin Volkov <wolf@virtuozzo.com> 7.0.142
changelog:
  - Drop DEFAULT_PRODUCT_NAME_SHORT, see #PSBM-58317
   - Rebrand visible labels, see #PSBM-58317
   - vzsplit: reformat log message (Igor Sukhih <igor@virtuozzo.com>)


author: Frantisek Hrbata <fhrbata@hrbata.com> [3.10.0-514.16.1.el7]
changelog:
  - [tty] n_hdlc: get rid of racy n_hdlc.tbuf ("Herton R. Krzesinski") [1429919 1429920] {CVE-2017-2636}
  - [md] dm rq: cope with DM device destruction while in dm_old_request_fn() (Mike Snitzer) [1430334 1412854]
  - [fs] nfs: Fix inode corruption in nfs_prime_dcache() (Benjamin Coddington) [1429514 1416532]
  - [fs] nfs: Don't let readdirplus revalidate an inode that was marked as stale (Benjamin Coddington) [1429514 1416532]
  - [block] Copy a user iovec if it includes gaps (Jeff Moyer) [1429508 1421263]
  - [kernel] percpu-refcount: fix reference leak during percpu-atomic transition (Jeff Moyer) [1429507 1418333]
  - [powerpc] eeh: eeh_pci_enable(): fix checking of post-request state (Steve Best) [1425538 1383670]
  - [s390] mm: handle PTE-mapped tail pages in fast gup (Hendrik Brueckner) [1423438 1391532]
  - [net] skbuff: Fix skb checksum partial check (Lance Richardson) [1422964 1411480]
  - [net] skbuff: Fix skb checksum flag on skb pull (Lance Richardson) [1422964 1411480]
  - [security] selinux: fix off-by-one in setprocattr (Paul Moore) [1422368 1422369] {CVE-2017-2618}
  - [virtio] balloon: check the number of available pages in leak balloon (David Hildenbrand) [1417194 1401615]
  - [infiniband] ib/rdmavt: Only put mmap_info ref if it exists (Jonathan Toppins) [1417191 1391299]
  - [x86] kvm: x86: make lapic hrtimer pinned (Luiz Capitulino) [1416373 1392593]
  - [kernel] sched/nohz: Fix affine unpinned timers mess (Luiz Capitulino) [1416373 1392593]
  - [kernel] nohz: Affine unpinned timers to housekeepers (Luiz Capitulino) [1416373 1392593]
  - [kernel] tick-sched: add housekeeping_mask cpumask (Luiz Capitulino) [1416373 1392593]
  - [x86] platform/uv/bau: Add UV4-specific functions (Frank Ramsay) [1414715 1386692]
  - [x86] platform/uv/bau: Fix payload queue setup on UV4 hardware (Frank Ramsay) [1414715 1386692]
  - [x86] platform/uv/bau: Disable software timeout on UV4 hardware (Frank Ramsay) [1414715 1386692]
  - [x86] platform/uv/bau: Populate ->uvhub_version with UV4 version information (Frank Ramsay) [1414715 1386692]
  - [x86] platform/uv/bau: Use generic function pointers (Frank Ramsay) [1414715 1386692]
  - [x86] platform/uv/bau: Add generic function pointers (Frank Ramsay) [1414715 1386692]
  - [x86] platform/uv/bau: Convert uv_physnodeaddr() use to uv_gpa_to_offset() (Frank Ramsay) [1414715 1386692]
  - [x86] platform/uv/bau: Clean up pq_init() (Frank Ramsay) [1414715 1386692]
  - [x86] platform/uv/bau: Clean up and update printks (Frank Ramsay) [1414715 1386692]
  - [x86] platform/uv/bau: Clean up vertical alignment (Frank Ramsay) [1414715 1386692]
  - [virtio] virtio-pci: alloc only resources actually used (Laurent Vivier) [1413093 1375153]
  - [net] avoid signed overflows for SO_{SND|RCV}BUFFORCE (Sabrina Dubroca) [1412473 1412474] {CVE-2016-9793}
  - [netdrv] sfc: clear napi_hash state when copying channels (Jarod Wilson) [1401461 1394304]
  - [lib] mpi: Fix NULL ptr dereference in mpi_powm() (Mateusz Guzik) [1398457 1398458] {CVE-2016-8650}
  - [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Ewan Milne) [1430687 1366564]
  - [md] dm round robin: revert "use percpu 'repeat_count' and 'current_path'" (Mike Snitzer) [1430689 1422567]
  - [md] dm round robin: do not use this_cpu_ptr() without having preemption disabled (Mike Snitzer) [1430689 1422567]
  - Revert: [x86] Handle non enumerated CPU after physical hotplug (Prarit Bhargava) [1426633 1373738]
  - Revert: [x86] smp: Don't try to poke disabled/non-existent APIC (Prarit Bhargava) [1426633 1373738]
  - Revert: [x86] smpboot: Init apic mapping before usage (Prarit Bhargava) [1426633 1373738]
  - Revert: [x86] revert "perf/uncore: Disable uncore on kdump kernel" (Prarit Bhargava) [1426633 1373738]
  - Revert: [x86] perf/x86/intel/uncore: Fix hardcoded socket 0 assumption in the Haswell init code (Prarit Bhargava) [1426633 1373738]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [3.10.0-514.16.1.vz7.30.1]
changelog:
  - sched/fair: Synchronize throttle_count on boosted wakeups (Kirill Tkhai) [PSBM-62208]
  - sched/fair: Fix ENQUEUE_WAKEUP false appearance in enqueue_task_fair() (Kirill Tkhai) [PSBM-62208]
  - sched/numa: Fix use-after-free bug in the task_numa_compare (Gavin Guo) [PSBM-62208]
  - ms/bridge: drop netfilter fake rtable unconditionally (Florian Westphal) [PSBM-64412]
  - ms/bridge: Add br_netif_receive_skb remove netif_receive_skb_sk (Eric W. Biederman) [PSBM-64412]
  - ms/sctp: deny peeloff operation on asocs with threads sleeping on it (Marcelo Ricardo Leitner) [PSBM-61125]
  - ms/sctp: avoid BUG_ON on sctp_wait_for_sndbuf (Marcelo Ricardo Leitner) [PSBM-61125]
  - Revert "ms/KVM: x86: reset MMU on KVM_SET_VCPU_EVENTS" (Konstantin Khorenko) [PSBM-62341 PSBM-63993 PSBM-64259 PSBM-63253 PSBM-63962]
  - fs/block_dev: always invalidate cleancache in invalidate_bdev() (Andrey Ryabinin) [PSBM-63908]
  - cleancache: avoid pointless cleancache_invalidate_inode() calls. (Andrey Ryabinin) [PSBM-63908]
  - fs/cleancache: fix data invalidation in the cleancache during direct_io (Andrey Ryabinin) [PSBM-63908]
  - pidns: Disable pid allocation if pid_ns_prepare_proc() is failed in alloc_pid() (Kirill Tkhai) [PSBM-56705]
  - ms/pidns: fix free_pid() to handle the first fork failure (Kirill Tkhai) [PSBM-56705]
  - ms/sctp: use GFP_USER for user-controlled kmalloc (Marcelo Ricardo Leitner) [PSBM-64133]
  - pfcache/fork: don't inherit vm_private_data on fork (Pavel Tikhomirov) [PSBM-44587]
  - kvm/x86: do not clear hyperv synic pages when setting MSRs (Evgeny Yakovlev) [PSBM-63164]
  - venet: remove SS hook (Stanislav Kinsburskiy) [PSBM-64015]
  - ve/net/xfrm: ratelimit warning on bad policy detection (Konstantin Khorenko) [PSBM-57498]
  - ms/tracing/filter: Do not allow infix to exceed end of string (Steven Rostedt (Red Hat)) [PSBM-60885]
  - ms/fs: Fix race when checking i_size on direct i/o read (Steven Whitehouse)
  - ve/cgroup: fix crashes in cgroup_show_path (Pavel Tikhomirov) [PSBM-52369]
  - mm/tcache: close race between attach and invalidate page (Andrey Ryabinin) [PSBM-63197]
  - vedev: drop obsoleted vedev.c - old way to provide device access into a CT (Konstantin Khorenko) [PSBM-54408]
  - ploop: fix IS_PSTORAGE() macro: add check for "vstorage" (Maxim Patlasov)
  - ms/futex: Fix potential use-after-free in FUTEX_REQUEUE_PI (Peter Zijlstra) [PSBM-62103]
  - ms/netfilter: x_tables: avoid warn and OOM killer on vmalloc call (Marcelo Ricardo Leitner) [PSBM-62203]
  - mm: fix false positive WARN on fs reenterence (Andrey Ryabinin) [PSBM-58279]
  - Revert "mm/zswap: fix potential deadlock in zswap_frontswap_store()" (Konstantin Khorenko) [PSBM-58279]
  - ms/percpu: fix this_cpu_sub() subtrahend casting for unsigneds (Greg Thelen) [PSBM-63424]
  - ms/net/packet: fix overflow in check for tp_reserve (Andrey Konovalov) [PSBM-63475]
  - ms/net/packet: fix overflow in check for tp_frame_nr (Andrey Konovalov) [PSBM-63475]
  - ms/net/packet: fix overflow in check for priv area size (Andrey Konovalov) [PSBM-63475]
  - ms/mm/memcontrol.c: fix order calculation in try_charge() (Andrey Ryabinin) [PSBM-62827]
  - mm/memcg: don't release memcg->css too early (Andrey Ryabinin) [PSBM-62827]
  - ve/memcg: enable kmem accounting for all cgroups (Vladimir Davydov) [PSBM-62827]
  - mm/memcg: make __memcg_activate_kmem() to actually activate kmem (Andrey Ryabinin) [PSBM-62827]
  - mm/memcg: fix kmem pages uncharging uncharge_batch() (Andrey Ryabinin) [PSBM-62827]
  - mm/memcg: add missing hunk uncharge_kmem (Andrey Ryabinin) [PSBM-62827]
  - mm/memcg: uncharge ->memory ->memsw if try charge of ->kmem fails (Andrey Ryabinin) [PSBM-62827]
  - ms/mm: memcg: fix race condition between memcg teardown and swapin (Johannes Weiner) [PSBM-62080]
  - ms/shmem: fix shm fallocate() list corruption (Linus Torvalds) [PSBM-56255]
  - ms/KVM: x86: reset MMU on KVM_SET_VCPU_EVENTS (Xiao Guangrong) [PSBM-62341]
  - ms/xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Andy Whitcroft) [PSBM-63199]
  - ms/xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Andy Whitcroft) [PSBM-63199]
  - ms/ipv4: fix buffer overflow in ip_options_compile() (Eric Dumazet) [PSBM-62999]
  - mm/zswap: fix potential deadlock in zswap_frontswap_store() (Andrey Ryabinin) [PSBM-58279]
  - ve/net: restrict number of net devices for CT (Pavel Tikhomirov) [PSBM-51354]
  - ubc/net: remove excess header (Pavel Tikhomirov) [PSBM-51354]
  - ms/neigh: disallow un-init_net to change thresh of neigh (Gao feng) [PSBM-59964 PSBM-63020]
  - ms/neigh: no need to call lookup_neigh_parms in neigh_parms_alloc (Gao feng) [PSBM-63020]
  - netlink: Don't manipulate @sk_peek_off if data fetching failed (Cyrill Gorcunov) [PSBM-57921]
  - ms/neigh: only allow init_net to change the default neigh_parms (Gao feng) [PSBM-59962]
  - Revert "neigh: prohibit non-init_net to change ntable defaults" (Konstantin Khorenko) [PSBM-59964]
  - ve/sysctl/net: allow "net.unix.max_dgram_qlen" sysctl in CT init userns (Pavel Tikhomirov) [PSBM-54530]
  - ve/sysctl/net: move and rename *_hide_sysctl helper to ve.c (Pavel Tikhomirov) [PSBM-54530]
  - ve/net/packet: show tx-ring warning only for host (Pavel Tikhomirov) [PSBM-56711]
  - KVM: x86: fix maintaining of kvm_clock stability on guest CPU hotplug (Denis Plotnikov) [PSBM-59784]
  - KVM: x86: remaster kvm_write_tsc code (Denis Plotnikov) [PSBM-59784]
  - ms/keys: fallback to user_match if type->match is not available. (Andrey Ryabinin) [PSBM-60876]
  - kvm: fix RH rebase fallouts: wake up SynIC message waiters (Roman Kagan)
  - ms/net/8021q: create device with all possible features in wanted_features (Andrey Vagin) [PSBM-61141]
  - rh/ksm: Revert rh patch "introduce ksm_max_page_sharing per page deduplication limit" (Andrey Ryabinin) [PSBM-60359]
  - ms/fs/file.c:fdtable: avoid triggering OOMs from alloc_fdmem (Eric W. Biederman)
  - ms/jbd2: fix incorrect unlock on j_list_lock (Taesoo Kim)
  - ms/jbd2: fix FS corruption possibility in jbd2_journal_destroy() on umount path (OGAWA Hirofumi)
  - ms/tty: n_hdlc: get rid of racy n_hdlc.tbuf (Alexander Popov) [PSBM-61962]
  - ms/TTY: n_hdlc, fix lockdep false positive (Jiri Slaby) [PSBM-61963]
  - neigh: prohibit non-init_net to change ntable defaults (Vasily Averin) [PSBM-59962]
  - ext4/mfsync: prevent resource abuse (Dmitry Monakhov) [PSBM-59965 PSBM-59966]
  - ve/userns: associate user_struct with the user_namespace (Andrey Ryabinin) [PSBM-60181]
  - ms/pvclock: introduce seqcount-like API (Paolo Bonzini) [PSBM-60589]
  - mm: Revert accounting for WRITEBACK_TEMP in balance_dirty_pages (Maxim Patlasov) [PSBM-60701]
  - ms/tcp: take care of truncations done by sk_filter() (Eric Dumazet) [PSBM-60256]
  - ve/net: restrict ethtool to CT root userns and prohibit EEPROM change (Pavel Tikhomirov) [PSBM-36290 PSBM-52504]
  - Kconfig.openvz: force CGROUP_PERF if compiling VZ Containers code (Konstantin Khorenko) [PSBM-51360]
  - ext4: fix seek_data soft lookup on sparse files (Dmitry Monakhov) [PSBM-55818]
  - ms/tcp: avoid infinite loop in tcp_splice_read() (Eric Dumazet) [PSBM-61135]
  - ms/netlink: Fix dump skb leak/double free (Herbert Xu) [PSBM-60394]
  - ploop: drop the obsolete drivers/block/ploop/compat.c (Konstantin Khorenko) [PSBM-51358]
  - ploop: drop obsolete code related to old kernels (Konstantin Khorenko) [PSBM-51358]
  - ms/ovl: fix d_real() for stacked fs (Miklos Szeredi) [PSBM-58480]
  - fuse: fuse_prepare_write() cannot handle page from killed request (Maxim Patlasov) [PSBM-54547]
  - ms/KVM: nVMX: Fix the NMI IDT-vectoring handling (Wanpeng Li) [PSBM-59729]
  - ms/mm: fix crashes from mbind() merging vmas (Hugh Dickins) [PSBM-59566]
  - ms/iovec: make sure the caller actually wants anything in memcpy_fromiovecend (Sasha Levin) [PSBM-59577]
  - ms/kernel/groups: Account group_info allocations (Andrey Ryabinin) [PSBM-56703]
  - ms/memcg: make mem_cgroup_read_stat() unsigned (Greg Thelen) [PSBM-56256]
  - fs/mount/ve: ratelimit 'no allowed mount options found for device' message (Andrey Ryabinin) [PSBM-58329]
  - ve/net,netfilter: Adjust REDIRECT target on venet device (Cyrill Gorcunov) [PSBM-59983]
  - ve/sched: sched_show_task: call task_ve_name() under RCU lock (Andrey Ryabinin) [PSBM-60139]
  - cgroup/ve: fix possible circular locking dependency (Andrey Ryabinin) [PSBM-59122]
  - ms/netfilter: nfnetlink: correctly validate length of batch messages (Phil Turnbull) [PSBM-57511]
  - ms/udp: must lock the socket in udp_disconnect() (Eric Dumazet) [PSBM-57512]
  - ms/mm, oom: remove task_lock protecting comm printing (David Rientjes) [PSBM-56178]
  - ms/KVM: x86: fix emulation of "MOV SS, null selector" (Paolo Bonzini) [PSBM-58989]
  - ms/KVM: x86: Introduce segmented_write_std (Steve Rutherford) [PSBM-58991]
  - mm/memcontrol: fix shmem accounting (Andrey Ryabinin) [PSBM-58984]
  - netfilter/x_tables: account entry offsets allocations (Andrey Ryabinin) [PSBM-54407]
  - cgroup/ve: don't add cgroup files on ve_root twice. (Andrey Ryabinin) [PSBM-59693]
  - ms/xfs: lost hunk from "ms/list_lru: add helpers to isolate items" part 2 (Dmitry Monakhov) [PSBM-58492]
  - ms/xen-blkfront: don't call talk_to_blkback when already connected to blkback (Bob Liu) [PSBM-46426]
  - ms/xen/blkfront: Fix crash if backend doesn't follow the right states. (Konrad Rzeszutek Wilk) [PSBM-46426]
  - ms/drivers: xen-blkfront: only talk_to_blkback() when in XenbusStateInitialising (Bob Liu) [PSBM-46426]
  - ms/driver: xen-blkfront: move talk_to_blkback to a more suitable place (Bob Liu) [PSBM-46426]
  - mm/memcontrol: Fix mem cgroup usage statistics. (Andrey Ryabinin) [PSBM-58993]
  - ve/netfilter: rectify ebtlog inside CT (Dmitry Safonov) [PSBM-54183]
  - ve/netfilter: rectify nflog inside CT (Dmitry Safonov) [PSBM-54183]
  - ve/printk: add ve_log_printk() for log in !current->task_ve (Dmitry Safonov) [PSBM-54183]
  - pfcache/ub: account pfcache peer files in ub0 (Andrey Ryabinin) [PSBM-56167]
  - KVM: x86: avoid redundant REQ_EVENT (Denis Plotnikov) [PSBM-43522]
  - ve/cgroups: Introduce subgroups_limit control (Andrey Ryabinin) [PSBM-33401]
  - ve/cgroups: Introduce CFTYPE_ONLY_ON_VE_ROOT flag for control files (Andrey Ryabinin) [PSBM-33401]
  - irq: make definition of irq_set_vcpu_affinity() static (Alexey V. Vissarionov)
  - ipv6/sit: account and don't WARN on ip_tunnel_prl structs allocation (Andrey Ryabinin) [PSBM-58330]
  - fuse: fuse_writepage_locked must check for FUSE_INVALIDATE_FILES (v2) (Maxim Patlasov)
  - fuse: fuse_writepages_fill must check for FAIL_IMMEDIATELY (Maxim Patlasov)
  - fuse: cleanup struct fuse_fill_data (Maxim Patlasov)
  - fuse: cleanup fuse_wait_on_page_writeback (Maxim Patlasov)
  - ms/mm: memcontrol: only mark charged pages with PageKmemcg (Vladimir Davydov) [PSBM-51558]
  - ms/mm: memcontrol: teach uncharge_list to deal with kmem pages (Vladimir Davydov) [PSBM-51558]
  - ms/mm: memcontrol: revert use of root_mem_cgroup res_counter (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: use page lists for uncharge batching (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: rewrite uncharge API (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: rewrite charge API (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: remove ordering between pc->mem_cgroup and PageCgroupUsed (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: catch root bypass in move precharge (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: simplify move precharge function (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: remove explicit OOM parameter in charge path (Michal Hocko) [PSBM-51558]
  - ms/mm: memcontrol: retry reclaim for oom-disabled and __GFP_NOFAIL charges (Johannes Weiner) [PSBM-51558]
  - ms/mm: huge_memory: use GFP_TRANSHUGE when charging huge pages (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: reclaim at least once for __GFP_NORETRY (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: rearrange charging fast path (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcontrol: fold mem_cgroup_do_charge() (Johannes Weiner) [PSBM-51558]
  - ms/memcg: sanitize __mem_cgroup_try_charge() call protocol (Johannes Weiner) [PSBM-51558]
  - ms/memcg: do not replicate get_mem_cgroup_from_mm in __mem_cgroup_try_charge (Michal Hocko) [PSBM-51558]
  - ms/memcg: get_mem_cgroup_from_mm() (Johannes Weiner) [PSBM-51558]
  - ms/memcg: remove unnecessary !mm check from try_get_mem_cgroup_from_mm() (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcg: push !mm handling out to page cache charge function (Johannes Weiner) [PSBM-51558]
  - ms/mm: memcg: inline mem_cgroup_charge_common() (Johannes Weiner) [PSBM-51558]
  - ms/KEYS: Fix handling of stored error in a negatively instantiated user key (David Howells) [PSBM-57695]
  - ms/macvlan: unregister net device when netdev_upper_dev_link() fails (Cong Wang) [PSBM-58300]
  - ms/net: fix creation adjacent device symlinks (Alexander Y. Fomichev) [PSBM-58300]
  - ms/net: prevent of emerging cross-namespace symlinks (Alexander Y. Fomichev) [PSBM-58300 PSBM-58300]
  - ve/fs/fadvise: introduce FADV_DEACTIVATE flag (Andrey Ryabinin) [PSBM-57915]
  - ms/KVM: x86: drop error recovery in em_jmp_far and em_ret_far (Radim Krčmář) [PSBM-58195]
  - ms/kvm: nVMX: Allow L1 to intercept software exceptions (#BP and #OF) (Jim Mattson) [PSBM-58194]
  - Revert "configs: temporary disable CEPH and XFS compilation" (Konstantin Khorenko) [PSBM-55577 PSBM-54817]
  - fs/ceph: honor kernel direct aio changes v2 (Dmitry Monakhov) [PSBM-54817]
  - fs: constify iov_iter_count/iov_iter_iovec helpers (Dmitry Monakhov) [PSBM-54817]
  - ms/xfs: rework buffer dispose list tracking (Dmitry Monakhov) [PSBM-55577]
  - ms/xfs-convert-buftarg-lru-to-generic-code-fix (Andrew Morton) [PSBM-55577]
  - ms/xfs: convert buftarg LRU to generic code (Dmitry Monakhov) [PSBM-55577]
  - Revert: [fs] xfs: rework buffer dispose list tracking (Dmitry Monakhov) [PSBM-55577]
  - ms/cgroup: fix rmdir EBUSY regression in 3.11 (Hugh Dickins) [PSBM-53314]
  - ve/modules: allow NFS modules autoload in Containers (Stanislav Kinsburskiy) [PSBM-58178]
  - btrfs: compilation fix in btrfs_wq_run_delayed_node() (Konstantin Khorenko)
  - ms/kvm:vmx: more complete state update on APICv on/off: lost hunk (Evgeny Yakovlev) [PSBM-57821]
  - fuse: fuse_blocked_for_wb must check rw_files (Maxim Patlasov) [PSBM-57460]
  - fs: avoid writeback busy-loop if redirty (Maxim Patlasov) [PSBM-55919]
  - ve/proc/modules: hide module refcounts from container (Andrey Ryabinin) [PSBM-57497]
  - fuse: trust server file size unless opened (Maxim Patlasov) [PSBM-57047]
  - fuse: ratelimint dio complains (Maxim Patlasov) [PSBM-55782]
  - tcache: speedup tcaches operations on empty tcache (Andrey Ryabinin) [PSBM-56475]
  - tcache: don't invalidate pages on unsuccessful put/inability to put (Andrey Ryabinin) [PSBM-56475]
  - ve/netfilter: use ve_printk for BUGPRINT in ebtables (Dmitry Safonov) [PSBM-56707]
  - ve/kexec: reserve 256+64 = 320M for debug kernels (Dmitry Safonov) [PSBM-56847]
  - Revert "ve/sched: Do not loose boosting during set_next_entity() called for not busted task" (Konstantin Khorenko) [PSBM-57063]
  - ms/KVM: i8254: use atomic_t instead of pit.inject_lock (Radim Krčmář) [PSBM-56972]
  - ms/KVM: i8254: add kvm_pit_reset_reinject (Radim Krčmář) [PSBM-56972]
  - ms/KVM: i8254: simplify atomics in kvm_pit_ack_irq (Radim Krčmář) [PSBM-56972]
  - ms/crypto: algif_skcipher - Load TX SG list after waiting (Herbert Xu) [PSBM-53860]
  - ms/crypto: algif_skcipher - Fix race condition in skcipher_check_key (Herbert Xu) [PSBM-53860]
  - ms/crypto: algif_hash - Fix race condition in hash_check_key (Herbert Xu) [PSBM-53860]
  - ms/crypto: af_alg - Forbid bind(2) when nokey child sockets are present (Herbert Xu) [PSBM-53860]
  - ms/crypto: algif_skcipher - Remove custom release parent function (Herbert Xu) [PSBM-53860]
  - ms/crypto: algif_hash - Remove custom release parent function (Herbert Xu) [PSBM-53860]
  - ms/crypto: af_alg - Allow af_af_alg_release_parent to be called on nokey path (Herbert Xu) [PSBM-53860]
  - ms/crypto: algif_skcipher - Add key check exception for cipher_null (Herbert Xu) [PSBM-53860]
  - ms/crypto: skcipher - Add crypto_skcipher_has_setkey (Herbert Xu) [PSBM-53860]
  - ve/sched: Do not loose boosting during set_next_entity() called for not busted task (Kirill Tkhai) [PSBM-56465]
  - md: propagate QUEUE_FLAG_SG_GAPS (Maxim Patlasov) [PSBM-56838]
  - fuse: fuse_send_writepage() must check FUSE_S_FAIL_IMMEDIATELY (Maxim Patlasov)
  - ms/btrfs: limit async_work allocation and worker func duration (Maxim Patlasov) [PSBM-56995]
  - ve/sched: Dereference resched_next on next task's stack (Kirill Tkhai) [PSBM-56984]
  - ve/seccomp, ptrace: Save original BPF program when setting the filer (Cyrill Gorcunov) [PSBM-55593]
  - ms/tcp: allow to enable the repair mode for non-listening sockets (Andrey Vagin) [PSBM-46381]
  - ms/kernel/groups: Use __GFP_NOWARN on user triggerable allocation (Andrey Ryabinin) [PSBM-56703]
  - ploop: pio_nfs does not require PLOOP_REQ_ISSUE_FLUSH (v2) (Maxim Patlasov)
  - config.OpenVZ: increase default value for vm.mmap_min_addr (Konstantin Khorenko) [PSBM-56697]
  - uapi/ploop/bc/netstat: add comments about possible leaks (Dmitry Safonov) [PSBM-52219]
  - netfilter: don't leak compat connmark, conntrack structs (Dmitry Safonov) [PSBM-51365]
  - fs/quota: don't leak compat quotsctl structs (Dmitry Safonov) [PSBM-51366]
  - ploop: don't leak ploop_freeblks_ctl_extent (Dmitry Safonov) [PSBM-51362]
  - cbt: don't leak ce_reserved64 in cbt_ito userspace (Dmitry Safonov) [PSBM-51361]
  - vfs: panic in guard_bio_eod() if truncated_bytes > bvec->bv_len (Pavel Tikhomirov) [PSBM-55105]
  - fuse: fuse_prepare_write() should not wait on fuse-writeback (Maxim Patlasov) [PSBM-56474]
  - kvm/x86: skip async_pf when in guest mode (Roman Kagan) [PSBM-54491]
  - fuse: no mtime flush on fdatasync (Maxim Patlasov) [PSBM-55919]
  - ms/netfilter: nfnetlink: fix insufficient validation in nfnetlink_bind (Pablo Neira Ayuso) [PSBM-54189]
  - fuse: relax i_mutex coverage in fuse_fsync (Maxim Patlasov) [PSBM-55919]
  - ms/KVM: x86: drop TSC offsetting kvm_x86_ops to fix KVM_GET/SET_CLOCK (Paolo Bonzini) [PSBM-54338]
  - ms/kvm: x86: drop read_tsc_offset() (Luiz Capitulino)
  - ms/kvm: x86: add tsc_offset field to struct kvm_vcpu_arch (Luiz Capitulino)
  - ms/net: raw sockets diag interface compilation fix (Konstantin Khorenko)
  - Revert "ms/KVM: x86: drop TSC offsetting kvm_x86_ops to fix KVM_GET/SET_CLOCK" (Konstantin Khorenko)
  - Revert "ext4: resplit block_page_mkwrite: fix get-host convention" (Konstantin Khorenko) [PSBM-54817]
  - ms/posix_acl: Clear SGID bit when setting file permissions (Jan Kara)
  - ms/block: fix use-after-free in sys_ioprio_get() (Omar Sandoval)
  - ms/block: fix use-after-free in seq file (Vegard Nossum)
  - ploop: push_backup: ploop_pb_init must always spawn health_monitor (Maxim Patlasov)
  - ploop: push_backup: avoid deadlock on PLOOP_PEEK (Maxim Patlasov)
  - trace: add debug prints to nail down busyloop in tracing_read_pipe (Stanislav Kinsburskiy) [PSBM-53928]
  - ms/ipv6: fix a potential deadlock in do_ipv6_setsockopt() (WANG Cong)
  - ms/ipv4: fix a potential deadlock in mcast getsockopt() path (WANG Cong)
  - ms/audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore)
  - config.OpenVZ: add kcov code coverage (Konstantin Khorenko) [PSBM-56169]
  - ms/kcov: properly check if we are in an interrupt (Andrey Konovalov) [PSBM-56169]
  - ms/kcov: don't profile branches in kcov (Andrey Ryabinin) [PSBM-56169]
  - ms/kcov: don't trace the code coverage code (James Morse) [PSBM-56169]
  - ms/kernel: add kcov code coverage (Dmitry Vyukov) [PSBM-56169 PSBM-56169]
  - ve: allow modification of pseudosuper flag only to root (Stanislav Kinsburskiy) [PSBM-52503]
  - ploop: push_backup: avoid preq->state corruption (Maxim Patlasov)
  - ploop: ploop_grow must nullify holes (Maxim Patlasov) [PSBM-55685]
  - ms/x86/coredump: Always use user_regs_struct for compat_elf_gregset_t (Dmitry Safonov)
  - ms/x86/signal: Remove bogus user_64bit_mode() check from sigaction_compat_abi() (Dmitry Safonov)
  - mm/memcontrol/numa_migrate: split transparent huge pages before migrating (Andrey Ryabinin) [PSBM-54455]
  - ms/KEYS: Fix short sprintf buffer in /proc/keys show function (David Howells) [PSBM-53937]
  - ms/tty: Fix unsafe ldisc reference via ioctl(TIOCGETD) (Peter Hurley) [PSBM-53939]
  - config.OpenVZ: add and enable INET_RAW_DIAG - RAW: socket monitoring interface (Konstantin Khorenko) [PSBM-51614]
  - ve/proc/modules: show loaded modules in container (Andrey Ryabinin) [PSBM-55920 OVZ-6834]
  - ms/KVM: Disable irq while unregistering user notifier (Ignacio Alvarado) [PSBM-55099]
  - ms/ipv6: add IPV6_HDRINCL option for raw sockets (Hannes Frederic Sowa) [PSBM-51614]
  - ms/net: ip, raw_diag -- Use jump for exiting from nested loop (Cyrill Gorcunov) [PSBM-51614]
  - ms/net: ip, diag: include net/inet_sock.h (Arnd Bergmann) [PSBM-51614]
  - ms/net: ip, diag -- Add diag interface for raw sockets (Cyrill Gorcunov) [PSBM-51614]
  - ve/netlink: allow messages with family PF_BRIDGE type RTM_xxxNEIGH in CT (Pavel Tikhomirov) [PSBM-53629]
  - ve/net/vxlan: enable support and autoload in a container (Pavel Tikhomirov) [PSBM-53629]
  - config: enable BCACHE as a module (Konstantin Khorenko) [PSBM-55594]
  - ms/KVM: x86: drop TSC offsetting kvm_x86_ops to fix KVM_GET/SET_CLOCK (Paolo Bonzini) [PSBM-54338]
  - ms/tcp: add an ability to dump and restore window parameters (Andrey Vagin)
  - ms/seccomp, ptrace: add support for dumping seccomp filters (Tycho Andersen) [PSBM-55322 PSBM-55593]
  - scsi/debug: make scsi error loud (Dmitry Monakhov) [PSBM-54665]
  - ve/net/ip6tables: fix NULL ptr dereference at ip6t_unregister_table (Dmitry Safonov) [PSBM-54244]
  - ms/tmpfs: fix SEEK_DATA/SEEK_HOLE regression (Hugh Dickins) [PSBM-54804]
  - fuse: queue work for aio_complete (v3) (Maxim Patlasov) [PSBM-54547]
  - vzprivnet: Revert "VZPRIVNET: cache filtering result on dst" (Pavel Tikhomirov) [PSBM-53646]
  - vzprivnet: remove dst.privnet_mark usage as it is no more rtcached (Pavel Tikhomirov) [PSBM-53646]
  - vzprivnet: Revert "vzprivnet: Flush rt cache each time rules change" (Pavel Tikhomirov) [PSBM-53646]
  - vzprivnet: Revert "vzprivnet: rt cache drop on vzprivnet update" (Pavel Tikhomirov) [PSBM-53646 PSBM-53646]
  - x86: drop _PAGE_BIT_FILE leftover (part2) (Konstantin Khorenko)
  - configs: temporary disable CEPH and XFS compilation (Konstantin Khorenko) [PSBM-54817]
  - sched/fair: include sched.h (Dmitry Safonov)
  - block/nbd: use REQ_TYPE_DRV_PRIV instead of REQ_TYPE_SPECIAL (Konstantin Khorenko) [PSBM-54928]
  - kernel/pid: restore standard PID_MAX_DEFAULT value (Andrey Ryabinin) [PSBM-55365]
  - ms/mm/slub.c: list_lock may not be held in some circumstances (David Rientjes)
  - mm/memcontrol: res_counter -> page_counter transition (Andrey Ryabinin) [PSBM-54816 PSBM-54816 PSBM-54816 PSBM-54816]
  - ms/NFS/CIFS/SUNRPC: don't allow to freeze execution (Stanislav Kinsburskiy) [PSBM-50671 PSBM-54822]
  - ms/sched: Fix race on toggling cfs_bandwidth_used (Ben Segall) [PSBM-51056]
  - config-vz: add DISABLE_DEV_COREDUMP=n option (Konstantin Khorenko) [PSBM-54194]
  - ms/memcg: rework memcg_update_kmem_limit synchronization (Vladimir Davydov) [PSBM-54816]
  - mm: memcontrol: fix race between kmem uncharge and charge reparenting (Vladimir Davydov) [OVZ-6756 PSBM-54816]
  - md: add support for dm-crypted ploops (Maxim Patlasov) [PSBM-53386]
  - ms/crypto: skcipher - Fix blkcipher walk OOM crash (Herbert Xu)
  - ms/crypto: cryptd - initialize child shash_desc on import (Ard Biesheuvel)
  - ms/crypto: scatterwalk - Fix test in scatterwalk_done (Herbert Xu)
  - ms/crypto: gcm - Filter out async ghash if necessary (Herbert Xu)
  - ms/crypto: hash - Fix page length clamping in hash walk (Herbert Xu)
  - ms/crypto: crypto_memneq - add equality testing of memory regions w/o timing leaks (James Yonan)
  - ms/crypto: user - lock crypto_alg_list on alg dump (Mathias Krause)
  - ms/crypto: algif_hash - wait for crypto_ahash_init() to complete (Wang, Rui Y)
  - ms/crypto: shash - Fix has_key setting (Herbert Xu)
  - ms/crypto: algif_hash - Require setkey before accept(2) (Herbert Xu)
  - ms/crypto: hash - Add crypto_ahash_has_setkey (Herbert Xu)
  - ms/crypto: algif_skcipher - Add nokey compatibility path (Herbert Xu)
  - ms/crypto: af_alg - Add nokey compatibility path (Herbert Xu)
  - ms/crypto: af_alg - Fix socket double-free when accept fails (Herbert Xu)
  - ms/crypto: af_alg - Disallow bind/setkey/... after accept(2) (Herbert Xu)
  - ms/crypto: algif_skcipher - Require setkey before accept(2) (Herbert Xu) [PSBM-53860 PSBM-53860 PSBM-54117]
  - vhost-net: enable zerocopy tx by default (Michael S. Tsirkin) [PSBM-52390]
  - ms/KVM: x86: Hyper-V tsc page setup (Paolo Bonzini)
  - ms/KVM: x86: introduce get_kvmclock_ns (Paolo Bonzini) [PSBM-54928]
  - ms/KVM: x86: initialize kvmclock_offset (Paolo Bonzini)
  - ms/KVM: x86: always fill in vcpu->arch.hv_clock (Paolo Bonzini) [PSBM-46245]
  - vfs: guard end of device for mpage interface (Maxim Patlasov)
  - vfs: make guard_bh_eod() more generic (Maxim Patlasov)
  - ploop: push_backup: fix pbd->ppb_lock deadlock (Maxim Patlasov)
  - fuse: process small sync direct reads synchronously (Maxim Patlasov)
  - ms/crypto: algif_hash - Only export and import on sockets with data (Vasily Averin) [PSBM-54117]
  - ve/net: Restore default sock_alloc_send_pskb() changed by initial cumulative patch (Kirill Tkhai) [PSBM-52390]
  - ext4: Discard preallocated block before swap_extents (Dmitry Monakhov)
  - ms/fuse: handle only fatal signals while waiting request answer (Stanislav Kinsburskiy) [PSBM-53581]
  - ms/new helper: wait_event_killable_exclusive() (Stanislav Kinsburskiy) [PSBM-53581]
  - rh/net: add recursion limit to GRO (sd@queasysnail) [PSBM-53507]
  - overlayfs: unmark overlayfs as tech preview (Konstantin Khorenko) [PSBM-52379]
  - net: Do not allow conntrack if netlink conntrack is requested (Kirill Tkhai)
  - pfcache: hide trusted.pfcache from listxattr (Pavel Tikhomirov) [PSBM-52180]
  - ms/coredump: fix unfreezable coredumping task (Andrey Ryabinin) [PSBM-52793]
  - ms/x86: drop _PAGE_FILE and pte_file()-related helpers (Kirill A. Shutemov) [PSBM-52992 PSBM-54928]
  - ms/asm-generic: drop unused pte_file* helpers (Kirill A. Shutemov) [PSBM-52992]
  - ms/ipc/shm: handle removed segments gracefully in shm_mmap() (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: fix regression in remap_file_pages() emulation (Kirill A. Shutemov) [PSBM-52992]
  - rh/mm: drop calls to pte_file() in mm/hmm_migrate.c (Konstantin Khorenko) [PSBM-54928]
  - ms/mm: remove rest usage of VM_NONLINEAR and pte_file() (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: replace vma->sharead.linear with vma->shared (Kirill A. Shutemov) [PSBM-52992]
  - ms/rmap: drop support of non-linear mappings (Kirill A. Shutemov) [PSBM-52992]
  - ms/proc: drop handling non-linear mappings (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: drop vm_ops->remap_pages and generic_file_remap_pages() stub (Kirill A. Shutemov) [PSBM-52992 PSBM-54928]
  - ms/mm: drop support of non-linear mapping from fault codepath (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: drop support of non-linear mapping from unmap/zap codepath (Kirill A. Shutemov) [PSBM-52992]
  - ms/mm: replace remap_file_pages() syscall with emulation (Kirill A. Shutemov) [PSBM-52992]
  - fs: avoid holding extra reference on original path (Maxim Patlasov) [PSBM-52817]
  - ve/kmod/whitelist: allow dummy module autoloading (Pavel Tikhomirov) [PSBM-43329 PSBM-52061]
  - module: Do not dump stack for out of tree and unsigned modules (Kirill Tkhai) [PSBM-52719]
  - Revert "pfcache: hide trusted.pfcache from listxattr" (Kirill Tkhai)
  - ms/dm: remove dummy definition of 'struct dm_table' from dm-ioctl.c (Andrey Ryabinin) [PSBM-50727]
  - pfcache: hide trusted.pfcache from listxattr (Pavel Tikhomirov) [PSBM-52180]
  - fs: hold reference on original path (Maxim Patlasov) [PSBM-52373]
  - fs: use original vfsmount for touch_atime (Maxim Patlasov) [PSBM-51009]
  - ms/ovl: update atime on upperovl: update atime on upper (Maxim Patlasov) [PSBM-51009 PSBM-51009]
  - ve/xattr/ext4: fix filtering trusted xattr while listing them (Maxim Patlasov) [PSBM-51009]
  - fence-watchdog: fix return format in dev_hard_start_xmit (Pavel Tikhomirov) [PSBM-50006]
  - fence-watchdog: return back message printing about fencing (Pavel Tikhomirov) [PSBM-50006]
  - net: Iterate only online cpus in __snmp6_fill_stats64() (Kirill Tkhai) [PSBM-50993]
  - net: Allow pass cpu mask into snmp_fold_field{, 64}() (Kirill Tkhai)
  - net: Add ipv6 statistics cpu notifier (Kirill Tkhai)
  - net: Mark conntrack users in nftables (Kirill Tkhai) [PSBM-51050]
  - net: Mark conntrack users in xtables (Kirill Tkhai) [PSBM-51050 PSBM-54823 PSBM-54823]
  - net: Primitives to enable conntrack allocation (Kirill Tkhai) [PSBM-51050 PSBM-54823 PSBM-56500]
  - ve/net/sctp: allow using SCTP inside Containers (Konstantin Khorenko) [PSBM-51186 OVZ-3547]
  - sched: Fix cfs_rq->active assignment in sched_cfs_active_timer() (Kirill Tkhai)
  - ploop: add dependency for CBT in Kconfig (Cyrill Gorcunov)
  - ve/xattr: allow to set trusted.xxx for container admin (Pavel Tikhomirov) [PSBM-51102 OVZ-6791]
  - ve/xattr: prohibit getxattr/setxattr trusted.pfcache (Pavel Tikhomirov) [PSBM-51102 OVZ-6791]
  - ve/kmod/whitelist: allow overlay fs module autoloading (Dmitry Safonov) [PSBM-51043]
  - docker: Revert "vfs: take stat's dev from mnt->sb" (Pavel Tikhomirov) [PSBM-51255]
  - mm: memcontrol: add memory.numa_migrate file (Vladimir Davydov) [PSBM-50875]
  - vzprivnet: vzprivnet_hook: fix crash if skb->dev == NULL (Vladimir Davydov) [PSBM-51041]
  - ploop: add support for dm-crypted ploops (Andrey Ryabinin) [PSBM-50858]
  - ploop: keep frozen block device pointer instead of super_block pointer (Andrey Ryabinin) [PSBM-50858]
  - fs/block_dev: fix NULL ptr deref in freeze_bdev() (Andrey Ryabinin) [PSBM-50858]
  - ploop: drop bdev refcounter on freeze_bdev() failure (Andrey Ryabinin)
  - dm-crypt: add ability to use keys from the kernel key retention service (Andrey Ryabinin) [PSBM-44218]
  - ms/keys: add user_key_payload() helper (Andrey Ryabinin) [PSBM-44218]
  - vecalls: kill VZCTL_SETDEVPERMS ioctl (Andrey Ryabinin)
  - Remove container and beancounter directories from /proc/vz (Vladimir Davydov)
  - cgroup: un-export cgroup_kernel_* and zap cgroup_kernel_remove (Vladimir Davydov)
  - ve: drop ve_cgroup_open and ve_cgroup_remove (Vladimir Davydov)
  - x86/arch_prctl/vdso: add ARCH_MAP_VDSO_* (Dmitry Safonov) [PSBM-28517]
  - ms/x86/signal: add SA_{X32,IA32}_ABI sa_flags (Dmitry Safonov) [PSBM-28517]
  - ms/x86/ptrace: down with test_thread_flag(TIF_IA32) (Dmitry Safonov) [PSBM-28517]
  - ms/x86/coredump: use pr_reg size, rather that TIF_IA32 flag (Dmitry Safonov) [PSBM-28517]
  - ve/sched: make load balancing more agressive (Vladimir Davydov)
  - ve/sched: fair: fix dst pinned not set when failing migration due to cpulimit restriction (Vladimir Davydov)
  - sched: debug: show nr_failed_migrations_cpulimit (Vladimir Davydov)
  - sched: add WARN_ON's to debug task boosting (Vladimir Davydov) [PSBM-44475 PSBM-50077]
  - printk: Add touch_all_softlockup_watchdogs() to console_unlock() (Kirill Tkhai) [PSBM-49893]
  - net: limit a number of namespaces which can be cleaned up concurrently (Andrei Vagin)
  - ve/netns: limit number of network namespaces per container (Andrei Vagin) [PSBM-49690]
  - ve/pid: Export kernel.pid_max via ve cgroup (Pavel Tikhomirov) [PSBM-48397]
  - ve/itimer: add ve_name to warning for a NULL new_value (Dmitry Safonov) [PSBM-49818]
  - ext4: fix broken mfsync_ioctl (Dmitry Monakhov) [PSBM-49885]
  - ext4: fix broken fsync for dirs/symlink (Dmitry Monakhov)
  - ploop: io_direct: delay f_op->fsync() until index_update for reloc requests (v3) (Maxim Patlasov) [PSBM-47026 PSBM-47026]
  - ploop: factor out add preq to fsync_queue (Maxim Patlasov)
  - ploop: factor ->write_page() out (Maxim Patlasov)
  - ms/fuse: fuse_flush must check mapping->flags for errors (Maxim Patlasov) [PSBM-49821]
  - mm: fix truncate_inode_pages_range() for filesystems without buffer-heads (Maxim Patlasov) [PSBM-50629]
  - mm/page_alloc: don't return freed pages from alloc_pages() (Andrey Ryabinin) [PSBM-49918]
  - ve/veth: don't disable the mac filter implicitly (Andrey Vagin) [PSBM-50248]
  - ve/net/ip6tables: fix autoloading of the ip6table_raw module from CT (Andrey Ryabinin) [PSBM-50548]
  - ve/bridge: br_dev_init: check if "bridge" feature is enabled (Evgenii Shatokhin) [PSBM-50009]
  - ms/sched/fair: Initialize throttle_count for new task-groups lazily (Konstantin Khlebnikov) [PSBM-50099]
  - fence-watchdog: don't log state of mind (Konstantin Khorenko) [PSBM-49998]
  - ploop: fix freeze/thaw ioctls (Maxim Patlasov) [PSBM-49699]
  - ploop: fix free_list starvation (Maxim Patlasov) [PSBM-49454]
  - ploop: introduce plo->blockable_reqs counter (Maxim Patlasov) [PSBM-49454]
  - ploop: introduce plo->free_qlen counter (Maxim Patlasov) [PSBM-49454]
  - ploop: fix fsync_reqs accounting (Maxim Patlasov) [PSBM-49454]
  - ms/fuse: fsync() does not return IO errors (Alexey Kuznetsov) [PSBM-49821]
  - ms/ext4: improve ext4lazyinit scalability (Dmitry Monakhov) [PSBM-49658]
  - ploop: release plo->ctl_mutex for thaw_bdev in PLOOP_IOC_THAW handler (Vladimir Davydov) [PSBM-49699]
  - sched: use topmost limited ancestor for cpulimit balancing (Vladimir Davydov) [PSBM-49203]
  - sched: cleanup !CFS_CPULIMIT code (Vladimir Davydov)
  - sched: make check_cpulimit_spread accept tg instead of cfs_rq (Vladimir Davydov)
  - sched: account task_group->nr_cpus_active for all cgroups (Vladimir Davydov)
  - arch: x86: perf_event_intel: do not taint kernel when irq loop is stuck (Vladimir Davydov) [PSBM-49258]
  - mm: default collapse huge pages if there's at least 1/4th ptes mapped (Vladimir Davydov) [PSBM-48885]
  - ploop: add PLOOP_IOC_FREEZE and PLOOP_IOC_THAW ioctls (Maxim Patlasov) [PSBM-49091]
  - mm: memcontrol: fix race between user memory reparent and charge (Vladimir Davydov) [PSBM-49117]
  - dcache: fix dentry leak when shrink races with kill (Vladimir Davydov) [PSBM-49321]
  - config: disable numa balancing by default (Vladimir Davydov) [PSBM-49131]
  - ploop: reloc vs extent_conversion race fix (Dmitry Monakhov) [PSBM-47107 PSBM-49143]
  - Revert "ve/vmscan: do not throttle kthreads due to too_many_isolated" (Vladimir Davydov)
  - mm: vmscan: never wait on writeback pages (Vladimir Davydov) [PSBM-48115]
  - ub: account memory overcommit failures in UB_PRIVVMPAGES.failcnt (Andrey Ryabinin) [PSBM-48891]
  - ms/netfilter: x_tables: check for bogus target offset (Cyrill Gorcunov) [PSBM-49001]
  - ploop: push_backup: implement timeout functions (Maxim Patlasov) [PSBM-48082]
  - ploop: push_backup: health monitor thread (Maxim Patlasov) [PSBM-48082]
  - ploop: push_backup: add timeout tunable (Maxim Patlasov)
  - ploop: push_backup: extend pb_set (Maxim Patlasov)
  - ploop: push_backup: factor rb_erase() out (Maxim Patlasov)
  - ploop: push_backup: introduce pb_set structure (Maxim Patlasov) [PSBM-48082 PSBM-48082]
  - ploop: fixup barrier handling during relocation (Maxim Patlasov)
  - ploop: fix barriers for PLOOP_E_RELOC_NULLIFY (Maxim Patlasov)
  - ploop: generalize issue_flush (Dmitry Monakhov)
  - ploop: remove preflush from dio_submit (Maxim Patlasov)
  - ploop: resurrect delay_fua for io_direct (Maxim Patlasov)
  - ploop: minor rework of ->write_page() io method (Dmitry Monakhov)
  - ploop: resurrect delayed_fua for io_kaio (Maxim Patlasov)
  - ploop: minor rework of ploop_req_delay_fua_possible (Maxim Patlasov) [PSBM-47107]
  - ve/net: sit: fix crash on newlink if VE_FEATURE_SIT is disabled (Vladimir Davydov)
  - ve/net: ipip: fix crash on newlink if VE_FEATURE_IPIP is disabled (Vladimir Davydov)
  - ve/net: ip_vti: skip per net init in ve (Vladimir Davydov) [PSBM-48698]
  - ve/net: ipip: enable in container (Vladimir Davydov) [PSBM-48608]
  - ve/fs: namespace -- Don't fail on permissions if @ve->devmnt_list is empty (Cyrill Gorcunov) [PSBM-48188]
  - ploop: deadcode cleanup in dio_submit() (Dmitry Monakhov)
  - ploop: skip redundant fsync for REQ_FUA in post_submit (Dmitry Monakhov)
  - ve/net: enable IPPROTO_ICMP inside Containers (Vasily Averin) [OVZ-6744 PSBM-47413]
  - ve/fairsched: Resurrect proc fairsched files (Vladimir Davydov) [PSBM-48824]
  - ve/binfmt_misc: Allow mount if capable(CAP_SYS_ADMIN) (Kirill Tkhai) [PSBM-47737]
  - ve/cpustat: don't try to update vcpustats for root_task_group (Andrey Ryabinin) [PSBM-48721]
  - ve: drop not used CAP_VE_ADMIN and CAP_VE_NET_ADMIN (Vladimir Davydov)
  - ploop: fix barriers for ordinary requests (Maxim Patlasov)
  - ms/mm: memcontrol: reclaim when shrinking memory.high below usage (Johannes Weiner) [PSBM-48546]
  - rh/locks: check for fl->fl_owner != filp in show_fd_locks (Stanislav Kinsburskiy) [PSBM-48727]
  - ve/fs: namespace -- Ignore device permissions during restore (Cyrill Gorcunov) [PSBM-48188]
  - ve: mark DEF_PERMS feature deprecated (Evgenii Shatokhin) [PSBM-40280]
  - cgroup: fix path mangling for ve cgroups (Vladimir Davydov) [PSBM-48629]
  - cgroup: use cgroup_path_ve helper in cgroup_show_path (Vladimir Davydov)
  - Drop fairsched syscalls (Vladimir Davydov)
  - Use ve init task's css instead of opening cgroup via vfs (Vladimir Davydov) [PSBM-48629]
  - Drop VZCTL_ENV_CREATE (Vladimir Davydov)
  - Drop vz_compat boot param (Vladimir Davydov)
  - timers should not get negative argument (Vasily Averin) [PSBM-48475]
  - netlink/diag: report flags for netlink sockets (Andrey Vagin) [PSBM-28386]
  - netlink: add an ability to restore messages in a receive queue (Andrey Vagin) [PSBM-28386]
  - netlink: allow to set peeking offset for sockets (Andrey Vagin) [PSBM-28386 PSBM-48484 PSBM-28386]
  - ploop: io_kaio: fix silly bug in kaio_complete_io_state() (Maxim Patlasov)
  - ploop: fix counting bio_qlen (Maxim Patlasov)
  - ve/device_cgroup: kill ACC_QUOTA permission (Andrey Ryabinin) [PSBM-48482]
  - ve/device_cgroup: allow to change device mount permission via cgroup (Andrey Ryabinin) [PSBM-48431]
  - ve/security: device_cgroup -- Allow manage devices in @pseudosuper state (Cyrill Gorcunov) [PSBM-48421]
  - ve/sysctl: remove unused fs.ve-area-access-check, net.ipv4.tcp_max_tw* (Pavel Tikhomirov) [PSBM-47061]
  - ve/vtty: Don't free console mapping until no clients left (Cyrill Gorcunov) [PSBM-39463]
  - ms/kernel/sysrq: restore touch_nmi_watchdog() in show_state_filter() (Andrey Ryabinin) [PSBM-47486]
  - ploop: fix gendisk disk_stats to be seen on partition (Maxim Patlasov) [PSBM-48266]
  - modules: set module author for Virtuozzo modules (Konstantin Khorenko) [PSBM-43847]
  - ploop: "Parallels loopback device" -> "Virtuozzo loopback device" (Konstantin Khorenko) [PSBM-43847]
  - license: put correct copyrights into file headers (Konstantin Khorenko) [PSBM-43847 PSBM-40069]
  - license: drop COPYING.Parallels file (Konstantin Khorenko) [PSBM-43847]
  - ms/kmod: remove false positive warning "waiting module removal not supported: please upgrade" (Rusty Russell) [PSBM-27580 OVZ-6748 PSBM-47877]
  - ploop: push_backup: PLOOP_PEEK mode of ioctl(PLOOP_IOC_PUSH_BACKUP_IO) (Maxim Patlasov) [PSBM-47764]
  - cbt: blk_cbt_update_size() must return if cbt->block_max not changed (Maxim Patlasov)
  - cbt: blk_cbt_update_size() should not copy uninitialized data (Maxim Patlasov) [PSBM-48120]
  - ve/netfilter/ipset: allow modules autoload (Pavel Tikhomirov) [PSBM-46102]
  - ve: drop xattr policy toggle (Stanislav Kinsburskiy) [OVZ-6409]
  - ploop: push_backup: rework lockout machinery (Maxim Patlasov) [PSBM-47680 PSBM-47680]
  - Revert "ploop: push_backup must pass READs intact" (Maxim Patlasov) [PSBM-47680 PSBM-47680 PSBM-46775]
  - pfcache: abort ext4_pfcache_open if inode already has peer installed (Vladimir Davydov) [PSBM-47806]
  - net: packet: rework rx/tx ring pages accounting (Vladimir Davydov) [PSBM-47873 PSBM-63654]
  - ve/mm: fix PAGE_KMEMCG_MAPCOUNT_VALUE (Vladimir Davydov)
  - arch: x86: don't charge kernel page tables to kmemcg (Vladimir Davydov)
  - pipe: uncharge page on ->steal (Vladimir Davydov)
  - net/af_unix: charge buffers to kmemcg (Vladimir Davydov) [PSBM-34562]
  - mm: charge/uncharge kmemcg from generic page allocator paths (Vladimir Davydov)
  - mm: Move PageBalloon and PageBuddy helpers to page-flags.h (Vladimir Davydov)
  - mm: memcontrol: drop memcg_kmem_commit_charge (Vladimir Davydov)
  - mm: Drop alloc_kmem_pages and friends (Vladimir Davydov) [PSBM-34562]
  - ploop: push_backup: copy stop status back to userspace (Maxim Patlasov) [PSBM-47429]
  - fs/aio-nr: fix decrement of aio-nr (Andrey Ryabinin) [PSBM-47209]
  - ploop: io_direct: delay f_op->fsync() until FLUSH|FUA (v2) (Maxim Patlasov) [PSBM-47026]
  - kernel/sysrq: reset watchdog on all cpus while during sysrq-w (Andrey Ryabinin) [PSBM-47486]
  - cbt: fix possible race on alloc_page() (Maxim Patlasov)
  - ploop: push_backup: merge pbd->cbt_map back to CBT (Maxim Patlasov) [PSBM-47429]
  - cbt: new api: blk_cbt_map_merge() (Maxim Patlasov) [PSBM-47429 PSBM-47429]
  - cbt: fix panic in blk_cbt_map_copy_once() (Maxim Patlasov) [PSBM-47416]
  - ms/x86/kasan: instrument user memory access API (Andrey Ryabinin)
  - ms/mm/kasan: add API to check memory regions (Andrey Ryabinin)
  - ms/mm/kasan: print name of mem[set,cpy,move]() caller in report (Andrey Ryabinin)
  - ms/dcache: add missing lockdep annotation (Linus Torvalds)
  - ms/dcache: dentry_kill() doesn't need the second argument now (Al Viro)
  - ms/dcache: dealing with the rest of shrink_dentry_list() livelock (Al Viro)
  - ms/dcache: shrink_dentry_list(): take parent's ->d_lock earlier (Al Viro)
  - ms/dcache: expand dentry_kill(dentry, 0) in shrink_dentry_list() (Al Viro)
  - ms/dcache: split dentry_kill() (Al Viro)
  - ms/dcache: lift the "already marked killed" case into shrink_dentry_list() (Al Viro)
  - ms/dcache: don't need rcu in shrink_dentry_list() (Miklos Szeredi)
  - ms/dcache: fold try_prune_one_dentry() (Al Viro)
  - ms/dcache: fold d_kill() (Vladimir Davydov) [PSBM-47312]
  - ms/kvm:vmx: more complete state update on APICv on/off (Roman Kagan) [PSBM-46939]
  - pfcache: pick page from peer mapping after readahead (Vladimir Davydov) [PSBM-47541]
  - ve/kmod: rename {,fs-}binfmt_misc in the autoload whitelist (Dmitry Safonov) [PSBM-41216]
  - fuse: enable synchronous close for both "pstorage://" and "vstorage://" fs types (Andrey Zaitsev) [PSBM-47206]
  - Revert "sched: Port diff-fairsched-cpuset-add-fake-cpuset-for-containers" (Pavel Tikhomirov)
  - ve/proc/cpuset: do not show cpuset in CT (Pavel Tikhomirov) [PSBM-47280]
  - ve/fs/overlay: allow overlayfs to be used inside a Container (Pavel Tikhomirov) [PSBM-47280]
  - ploop: push_backup: improve ioctl(PLOOP_IOC_PUSH_BACKUP_IO) (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: introduce ppb->reported_map (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: implement auto destroy (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: factor out destroy (Maxim Patlasov) [PSBM-45000]
  - ploop: get rid of direct calls to file->f_op->fsync() (Maxim Patlasov)
  - ploop: get rid of dio_fsync() (Maxim Patlasov)
  - ploop: io_direct: check for fsync fop on startup (Maxim Patlasov)
  - ploop: get rid of FOP_FSYNC (Maxim Patlasov)
  - ve/kmod: Allow netfilter conntrack inside VE (Cyrill Gorcunov) [PSBM-47359]
  - fs/aio: show real number of aio events in fs.aio-nr sysctl (Andrey Ryabinin) [PSBM-47209]
  - ms/aio: Multiply passed nr_events in io_setup() (Kirill Tkhai) [PSBM-47075 PSBM-47209]
  - mm: memcontrol: drop useless VM_BUG_ON's in memcg_{start,stop}_kmem_account (Vladimir Davydov)
  - ms/net: sock: move ->sk_shutdown out of bitfields (Andrey Ryabinin) [PSBM-47023]
  - ploop: avoid costly user-controllable kmalloc() calls (Andrey Ryabinin) [PSBM-47303]
  - ploop: push_backup: optimize ploop_pb_put_reported() (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: optimize ploop_pb_get_pending() (Maxim Patlasov) [PSBM-45000]
  - ve/mm: introduce min threshold for dcache (Vladimir Davydov) [PSBM-34161]
  - mm: memcontrol: fix meminfo:SUnreclaim output in containers (Vladimir Davydov)
  - mm: memcontrol: add stats for reclaimable and unreclaimable stats (Vladimir Davydov)
  - prctl: remove one-shot limitation for changing exe link (Stanislav Kinsburskiy) [PSBM-26967 PSBM-47315]
  - ub/mm/writeback: do not check dirty limits for ub0 (Vladimir Davydov)
  - ub: do not check overcommit for ub0 (Vladimir Davydov)
  - ve/kmod: Change modules whitelist to fit their aliases (Cyrill Gorcunov) [PSBM-46789]
  - ub: init ub0 bound css early (Vladimir Davydov) [PSBM-47147]
  - ub: add heuristic check for memory overcommit (Vladimir Davydov) [PSBM-45695]
  - ve/prctl_set_mm: allow to change mm content in ve (Stanislav Kinsburskiy) [PSBM-26967]
  - ploop: push_backup: show uuid (Maxim Patlasov) [PSBM-45000]
  - ploop: push_backup: fix ploop_push_backup_io_read() (Maxim Patlasov) [PSBM-45000]
  - ms/memcg: make mem_cgroup_read_{stat|event}() iterate possible cpus instead of online (Tejun Heo)
  - ub: make cached and shmem meminfo output more accurate (Vladimir Davydov)
  - mm: memcontrol: account shmem pages (Vladimir Davydov)
  - ve/aio: Wait for all inflight AIO reqs of a task (Kirill Tkhai) [PSBM-42488]
  - ve/aio: Kill ve_aio_set_tail() (Kirill Tkhai) [PSBM-42488]
  - ploop: force journal commit after dio_post_submit() (Dmitry Monakhov) [PSBM-45730]
  - ploop: push_backup must pass READs intact (Maxim Patlasov) [PSBM-46775]
  - cbt: fix cbt->block_max calculation (Maxim Patlasov)
  - ploop: push_backup: fix reentrance in ploop_pb_get_pending() (Dmitry Monakhov) [PSBM-45000]
  - ve/kmod: Add modules to whitelist for c/r sake (Cyrill Gorcunov) [PSBM-46789]
  - pfcache: do not account peer files to memcg (Vladimir Davydov)
  - ploop: push_backup cleanup (Maxim Patlasov)
  - ploop: wire push_backup into state-machine (Maxim Patlasov)
  - ploop: implement PLOOP_IOC_PUSH_BACKUP_IO (Maxim Patlasov)
  - ploop: introduce pbd (Maxim Patlasov) [PSBM-45000]
  - fs: fix accounting pipe buffers to kmemcg (Vladimir Davydov)
  - arch: x86: fix accounting page tables to kmemcg (Vladimir Davydov)
  - memcg: charge kmem allocations accounted to UBC in PCS6 to memcg (Vladimir Davydov) [PSBM-54928 PSBM-54928]
  - vmalloc: add v[mz]alloc_account helpers (Vladimir Davydov)
  - ms/kmemcg: account certain kmem allocations to memcg (Vladimir Davydov)
  - ms/slab: add SLAB_ACCOUNT flag (Vladimir Davydov)
  - ms/memcg: only account kmem allocations marked as __GFP_ACCOUNT (Vladimir Davydov)
  - Revert "ms/gfp: add __GFP_NOACCOUNT" (Vladimir Davydov)
  - Revert "ms/sysfs: do not account sysfs_ino_ida allocations to memcg" (Vladimir Davydov)
  - Partially revert "tcp: Charge socket buffers into cg memory" (Vladimir Davydov)
  - Revert "mm/vmalloc: do not account vmap_area to memcg" (Vladimir Davydov)
  - Revert "ve/radix-tree: do not account radix_tree_nodes to memcg" (Vladimir Davydov) [PSBM-45975]
  - config.OpenVZ.debug: enable panic-on-oops in debug kernel (Konstantin Khorenko)
  - oom: fix NULL ptr deref on oom if memory cgroup is disabled (Vladimir Davydov) [PSBM-43328]
  - oom: make berserker more aggressive (Vladimir Davydov)
  - oom: zap unused oom_scan_process_thread arguments (Vladimir Davydov)
  - oom: do not ignore score of exiting tasks (Vladimir Davydov)
  - mm: memcontrol: check more carefully if current is oom killed (Vladimir Davydov)
  - oom: do not select child that has already been killed (Vladimir Davydov) [PSBM-40842]
  - fuse: never skip writeback if there are too many background requests (Vladimir Davydov) [PSBM-45497]
  - fuse: increase min/max_dirty_pages up to 256/512 MB (Vladimir Davydov)
  - cbt: add uuid arg to blk_cbt_map_copy_once() (Maxim Patlasov) [PSBM-45000]
  - ve/fs/locks: Make CAP_LEASE work in containers (Evgenii Shatokhin) [PSBM-46199]
  - ub: show swapin/out in /proc/bc/<bc>/vmaux (Vladimir Davydov) [PSBM-46104]
  - mm: memcontrol: add swapin/out stats (Vladimir Davydov) [PSBM-46104]
  - meminfo: show size of tcache and tswap (Vladimir Davydov)
  - ms/kvm: cap halt polling at exactly halt_poll_ns (David Matlack)
  - ms/kvm: halt_polling: improve grow/shrink settings (Christian Borntraeger)
  - ms/kvm: disable halt_poll_ns as default for s390x (David Hildenbrand)
  - fs/mm: writeback: fix div/0 (Vladimir Davydov) [PSBM-46146]
  - fence-watchdog: fix wdog_tmo_mt_check return (Pavel Tikhomirov)
  - ms/netfilter: ipset: move registration message to init from net_init (Ilia Mirkin) [PSBM-45281]
  - ms/netfiler: ipset: Add net namespace for ipset (Vitaly Lavrov) [PSBM-45281]
  - cbt: add blk_cbt_map_copy_once() helper (Maxim Patlasov) [PSBM-45000]
  - cbt: fix page allocation (Maxim Patlasov)
  - cbt: make __blk_cbt_set() smarter (Maxim Patlasov)
  - cbt: introduce CBT_PAGE_MISSED (Maxim Patlasov)
  - cbt: factor out alloc_page (Maxim Patlasov) [PSBM-45000]
  - ve/fs: Export fs.aio-max-nr via ve cgroup (Cyrill Gorcunov) [PSBM-45646]
  - fs/mm: writeback: fix per bdi dirty background threshold calculation (Vladimir Davydov) [PSBM-45497]
  - ploop: io_direct must fsync after fallocate (Maxim Patlasov) [PSBM-45326]
  - cbt: remove useless rcu_dereference() -v2 (Maxim Patlasov)
  - fuse: resend interrupted release (Maxim Patlasov) [PSBM-45428]
  - ms/locks: remove conditional lock release in middle of flock_lock_file (Jeff Layton) [PSBM-45393]
  - ve/cgroup: Allow to write to several safe cgroup files from CT (Pavel Tikhomirov) [PSBM-44981]
  - ve/cgroup: Prohibit access to toplevel cgroups in CT (Pavel Tikhomirov) [PSBM-44981]
  - vzprivnet: Enable module in configs (Pavel Tikhomirov) [PSBM-43685]
  - vzprivnet: Do not execute vzprivnet_hook inside CT (Pavel Tikhomirov) [PSBM-35111]
  - vzprivnet: Set GPL license (Pavel Tikhomirov)
  - vzprivnet: rt cache drop on vzprivnet update (Pavel Tikhomirov) [PSBM-28881]
  - vzprivnet: Incorrect return value in vzprivnet_hook() (Pavel Tikhomirov) [PSBM-28845]
  - vzprivnet: Check that vzprivnet6_lookup() returns not NULL (Pavel Tikhomirov) [PSBM-8734]
  - vzprivnet6: Interpret zero address as internet (Pavel Tikhomirov) [PSBM-8734]
  - vzprivnet6: Legacy mode support (Pavel Tikhomirov)
  - vzprivnet6: Switch to radix tree (Pavel Tikhomirov)
  - vzprivnet6: Remove hash references (Pavel Tikhomirov)
  - vzprivnet: Allow internet access for weak private networks (Pavel Tikhomirov)
  - vzprivnet: Introduce constants for weakness (Pavel Tikhomirov)
  - vzprivnet: Catch v4 conflict on add (Pavel Tikhomirov) [PSBM-6404 PSBM-7345]
  - vzprivnet6: Don't handle neighbor solicit packets in bridge (Pavel Tikhomirov) [PSBM-7078]
  - vzprivnet: Filter VM/CT to Host traffic (Pavel Tikhomirov) [PSBM-6404]
  - vzprivnet6: Mask the jhash value to fit the chain into one page - fix hash access (Pavel Tikhomirov)
  - vzprivnet: Check for bridged skbs in privnet properly (Pavel Tikhomirov) [PSBM-6635]
  - vzprivnet: Handle bridged skbs in ipv4 privnet (Pavel Tikhomirov) [PSBM-6459 PSBM-6448 PSBM-6444]
  - vzprivnet6: Use rh6 kapi (Pavel Tikhomirov)
  - vzprivnet: Hash sets for ipv6 privnet (Pavel Tikhomirov)
  - vzprivnet: Initial implementation of v6 privnets (Pavel Tikhomirov)
  - vzprivnet: Add stuff required for ipv6 support (Pavel Tikhomirov)
  - vzprivnet: Bad retcode on IP add conflict (Pavel Tikhomirov)
  - vzprivnet: Fix privnet object leak (Pavel Tikhomirov)
  - vzprivnet: Weak sparse networks (Pavel Tikhomirov)
  - vzprivnet: Flush rt cache each time rules change (Pavel Tikhomirov)
  - vzprivnet: Add the classifier proc file (Pavel Tikhomirov)
  - vzprivnet: Introduce basic statistics (Pavel Tikhomirov)
  - vzprivnet: Sparse privnets support (Pavel Tikhomirov)
  - vzprivnet: Netmask byte order toss (Pavel Tikhomirov)
  - vzprivnet: Legacy tree core isolation (Pavel Tikhomirov)
  - vzprivnet: Rework proc structure (Pavel Tikhomirov)
  - vzprivnet: Cache filtering result on dst (Pavel Tikhomirov)
  - vzprivnet: Split privnet descriptor into 2 parts (Pavel Tikhomirov)
  - vzprivnet: Include the last IP of the range into checks (Pavel Tikhomirov)
  - vznetfilter/vzprivnet: Combined patch (Pavel Tikhomirov) [PSBM-43685]
  - dcache: zap dentry_lru_del() (Vladimir Davydov)
  - ms/dcache: don't remove from shrink list in select_collect() (Al Viro) [PSBM-44210]
  - ms/dcache: dentry_kill(): don't try to remove from shrink list (Vladimir Davydov) [PSBM-44210]
  - ve/tty: vtty -- Drop TTY_PINNED_BY_OTHER bit (Cyrill Gorcunov)
  - block: suppress hard lockup warning in elv_drain_elevator (Vladimir Davydov) [PSBM-44480]
  - tmpfs: shmem_fallocate must return ERESTARTSYS (Maxim Patlasov) [PSBM-43399]
  - ploop: must acquire write access on space allocation (Maxim Patlasov) [PSBM-20150]
  - exit: clear TIF_MEMDIE after exit_task_work (Vladimir Davydov) [PSBM-44683]
  - ve/memcg: do not ignore oom_guarantee for unlimited cgroups (Vladimir Davydov) [PSBM-44683]
  - debug/scsi: debug Scsi_Host recovery (Maxim Patlasov) [PSBM-44228]
  - ploop: use FALLOC_FL_CONVERT_UNWRITTEN in io_direct (Maxim Patlasov) [PSBM-22381]
  - ploop: replace BLOCK_UNINIT (Maxim Patlasov) [PSBM-22381]
  - ploop: fix direct_io prealloc checks (Maxim Patlasov) [PSBM-22381]
  - ploop: update gendisk disk_stats (Maxim Patlasov) [PSBM-41247]
  - ms/mm: slab: free kmem_cache_node after destroy sysfs file (Dmitry Safonov) [PSBM-43010]
  - ms/slub: do not assert not having lock in removing freed partial (Steven Rostedt) [PSBM-43010]
  - ms/slub: use lockdep_assert_held (Peter Zijlstra) [PSBM-43010]
  - ext4: rename fallocate(FALLOC_FL_CONVERT_AND_EXTEND) (Maxim Patlasov) [PSBM-22381]
  - ext4: rework fallocate(FALLOC_FL_CONVERT_AND_EXTEND) (Maxim Patlasov) [PSBM-22381]
  - vfs: fix fallocate(FALLOC_FL_CONVERT_AND_EXTEND) (Maxim Patlasov) [PSBM-22381]
  - ms/fs: Add a missing permission check to do_umount (Pavel Tikhomirov) [PSBM-43294]
  - ms/mnt: Only change user settable mount flags in remount (Pavel Tikhomirov) [PSBM-43294]
  - ms/fs/super.c: fix WARN on alloc_super() fail path (Pavel Tikhomirov) [PSBM-43294]
  - Revert "config.OpenVZ: show Odin's logo on boot" (Konstantin Khorenko) [PSBM-44739]
  - Revert "ve/video/logo: show Odin's logo on boot" (Konstantin Khorenko) [PSBM-44739]
  - ve/fs/sync: fix CT's mountpoints traversal (Andrey Ryabinin) [PSBM-44125 PSBM-44684]
  - ve: remove sync_mutex (Andrey Ryabinin)
  - memcg: ignore memory.low for cgroups w/o tasks (Vladimir Davydov) [PSBM-44192]
  - ms/userns, pidns: Force thread group sharing, not signal handler sharing. (Eric W. Biederman) [PSBM-44152]
  - ms/kvm/x86: Pass return code of kvm_emulate_hypercall (Andrey Smetanin) [PSBM-44419]
  - ms/kvm/x86: Hyper-V VMBus hypercall userspace exit (Andrey Smetanin) [PSBM-44419]
  - ms/kvm/x86: Reject Hyper-V hypercall continuation (Andrey Smetanin) [PSBM-44419]
  - ms/drivers/hv: Move VMBus hypercall codes into Hyper-V UAPI header (Andrey Smetanin) [PSBM-44419]
  - ms/kvm/x86: Rename Hyper-V long spin wait hypercall (Andrey Smetanin) [PSBM-44419]
  - tcache/proc/meminfo: add tcache pages to MemAvailable (Vladimir Davydov) [PSBM-54928]
  - ve: move ve-related checks to separated function from ve_can_attach() (Stanislav Kinsburskiy) [PSBM-44143]
  - ve: move task-related checks to separated function from ve_can_attach() (Stanislav Kinsburskiy) [PSBM-44143]
  - ve: remove is_locked check from ve_can_attach() (Stanislav Kinsburskiy)
  - tcache: improve reclaim fairness (Vladimir Davydov) [PSBM-41239]
  - tcache: store tcache_node in page->mapping instead of page->private (Vladimir Davydov) [PSBM-41239]
  - mm: vmscan: don't drop global slab caches at once if root cgroup is empty (Vladimir Davydov) [PSBM-41239]
  - ve/aio: Enumerate ioctl numbers right (Kirill Tkhai) [PSBM-42488]
  - ms/KVM: x86: set TMR when the interrupt is accepted (Paolo Bonzini) [PSBM-41387]
  - ve/fs/sync: don't skip dirty metadata on filtered sync (Andrey Ryabinin) [PSBM-39583 PSBM-44125]
  - ve: Add a handle to checkpoint/restore AIO context (Kirill Tkhai) [PSBM-42488 PSBM-41425]
  - tcache/tswap: enable by default (Vladimir Davydov)
  - kvm: do not SetPageDirty for file mappings (Maxim Patlasov) [PSBM-43243]
  - ms/kvm/x86: Hyper-V SynIC timers tracepoints (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V SynIC tracepoints (Andrey Smetanin)
  - ms/kvm/x86: Update SynIC timers on guest entry only (Andrey Smetanin)
  - ms/kvm/x86: Skip SynIC vector check for QEMU side (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V fix SynIC timer disabling condition (Andrey Smetanin)
  - ms/kvm/x86: Reorg stimer_expiration() to better control timer restart (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Andrey Smetanin)
  - ms/kvm/x86: Drop stimer_stop() function (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V timers fix incorrect logical operation (Andrey Smetanin)
  - ms/kvm/x86: Remove Hyper-V SynIC timer stopping (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V SynIC timers (Andrey Smetanin) [PSBM-58415]
  - ms/kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V internal helper to read MSR HV_X64_MSR_TIME_REF_COUNT (Andrey Smetanin)
  - ms/kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Andrey Smetanin)
  - ms/kvm/x86: Rearrange func's declarations inside Hyper-V header (Andrey Smetanin)
  - ms/drivers/hv: Move struct hv_timer_message_payload into UAPI Hyper-V x86 header (Andrey Smetanin)
  - ms/drivers/hv: Move struct hv_message into UAPI Hyper-V x86 header (Andrey Smetanin)
  - ms/drivers/hv: Move HV_SYNIC_STIMER_COUNT into Hyper-V UAPI x86 header (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V kvm exit (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V synthetic interrupt controller (Andrey Smetanin) [PSBM-54815]
  - ms/kvm/x86: per-vcpu apicv deactivation support (Andrey Smetanin) [PSBM-54928]
  - ms/kvm/irqchip: kvm_arch_irq_routing_update renaming split (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V HV_X64_MSR_VP_RUNTIME support (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V HV_X64_MSR_VP_INDEX export for QEMU. (Andrey Smetanin)
  - ms/kvm/x86: Hyper-V HV_X64_MSR_RESET msr (Andrey Smetanin)
  - ve/ext4: treat panic_on_errors as remount-ro_on_errors in CTs (Dmitry Monakhov)
  - vziolimit/fs/ext4: allow to throttle due to iolimit while reading directory blocks (Vladimir Davydov)
  - cbt: fix blk_cbt_set endless loop (Dmitry Monakhov) [PSBM-43936]
  - ub: zap unused task_beancounter fields (Vladimir Davydov)
  - ve: Use @real_start_timespec in uptime_proc_show (Cyrill Gorcunov) [PSBM-41406]
  - ve: Add interface for @start_timespec and @real_start_timespec adjustmen (Cyrill Gorcunov) [PSBM-41311 PSBM-41406]
  - ve/fs/sync: per containter sync and syncfs (Andrey Ryabinin) [PSBM-39583]
  - ve/fs/writeback: filter per-container inodes earlier (Andrey Ryabinin) [PSBM-39583]
  - ve/coredump: virtualize kernel.core_pattern sysctl (Pavel Tikhomirov) [PSBM-43596]
  - ve/sysctl: add macro sysctl_virtual to unify sysctl's virtualization (Pavel Tikhomirov) [PSBM-43596]
  - config.OpenVZ: disable RH_KABI_SIZE_ALIGN_CHECKS (Andrey Ryabinin)
  - ve/cpuset: revert changes allowing to attach to empty cpusets (Vladimir Davydov) [PSBM-34089 PSBM-42087]
  - oom: resurrect berserker mode (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-17930]
  - oom: pass points and overdraft to oom_kill_process (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: rework logic behind memory.oom_guarantee (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-37915]
  - oom: drop OOM_SCAN_ABORT (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - oom: introduce oom timeout (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-38581]
  - oom: rework locking design (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - ve/nfsd: do not print nfscld warning in a container (Stanislav Kinsburskiy) [PSBM-43468]
  - ve/nfsd: disable legacy recovery tracking for containers (Stanislav Kinsburskiy) [PSBM-43468]
  - ve/kernel: allow to increase rlimit from inside container (Vladimir Davydov) [PSBM-43410]
  - ve/fs/writeback: use redirty_tail to skip inodes (Andrey Ryabinin) [PSBM-43375]
  - ve/net/dummy: enable support in a container (Vasily Averin) [PSBM-43329]
  - ve/net_core: fix build error with owner_ve->ve_netns (Dmitry Safonov)
  - ve/binfmt_misc: fix compilation outside CONFIG_BINFMT_MISC (Dmitry Safonov)
  - ve/kmod: fix build without CONFIG_VE_IPTABLES (Dmitry Safonov)
  - ve/fs: Print a message if a VE reaches its limit on mounts (Evgenii Shatokhin) [PSBM-42825]
  - Revert "mm: vmscan: do not scan lruvec if it seems to be unreclaimable" (Vladimir Davydov) [PSBM-35155]
  - memcg: never fail kmem allocations (Vladimir Davydov)
  - ms/autofs: show pipe inode in mount options (Stanislav Kinsburskiy) [PSBM-41217 PSBM-41961]
  - ub: drop unused UB_DIRTY_EXCEEDED (Andrey Ryabinin)
  - ve/mm/page-writeback: Introduce per-CT dirty memory limit (Andrey Ryabinin) [PSBM-33841]
  - ve/fs/writeback: per-CT fs writeback (Andrey Ryabinin) [PSBM-33841]
  - ve/xattr: allow set/remove security.capability inside CT (Pavel Tikhomirov) [PSBM-43294 PSBM-43267 OVZ-6657]
  - ms/ixgbe: on recv increment rx.ring->stats.yields (Pavel Tikhomirov)
  - Revert "ve/cgroup: add VE mark to each user cgroup name on mount" (Konstantin Khorenko) [PSBM-43169]
  - ve/lib/nlattr: use ve_pr_warn_ratelimited instead pr_warn_ratelimited (Dmitry Safonov) [PSBM-42313]
  - ve_prink: introduce ve_pr_<level>_ratelimited (Dmitry Safonov) [PSBM-42313]
  - ve/fs: Use comparison of signed integers in ve_mount_allowed() (Evgenii Shatokhin) [PSBM-42825]
  - ms/sched/core: Fix unserialized r-m-w scribbling stuff (Kirill Tkhai)
  - ve/cgroup: Add pseudosuper state for restore sake (Cyrill Gorcunov) [PSBM-34299 PSBM-43169 PSBM-42573]
  - ve/kvm: Allow scheduler throttling in __vcpu_run() (Kirill Tkhai) [PSBM-42358]
  - ve/sched: introduce cond_resched_may_throttle (Kirill Tkhai) [PSBM-18888 PSBM-42358]
  - ve/kmod: list of allowed to autoload in CT modules (Dmitry Safonov) [PSBM-41216]
  - ve/cgroup: add VE mark to each user cgroup name on mount (Stanislav Kinsburskiy) [PSBM-42573]
  - ploop: rename extent maps management funtions (Alexey V. Vissarionov)
  - ve/userns: allow unprivileged creation of the mount namespace. (Andrey Ryabinin) [OVZ-6646 PSBM-42760]
  - ve/userns: don't TAINT kernel with 'tech preview' (Andrey Ryabinin)
  - ve/fs: drop useless d_root_check() (Andrey Ryabinin) [PSBM-41919]
  - ms/ixgbe: Refactor busy poll socket code to address multiple issues (Pavel Tikhomirov) [PSBM-40330]
  - tcache: fix use-after-free in tcache_invalidate_node_pages() (Andrey Ryabinin) [PSBM-42104]
  - ve/vtty: Don't close unread master peer if slave is nonzero (Cyrill Gorcunov) [PSBM-41985 PSBM-41672]
  - ve/ptrace: don't change the upstream logic which affects criu (Andrew Vagin) [PSBM-42216]
  - ve/vmscan: do not throttle kthreads due to too_many_isolated (Vladimir Davydov) [PSBM-41410]
  - ploop: disable WRITE SAME for io_kaio (Maxim Patlasov) [PSBM-41965]
  - ve/fs: add per-VE limit of mount points (Evgenii Shatokhin) [PSBM-34438]
  - kernel: check the JOBCTL_TRAPPING_BIT bit correctly (Andrew Vagin) [PSBM-42052]
  - ms/xfs_qm: lost hunk from "ms/list_lru: add helpers to isolate items" (Vladimir Davydov) [PSBM-42319]
  - ms/xfs_qm: lost hunk from "ms/list_lru: introduce list_lru_shrink_{count,walk}" (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: fix dquot isolation hang (Vladimir Davydov) [PSBM-42319]
  - ms/xfs: convert dquot cache lru to list_lru (Vladimir Davydov) [PSBM-42319 PSBM-42319]
  - ext4: ext4_split_extent_at should not cache tail extent (Dmitry Monakhov) [PSBM-40580]
  - ms/vhost/net: extend device allocation to vmalloc (Michael S. Tsirkin) [PSBM-42199]
  - ms/rmap: rmap_walk: move VM_BUG_ON to rmap_walk_file (Vladimir Davydov) [PSBM-42214]
  - mm: page_idle: look up page anon_vma carefully when checking references (Vladimir Davydov) [PSBM-42015 PSBM-42015]
  - ms/mm/rmap: extend rmap_walk_xxx() to cope with different cases (Vladimir Davydov) [PSBM-42015]
  - ms/mm/rmap: make rmap_walk to get the rmap_walk_control argument (Vladimir Davydov) [PSBM-42015]
  - ms/mm/rmap: factor lock function out of rmap_walk_anon() (Vladimir Davydov) [PSBM-42015]
  - ext4: fix race aio-dio vs freeze_fs (Dmitry Monakhov) [PSBM-39352]
  - ve/l2tp: Drop VE_FEATURE_PPP feature test (Cyrill Gorcunov)
  - ve/vtty: Register devices in sysfs (Cyrill Gorcunov) [PSBM-41628 PSBM-41804]
  - bc/mm: mmap_region: uncharge UB_LOCKEDPAGES if vma cannot be locked (Vladimir Davydov) [PSBM-39435]
  - ve/fanotify: Use ve-capable instead of plain capable test (Cyrill Gorcunov) [PSBM-41409]
  - tswap: exert equal pressure on tmem and lru pages (Vladimir Davydov)
  - tcache: exert equal pressure on tmem and lru pages (Vladimir Davydov)
  - vmscan: fix slab vs lru balance (Vladimir Davydov)
  - rh7/user_ns: enable user namespaces by default (Konstantin Khorenko)
  - ve/tun: expose "owner", "group" and "tun_flags" attributes in container (Stanislav Kinsburskiy) [PSBM-39726]
  - x86: "pages zeroing on free" option introduced (Stanislav Kinsburskiy) [PSBM-33071]
  - kernel/freezer: don't freeze stopped & about to be ptraced task (Andrey Ryabinin) [PSBM-40683]
  - ms/ipmr,ip6mr: call ip6mr_free_table() on failure path (WANG Cong)
  - ms/netfilter: Restore xt_connlimit version 0 (Kirill Tkhai) [PSBM-40186]
  - ms/cfq-iosched: fix oom cfq_queue ref leak in cfq_set_request() (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: fix async oom queue handling (Tejun Heo) [PSBM-41334]
  - ms/cfq-iosched: simplify control flow in cfq_get_queue() (Tejun Heo) [PSBM-41334]
  - ms/fsnotify: fix check in inotify fdinfo printing (Cyrill Gorcunov)
  - ms/vmscan: do not force-scan file lru if its absolute size is small (Vladimir Davydov)
  - ve/mm: allow container's root to ignore mlock limit (Andrey Ryabinin) [PSBM-41405]
  - ve/vtty: n_tty -- Allow write on sole slave vtty peer (Cyrill Gorcunov) [PSBM-40740]
  - config.OpenVZ: enable netfilter module xt_match_wdog_tmo (Konstantin Khorenko) [PSBM-40736]
  - ms/kasan: fix kmemleak false-positive in kasan_module_alloc() (Andrey Ryabinin) [PSBM-41328]
  - ms/include/linux/kmemleak.h: needs slab.h (Andrew Morton)
  - ms/epoll: Make fdinfo to always success (Cyrill Gorcunov) [PSBM-41386]
  - tcache: account reclaimed pages to scan_control->nr_reclaimed (Vladimir Davydov)
  - signal/ve: allow to send signal from another ve namespace (Andrey Ryabinin) [PSBM-40896 PSBM-17903]
  - config.OpenVZ: enable fencing watchdog for HA cluster support (Konstantin Khorenko) [PSBM-40736]
  - fence-watchdog: Port: diff-fence-watchdog-netfilter-add-aliases-for-module-wdog_tmo (Pavel Tikhomirov)
  - fence-watchdog: Port: diff-fence-watchdog-arptables-add-ability-to-filter-by-watchdog-timeout-v5 (Pavel Tikhomirov) [PSBM-23253]
  - fence-watchdog: Port: diff-fence-watchdog-add-wdog_tmo-match (Pavel Tikhomirov) [PSBM-23253]
  - fence-watchdog: Port: diff-fence-watchdog-add-netfilter-action (Pavel Tikhomirov) [PSBM-23253 PSBM-23253]
  - fence-watchdog: Port: diff-fence-watchdog-schedule-work-in-case-of-halt-action (Pavel Tikhomirov) [PSBM-20034]
  - fence-watchdog: Port: diff-fence-watchdog-rename-action-to-halt (Pavel Tikhomirov) [PSBM-18395]
  - fence-watchdog: Port: diff-fence-watchdog-write-log-message-when-timer-elapses (Pavel Tikhomirov) [PSBM-18312 PSBM-18312]
  - fence-watchdog: Port: diff-fence-watchdog-add-support-of-crash (Pavel Tikhomirov) [PSBM-13631 PSBM-13631]
  - fence-watchdog: Port: diff-fence-watchdog-introduce-fencing-watchdog-for-HA-cluster-3 (Pavel Tikhomirov) [PSBM-40736 PSBM-13631 PSBM-13631]
  - ms/x86/mm, kasan: Silence KASAN warnings in get_wchan() (Andrey Ryabinin)
  - ms/compiler, atomics, kasan: Provide READ_ONCE_NOCHECK() (Andrey Ryabinin)
  - ms/x86/process: Unify 32bit and 64bit implementations of get_wchan() (Thomas Gleixner)
  - ms/x86/process: Add proper bound checks in 64bit get_wchan() (Thomas Gleixner)
  - ms/x86/asm/entry: Create and use a 'TOP_OF_KERNEL_STACK_PADDING' macro (Andrey Ryabinin)
  - Makefile: properly generate KERNELRELEASE value (Konstantin Khorenko) [PSBM-34957]
  - config.OpenVZ: enable CONFIG_LOCALVERSION_AUTO (Konstantin Khorenko) [PSBM-34957]
  - ve/vznetstat: fix RCU-protected "info_V{4, 6}" pointers initialization (Stanislav Kinsburskiy)
  - ve/vtty: Don't zap termios fields on slave peer (Cyrill Gorcunov) [PSBM-41057]
  - fuse: allow to mount fuse filesystems inside CT (Andrey Ryabinin) [PSBM-41075]
  - ve: introduce ve_init_user_ns() helper (Andrey Ryabinin) [PSBM-41075]
  - ve/net: fix userspace if_tun.h compilation (Vladimir Sementsov-Ogievskiy) [PSBM-40629]
  - ve/autofs: allow /dev/autofs ioctl's in a Container (Stanislav Kinsburskiy) [PSBM-26968]
  - ve/acct: Allow process accounting in containers (Evgenii Shatokhin) [PSBM-40587]
  - sched: disable dumping cfs info on sysrq trigger (Vladimir Davydov) [PSBM-41140]
  - ve/net: fix tap ve shaping (Vladimir Sementsov-Ogievskiy) [PSBM-40888 PSBM-40888]
  - ve/mm,oom: print information about ve of killed task (Andrey Ryabinin) [PSBM-40610]
  - ms/mm: introduce idle page tracking (Vladimir Davydov) [PSBM-32460]
  - ms/mm/mm_init.c: make creation of the mm_kobj happen earlier than device_initcall (Vladimir Davydov) [PSBM-32460]
  - ms/sysfs: create bin_attributes under the requested group (Vladimir Davydov) [PSBM-32460]
  - ms/mmu-notifier: add clear_young callback (Vladimir Davydov) [PSBM-32460]
  - ms/proc: add kpagecgroup file (Vladimir Davydov) [PSBM-32460]
  - ms/memcg: add page_cgroup_ino helper (Vladimir Davydov) [PSBM-32460]
  - ve/cgroups: Allow to attach a single threaded task only into a container (Cyrill Gorcunov)
  - ms/seccomp: add ptrace options for suspend/resume (Andrew Vagin) [PSBM-39517]
  - x86/vdso: Fix build failure with GCC5 (Andrey Ryabinin)
  - ve/fs/namei: fix capabilities check in sys_renameat2 () to support Containers (Stanislav Kinsburskiy)
  - ve/fs/namei: check containers capabilities in may_linkat() (Stanislav Kinsburskiy) [PSBM-40567]
  - ve/nf_conntrack: expose "nf_conntrack_events*" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_acct" in contaners (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: export nf_conntrack_hide_sysctl() helper (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: expose "nf_conntrack_max" in containers (Stanislav Kinsburskiy) [PSBM-40044]
  - ve/nf_conntrack: allow expose of priviledged sysctl inside containers (Stanislav Kinsburskiy) [PSBM-40044]
  - cbt/blkdev.h: fix compilation in case CONFIG_BLK_DEV_CBT is not set (Stanislav Kinsburskiy)
  - ms/veth: add netpoll support (Andrew Vagin) [PSBM-34959]
  - ms/fsnotify: Make fdinfo to always success (Cyrill Gorcunov) [PSBM-40337]
  - ve/xfs: add missing ub_io_account_dirty in set_page_dirty (Vladimir Davydov)
  - arch: mask cpuid 0x00000007 features in /proc/cpuinfo (Vladimir Davydov) [PSBM-30880 PSBM-33638]
  - arch/x86: assure cpuinfo inside ct is subset of host's one (Vladimir Davydov) [PSBM-30688 PSBM-33638]
  - arch/x86: disable cpuid faulting on reboot and cpu offline (Vladimir Davydov) [PSBM-30548 PSBM-33638]
  - arch/x86: only enable cpuid faulting for containers (Vladimir Davydov) [PSBM-30516 PSBM-33638]
  - arch/x86: report cpuid:0000000d_1 in cpuinfo (Vladimir Davydov) [PSBM-30577 PSBM-33638]
  - arch/x86: check if cpuid level exists while reporting cpuinfo (Vladimir Davydov) [PSBM-33638]
  - arch/x86: take into account cpuid override while reporting cpuinfo (Vladimir Davydov) [PSBM-28682 PSBM-33638]
  - arch/x86: introduce cpuid override (Vladimir Davydov) [PSBM-28682 PSBM-33638]
  - cpuinfo: obtain cpuflags for the current cpu too (Vladimir Davydov) [PSBM-33638]
  - cpuinfo: zero all bits in cap mask (Vladimir Davydov) [PSBM-33638]
  - ubc: proc show stats in ve user ns (Pavel Tikhomirov) [PSBM-40433]
  - ve/proc: Use ve_capable() in oom_score_adj_write() (Kirill Tkhai) [PSBM-40359]
  - venet: remove per-net hooks and related code (Stanislav Kinsburskiy) [PSBM-23441 PSBM-23441]
  - venet: add newlink and dellink callbacks to rtnetlink operations (Stanislav Kinsburskiy) [PSBM-23441 PSBM-23441]
  - venet: fix false positive return code in case of error in venet_init() (Stanislav Kinsburskiy) [PSBM-23441]
  - memcg: allow to disable cleancache per memcg (Vladimir Davydov) [PSBM-34163]
  - ve/device_cgroup: fake allowing all devices for docker inside VZCT (Pavel Tikhomirov) [PSBM-34529 PSBM-38691]
  - ve/fs: allow to remount from ve user ns (Pavel Tikhomirov)
  - ve/quota: allow to manage quota in top CT user ns (Konstantin Khorenko) [PSBM-40281]
  - ve/tun: Make config to dep on TUN (Cyrill Gorcunov)
  - ve/vtty: Make indices to match pcs6 scheme (Cyrill Gorcunov) [PSBM-40088]
  - config.OpenVZ: enable TAP accounting (Konstantin Khorenko) [PSBM-27713]
  - ve/net: introduce TAP accounting (Vladimir Sementsov-Ogievskiy) [PSBM-27713]
  - memcg: add lock for protecting memcg->oom_notify list (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - memcg: add mem_cgroup_get/put helpers (Vladimir Davydov) [PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973]
  - ms/mm: oom_kill: clean up victim marking and exiting interfaces (Vladimir Davydov) [PSBM-26973]
  - ms/oom: thaw the OOM victim if it is frozen (Vladimir Davydov) [PSBM-26973]
  - ms/oom: add helpers for setting and clearing TIF_MEMDIE (Vladimir Davydov) [PSBM-26973]
  - ms/oom: make sure that TIF_MEMDIE is set under task_lock (Vladimir Davydov) [PSBM-26973]
  - ms/oom: don't count on mm-less current process (Vladimir Davydov) [PSBM-26973]
  - ms/mm, oom: remove unnecessary exit_state check (Vladimir Davydov) [PSBM-26973]
  - ms/make default ->i_fop have ->open() fail with ENXIO (Andrew Vagin) [PSBM-39834]
  - ms/selftests: add memfd/sealing page-pinning tests (Andrew Vagin) [PSBM-39834]
  - ms/selftests: add memfd_create() + sealing tests (Andrew Vagin) [PSBM-39834]
  - ms/shm: add memfd_create() syscall (Andrew Vagin) [PSBM-39834]
  - ve: Strip unset options in ve.mount_opts (Kirill Tkhai)
  - ms/fuse: break infinite loop in fuse_fill_write_pages() (Maxim Patlasov)
  - ploop: release io_context on ploop_thread() exit (Maxim Patlasov) [PSBM-39956]
  - ms/cfq-iosched: remove @gfp_mask from cfq_find_alloc_queue() (Maxim Patlasov) [PSBM-39956]
  - ve: mark SYSFS and IPGRE features deprecated (Konstantin Khorenko) [PSBM-33687]
  - ploop: do not use fiemap beyond eof (Maxim Patlasov) [PSBM-26762 PSBM-39251]
  - vecalls: fix VZCTL_GET_CPU_STAT uptime_jif scale (Vladimir Davydov) [PSBM-28811]
  - tcache: do not try to create node if we are not going to store page (Vladimir Davydov)
  - ub stat: sync memcg contents with beancounter if required (Stanislav Kinsburskiy)
  - ub stat: commnad check helper introduced (Stanislav Kinsburskiy)
  - ub statd: move header file from include/ to uapi/ (Stanislav Kinsburskiy)
  - ub statd: move struct ub_stat_notify declaration to source (Stanislav Kinsburskiy)
  - ub statd: small optimisations and clean ups (Stanislav Kinsburskiy)
  - ub statd: fix new_notify structure allocation (Stanislav Kinsburskiy)
  - ve/nfsd: Add VE_FEATURE_NFS check during nfsd mount (Kirill Tkhai) [PSBM-33687]
  - ve/nfs,nfsd: Allow to mount fs from initial VE's user_ns (Kirill Tkhai) [PSBM-40047]
  - ve/proc: fix mangling cgroup mount source path in container (Pavel Tikhomirov) [PSBM-34295]
  - ve/tty: Use ve_capable in vhangup syscall (Cyrill Gorcunov) [PSBM-40053]
  - ms/mm/page-writeback.c: fix divide by zero in bdi_dirty_limits() (Maxim Patlasov) [PSBM-40116]
  - ve/sched: Hide steal time from inside CT (Kirill Tkhai) [PSBM-26588 PSBM-23431]
  - ve/fs: don't add MNT_NODEV for ve mounts (Andrew Vagin) [PSBM-40096]
  - ve/devmptfs: Use current_user_ns_initial() in dev_mount() (Kirill Tkhai)
  - ve/fs: Allow to mount ext4 and binfmt_misc under non-root ns (Kirill Tkhai) [PSBM-40100]
  - ve: Implement current_user_ns_initial() helper (Kirill Tkhai)
  - config.OpenVZ.debug: Enable audit subsystem in config" (Konstantin Khorenko) [PSBM-38898]
  - Revert "config.OpenVZ/audit: Disable audit subsystem in config" (Konstantin Khorenko) [PSBM-38898]
  - config.OpenVZ: enable NBD module (Konstantin Khorenko) [PSBM-31858]
  - ms/kvm/x86: add sending hyper-v crash notification to user space (Andrey Smetanin)
  - ms/KVM: Add KVM_EXIT_SYSTEM_EVENT to user space API header (Anup Patel)
  - ms/kvm/x86: added hyper-v crash msrs into kvm hyperv context (Andrey Smetanin)
  - ms/kvm: add hyper-v crash msrs values (Andrey Smetanin)
  - pfcache/ext4: drop pfcache csum on fallocate (Dmitry Monakhov) [PSBM-33644]
  - config.OpenVZ: enable cbt - changed block tracking (Konstantin Khorenko) [PSBM-34156]
  - cbt: introduce changed block tracking (Dmitry Monakhov) [PSBM-34156 PSBM-54928]
  - ve: rework veid handling (Vladimir Davydov) [PSBM-39338]
  - sched/fair: Optimize is_top_cfs_rq() (Kirill Tkhai) [PSBM-35251]
  - ms/sched/fair: Track cgroup depth (Kirill Tkhai)
  - fuse: virtualize file system (Stanislav Kinsburskiy) [OVZ-6498]
  - RDS: verify the underlying transport exists before creating a connection (Vasily Averin)
  - memcg: do not allow to disable oom from inside a container (Vladimir Davydov)
  - ms/memcg: change oom_info_lock to mutex (Michal Hocko)
  - ms/memcg, oom: lock mem_cgroup_print_oom_info (Michal Hocko)
  - memcg: do not loop in mem_cgroup_reclaim if killed (Vladimir Davydov)
  - kexec, kasan: increase KEXEC_AUTO_RESERVED_SIZE under CONFIG_KASAN=y (Andrey Ryabinin) [PSBM-39339]
  - kasan: introduce single-shot mode and enable it by default (Andrey Ryabinin) [PSBM-39339]
  - kasan: always taint kernel on report. (Andrey Ryabinin) [PSBM-39339]
  - mm, slub, kasan: enable user tracking by default. (Andrey Ryabinin) [PSBM-39339]
  - kasan: update reported bug types for not user nor kernel memory accesses (Andrey Konovalov) [PSBM-39339]
  - ms/freezer: Do not freeze tasks killed by OOM killer (Cong Wang) [PSBM-38758]
  - Remove CAP_VE_* from "ve/ns: Port diff-ve-ns-allow-create-new-pid-ipc-and-utc-namespaces" (Andrew Vagin) [PSBM-39077]
  - Revert "ve/proc/ipc: allow mount proc and mqueue inside container" (Andrew Vagin) [PSBM-39077]
  - Remove CAP_VE_* from "Initial patch commit + compilation fixes" (Andrew Vagin) [PSBM-39077]
  - net: remove CAP_VE_NET_ADMIN from "ve/netfilter: Basic ve transformations" (Andrew Vagin) [PSBM-39077]
  - Revert "ve/rtnl: allow move network devices into network namespace in CT" (Andrew Vagin) [PSBM-39077]
  - Revert "ve/net/ioctl: allow change net-device name with CAP_VE_NET_ADMIN" (Andrew Vagin) [PSBM-39077]
  - Revert "ve/net: allow containers create bridges with CAP_VE_NET_ADMIN" (Andrew Vagin) [PSBM-39077]
  - ve: revise permissions to allow mount smth (Andrew Vagin) [PSBM-39077]
  - cred: add ve_capable to check capabilities relative to the current VE (v2) (Andrew Vagin) [PSBM-39077]
  - quota: missing lock in dqcache_shrink_scan() (Niu Yawei)
  - ve/tty: vt -- Implement per VE support for console and terminals (Cyrill Gorcunov) [PSBM-34533 PSBM-34532 PSBM-34107 PSBM-32686 PSBM-32685]
  - arch: x86: charge page tables to memcg/kmem (Vladimir Davydov) [PSBM-33840]
  - gfp: add __get_free_kmem_pages helper (Vladimir Davydov)
  - Revert "mm: account all page tables for mm" (Vladimir Davydov)
  - fs: account anon pipe buffers to memcg/kmem (Vladimir Davydov) [PSBM-39052]
  - vmalloc: account to memcg/kmem (Vladimir Davydov) [PSBM-33839]
  - sched/fair: only update current task boost (Vladimir Davydov)
  - mm: vmscan: do not scan lruvec if it seems to be unreclaimable (Vladimir Davydov) [PSBM-35155]
  - mm: vmscan: fix do_try_to_free_pages() livelock (Lisa Du) [PSBM-35155]
  - mm: vmscan: fix the page state calculation in too_many_isolated (Vinayak Menon) [PSBM-35155]
  - oom: do not dump all tasks info on each oom kill (Vladimir Davydov)
  - oom: zap oom_report_invocation proto (Vladimir Davydov)
  - Revert "ve/mm: ignore oom_score_adj of containerized tasks on global OOM" (Vladimir Davydov)
  - memcg: count all oom kills (Vladimir Davydov)
  - config.OpenVZ: add KASan support for debug kernels (Konstantin Khorenko) [PSBM-39339]
  - ms/x86/kasan: Add message about KASAN being initialized (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Fix boot crash on AMD processors (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Flush TLBs after switching CR3 (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/kasan: Fix KASAN shadow region page tables (Andrey Ryabinin) [PSBM-26429]
  - ms/x86/init: Clear 'init_level4_pgt' earlier (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: Makefile: shut up warnings if CONFIG_COMPILE_TEST=y (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/mempool.c: kasan: poison mempool elements (Andrey Ryabinin) [PSBM-26429]
  - ms/mm, mempool: poison elements backed by slab allocator (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan, module: move MODULE_ALIGN macro into <linux/moduleloader.h> (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan, module, vmalloc: rework shadow allocation for modules (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: enable instrumentation of global variables (Andrey Ryabinin) [PSBM-26429]
  - ms/module: fix types of device tables aliases (Andrey Ryabinin) [PSBM-26429]
  - ms/kernel: add support for .init_array.* constructors (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: vmalloc: pass additional vm_flags to __vmalloc_node_range() (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: vmalloc: add flag preventing guard hole allocation (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: enable stack instrumentation (Andrey Ryabinin) [PSBM-26429]
  - ms/x86_64: kasan: add interceptors for memset/memmove/memcpy functions (Andrey Ryabinin) [PSBM-26429]
  - ms/lib: add kasan test module (Andrey Ryabinin) [PSBM-26429]
  - ms/kmemleak: disable kasan instrumentation for kmemleak (Andrey Ryabinin) [PSBM-26429]
  - ms/fs: dcache: manually unpoison dname after allocation to shut up kasan's reports (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: add kernel address sanitizer support for slub allocator (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: introduce metadata_access_enable()/metadata_access_disable() (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: share object_err function (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: introduce virt_to_obj function (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: page_alloc: add kasan hooks on alloc and free paths (Andrey Ryabinin) [PSBM-26429]
  - ms/x86_64: add KASan support (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: disable memory hotplug (Andrey Ryabinin) [PSBM-26429]
  - ms/kasan: add kernel address sanitizer infrastructure (Andrey Ryabinin) [PSBM-26429]
  - ms/compiler: introduce __alias(symbol) shortcut (Andrey Ryabinin) [PSBM-26429]
  - ms/MODULE_DEVICE_TABLE: fix some callsites (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: slub: SLUB_DEBUG=n: use the same alloc/free hooks as for SLUB_DEBUG=y (Andrey Ryabinin) [PSBM-26429]
  - ms/mm: move slab related stuff from util.c to slab_common.c (Andrey Ryabinin) [PSBM-26429]
  - ms/MIPS: Use NUMA_NO_NODE instead of -1 for node ID. (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/arch: use NUMA_NO_NODE (Andrey Ryabinin) [PSBM-26429]
  - ms/mm/vmalloc: use wrapper function get_vm_area_size to caculate size of vm area (Andrey Ryabinin) [PSBM-26429]
  - ms/compiler-gcc: integrate the various compiler-gcc[345].h files (Andrey Ryabinin) [PSBM-26429]
  - ploop: use GFP_NOIO in ploop_make_request (Vladimir Davydov) [PSBM-38842]
  - ub: rename private_data2 to iolimit (Vladimir Davydov)
  - ub: zap ub_dirty_pages (Vladimir Davydov)
  - ub: fix typo: s/ub_dirty_radio/ub_dirty_ratio (Vladimir Davydov)
  - ub: zap ub_tmpfs_respages (Vladimir Davydov)
  - ub: drop swapin/swapout stats (Vladimir Davydov) [PSBM-39327]
  - ub: zap unused socket accounting bits (Vladimir Davydov)
  - ve/writeback: revert ub dirty limit related stuff (Vladimir Davydov) [PSBM-33841]
  - Revert diff-writeback-throttle-writer-when-local-BDI-threshold-is-hit bits (Vladimir Davydov) [PSBM-39167]
  - net: udpv6: release memcg on destroy (Vladimir Davydov) [PSBM-39084]
  - ve/fs: allow to mount devtmpfs in a non-root userns (Andrew Vagin) [PSBM-39077]
  - ve/sysfs: propagate access to all sub-directories hierarchically (Pavel Tikhomirov) [PSBM-34523]
  - ve/fs/inotify: do not impose limit on the number of instances by default (Vladimir Davydov) [PSBM-39048]
  - ve/cgroup: do not virtualize output of cgroup_path (Vladimir Davydov) [PSBM-34852]
  - ve/kmod: allow to autoload nf_log_ipv[46] (Vladimir Davydov) [PSBM-38573]
  - ve/bridge: Revert diff-ve-net-bridge-fix-deliver-vs-close-seq (Vladimir Davydov) [PSBM-12955 PSBM-38924]
  - ve/sched: Fix double put_prev_task_fair() because of trigger_cpulimit_balance() (Kirill Tkhai) [PSBM-35082]
  - ms/sched: Fix schedule_tail() to disable preemption (Kirill Tkhai)
  - mmap: call mmap prep only for regular files (Vladimir Davydov) [PSBM-23133 PSBM-25031]
  - ve/cgroup: fix mangle root in CT (Pavel Tikhomirov) [PSBM-38634]
  - pfcache/ext4: fix automatic csum calculation (Dmitry Monakhov) [PSBM-23774 PSBM-39233]
  - ve/fs/aio: aio_nr & aio_max_nr variables virtualization (Andrey Ryabinin) [PSBM-29017]
  - ve/sysctl: Introduce proc_doulongvec_minmax_virtual() (Andrey Ryabinin) [PSBM-29017]
  - ms/mm/vmscan: Do not wait for page writeback for GFP_NOFS allocations (Michal Hocko)
  - config.OpenVZ: show Odin's logo on boot (Konstantin Khorenko) [PSBM-34430]
  - ve/video/logo: show Odin's logo on boot (Andrey Ryabinin) [PSBM-34430]
  - ve/kmod: fix out-of-bounds access in call_modprobe() (Andrey Ryabinin) [PSBM-38666]
  - ms/mm: memcontrol: reclaim at least once for __GFP_NORETRY (Johannes Weiner)
  - ve/tty: vt -- Fix nil dereference due to race (Cyrill Gorcunov) [PSBM-37929]
  - cgroup: remove now unused css_depth() (Tejun Heo)
  - ploop: fix race on prealloc request (Maxim Patlasov) [PSBM-35095]
  - ve/net: Fix vlan NETIF_F_VIRTUAL feature initialization (Kirill Tkhai) [PSBM-35266]
  - ms/mm/vmscan: never isolate more pages than necessary (Vladimir Davydov) [PSBM-35275]
  - ve/radix-tree: do not account radix_tree_nodes to memcg (Vladimir Davydov) [PSBM-35205]
  - memcg: fix swap_max calculation for nested cgroups (Vladimir Davydov)
  - ve/binfmt_misc: destroy all nodes on ve stop (Vladimir Davydov) [PSBM-39154]
  - ve/binfmt_misc: do not use s_ns (Vladimir Davydov) [PSBM-39154]
  - ve/binfmt_misc: do not use sb->s_fs_info (Vladimir Davydov) [PSBM-39154]
  - Revert "nfsd/sunrpc/mqueue: use sb->s_ns instead of data in fill_super" (Vladimir Davydov) [PSBM-39154]
  - Revert "ve/sunrpc: use correct pointer to net_namespace in auth_gss.c" (Vladimir Davydov) [PSBM-39154]
  - Revert "VE/VFS: use sb->s_ns member to store namespace for mount_ns() calls" (Vladimir Davydov) [PSBM-39154]
  - ve/devtmpfs: lightweight virtualization (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "devtmpfs: per-VE mounts introduced" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "fs: add data pointer to mount_ns()" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "devtmpfs: containerize it with new obj ns operation" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "ve/devtmpfs: pass proper options string" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - Revert "ve/devtmpfs: Create required devices on container startup" (Vladimir Davydov) [PSBM-35077 PSBM-35146]
  - ms/cgroup: switch to new percpu_ref API (Vladimir Davydov)
  - ms/cgroup: use percpu refcnt for cgroup_subsys_states (Vladimir Davydov) [PSBM-34174]
  - ms/cgroup: split cgroup destruction into two steps (Vladimir Davydov) [PSBM-34174]
  - ms/cgroup: reorder the operations in cgroup_destroy_locked() (Vladimir Davydov) [PSBM-34174]
  - ve/vznetstat: Fix potential exit race (Cyrill Gorcunov) [PSBM-35178]
  - ms/memcg: issue memory.high reclaim after refilling percpu stock (Vladimir Davydov)
  - ploop: dio_fastmap() must refresh bvec_merge_data (Maxim Patlasov)
  - ve/devpts: Assign containers @devpts_sb on first mount (Cyrill Gorcunov) [PSBM-34931]
  - ve/devpts: Revert 2c27d20125f5 (Cyrill Gorcunov) [PSBM-34931]
  - ve/net: Add VE_NF_CONNTRACK check in resolve_normal_ct() (Kirill Tkhai) [PSBM-35154]
  - ve: Add a ability to show ve.mount_opts (Kirill Tkhai) [PSBM-34291 PSBM-34291]
  - net/sched: restore "mpu xxx" handling (Kirill Tkhai) [PSBM-34874]
  - ve/vznetstat: Don't destroy statistics until explicitly asked (Cyrill Gorcunov) [PSBM-35178]
  - ve/vznetstat: Move VE networks statistics allocation into a common place (Cyrill Gorcunov) [PSBM-35011]
  - config.OpenVZ: limit number of legacy ptys (Konstantin Khorenko) [PSBM-34741]
  - vznetstat: Make sure the statistics is allocated for VE (Cyrill Gorcunov) [PSBM-34837]
  - tcache: allow to allocate highmem pages (Vladimir Davydov)
  - tcache: do not populate on global reclaim (Vladimir Davydov)
  - tcache: invalidate page on unsuccessful put (Vladimir Davydov)
  - tswap: do not populate on global reclaim (Vladimir Davydov) [PSBM-34876]
  - ve/net: Exclude foreign CT sockets from /proc/net/tcp{,6} (Kirill Tkhai) [PSBM-34875]
  - ve/block: Show CT allowed partitions in /proc/partitions (Kirill Tkhai) [PSBM-34805]
  - ve/net: Add ipt_mask checks into ip6table_nat (Kirill Tkhai) [PSBM-34748]
  - ms/netlabel: fix the netlbl_catmap_setlong() dummy function (Paul Moore)
  - ve/net: netfilter: clear xt_table on net exit (Vladimir Davydov) [PSBM-34657]
  - ext4: ext4_ext_drop_refs ignode null path (Dmitry Monakhov)
  - ve/sysfs: do not inherit ve permissions from parent (Vladimir Davydov) [PSBM-34682]
  - tcache: teach tcache_get_node() to handle cleancache_get_page/cleancache_invalidate_inode races (Vladimir Davydov) [PSBM-34620]
  - ve/proc/ipc: allow mount proc and mqueue inside container (Pavel Tikhomirov) [PSBM-33304 PSBM-34523]
  - ve/rtnl: allow move network devices into network namespace in CT (Pavel Tikhomirov) [PSBM-33304 PSBM-34523]
  - ve/vfs: allow mount/umount, pivot_root with CAP_VE_SYS_ADMIN (Pavel Tikhomirov) [PSBM-33304 PSBM-34523]
  - ve/veth: fix skb leak in veth_xmit (Vladimir Davydov)
  - ve: cgroup: initialize odirect_enable, features and _randomize_va_space (Pavel Tikhomirov) [PSBM-34286 PSBM-34285]
  - ve/iptables: fix mask initialization and changing (Pavel Tikhomirov) [PSBM-34286 PSBM-34285]
  - ve: initialize fsync_enable also for non ve0 environment (Pavel Tikhomirov) [PSBM-34286 PSBM-34285 PSBM-34286]
  - ve: remove sysctl_fsync_enable and use ve_fsync_behavior instead (Pavel Tikhomirov) [PSBM-34286 PSBM-34285]
  - ve: zap ve_allow_kthreads (Vladimir Davydov)
  - ve: zap ve_glob_meminfo (Vladimir Davydov)
  - ms/netfilter: ipt_CLUSTERIP: use proper net namespace to operate CLUSTERIP (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: create proc entry under proper ipt_CLUSTERIP directory (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: add parameter net in clusterip_config_find_get (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: make clusterip_lock per net namespace (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: make clusterip_list per net namespace (Gao feng)
  - ms/netfilter: ipt_CLUSTERIP: make proc directory per net namespace (Gao feng)
  - ub: remove sock acct related resources from cgroup params (Vladimir Davydov)
  - ve/kernel: drop broken audit virtualization (Vladimir Davydov)
  - ve: Use ve_name() in devperms ioctl (Kirill Tkhai) [PSBM-34497]
  - memcg/ub: fix limit > RESOURCE_MAX case (Vladimir Davydov)
  - net/packet: cleanup packet_sk_charge (Vladimir Davydov)
  - memcg: disarm memcg_socket_limit_enabled key per each active udp proto (Vladimir Davydov)
  - ve/vt: Drop debug vars from console code (Cyrill Gorcunov)
  - ve/tty: vt -- Add dummy stubs (Cyrill Gorcunov) [PSBM-34324]
  - ploop: fix processing sync bios (Maxim Patlasov) [PSBM-33630]
  - ms/ext4: fix lazytime optimization (Dmitry Monakhov)
  - ms/fs: add dirtytime_expire_seconds sysctl (Dmitry Monakhov)
  - ms/fs: make sure the timestamps for lazytime inodes eventually get written (Dmitry Monakhov)
  - ms/ext4: add optimization for the lazytime mount option (Dmitry Monakhov)
  - ms/vfs: add find_inode_nowait() function (Dmitry Monakhov)
  - ms/vfs: add support for a lazytime mount option (Dmitry Monakhov) [PSBM-20411]
  - jbd2: raid amnesia protection for the journal (Dmitry Monakhov) [PSBM-15484]
  - ve/fs: check container odirect and fsync settings in __dentry_open (Dmitry Monakhov) [PSBM-17157]
  - venet: forbid assigning veip to ve w/o id (Vladimir Davydov) [PSBM-34450]
  - ve: forbid to attach to a ve cgroup w/o id (Vladimir Davydov) [PSBM-34450]
  - vznetstat: Use kzalloc instead of kmalloc plus memset (Cyrill Gorcunov)
  - ve/vdso: x86 -- Disable virtualization in native x86-32 mode (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86 -- Eliminate race in vdso allocation, v2 (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86-32 -- Implement kernel version virtualization (Cyrill Gorcunov) [PSBM-30093]
  - ve/vdso: x86-64 -- Implement kernel version virtualization (Cyrill Gorcunov) [PSBM-30093]
  - ve/fs: Port diff-ve-fs-security-check-for-mount (Vladimir Davydov) [PSBM-33650]
  - ve/fs: Port diff-ve-fs-allow-to-remove-swapfile-hardlinks (Vladimir Davydov) [PSBM-25310 PSBM-33650]
  - ms/futex: Add another early deadlock detection check (Thomas Gleixner) [PSBM-33650]
  - ve/lockdep: Port diff-lockdep-taint-kernel-on-circular-locking-complains (Vladimir Davydov) [PSBM-22010 PSBM-33650]
  - ve/kernel/taint: Port diff-taint-message-enhanced-with-dump (Vladimir Davydov) [PSBM-25867 PSBM-33650]
  - ve/proc/time: Port diff-ve-proc-report-real_start_time-in-_proc_PID_stat-if-CONFIG_VE (Vladimir Davydov) [PSBM-22925 PSBM-22925 PSBM-33650]
  - ve/mm/kstat: Port diff-ve-kstat-disable-interrupts-around-seqcount-write-lock (Vladimir Davydov) [PSBM-33650]
  - ve/proc: Port diff-ve-proc-add-buffers-field-to-meminfo (Vladimir Davydov) [PSBM-19448 PSBM-34444 PSBM-33650]
  - ve: Port diff-ve-allow-taskstats-netlink-in-netns (Vladimir Davydov) [PSBM-33650]
  - vznetstat: Port diff-vznetstat-support-of-resetting-of-traffic-statistics-on-running-CTs (Vladimir Davydov) [PSBM-21243 PSBM-21243 PSBM-33650]
  - vznetstat: Port diff-vznetstat-fix-ip_vznetstat-module-load (Vladimir Davydov) [PSBM-33650]
  - vzstat: Port diff-vzstat-mem_free_areas_show-fix-nr_free-per-order-computation (Vladimir Davydov) [PSBM-26984 PSBM-33650]
  - ve/ns: Port diff-ve-ns-allow-create-new-pid-ipc-and-utc-namespaces (Vladimir Davydov) [PSBM-33650]
  - ext4: fallocate mode - convert and extend (Dmitry Monakhov) [PSBM-22381]
  - kmapset: Fix NULL pointer derefference in kmapset_set_value() (Kirill Tkhai) [PSBM-34437]
  - dummy: remove redundant dummy modules (Konstantin Khorenko) [PSBM-31333]
  - ve/net: Delete nf_frags_hdr and ct_frags (Kirill Tkhai)
  - config.OpenVZ: remove DSA option (Konstantin Khorenko)
  - ve: introduce ve.veid for setting id from userspace (Vladimir Davydov) [PSBM-34422]
  - mm/fs: Port diff-mm-debug-memallocation-caused-fs-reentrance (Vladimir Davydov) [PSBM-34112]
  - ve: Print ve_name instead of veid to the kernel log (Vladimir Davydov)
  - ve/fs: drop LOOKUP_STRICT (Vladimir Davydov)
  - ve/net: drop net->uevent_sock (Vladimir Davydov)
  - ve/printk: allow to access syslog with CAP_VE_ADMIN (Vladimir Davydov)
  - ve/ioprio: confine ioprio_{set, get}(IOPRIO_WHO_USER) to current ve (Vladimir Davydov)
  - ve/nsproxy: drop INIT_NSPROXY_COUNT (Vladimir Davydov)
  - ms/ext4: use ext4_ext_next_allocated_block instead of mext_next_extent (Dmitry Monakhov)
  - ext4: update defragmentation codebase (Dmitry Monakhov)
  - backport jbd2: jbd2_cleanup_journal_tail fix gfp allocation context (Dmitry Monakhov)
  - ms ext4: fix online resize with very large inode tables (Theodore Ts'o) [PSBM-24924]
  - ext4: Add ioctl EXT4_IOC_SET_RSV_BLOCKS V2 (Dmitry Monakhov) [PSBM-25929]
  - ext4: add mfsync support (Dmitry Monakhov) [PSBM-18567 PSBM-34909 PSBM-34910]
  - ext4: Fix error handling after filesystem abort (Dmitry Monakhov)
  - jbd2: make shure that we do not miss aborted state (Dmitry Monakhov)
  - ext4: add prepare_mmap API (Dmitry Monakhov) [PSBM-23133 PSBM-34112]
  - tswap: do not writeback pages on reclaim (Vladimir Davydov) [PSBM-34269]
  - tswap: use global lock to protect lru lists (Vladimir Davydov) [PSBM-34269]
  - tswap: shrink tswap page if swapcache page is uptodate (Vladimir Davydov) [PSBM-34269]
  - tswap: introduce tswap_delete_page helper (Vladimir Davydov) [PSBM-34269]
  - tswap: do not allocate a page on store if there is already one (Vladimir Davydov) [PSBM-34269]
  - tswap: enable exclusive gets (Vladimir Davydov) [PSBM-34269 PSBM-34269]
  - mm/frontswap: invalidate expired data on a dup-store failure (Vladimir Davydov) [PSBM-34269 PSBM-34269]
  - ve/tty: console -- Enhance container console to support per VE ops (Cyrill Gorcunov) [PSBM-34357]
  - Revert "x86/NMI: introduce dumps via nmi" (Vladimir Davydov) [PSBM-17989]
  - Revert "ms/nmi: do not call unblank_screen() from nmi_show_regs()" (Vladimir Davydov)
  - ve/net: allow to rename devices in non-ve namespaces (Kirill Tkhai) [PSBM-29810 PSBM-33645]
  - ve/net: allow containers create bridges with CAP_VE_NET_ADMIN (Kirill Tkhai) [PSBM-29808]
  - ve/net/ioctl: allow change net-device name with CAP_VE_NET_ADMIN (Kirill Tkhai) [PSBM-29808 PSBM-31819 PSBM-29808]
  - ve/net/sysfs: Porting diff-ve-net-sysfs-drop-redundant-net_ipv4_route_path and diff-ve-net-route-bring-back-route_src_check (Kirill Tkhai) [PSBM-31818]
  - ve/tty: vzcon -- Add container dummy console support (Cyrill Gorcunov) [PSBM-32686]
  - ms/vfs: Remove second variable named error in __dentry_path (Pavel Tikhomirov) [PSBM-34245]
  - ms/vfs: reinitialize error for resetart in prepend_path as in ms (Pavel Tikhomirov) [PSBM-34245]
  - net/packet: use try_get_mem_cgroup_from_mm (Vladimir Davydov)
  - ve/net/packet: do not account sock buffer to cg if kmem acct is off (Vladimir Davydov)
  - ve/net/tcp: add missing tcp_orphan_count destruction (Vladimir Davydov) [PSBM-34215]
  - ve/cgroup: Temporarily allow to mount cgroups from VE (Cyrill Gorcunov) [PSBM-34291]
  - ub: sync exec_ub on fork (Vladimir Davydov) [PSBM-54928]
  - tswap: fix panic on store if page exists (Vladimir Davydov)
  - ve/net: Delete get_exec_env() from venet_init_net() (Kirill Tkhai)
  - ub/fs: resurrect sync accounting (Vladimir Davydov) [PSBM-34007]
  - ub/fs: access dirtied_ub under rcu lock in __writeback_single_inode (Vladimir Davydov) [PSBM-34007]
  - ub: do not include block/blk-cgroup.h from io_prio.c (Vladimir Davydov) [PSBM-34007]
  - ub/fs: account writeback io (Vladimir Davydov) [PSBM-34007]
  - ub: ressurrect iostat and ioprio reporting (Vladimir Davydov) [PSBM-34007]
  - ub: ressurrect ioprio_set IOPRIO_WHO_UBC (Vladimir Davydov) [PSBM-34007]
  - ub: export ub_get_{mem,blkio}_css (Vladimir Davydov) [PSBM-34007]
  - ub: zap ub_{init,fini}_ioprio (Vladimir Davydov) [PSBM-34007]
  - fs/ioprio: move IOPRIO_WHO_UBC handling out of rcu section (Vladimir Davydov) [PSBM-34007]
  - ve/iptable_raw: Don't reuse VE_IP_IPTABLES bit (Kirill Tkhai) [PSBM-34192]
  - ve/net/tun: don't loose NETIF_F_VIRTUAL device feature (Pavel Tikhomirov) [PSBM-34066]
  - config.OpenVZ.debug: OpenVZ related config options are added (Konstantin Khorenko)
  - debugfs: drop set_exec_ub in file create (Vladimir Davydov)
  - ub: drop ub_cachep (Vladimir Davydov)
  - ub: hide dcachesize and oomguarpages in ub cgroup (Vladimir Davydov)
  - ve/net: Track netfilter modules per net-namespace-v3 (Kirill Tkhai) [PSBM-31451]
  - ve/ip_gre: containerize per-net devices (Kirill Tkhai) [PSBM-24331]
  - venet: prevent to change network namespaces (Kirill Tkhai)
  - ve/netfilter: Add permittion check in iptable_raw pernet (Kirill Tkhai) [PSBM-27181]
  - ve/net/iptables: Add ipv6 bits into VE_IP_DEFAULT (Kirill Tkhai)
  - ve/net: CAP_VE_NET_ADMIN must be a subset of CAP_NET_ADMIN (Kirill Tkhai) [PSBM-23514]
  - netfilter: MARK -- drop off @table entity to support rhel5 containers, v2 (Kirill Tkhai) [PSBM-30390]
  - ub: Makefile: drop net.o (Vladimir Davydov)
  - cgroup: unexport css_refcnt (Vladimir Davydov)
  - ub: drop ub_debug* macros (Vladimir Davydov)
  - ub: drop CONFIG_BC_DEBUG_ITEMS (Vladimir Davydov)
  - ub: drop /proc/bc/BCID/debug (Vladimir Davydov)
  - timers: Port diff-ve-timers-convert-ve-monotonic-to-abs-time-when-setting-timerfd-2 (Pavel Tikhomirov) [PSBM-34017 PSBM-18284 PSBM-18284]
  - fs: unexport filp_cachep (Vladimir Davydov)
  - ub: introduce ub_total_pages (Vladimir Davydov) [PSBM-34035]
  - ve/memcg: pass struct mem_cgroup instead of cgroup to ub-related methods (Vladimir Davydov) [PSBM-34035]
  - ub: rework connection between ub and mem/blkio cgroups (Vladimir Davydov) [PSBM-34035]
  - ub: rename functions for reading/writing cgroup resources (Vladimir Davydov) [PSBM-34035]
  - cgroup: make cgroup_kernel_attach safe against cgroup removal (Vladimir Davydov) [PSBM-34035]
  - cgroup: add function to lookup a cgroup by pathname (Vladimir Davydov) [PSBM-34035]
  - ve/kobj: Send events per VE instead of all net-namespaces broadcasting (Cyrill Gorcunov)
  - pfcache: fix path refcounting hazzard (Dmitry Monakhov)
  - ve/veth: don't drop skb->mark if NETIF_F_VENET is set (Andrew Vagin) [PSBM-32277]
  - ve/veth: filter packages accoding with mac addresses (Andrew Vagin) [PSBM-32276]
  - ve/veth: add ability to prevent changing of a mac address from a container (Andrew Vagin) [PSBM-32276]
  - ve/veth: add ability to enable vz-specific features (Andrew Vagin) [PSBM-32276]
  - vz/veth: remove vzethdev (Andrew Vagin)
  - ve/mm: enable oom grouping rules on OOM (Vladimir Davydov) [PSBM-33849]
  - ve/oom: do not impose grouping rules if process score is adjusted (Vladimir Davydov) [PSBM-33849]
  - ve/proc: allow to set oom_score_adj from inside a container (Vladimir Davydov) [PSBM-33849]
  - ve/mm: ignore oom_score_adj of containerized tasks on global OOM (Vladimir Davydov) [PSBM-33849]
  - ve/proc: use memcg limits for showing oom_score inside CT (Vladimir Davydov) [PSBM-33849]
  - ve/memcg: add function to get max mem+swap (Vladimir Davydov) [PSBM-33849]
  - ve/net/packet: fix possible return of uninitialized var (Konstantin Khorenko)
  - net/packet: Pre-account maximum socket buffer into cg memory (v3) (Pavel Emelyanov) [PSBM-33584]
  - netlink: Make all in-cg memory be kmem accounted (Pavel Emelyanov) [PSBM-33584]
  - udp: Charge ingress buffers into cg memory (Pavel Emelyanov) [PSBM-33584]
  - tcp: Limit orphan sockets per-cg (Pavel Emelyanov) [PSBM-33584]
  - tcp: Charge socket buffers into cg memory (v3) (Pavel Emelyanov) [PSBM-33584]
  - proc: drop proc_dentry_of_dead_task (Vladimir Davydov)
  - ve/mm: print OOM info to VE log (Vladimir Davydov)
  - ub: account shmem in cached in meminfo (Vladimir Davydov) [PSBM-28682 PSBM-31006 PSBM-33637]
  - mm/bc: Port diff-bc-shmem-fix-accounting-on-error-path (Vladimir Davydov) [PSBM-22198 PSBM-33637]
  - mm: Port diff-mm-add-sysctl-vm.force_scan_thresh (Vladimir Davydov) [PSBM-29968 PSBM-33640]
  - mm: Port diff-mm-vmscan-disable-fs-related-activity-for-direct-direct-reclaim (Vladimir Davydov) [PSBM-20210 PSBM-33640]
  - ms/pagemap: Port diff-ms-pagemap-do-not-leak-physical-addresses-to-non-privileged-userspace (Vladimir Davydov) [PSBM-32308 PSBM-33640]
  - ploop: added into pvd header new close signatures (Andrey Smetanin) [PSBM-33882]
  - ve/headers: Do not include uapi in exported header (Cyrill Gorcunov) [PSBM-34030]
  - ms/headers: Support GCC 5 (Cyrill Gorcunov)
  - ms/netfilter: Add {ipt,ip6t}_osf aliases for xt_osf (Kirill Tkhai) [PSBM-33929]
  - ve/net/tcp: Kill tcp_v4_kill_ve_sockets() (Kirill Tkhai) [PSBM-33755 PSBM-33926]
  - sched: Port diff-sched-make-nr_cpus-limit-support-hierarchies (Vladimir Davydov) [PSBM-33642]
  - sched: Port diff-fairsched-cpuset-add-fake-cpuset-for-containers (Vladimir Davydov) [PSBM-30878 PSBM-33642]
  - ve: zap legacy_veid_to_name (Vladimir Davydov)
  - ve: do_env_create: zap unused ve_name variable (Vladimir Davydov)
  - ve: zap legacy_name_to_veid (Vladimir Davydov)
  - ve: zap __find_ve_by_id (Vladimir Davydov)
  - sched: Port cpustat related patches (Vladimir Davydov) [PSBM-26714 PSBM-28403 PSBM-28500 PSBM-26587 PSBM-23431 PSBM-28277 PSBM-33642]
  - sched: use cpuacct->cpustat for showing cpu stats (Vladimir Davydov) [PSBM-33642]
  - sched: Port diff-sched-return-only-virtual-cpus-in-sched_getaffinity (Vladimir Davydov) [PSBM-25367 PSBM-27200 PSBM-33642]
  - sched: Port diff-sched-clear-prev-entity-if-curr-is-dequeued (Vladimir Davydov) [PSBM-33642]
  - ms/sched: Port diff-sched-increase-SCHED_LOAD_SCALE-resolution (Vladimir Davydov) [PSBM-33642]
  - sched: Port diff-sched-initialize-runtime-to-non-zero-on-cfs-bw-set (Vladimir Davydov) [PSBM-17658 PSBM-17658 PSBM-33642]
  - sched/vziolimit: Port diff-fairsched-do-not-account-iothrottled-tasks-in-loadavg-core (Vladimir Davydov) [PSBM-33642]
  - ub/netfilter: account x_tables to ub (Vladimir Davydov) [PSBM-20089]
  - cgroup: Mangle cgroups root from inside of VE view (Cyrill Gorcunov) [PSBM-33757]
  - cgroup: mount -- Disable mounting from inside of VE context (Cyrill Gorcunov) [PSBM-33664]
  - fairsched: Port diff-fairsched-optimize-sys_fairsched_mvpr (Vladimir Davydov) [PSBM-33642]
  - ve: remove fairsched node only in the legacy mode (Vladimir Davydov) [PSBM-33833]
  - ms/memcg: do not call high reclaim if !__GFP_WAIT (Vladimir Davydov)
  - fairsched: fix output of /proc/fairsched[2] (Vladimir Davydov) [PSBM-33806]
  - ub: ub_dirty_limits: obtain ram size from memcg (Vladimir Davydov)
  - shmem: fix tmpfs_ram_pages (Vladimir Davydov)
  - memcg: add function to get container's ram size (Vladimir Davydov)
  - ve/kmod: Add rules for new {ip, ip6, x}table modules (Kirill Tkhai) [PSBM-33631]
  - ve/kmod: Add rules for autoloading (new) nf_tables (Kirill Tkhai) [PSBM-33631]
  - ms/memcg: port memory.high (Vladimir Davydov)
  - ms/memcg: use CFTYPE_NOT_ON_ROOT for memory.low and memory.oom_guarantee (Vladimir Davydov)
  - ms/memcg: rename memory.low_limit_in_bytes to memory.low (Vladimir Davydov)
  - ub: reset UB_OOMGUARPAGES.held on css free (Vladimir Davydov) [PSBM-20089]
  - memcg/bc: sync UB_OOMGUARPAGES (Vladimir Davydov) [PSBM-20089]
  - memcg: count oom kills (Vladimir Davydov) [PSBM-20089]
  - memcg: add oom_guarantee (Vladimir Davydov) [PSBM-20089]
  - ub: cleanup cgroup attaching code (Vladimir Davydov)
  - fairsched: add cpu.proc.loadavg to the cpu cgroup (Vladimir Davydov) [PSBM-32284]
  - fairsched: switch methods showing stats from numeric id to name (Vladimir Davydov) [PSBM-32284]
  - venet: Cleanup ip address on ve exit (Cyrill Gorcunov)
  - bc: initialize all beancounters as unlimited (Vladimir Davydov)
  - ms/idr: print a stack dump after ida_remove warning (Vasily Averin)
  - ve/cgroup: Guard @features and @iptables with test if VE is inactive (Cyrill Gorcunov)
  - memcg/bc: sync UB_DCACHESIZE (Vladimir Davydov) [PSBM-20089]
  - memcg/bc: account dcache size (Vladimir Davydov) [PSBM-20089]
  - bc/mm: zap pte_ptrs and same_ub macros (Vladimir Davydov)
  - ub: zap ub_reclaim_rate_limit (Vladimir Davydov)
  - mm/shmem: unexport shmem_file_operations (Vladimir Davydov)
  - bc/mm: zap page->{slab_ubs,kmem_ub} (Vladimir Davydov)
  - ub: zap /proc/bc/ID/dcacheinfo (Vladimir Davydov) [PSBM-33760]
  - ub: zap /proc/bc/ID/slabinfo (Vladimir Davydov)
  - ub: get rid of pincount (Vladimir Davydov)
  - ub: do not show dead beancounters under /proc/bc (Vladimir Davydov)
  - ub: kill ub_dcache_threshold sysctl knob (Vladimir Davydov)
  - ub: drop ubc_ioprio knob (Vladimir Davydov)
  - ub: sync memcg before setting limit via sys_setublimit (Vladimir Davydov)
  - ub: do not apply memcg limits on attaching via sys_setluid (Vladimir Davydov)
  - ub: simplify memcg synchronization (Vladimir Davydov)
  - ub: zap show_ub_mem in Alt+SysRQ+m (Vladimir Davydov)
  - ub: remove some dead code (Vladimir Davydov)
  - bc: deprecate kmemsize limit (Vladimir Davydov) [PSBM-20089]
  - bc/memcg: assure swap->held/maxheld < swap->limit for beancounters (Vladimir Davydov) [PSBM-20089]
  - bc/memcg: show correct mem/swap failcnt for beancounters (Vladimir Davydov) [PSBM-20089]
  - bc/memcg: show correct swap max for beancounters (Vladimir Davydov) [PSBM-20089]
  - ploop: fix busyloop on secondary discard bio (Andrey Smetanin) [PSBM-30451]
  - ploop: add a separate queue for discard bio-s (v2) (Andrey Smetanin) [PSBM-27676]
  - bc/oom: zap oom kill related stuff (Vladimir Davydov) [PSBM-33732]
  - proc/oom: fix oom_score output (Vladimir Davydov)
  - bc/sysinfo: remove dead code (Vladimir Davydov)
  - ub/dcache: get rid of dcache accounting related stuff (Vladimir Davydov) [PSBM-33729]
  - ub: remove CONFIG_BC_RSS_ACCOUNTING (Vladimir Davydov)
  - ve/cgroups: Align ve_cftypes assignments (Cyrill Gorcunov)
  - ve/cgroup: Temporary allow writting cgroups files inside container (Cyrill Gorcunov) [PSBM-33664]
  - ve/cgroup: Allow mounting existing cgroups inside container (Cyrill Gorcunov) [PSBM-33664]
  - Revert "ploop: add a separate queue for discard bio-s (v2)" (Konstantin Khorenko) [PSBM-33633]
  - Revert "ploop: fix busyloop on secondary discard bio" (Konstantin Khorenko) [PSBM-33633]
  - ve/net: Fix unbalanced double spin_unlock() in tcp_v4_kill_ve_sockets() (Kirill Tkhai) [PSBM-33585]
  - ub: properly charge and uncharge shmem (Andrew Perepechko)
  - ve/net_ns: Don't forget to put_ve on error path (Cyrill Gorcunov)
  - ve: Add support of iptables mask (Cyrill Gorcunov) [PSBM-32737]
  - ve: Add support of features mask (Cyrill Gorcunov) [PSBM-32737]
  - config.OpenVZ: enable idle memory tracking (Konstantin Khorenko) [PSBM-32460]
  - ploop: added printk of function, line, backtrace before ploop_set_error (Andrey Smetanin)
  - ploop: force FUA of nullified blocks for BAT grow (Andrey Smetanin) [PSBM-31969]
  - ploop: mark reloc reqs to force FUA/fsync(kaio) for index update I/O (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: mark reloc reqs to force FUA before write of relocated data (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: make image fsync at I/O complete if it's required by FUA/fsync force flag or by req->req_rw (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: do preflush or postfua according force FUA/flush flags, and delay FUA if possible but add force FLUSH to req if so (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: direct: to support truly FLUSH/FUA of req we need mark first bio FLUSH, write all bios and mark last bio as FLUSH/FUA (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: define struct ploop_request->state flags to force pre FLUSH before write IO and FUA/fsync at I/O complete (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: added ploop_req_delay_fua_possible() func that detects possible delaying of upcoming FUA to index update stage (Andrey Smetanin) [PSBM-31222 PSBM-31225 PSBM-31321 PSBM-31222 PSBM-31225 PSBM-31321]
  - ploop: fix busyloop on secondary discard bio (Andrey Smetanin) [PSBM-30451]
  - ploop: notify blktrace about bio completions (Andrey Smetanin)
  - ploop: add a separate queue for discard bio-s (v2) (Andrey Smetanin) [PSBM-27676]
  - ploop: warning on "disk full" condition (Andrey Smetanin)
  - ploop: make manual abort transition verbose (Andrey Smetanin)
  - ploop: zero blocks on reuse (Andrey Smetanin) [PSBM-25391]
  - ploop: roll back alloc_head on ENOSPC (Andrey Smetanin) [PSBM-24694]
  - ploop: put top-delta back if merge failed (Andrey Smetanin) [PSBM-25252]
  - ploop: fix spurious hole complains (Andrey Smetanin)
  - ploop: expose open_count to sysfs (Andrey Smetanin) [PSBM-24754]
  - ploop: ensure non-empty delta list on running ploop (Andrey Smetanin) [PSBM-25102]
  - ploop: bug on bad fiemap (v2) (Andrey Smetanin) [PSBM-26762]
  - ploop: add ioctl to limit size of top delta (v2) (Andrey Smetanin) [PSBM-22002]
  - ploop: prioritize BAT operations (Andrey Smetanin)
  - ploop: fix race in ploop_tracker_init() (Andrey Smetanin) [PSBM-22993]
  - ploop: fix check_zero optimization v2 (Andrey Smetanin) [PSBM-23452]
  - ploop: fix a race condition on relocation of blocks (Andrey Smetanin) [PSBM-23905]
  - ploop: support 4K block-size of host block-device (Andrey Smetanin) [PSBM-21989]
  - ploop: skip writes of zeroes to unallocated blocks by default (Andrey Smetanin) [PSBM-22506 PSBM-22381]
  - ploop: reverse order of fdatawait and fsync fop (Andrey Smetanin)
  - ploop: fix sync delay for sync requests (Andrey Smetanin) [PSBM-22381]
  - ploop: fix iblk-to-sector calculations (Andrey Smetanin) [PSBM-22961]
  - ploop: rework accounting images_size (Andrey Smetanin) [PSBM-20432]
  - ploop: report holes in pio_direct (v2) (Andrey Smetanin) [PSBM-20770]
  - ploop: prevent disclosure 4 bytes of the stack kernel (Andrey Smetanin)
  - ploop: prevent dangerous ploop-umount (Andrey Smetanin) [PSBM-21474]
  - ploop: check new size of block device on ioctl(GROW) (Andrey Smetanin) [PSBM-21027]
  - ploop: fix dio_fsync wait (Andrey Smetanin) [PSBM-18049]
  - ploop: fix accounting ploop_io_images_size (Andrey Smetanin) [PSBM-19906]
  - ve/cgroups: Allow to attach non-self into ve cgroups, v3 (Cyrill Gorcunov) [PSBM-33561]
  - ve: device cgroup -- Implement devcgroup_seq_show_ve (Cyrill Gorcunov) [PSBM-33555]
  - mm/vmalloc: do not account vmap_area to memcg (Vladimir Davydov)
  - mm/tswap/tcache: enable tcache and tswap by default (Vladimir Davydov) [PSBM-31757 PSBM-32063]
  - ve/cgroups: fake num_cgroups in /proc/cgroups output (Vasily Averin) [PSBM-33400]
  - ve/uts_ns: Implement cgroup interface to configure ve's os_release (Kirill Tkhai) [PSBM-32273]
  - ve/fs/devmnt: process mount options (Kirill Tkhai) [PSBM-32273]
  - ve/devmnt: Introduce ve::devmnt list (Kirill Tkhai) [PSBM-32273]
  - ve/netns: Set null only for nets ve is a keeper of (Cyrill Gorcunov) [PSBM-33480]
  - ve/netfilter: ve_printk for "nf_conntrack: table full" (Vasily Averin)
  - ve/net/printk: net_veboth_ratelimited introduced (Vasily Averin)
  - ub: drop host node (Vladimir Davydov) [PSBM-33487]
  - ve/fairsched: drop host node (Vladimir Davydov) [PSBM-33487]
  - ve/cgroups: Drop virtualization code, v5 (Cyrill Gorcunov)
  - bc/ioprio: ub_set_ioprio() declaration if !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - vzstat: KSTAT_PERF_ENTER redefinition fixed when !CONFIG_VE (Kir Kolyshkin)
  - ve/ppc: remove vdso32_pages declaration from ppc elf.h (Kir Kolyshkin)
  - ub/kernel: use get_task_ub() - fix compile for !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - ve/proc/meminfo.c: use mm_ub() macro (Kir Kolyshkin)
  - ve/printk/ppc: fix asm modifier in DEFINE_STRUCT_MEMBER_ALIAS (Vladimir Davydov)
  - ve/ppc: wire OpenVZ-specific syscalls (Kir Kolyshkin)
  - ve/ppc: include OpenVZ-specific Kconfigs for ppc (Kir Kolyshkin)
  - ms/ppc: define TIOSAK (fix tty_ioctl() compilation) (Kir Kolyshkin)
  - ve/ppc: include ve.h in process.c (Kir Kolyshkin)
  - ve/netfilter: put appropriate part under CONFIG_VE_IPTABLES (Kir Kolyshkin)
  - bc/mm/shmem.c: use mm_ub() macro to avoid compilation errors if !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - bc/mm/oom: put UB_OOM_MANUAL_SCORE_ADJ bit check under CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - bc/mm/{memory.c,mprotect.c}: use mm_ub() macro (Kir Kolyshkin)
  - ve/mm/filemap.c: include virtinfo.h for !CONFIG_BC_IO_ACCOUNTING case (Kir Kolyshkin)
  - ve/mm: include virtinfo.h for !CONFIG_BC_IO_ACCOUNTING case (Kir Kolyshkin)
  - ve/sched: put move_task_groups() under CONFIG_CFS_CPULIMIT (Kir Kolyshkin)
  - ve/kernel: fix kernel_thread() compilation for !CONFIG_VE (Kir Kolyshkin)
  - bc/dcache: add parameter names to ub_dcache_reclaim() declaration for !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - fs/nfs/direct.c: include virtinfo.h (Kir Kolyshkin)
  - bc/io_acct: define get_io_ub() for !CONFIG_BC_IO_ACCOUNTING case (Kir Kolyshkin)
  - ve/sched: cpu_cgroup_get_stat() declaration in !CONFIG_VZ_FAIRSCHED case (Kir Kolyshkin)
  - bc: add struct seq_file declaration - fix virtinfo.h compile warning (Kir Kolyshkin)
  - bc: add {,un}charge_beancounter_fast define for !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - bc: for_each_beancounter() definition for !CONFIG_BEANCOUNTERS (Kir Kolyshkin)
  - ms/sysfs: do not account sysfs_ino_ida allocations to memcg (Vladimir Davydov)
  - ms/gfp: add __GFP_NOACCOUNT (Vladimir Davydov)
  - ve/cgroup: devices -- Modify exception list for docker sake (Cyrill Gorcunov)
  - venet: Don't kill venet0 on the node (Cyrill Gorcunov) [PSBM-33281]
  - vziolimit: add bc cgroup control (Dmitry Monakhov) [PSBM-32281]
  - config.OpenVZ: add "vziolimit" module (Konstantin Khorenko) [PSBM-20104]
  - vziolimit: correct copyright info (Konstantin Khorenko)
  - vziolimit: add blktrace hooks (Dmitry Monakhov) [PSBM-20104]
  - cfq: add virtinfo hook for vziolimits (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: compilation fix (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-iostat-wire-vziolimit-into-deadline-io_scheduler (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-introduce-atomic-flags-bit-field-shadow (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-vziolimit-charge-fuse-requests-into-iops-throttler (Dmitry Monakhov) [PSBM-10626 PSBM-20104]
  - vziolimit: port diff-vziolimit-dont-change-state-at-speed-change (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-vziolimit-fix-rounding-error-in-throttler (Dmitry Monakhov) [PSBM-13302 PSBM-20104]
  - vziolimit: port diff-ubc-iolimit-rework-async-iops-limit (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-iolimit-precharge-dirty-pages-opensource (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-ubc-iolimit-keep-charge-in-throttler (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-implement-the-iops-limiting (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-vziolimit-set-GPL-license (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-vziolimit-no-top-bc (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-wakup-at-kill-and-limit-change (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-dont-throttle-flushers (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-vzctl-api (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-handle-virtinfo-events (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-plain-throttler (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: port diff-iolimit-initial-skeleton-opensource (Dmitry Monakhov) [PSBM-20104]
  - vziolimit: remove dummy module (Dmitry Monakhov) [PSBM-20104]
  - ve: add config options for vzlist and vznetstat modules (Kirill Tkhai) [PSBM-19217]
  - ms/mm/memcg: do not use vmalloc for mem_cgroup allocations (Vladimir Davydov)
  - ve: Make get_ve_by_id() lockless (Kirill Tkhai)
  - mm/memcg: remove memcg from kmemcg_sharers list on css free (Vladimir Davydov)
  - ve: Revert "ve/pid_ns: reap zombies with external parent on container's init exit" (Kirill Tkhai) [PSBM-33254]
  - venet: Dont create venet-s in sub net namespaces (v2) (Cyrill Gorcunov) [PSBM-29811]
  - bc: Drop redundant put_beancounter in ubstat_get_list (Cyrill Gorcunov)
  - bc: Add missing put_beancounter call (Cyrill Gorcunov) [PSBM-29895]
  - ms/mm/vmscan.c: don't forget to free shrinker->nr_deferred (Vladimir Davydov)
  - mm: transcendent swap cache (Vladimir Davydov) [PSBM-32063]
  - mm/tcache: change API to conform to tswap (Vladimir Davydov) [PSBM-31915]
  - ve/net/ppp: oops in oops in ppp_register_net_channel() (Vasily Averin) [PSBM-29975]
  - ve/netfilter: Check for permittions while looking for target and match (Kirill Tkhai) [PSBM-28910]
  - ve/netfilter: Add autoloading of sockopt modules (Kirill Tkhai) [PSBM-28910]
  - ve/kmod: Port autoloading from CT (Kirill Tkhai) [PSBM-28910]
  - ve/kmod: Move check of VE permitions from __call_usermodehelper_exec() to upper functions (Kirill Tkhai) [PSBM-28910]
  - ms/sched: Remove lockdep check in sched_move_task() (Kirill Tkhai)
  - iolimits: fix double I/O accounting for iolimits (Andrew Perepechko)
  - ve/tty: Don't WARN_ONCE on /dev/console disabling (Cyrill Gorcunov) [PSBM-32728]
  - ve/tty: Disable /dev/console in VE environment (Cyrill Gorcunov) [PSBM-32686]
  - mm/tcache: update to use new cleancache API (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: remove limit on the number of cleancache enabled filesystems (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: forbid overriding cleancache_ops (Vladimir Davydov) [PSBM-31915]
  - ms/cleancache: zap uuid arg of cleancache_init_shared_fs (Vladimir Davydov) [PSBM-31915]
  - ms/fs/ocfs2: copy fs uuid to superblock (Vladimir Davydov) [PSBM-31915]
  - mm: introduce transcendent file cache (Vladimir Davydov) [PSBM-31757]
  - ms/memcg: port low limit (Vladimir Davydov) [PSBM-31752]
  - ve/headers: Export VE headers (Cyrill Gorcunov) [PSBM-31973]
  - ms/slub: make dead caches discard free slabs immediately (Vladimir Davydov) [PSBM-25018]
  - ms/slub: never fail to shrink cache (Vladimir Davydov) [PSBM-25018]
  - ms/slub: fix off by one in number of slab tests (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: reparent list_lrus and free kmemcg_id on css offline (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: add helpers to isolate items (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: free memcg_caches slot on css offline (Vladimir Davydov) [PSBM-25018]
  - ms/slab: use css id for naming per memcg caches (Vladimir Davydov) [PSBM-25018]
  - ms/slab: link memcg caches of the same kind into a list (Vladimir Davydov) [PSBM-25018]
  - ms/slab: embed memcg_cache_params to kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab_common: move kmem_cache definition to internal header (Vladimir Davydov) [PSBM-25018]
  - ms/fs: make shrinker memcg aware (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: introduce per-memcg lists (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: organize all list_lrus to list (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: get rid of ->active_nodes (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: add rwsem to synchronize against memcg_caches arrays relocation (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: rename some cache id related variables (Vladimir Davydov) [PSBM-25018]
  - ms/vmscan: per memory cgroup slab shrinkers (Vladimir Davydov) [PSBM-25018]
  - ms/fs: consolidate {nr,free}_cached_objects args in shrink_control (Vladimir Davydov) [PSBM-25018]
  - ms/list_lru: introduce list_lru_shrink_{count,walk} (Vladimir Davydov) [PSBM-25018]
  - ms/mm: vmscan: invoke slab shrinkers from shrink_zone() (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_slab_caches and memcg_slab_mutex (Vladimir Davydov) [PSBM-25018]
  - ms/slub: use sysfs'es release mechanism for kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/slub: fix memcg_propagate_slab_attrs (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_name argument of memcg_create_kmem_cache (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap __memcg_{charge,uncharge}_slab (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: fix possible use-after-free in memcg_kmem_get_cache() (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: use generic slab iterators for showing slabinfo (Vladimir Davydov) [PSBM-25018]
  - ms/slab: print slabinfo header in seq show (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab: Give s_next and s_stop slab-specific names (Vladimir Davydov) [PSBM-25018]
  - ms/mm/slab: Sharing s_next and s_stop between slab and slub (Vladimir Davydov) [PSBM-25018]
  - ms/memcg: zap memcg_can_account_kmem (Vladimir Davydov) [PSBM-25018]
  - ploop: fixed deadlock by interrupts off inside lookup_extent_mapping (Andrey Smetanin) [PSBM-32614]
  - config.OpenVZ/audit: Disable audit subsystem in config (Cyrill Gorcunov) [PSBM-32261]
  - ploop: fix deadlock inside dio_alloc_sync - lock inside while() but unlock outside (Andrey Smetanin)
  - vznetstat: alloc ve->stat if necessary (Kirill Tkhai) [PSBM-32072]
  - Revert "VE: export more headers to userspace" (Konstantin Khorenko) [PSBM-31973]
  - VE: export more headers to userspace (Konstantin Khorenko)
  - Makefile: make VZVERSION evaluated dynamically (Konstantin Khorenko)
  - dummy: add dummy modules for service vz init script (Konstantin Khorenko) [PSBM-31333]
  - vzstat: port vzstat module from rh6 (Vladimir Davydov)
  - vzlist: return second pid in container's namespace (Dmitry Guryanov) [PSBM-20095]
  - vzlist: fix get_vepids function (Dmitry Guryanov) [PSBM-20095]
  - vzlist: fix obvious compilation errors (Dmitry Guryanov) [PSBM-20095]
  - vzlist: add vzlist from 2.6.32-x as is (Dmitry Guryanov) [PSBM-20095]
  - vznetstat: don't use vehooks (Dmitry Guryanov) [PSBM-20094]
  - vznetstat: apply vznetstat patches from 2.6.32 as is (Dmitry Guryanov) [PSBM-20094 PSBM-20094 PSBM-32912]
  - ms/memcg: move memcg_update_cache_size to slab_common.c (Vladimir Davydov)
  - ms/memcg: don't call memcg_update_all_caches if new cache id fits (Vladimir Davydov)
  - ms/memcg: move memcg_{alloc,free}_cache_params to slab_common.c (Vladimir Davydov)
  - ms/mm: vmscan: remove shrink_control arg from do_try_to_free_pages() (Vladimir Davydov)
  - ms/mm: vmscan: move call to shrink_slab() to shrink_zones() (Vladimir Davydov)
  - ms/mm: vmscan: respect NUMA policy mask when shrinking slab on direct reclaim (Vladimir Davydov)
  - ms/mm: vmscan: call NUMA-unaware shrinkers irrespective of nodemask (Vladimir Davydov)
  - ms/slab: delete cache from list after __kmem_cache_shutdown succeeds (Vladimir Davydov)
  - ms/memcg: cleanup kmem cache creation/destruction functions naming (Vladimir Davydov)
  - ms/memcg: memcg_kmem_create_cache: make memcg_name_buf statically allocated (Vladimir Davydov)
  - ms/memcg: get rid of memcg_create_cache_name (Vladimir Davydov)
  - ms/memcg, slab: simplify synchronization scheme (Vladimir Davydov)
  - ms/memcg, slab: merge memcg_{bind,release}_pages to memcg_{un}charge_slab (Vladimir Davydov)
  - ms/memcg, slab: do not schedule cache destruction when last page goes away (Vladimir Davydov)
  - ms/mm: get rid of __GFP_KMEMCG (Vladimir Davydov)
  - ms/mm/sl[aou]b: Move kmallocXXX functions to common code (Christoph Lameter)
  - ms/slob: Rework #ifdeffery in slab.h (Christoph Lameter)
  - ms/sl[au]b: charge slabs to kmemcg explicitly (Vladimir Davydov)
  - ms/slub: rework sysfs layout for memcg caches (Vladimir Davydov)
  - ms/slub: adjust memcg caches when creating cache alias (Vladimir Davydov)
  - ms/memcg, slab: do not destroy children caches if parent has aliases (Vladimir Davydov)
  - ms/memcg, slab: unregister cache from memcg before starting to destroy it (Vladimir Davydov)
  - ms/memcg, slab: separate memcg vs root cache creation paths (Vladimir Davydov)
  - ms/memcg, slab: never try to merge memcg caches (Vladimir Davydov)
  - ms/memcg, slab: cleanup memcg cache creation (Vladimir Davydov)
  - ms/memcg: fix mutex not unlocked on memcg_create_kmem_cache fail path (Vladimir Davydov)
  - ms/memcg: remove unused code from kmem_cache_destroy_work_func (Vladimir Davydov)
  - ms/memcg: do not account memory used for cache creation (Glauber Costa)
  - ms/memcg: also test for skip accounting at the page allocation level (Glauber Costa)
  - ms/memcg: remove KMEM_ACCOUNTED_ACTIVATED flag (Vladimir Davydov)
  - ms/memcg, slab: RCU protect memcg_params for root caches (Vladimir Davydov)
  - ms/memcg: get rid of kmem_cache_dup() (Vladimir Davydov)
  - ms/memcg, slab: fix races in per-memcg cache creation/destruction (Vladimir Davydov)
  - ms/memcg: fix possible NULL deref while traversing memcg_slab_caches list (Vladimir Davydov)
  - ms/memcg, slab: fix barrier usage when accessing memcg_caches (Vladimir Davydov)
  - ms/memcg, slab: clean up memcg cache initialization/destruction (Vladimir Davydov)
  - ms/memcg, kmem: use cache_from_memcg_idx instead of hard code (Qiang Huang)
  - ms/memcg, kmem: rename cache_from_memcg to cache_from_memcg_idx (Qiang Huang)
  - ms/memcg, kmem: use is_root_cache instead of hard code (Qiang Huang)
  - ms/memcg, slab: kmem_cache_create_memcg(): fix memleak on fail path (Vladimir Davydov)
  - ms/slab: clean up kmem_cache_create_memcg() error handling (Vladimir Davydov)
  - ms/memcg: don't need to free memcg via RCU or workqueue (Li Zefan)
  - ms/memcg: kill memcg refcnt (Li Zefan)
  - ms/memcg: don't need to get a reference to the parent (Li Zefan)
  - ms/memcg: use css_get/put for swap memcg (Li Zefan)
  - ms/memcg: use css_get/put when charging/uncharging kmem (Li Zefan)
  - ms/memcg: don't use mem_cgroup_get() when creating a kmemcg cache (Li Zefan)
  - ms/memcg: use css_get() in sock_update_memcg() (Li Zefan)
  - ms/vfs: fix dentry LRU list handling and nr_dentry_unused accounting (Linus Torvalds)
  - vmscan: don't retry shrink_slab if current is dying (Vladimir Davydov)
  - ms/fs/super.c: fix lru_list leak for real (Al Viro)
  - ms/super: fix for destroy lrus (Glauber Costa)
  - ms/list_lru: dynamically adjust node arrays (Glauber Costa) [PSBM-42319]
  - mm: workingset: convert shrinker to count/scan API (Vladimir Davydov)
  - ms/fs: convert inode and dentry shrinking to be node aware (Dave Chinner)
  - ms/list_lru: remove special case function list_lru_dispose_all. (Glauber Costa)
  - ms/dcache: convert to use new lru list infrastructure (Dave Chinner)
  - ms/shrinker: Kill old ->shrink API. (Dave Chinner)
  - md/raid5: use new shrinker API (Dmitry Safonov)
  - ms/shrinker: convert remaining shrinkers to count/scan API (Dave Chinner)
  - ms/hugepage: convert huge zero page shrinker to new shrinker API (Glauber Costa)
  - ms/drivers: convert shrinkers to new count/scan API (Vladimir Davydov) [PSBM-34838 PSBM-42317]
  - ms/fs: convert fs shrinkers to new scan/count API (Vladimir Davydov) [PSBM-34838]
  - ms/vmscan: per-node deferred work (Glauber Costa)
  - ms/shrinker: add node awareness (Dave Chinner)
  - ms/inode: move inode to a different list inside lock (Glauber Costa)
  - ms/inode: convert inode lru list to generic lru list code. (Dave Chinner)
  - ms/shrinker: convert superblock shrinkers to new API (Dave Chinner) [OVZ-6646 PSBM-42760]
  - ms/mm: new shrinker API (Dave Chinner)
  - ms/dcache: remove dentries from LRU before putting on dispose list (Dave Chinner)
  - ms/dentry: move to per-sb LRU locks (Dave Chinner)
  - ms/dcache: convert dentry_stat.nr_unused to per-cpu counters (Dave Chinner)
  - ms/super: fix calculation of shrinkable objects for small numbers (Glauber Costa)
  - ms/fs: bump inode and dentry counters to long (Glauber Costa)
  - bc: Allocate beancounters without limits when cgroup interface is used (Cyrill Gorcunov)
  - ve/nsproxy: Allow to unshare network namespace (Cyrill Gorcunov)
  - ve/cgroup: Fix missing cgroup::cgroup_ve assignment (Cyrill Gorcunov)
  - ve/cgroup: devices -- Fix memory leaking in sysfs_perms_open (Cyrill Gorcunov)
  - ve/signal: Fix NULL dereference in sig_ve_ignored (Cyrill Gorcunov)
  - ve/dcache: Allow to read proc links if new mount namespace is used (Cyrill Gorcunov)
  - ve/cgroup: Fix systemd virtualization (Cyrill Gorcunov)
  - ve/cgroup: Allow non-virtualized hierarchies in containers (Cyrill Gorcunov) [PSBM-30052]
  - ms/sched/numa: fix unsafe get_task_struct() in task_numa_assign() (Kirill Tkhai)
  - ms/sched: Fix race between task_group and sched_task_group (Kirill Tkhai)
  - Revert "ve: Port task_struct:vetask_list and while_each_thread_ve() etc" compilation fix (Konstantin Khorenko)
  - ve/proc: vestat_seq_show: Fix kernel OOPs (Cyrill Gorcunov)
  - ms/mm: softdirty: keep bit when zapping file pte (Peter Feiner)
  - rh/mm: Drop off Live Kernel Self Migration (TRACK_DIRTY_PAGES) (Cyrill Gorcunov)
  - ve/devtmpfs: Create required devices on container startup (Cyrill Gorcunov) [PSBM-29214]
  - ve: Use own uevent_seqnum for every VE (Kirill Tkhai) [PSBM-17903]
  - bc/proc: fix sleep in atomic bug in ub_{start,next,stop} (Vladimir Davydov)
  - ve/fs: Use ve_printk in fs/binfmt_aout.c (Kirill Tkhai) [PSBM-17903]
  - ve: Ignore signals from wrong ve (Kirill Tkhai) [PSBM-17903]
  - ve/fs: Port fs.fsync-enable and fs.odirect_enable sysctls (Kirill Tkhai) [PSBM-17903]
  - ve/mm/swap: do not uncharge on reuse_swap_page (Vladimir Davydov)
  - ms/fs/notify: don't show f_handle if exportfs_encode_inode_fh failed (Andrey Vagin)
  - ms/fsnotify/fdinfo: use named constants instead of hardcoded values (Andrey Vagin)
  - ms/kcmp: fix standard comparison bug (Rasmus Villemoes)
  - ms/cbq: now_rt removal (Vasily Averin)
  - ms/cbq: incorrectly low bandwidth setting blocks limited traffic (Vasily Averin)
  - ms/tty: Fix potential use after free in release_one_tty (Cyrill Gorcunov)
  - ploop: purge plo->map on merge (Maxim Patlasov) [PSBM-27891]
  - ploop: set PLOOP_MAP_IDENTICAL bit on merge (Maxim Patlasov) [PSBM-24408]
  - ploop: update i_size on preallocation (Maxim Patlasov)
  - ploop: support of explicit unplug: unplug callback (Maxim Patlasov) [PSBM-18168]
  - ploop: support of explicit unplug: start and stop plugging (Maxim Patlasov) [PSBM-18168]
  - ploop: check ENOSPC callback (Maxim Patlasov) [PSBM-18168]
  - ploop: port io_kaio module (Maxim Patlasov) [PSBM-18168]
  - ploop: congestion detection (Maxim Patlasov) [PSBM-18168 PSBM-11585]
  - ploop: generic support of writeback control (Maxim Patlasov) [PSBM-18168 PSBM-11585]
  - ploop: check error from freeze_bdev (Maxim Patlasov) [PSBM-28460]
  - ploop: fix file->f_count leak in raw_complete_snapshot() (Kirill Tkhai)
  - ub: show dead beancounters in procfs v3 (Vladimir Davydov)
  - ub: convert to cgroup (Vladimir Davydov)
  - ub: decouple from alien cgroups (Vladimir Davydov)
  - ub: (partial) fix for meminfo (Vladimir Davydov)
  - ub: introduce ub_page_stat (Vladimir Davydov)
  - ub: do not sync ubparms with memory cgroup (Vladimir Davydov)
  - ub: add ub_name to safely store CT name (Vladimir Davydov)
  - ub: drop CONFIG_BC_KEEP_UNUSED (Vladimir Davydov)
  - ub: get rid of get/put_beancounter_longterm (Vladimir Davydov) [PSBM-20089]
  - ub: rm include/bc/kmem.h (Vladimir Davydov) [PSBM-20089]
  - ve/bc/mm: port UB_PRIVVMPAGES, UB_SHMPAGES, and UB_LOCKEDPAGES accounting (Vladimir Davydov) [PSBM-20089]
  - ve/netfilter: Implement pernet net->ct.max / virtualize "nf_conntrack_max" sysctl (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Implement pernet expect_max / virtualize "net.netfilter.nf_conntrack_expect_max" sysctl (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Add pernet permission checks in ip_tables (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Implement net_ipt_permitted() etc (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Implement ip_conntrack_disable_ve0 module option (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "conntrack" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "owner" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "connmark" match / "CONNMARK" target support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "TOS" target support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "tos" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "mark" match and "MARK" target support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Restore revision 0 "iprange" match support (Kirill Tkhai) [PSBM-18322]
  - ve/netfilter: Basic ve transformations (Kirill Tkhai) [PSBM-18322]
  - ms/module: remove rmmod --wait option. (Rusty Russell) [PSBM-27580 PSBM-27580]
  - bc/io: put beancounter before free (Maxim Patlasov)
  - ve/net/pppoe: fix nil dereference if no VE_FEATURE_PPP present (Cyrill Gorcunov)
  - ve/cgroups: hide toplevel cgroup entry from in /proc/pid/cgroup output (Cyrill Gorcunov) [PSBM-28377]
  - ve/cgroups: don't explicitly remove self destructable ve cgroups (Cyrill Gorcunov)
  - mm: make task with TIF_MEMDIE die faster (Kirill Tkhai)
  - ms/nmi: do not call unblank_screen() from nmi_show_regs() (Kirill Tkhai)
  - mm: add independed bio pool for swapout (Kirill Tkhai) [PSBM-14619]
  - vfs: call statfs on mnt's sb (Kirill Tkhai)
  - fs: add fadvise file_operation (Kirill Tkhai) [PSBM-54928 PSBM-54928]
  - vfs: take stat's dev from mnt->sb (Kirill Tkhai)
  - vfs: add set_flags wrapper (Kirill Tkhai)
  - ms: unwind changes on shift_arg_pages error path (Kirill Tkhai)
  - ms: skip "relatime" in shmem_parse_options() (Kirill Tkhai)
  - ext4: make data=writeback mode safe (Kirill Tkhai)
  - ext4: quarantee rename atomic behavior (Kirill Tkhai)
  - ms/fs: introduce "fs.relatime_interval" sysctl (Kirill Tkhai)
  - ve/vfs: introduce "odirect_enable" sysctl and disable it by default (Kirill Tkhai)
  - ext4: resplit block_page_mkwrite: fix get-host convention (Kirill Tkhai) [PSBM-16485]
  - blk/ploop: Add BLKPG_GET_PARTITION operation (Kirill Tkhai)
  - ext4/ploop: ask ploop about ENOSPC condition (Kirill Tkhai)
  - Subject: ve/futex/timeout: adjust futex timeout to absolule (Kirill Tkhai) [PSBM-14471]
  - ve/posix-timers: reference ve monotonic clock from ve start (v2) (Kirill Tkhai) [PSBM-13860]
  - x86: vdso: add sysctl to disable vdso for gettime monotonic (Kirill Tkhai) [PSBM-13860]
  - ve/posix-timers: reference ve monotonic clock from start in clock_nanosleep (Kirill Tkhai)
  - bc/io: set and release ioc->ioc_ub (Maxim Patlasov) [PSBM-15568]
  - oom: Show writeback_temp stats in oom message (Maxim Patlasov)
  - fuse: fix erroneous unlock_page() in fuse_send_writepages() (Maxim Patlasov)
  - fuse: release cleanup (Maxim Patlasov)
  - fuse: fix deadlock in fuse_flush() (Maxim Patlasov) [PSBM-29381]
  - fuse: invalidate_files backward compatibility mode (Maxim Patlasov)
  - fuse: fix writeback/release race (Maxim Patlasov) [PSBM-26148]
  - fuse: report details of aio failure (Maxim Patlasov) [PSBM-23696]
  - fuse: fail lost-lease notification if async_read (Maxim Patlasov)
  - fuse: skip waiting for fuse writeback (Maxim Patlasov)
  - fuse: prevent queueing new requests after (Maxim Patlasov)
  - fuse: kill requests on "lost-lease" event (Maxim Patlasov)
  - fuse: pass "fc" to fuse_invalidate_files() (Maxim Patlasov)
  - fuse: add "killed" bit to fuse request (Maxim Patlasov)
  - fuse: add page_cache bit to fuse request (Maxim Patlasov)
  - fuse: the list of all opened files (Maxim Patlasov)
  - fuse: do not flush files opened ro (Maxim Patlasov) [PSBM-20562]
  - fuse: add mount option to disable close_wait (Maxim Patlasov)
  - fuse: make umount synchronous (Maxim Patlasov) [PSBM-19305]
  - fuse: print initialized flag in conn info (Maxim Patlasov)
  - fuse: extend report on pstorage errors (Maxim Patlasov)
  - fuse: do not use RELEASE on directory (Maxim Patlasov) [PSBM-17195]
  - fuse: add missed fuse_file_put() (Maxim Patlasov)
  - fuse: cleanups in fuse writeback (Maxim Patlasov) [PSBM-16442 PSBM-16442]
  - fuse: implement invalidate_files notification (Maxim Patlasov) [PSBM-16105]
  - fuse: report size from server if no openers exist (Maxim Patlasov) [PSBM-15941]
  - fuse: write_begin() should wait for writeback (Maxim Patlasov)
  - fuse: account read/write requests into iopslimit (Maxim Patlasov)
  - fuse: improve bdi dirty memory limits for fuse (Maxim Patlasov) [PSBM-13700]
  - fuse: enable async_dio for pcs (Maxim Patlasov)
  - fuse: optimize fuse_vma_close() (Maxim Patlasov)
  - fuse: do not oops in fuse writepage (Maxim Patlasov) [PSBM-10752]
  - fuse: increment BDI_WRITEOUT for each page (Maxim Patlasov)
  - fuse: remove extra write_update (Maxim Patlasov) [PSBM-18167]
  - fuse: account directio requests into ioacct (Maxim Patlasov)
  - fuse: wire iolimit sleep-hook into directio path. (Maxim Patlasov)
  - fuse: account read/write requests into iostat (Maxim Patlasov)
  - fuse: set num_openers on create (Maxim Patlasov) [PSBM-13820]
  - fuse: i_size to be updated on first open (Maxim Patlasov) [PSBM-13636]
  - fuse: reimplement synchronous close (Maxim Patlasov)
  - fuse: Wait for real writeback to finish on file (Maxim Patlasov)
  - fuse: Dcache is always invalid (Maxim Patlasov)
  - fuse: virtualize context pid (Maxim Patlasov)
  - fuse: some fairness in handling writeback (Maxim Patlasov)
  - fuse: Fuse ctl file with connection info (Maxim Patlasov)
  - fuse: Show open files in fusectl (Maxim Patlasov)
  - fuse: Show active requests in fusectl files (Maxim Patlasov)
  - fuse: fuse-ve-odirect sysctl (Maxim Patlasov) [PSBM-18167]
  - fuse: direct_enable mount option (Maxim Patlasov) [PSBM-18167]
  - fuse: set req->background flag for fuse_writepages (Maxim Patlasov) [PSBM-18167]
  - fuse: kaio support (Maxim Patlasov) [PSBM-18167]
  - fuse: fix compilation for __fuse_readpage() (Maxim Patlasov)
  - fuse: Turn writeback cache on (Maxim V. Patlasov)
  - fuse: Fix O_DIRECT operations vs cached writeback misorder - v2 (Maxim V. Patlasov)
  - fuse: fuse_flush() should wait on writeback (Maxim V. Patlasov)
  - fuse: fuse_writepage_locked() should wait on writeback (Maxim V. Patlasov)
  - fuse: Implement writepages and write_begin/write_end callbacks (Maxim V. Patlasov)
  - fuse: Flush files on wb close (Maxim V. Patlasov)
  - fuse: Trust kernel i_mtime only (Maxim V. Patlasov)
  - fuse: Trust kernel i_size only (Maxim V. Patlasov)
  - fuse: Connection bit for enabling writeback (Maxim V. Patlasov)
  - fuse: Prepare to handle multiple pages in writeback (Maxim V. Patlasov)
  - fuse: Prepare to handle short reads (Maxim V. Patlasov)
  - fuse: Getting file for writeback helper (Maxim V. Patlasov)
  - fuse: Linking file to inode helper (Maxim V. Patlasov)
  - nfs/ioacounting: ported skipped code for read/write io accounting (Andrey Smetanin) [PSBM-27695]
  - ve/printk: define some log_* symbols for kdump (Vladimir Davydov)
  - mm: softdirty: clear VM_SOFTDIRTY flag inside clear_refs_write() instead of clear_soft_dirty() (Cyrill Gorcunov)
  - idr: fix overflow bug during maximum ID calculation at maximum height (Lai Jiangshan)
  - ve/idr: correctly alloc/release ve->veid from ve_idr (Andrey Smetanin) [PSBM-28031]
  - ub: use d_set_d_op to init ub ops (Vladimir Davydov)
  - ve/devtmpfs: pass proper options string (Cyrill Gorcunov)
  - ve/idr: fix WARN_ON(1) at ve_list_del: move idr_remove(&ve_idr, ve->veid) from ve_offline to ve_destroy (Andrey Smetanin)
  - mm/vps_dumpable: naming and description for task->mm->vps_dumpable values (Andrey Smetanin) [PSBM-20666]
  - vzstat: export symbols KSTAT_LAT_*_UPDATE funcs to be usable by our private vzmodules (Andrey Smetanin)
  - ubc/net: remove unused variable from neigh_periodic_work() (Konstantin Khorenko)
  - epoll: fix use-after-free in eventpoll_release_file (Konstantin Khlebnikov)
  - radix-tree/filemap: fix prev tag not set after deleting direct slot (Vladimir Davydov)
  - radix-tree/filemap: clear prev tag when deleting page from page cache (Vladimir Davydov)
  - fs: kernel direct aio (Dmitry Monakhov) [PSBM-18169 PSBM-42312]
  - ploop/fairsched/io_prio: compilation fixes (Cyrill Gorcunov)
  - all: compilation fixes (Konstantin Khorenko)
  - VE/VFS: use sb->s_ns member to store namespace for mount_ns() calls (Konstantin Khorenko)
  - radix-tree: hunks left from initial combined patch added (Vladimir Davydov) [PSBM-18056 PSBM-27696]
  - quota/compat: move compat stuff from quota.h to compat.h (Konstantin Khorenko)
  - ubc/net: recharge skb in tcp_fragment() only (Konstantin Khorenko)
  - config.OpenVZ: OpenVZ related config options are added (Konstantin Khorenko)
  - config.OpenVZ: added symlinks to kernel config and debug config (Konstantin Khorenko)
  - bc/memcontrol: fix per-bc memcg pages output (Stanislav Kinsbursky) [PSBM-26039]
  - fairsched: add missing close in sys_fairsched_mknod (Vladimir Davydov)
  - drivers/core/sysfs: respect ns when removing sys dev link (Vladimir Davydov) [PSBM-25801]
  - nfsd/sunrpc/mqueue: use sb->s_ns instead of data in fill_super (Vladimir Davydov) [PSBM-25107]
  - ve/cgroups: add missing list_del(cgroup_ve_list) on error path (Vladimir Davydov) [PSBM-24622]
  - ve: get rid of get_ve_by_name() (Vladimir Davydov) [PSBM-24622]
  - ve: allocate ids on cgroup create (Vladimir Davydov) [PSBM-24622]
  - ve: get rid of __ve_name (Vladimir Davydov) [PSBM-24622]
  - venet: fix compilation (Vladimir Davydov) [PSBM-24622]
  - Revert "VE/NET: replace veid with ve_name in veip_struct" (Vladimir Davydov) [PSBM-24622]
  - ve/cgroups: use cgroup subsystem names only if in vz compat mode (Vladimir Davydov) [PSBM-22882]
  - ve/pid_ns: do not panic on kthreads when reaping external tasks on zap pid_ns (Vladimir Davydov)
  - fairsched: fix nasty typos (Dmitry Guryanov)
  - kmod: add header inclusion (Stanislav Kinsbursky)
  - stat: add header inclusion (Stanislav Kinsbursky)
  - vzstat: move code to source file (Stanislav Kinsbursky)
  - ve/proc: add empty "partitions" entry (Stanislav Kinsbursky) [PSBM-18889]
  - ve/devpts: cleanup per-VE creation (Stanislav Kinsbursky)
  - ve/pid_ns: reap zombies with external parent on container's init exit (Stanislav Kinsbursky)
  - ve/umh: make it ve-stopping safe (Stanislav Kinsbursky)
  - ve: remove ve_mutex (Stanislav Kinsbursky)
  - sched: use LBF_SOME_PINNED to balance tasks among vcpus (Vladimir Davydov)
  - ve/umh: fix NULL pointer dereference in VE0 (Stanislav Kinsbursky)
  - devtmpfs: containerize it with new obj ns operation (Stanislav Kinsbursky)
  - fs: add data pointer to mount_ns() (Stanislav Kinsbursky)
  - ve/tty: Revert custom virtualization (Stanislav Kinsbursky) [PSBM-20100 PSBM-20100 PSBM-33239 PSBM-34777 PSBM-41804]
  - ve: do not set VE_MEMINFO_DEFAULT to VE0 on ve_create (Vladimir Davydov)
  - fairsched: mount cpuacct together with cpu (Dmitry Guryanov)
  - bc: mount mem and blkio subsystems separately (Dmitry Guryanov)
  - bc: create separate cgroup for mem and blkio hierarchies (Dmitry Guryanov)
  - fairsched: mount cpu and cpuset separately (Dmitry Guryanov)
  - fairsched: don't use common root cgroup in fairsched.c (Dmitry Guryanov)
  - ve: split beancounter hierarchy (Dmitry Guryanov)
  - ve/cgroups: don't use common root cgroup in vecalls.c (Dmitry Guryanov)
  - ve/cgroups: don't mount freezer subsystem (Dmitry Guryanov)
  - ve/cgroups: add functions ve_cgroup_open and ve_cgroup_remove (Dmitry Guryanov)
  - ve/sunrpc: use correct pointer to net_namespace in auth_gss.c (Dmitry Guryanov)
  - ve/sysfs: make dev/char/ directory tagged with VE tag (Stanislav Kinsbursky)
  - ve/sysfs: allow symlinks between tagged and generic directories (Stanislav Kinsbursky)
  - ve/kobject: new type for VE-aware object introduced (Stanislav Kinsbursky)
  - ve/kobject: introduce new namespace tag and operations for VE (Stanislav Kinsbursky)
  - ve/vzstat: move code to source file and cleanup headers (Stanislav Kinsbursky)
  - ve/vzstat: port vzstat bits from rh6 (Vladimir Davydov) [PSBM-54928]
  - ve/sysctl: allow to change mqueue sysctl-s (Andrew Vagin) [PSBM-20102]
  - ve/sysctl: allow to write kernel/hostname and kernel/domainname entries in container (Cyrill Gorcunov) [PSBM-20102]
  - ve/sysctl: allow to write /proc/sys/kernel/$next$ entries in container (Cyrill Gorcunov)
  - devtmpfs: per-VE mounts introduced (Stanislav Kinsbursky) [PSBM-17915]
  - pid: export symbol nex_pidmap (Dmitry Guryanov) [PSBM-20095]
  - dcache: d_root_check: allow to proceed on disconnected entries (Kirill Gorkunov)
  - ve/fs: remove ve_proto.h header from super.c (Stanislav Kinsbursky)
  - VE/sysrq-trigger: make it VE-namespace aware (Stanislav Kinsbursky) [PSBM-20664]
  - ve/sched: port boosting hacks against prio inversion (Vladimir Davydov) [PSBM-15441]
  - ve/sched: port vcpu hotslice (Vladimir Davydov) [PSBM-16913 PSBM-16913 PSBM-17399]
  - ve/sched: port nr cpus limit (Vladimir Davydov) [PSBM-16856]
  - venet: add venet_free_stat callback (Dmitry Guryanov)
  - sched: calc_load_ve: do not account rt tasks (Vladimir Davydov) [PSBM-22149]
  - config.OpenVZ: enable options required for CRIU (Konstantin Khorenko)
  - Revert "ve: set vps_dumpable for a process, which writes start in ve.state" (Andrew Vagin)
  - VE: don't clear vps_dumpable if ve isn't running (Andrew Vagin)
  - ve: allow to start CT by external processes (v2) (Andrew Vagin)
  - ve: show content of /proc/cgroups if CT isn't running yet (Andrew Vagin)
  - ve: skip d_root_check() for CT0 (Andrew Vagin)
  - kmemcg: don't allocate extra memory for root memcg_cache_params (Andrey Vagin)
  - mm: save soft-dirty bits on swapped pages (Cyrill Gorcunov)
  - proc-net: mark all files in proc-net directories as virtualized (Vladimir Davydov)
  - proc: mark only net dirs as virtualized by default (Vladimir Davydov)
  - ve: use proc_mkdir for proc dir creation (Vladimir Davydov)
  - fairsched: use proc_mkdir for proc dir creation (Vladimir Davydov)
  - net: remove include/net/netlink_sock.h (Vladimir Davydov)
  - cgroup/cpuset/fairsched: get rid of cgroup_lock (Vladimir Davydov)
  - cgroup: cgroup->top_cgroup => &cgroup->root->top_cgroup (Vladimir Davydov)
  - ve/cgroup: fix compilation (Vladimir Davydov)
  - cpuset: remove unused stuff and fix compilation (Vladimir Davydov)
  - bc/proc: fix compilation (Vladimir Davydov)
  - khleper: fix compilation (Vladimir Davydov)
  - sched: move declaration of cgroup related functions to global header (Vladimir Davydov)
  - all: trivial compilation fixes (Vladimir Davydov)
  - Initial OpenVZ config for 3.10.x branch added, based on kernel-3.10.10-200.fc19 Fedora 19 kernel. (Konstantin Khorenko)
  - veth: Make it carry NETIF_F_VIRTUAL (Cyrill Gorcunov)
  - ve/cgroup: delete VE cgroup on the error path (Andrew Vagin) [PSBM-21953]
  - pfcache: do not ignore TTU_MUNLOCK in try_to_unmap_file() (Maxim Patlasov)
  - pfcache: iterate peer list only for shared pages (Maxim Patlasov)
  - pfcache: release path if dentry_open() failed (Maxim Patlasov)
  - pfcache: check root path in ext4_open_pfcache() (Maxim Patlasov)
  - ve/devcgroup: fix mknod permissions - allow to create any dev inside a CT (Vladimir Davydov) [PSBM-21979]
  - pfcache: add hashed peers for ext4 (Konstantin Khlebnikov) [PSBM-20098]
  - pfcache: add generic mapping peers (Konstantin Khlebnikov) [PSBM-20098]
  - mpi: export arithmetic functions required for in-kernel DSA implementation (Konstantin Khorenko)
  - ve/pidns: allow to change ns_last_pid from containers (Andrew Vagin)
  - VENET: add netlink interface for venet (Dmitry Guryanov)
  - mpi: fix compilation (Konstantin Khlebnikov)
  - ms/mpi: revert "Revert "crypto: GnuPG based MPI lib - (Dmitry Kasatkin)
  - ms/mpi: revert "Remove unused code from MPI library" (Dmitry Kasatkin)
  - ve: convert get/put_ve to non-gpl functions (Konstantin Khlebnikov)
  - ve: return back 'down_at' ve_struct field (Konstantin Khlebnikov)
  - VE: add function legacy_name_to_veid (Dmitry Guryanov)
  - VE: fix couple compilation warnings (Konstantin Khlebnikov)
  - ve: set vps_dumpable for a process, which writes start in ve.state (Andrew Vagin)
  - ve/sysfs: drop full access for all containers (Konstantin Khlebnikov) [PSBM-20892]
  - ve/sysfs: remove xattr interface to ve permissions (Konstantin Khlebnikov)
  - ve/sysfs: add new interface to control sysfs (Konstantin Khlebnikov)
  - ve: move unlinking ve_sysfs_perms into right function (Konstantin Khlebnikov)
  - nfsd: enable UMH client tracker in a container (Stanislav Kinsbursky)
  - ve: khelper kthread in a container introduced (Stanislav Kinsbursky)
  - ve: introduce kthread_run_ve() helper (Stanislav Kinsbursky)
  - nfsd: containerize kthreads (Stanislav Kinsbursky)
  - ve: kthreads creation facility introduced (Stanislav Kinsbursky)
  - kthread: make of a new kthread's queuing code to a callback (Stanislav Kinsbursky)
  - fs: virtualize devtmpfs file system (Stanislav Kinsbursky)
  - cpuset: do not remove tasks from empty cpusets (Vladimir Davydov)
  - SCHED: rework cputime accounting (v2) (Vladimir Davydov) [PSBM-18113 PSBM-20541 PSBM-33642]
  - ve/nfsd: virtualize nfsd file system (Stanislav Kinsbursky)
  - ext4: pfcache_csum mount option (Konstantin Khlebnikov)
  - ve: permit full access in sysfs for all containers (Konstantin Khlebnikov)
  - venet: unregister ve cgroup cftypes (Konstantin Khlebnikov)
  - ext4: fix balloon_ino mount option (Konstantin Khlebnikov)
  - VE: add __find_ve_by_name() function (Dmitry Guryanov)
  - misc: remove redundant security check from mmap_min_addr_handler (Konstantin Khlebnikov) [PSBM-18031]
  - VE: use ve environtment for sysctl restrictions (Konstantin Khlebnikov) [PSBM-18032 PSBM-18030]
  - VE: use ve environtment for proc restrictions (Konstantin Khlebnikov) [PSBM-18021]
  - VE: virtualize cgroups (Konstantin Khlebnikov) [PSBM-20665 PSBM-20540]
  - VE/NET: port diff-net-substitute-ve_hook-by-pernet_operations-in-veth (v2) (Vladimir Davydov) [PSBM-20668 PSBM-18176]
  - VE/NET: port diff-net-substitute-ve_hook-by-pernet_operations-in-venet (v2) (Vladimir Davydov) [PSBM-20668 PSBM-18176]
  - VE: uncomment ve_log_init, ve_log_destroy (Vladimir Davydov)
  - VE/PRINTK: rework printk virtualization (v2) (Vladimir Davydov) [PSBM-20669 PSBM-17899 PSBM-54820]
  - ve: mark /proc/self as virtualized (Konstantin Khlebnikov)
  - mntns: allow changes in init namespace (Konstantin Khlebnikov)
  - devpts: don't require newinstance (Konstantin Khlebnikov)
  - devcgroup: fix default behaviour (Konstantin Khlebnikov)
  - ve: plug broken printk changes (Konstantin Khlebnikov)
  - ve: allow user ns in chroot (Konstantin Khlebnikov)
  - device_cgroup: fix compilation (Konstantin Khlebnikov)
  - oom_groups: fix user-ns uid mangling (Konstantin Khlebnikov)
  - ubc: fix user-ns uid mangling (Konstantin Khlebnikov)
  - UBC: fix compilation (Konstantin Khlebnikov)
  - FS/NAMESPACE: fix compilation (Konstantin Khlebnikov)
  - VENETDEV: fix compilation (Konstantin Khlebnikov)
  - NFSD: fix compilation (Konstantin Khlebnikov)
  - QUOTA: fix compilation (Konstantin Khlebnikov)
  - KMAPSET: fix compilation (Konstantin Khlebnikov)
  - SYSFS: fix compilation (Konstantin Khlebnikov)
  - TUN: fix compilation (Konstantin Khlebnikov)
  - NET/PROC: fix compilation (Konstantin Khlebnikov)
  - CGROUPS: fix compilation (Konstantin Khlebnikov)
  - NET/VLAN: fix compilation (Konstantin Khlebnikov)
  - MM: fix compilation (Konstantin Khlebnikov)
  - VE: fix compilation (Konstantin Khlebnikov)
  - UBC/STATD: fix compilation (Konstantin Khlebnikov)
  - COMMON: fix compilation (Konstantin Khlebnikov)
  - CGROUP/FREEZER: revert changes (Konstantin Khlebnikov)
  - VE/DEVICE_CGROUP: fix compilation (Konstantin Khlebnikov) [PSBM-20663]
  - ploop: add ploop to the tree (Maxim V. Patlasov)
  - mm: Account for WRITEBACK_TEMP in balance_dirty_pages (Maxim V. Patlasov)
  - ext4: Provide a balloon nipple for management (Maxim V. Patlasov) [PSBM-41222]
  - ext4: Don't show the active balloon to user (Maxim V. Patlasov)
  - ext4: Teach statfs to report reduced disk usage (Maxim V. Patlasov)
  - ext4: Teach the fs where the balloon inode is (Maxim V. Patlasov)
  - block: export put_io_context_active() (Maxim V. Patlasov)
  - VE/NET: add ip_list file to ve controller (Dmitry Guryanov)
  - VE/NET: provide cgroup interface for venet ip management (Dmitry Guryanov)
  - VE/NET: replace veid with ve_name in veip_struct (Dmitry Guryanov)
  - VE: add __ve_name function (Dmitry Guryanov)
  - VE: add legacy_veid_to_name function (Dmitry Guryanov)
  - VE/PRINTK: check syslog capability in user ns (Vladimir Davydov) [PSBM-17980]
  - VE/MM: show_signal_msg: print vma addr to VE_LOG (Vladimir Davydov)
  - VE: add cgroup attribute ve.legacy_veid (Konstantin Khlebnikov)
  - VE/NET: don't oops in net_generic() on disabled features (Konstantin Khlebnikov)
  - UBC: kill BC_DEBUG_KMEM (Konstantin Khlebnikov)
  - VE/SYSFS: add xattrs to control ve-permissions (Konstantin Khlebnikov)
  - VE/SYSFS: hide forbidden entries in container (Konstantin Khlebnikov)
  - VE/SYSFS: implement ve-based permissions (Konstantin Khlebnikov)
  - KMAPSET: set of key-value mappings with build-in (Konstantin Khlebnikov)
  - VE: implement get_ve_by_name() (Konstantin Khlebnikov)
  - VE: more veid to ve_name conversion (Konstantin Khlebnikov)
  - VE: cgroup interface for starging container (Konstantin Khlebnikov)
  - VE: kill vzmond (Konstantin Khlebnikov)
  - VE: drop devpts superblock in ve_exit_ns (Konstantin Khlebnikov)
  - VE: manage namespaces in ve-cgroup (Konstantin Khlebnikov)
  - VE: manage list of running container in ve-cgroup (Konstantin Khlebnikov)
  - VE: praparation for non-numeric veid (Konstantin Khlebnikov)
  - VE: forbid cgroup attach during starting or (Konstantin Khlebnikov)
  - VE: allocate log buffer together with ve_struct (Konstantin Khlebnikov)
  - VE: fix error path in do_env_create() (Konstantin Khlebnikov)
  - VE: implement ve_start_container() (Konstantin Khlebnikov)
  - VE: simplify hooks in zap_pid_ns_processes() (Konstantin Khlebnikov)
  - VE: cleanup setup_iptables_mask() (Konstantin Khlebnikov)
  - VE: remove ve_init_task (Konstantin Khlebnikov)
  - VE: forbid nested containers (Konstantin Khlebnikov)
  - VE: forbids threads in ve_can_attach() (Konstantin Khlebnikov)
  - VE/VZETHDEV: pass ve_struct in veth_dev_start (Andrew Vagin)
  - VE: fix filesystem type permition check (Konstantin Khlebnikov)
  - VE: mark virtual filesystems as virtualized (Konstantin Khlebnikov)
  - VE: cleanup credentials handling (Konstantin Khlebnikov)
  - VE/PROC: mark content of /proc/self/net as virtualized (Konstantin Khlebnikov)
  - VE/BINFTM: fix destruction ordering (Konstantin Khlebnikov)
  - VE/NSPROXY: fix refcounting of init_nsproxy (Andrew Vagin) [PSBM-17904]
  - VE/CPUSET: make [cpus|mems]_allowed be subset of cpuset_[cpus|mems]_allowed (Vladimir Davydov) [PSBM-18531]
  - VE/CPUSET: remove lock in cgroup_set_[cpumask|nodemask] (Vladimir Davydov)
  - VE: export headers to userspace (Dmitry Guryanov)
  - VE: export switch_task_namespaces() (Konstantin Khlebnikov)
  - VE: export nr_threads_ve() (Konstantin Khlebnikov)
  - VE: convert khelper_wq to kthread_worker (Konstantin Khlebnikov)
  - Revert: rh/kmod: use system_unbound_wq instead of khelper (Konstantin Khorenko) [PSBM-61660]
  - VE: add kthread into container (Konstantin Khlebnikov)
  - VE: convert to cgroup (Konstantin Khlebnikov)
  - VE: move fairsched creation out of op_sem (Konstantin Khlebnikov)
  - VE: cleanup include/linux/ve.h (Konstantin Khlebnikov)
  - VE: remove ve.h from sched.h (Konstantin Khlebnikov)
  - VE: collect basic interface in ve_proto.h (Konstantin Khlebnikov)
  - VE: remove task->owner_env (Konstantin Khlebnikov)
  - VE: remove pcounter (Konstantin Khlebnikov)
  - VE: rework shutdown sequence (Konstantin Khlebnikov)
  - VE: remove set_exec_env() (Konstantin Khlebnikov)
  - VE: remove set_exec_env from vc_screen (Konstantin Khlebnikov)
  - VE: remove set_exec_env() from venet_set_features() (Konstantin Khlebnikov)
  - PIDNS: add proc mount option 'hidepidns=0|1' (Konstantin Khlebnikov)
  - PIDNS: remove sysctl kernel.pid_ns_hide_child (Konstantin Khlebnikov)
  - PIDNS: Make the pidns proc mount/umount logic (Konstantin Khlebnikov)
  - PIDNS: general revert and cleanup (Konstantin Khorenko)
  - PIDNS: implement change_pid_ns() (Konstantin Khlebnikov)
  - VE/CALLS: allow CAP_[SYS|NET]_ADMIN if CAP_VE_[SYS|NET]_ADMIN set (Vladimir Davydov)
  - VE/AUTOFS: port 71-diff-autofs-combined (Dmitry Guryanov)
  - VE/NFS: check VE_FEATURE_NFS is set on mount (Stanislav Kinsbursky)
  - VE/BINFTM: virtualization (Konstantin Khlebnikov)
  - VE/BINFTM: move all internal data to structure (Stanislav Kinsbursky)
  - VE/BINFTM: remove all old containerization code (Stanislav Kinsbursky)
  - VE/NFS: mark NFS as containerized (Stanislav Kinsbursky) [PSBM-18170]
  - VE/SUNRPC: mark SUNRPC PipeFS as containerized (Stanislav Kinsbursky) [PSBM-18170]
  - VE/FS: containerize filesystems access (Stanislav Kinsbursky)
  - VFS: revert changes around vfsmount namespaces (Konstantin Khlebnikov)
  - VE/FS: allow mountpoint operations for CAP_VE_SYS_ADMIN (Konstantin Khlebnikov)
  - VE/FS: allow to mknod inside ct (Vladimir Davydov)
  - config.OpenVZ: enable in-kernel crypto DSA code (Konstantin Khorenko)
  - config.OpenVZ: enable CONFIG_LEGACY_PTY_COUNT and CONFIG_NETLINK_DIAG (Konstantin Khorenko)
  - config.OpenVZ: enable CONFIG_LEGACY_PTYS (Konstantin Khorenko)
  - config.OpenVZ: remove CONFIG_BC_DEBUG_KMEM and CONFIG_VZ_CHECKPOINT (Konstantin Khorenko)
  - Initial OpenVZ config added, based on kernel-3.6.11-5.fc17 Fedora 17 kernel. (Konstantin Khorenko)
  - FAIRSCHED: allow writing to cpus_allowed and mems_allowed (Dmitry Guryanov)
  - VE/SCHED: remove sched stats from ve_task_info (Vladimir Davydov) [PSBM-54928]
  - SCHED: account forks per task group (Vladimir Davydov) [PSBM-18113 PSBM-18113]
  - SCHED: account ctxsw per task group (Vladimir Davydov) [PSBM-18113 PSBM-18113]
  - FAIRSCHED: get rid of cgorup cpuacct subsys (Vladimir Davydov) [PSBM-18113]
  - SCHED: fix nr_sleeping accounting (Vladimir Davydov) [PSBM-18113]
  - DEVPTS: handle early ptmx open (Konstantin Khlebnikov)
  - VE/PTRACE: simplify pid-ns hack (Konstantin Khlebnikov)
  - VE: allow reboot in container (Konstantin Khlebnikov)
  - VE: cleanup hacks in signal handling (Konstantin Khlebnikov)
  - VE: use pid-ns reboot event (Konstantin Khlebnikov)
  - VE: remove switching context in irq_enter/leave (Konstantin Khlebnikov)
  - VE/USERNS: setup equal uid mapping (Konstantin Khlebnikov)
  - VE: fix lockdep warning in ve_task_ppid_nr_ns() (Konstantin Khlebnikov)
  - VE: filter zap_ve_processes() (Konstantin Khlebnikov)
  - VECALLS: simplify legacy-devpts virtualization (Konstantin Khlebnikov)
  - SYSCTL: fix compilation (Konstantin Khlebnikov)
  - VE/SYSCTL: ignore writes to sysctl vm.mmap_min_addr by (Konstantin Khlebnikov)
  - VE/SYSCTL: fixup virtualized sysctls (Konstantin Khlebnikov)
  - VE/SYSCTL: implement virtualized methods (Konstantin Khlebnikov)
  - VE/SYSCTL/IPC: mark as virtualized (Konstantin Khlebnikov)
  - VE/PROC/SYSCTL: show real permissions in stat (Konstantin Khlebnikov) [PSBM-56704]
  - VE/SYSCTL: write permission restriction (Konstantin Khlebnikov) [PSBM-18022]
  - VE/PROC/UPTIME: fix task_cgroup() usage out of rcu protection (Konstantin Khlebnikov)
  - VE/PROC: show /proc/filesystems in container (Konstantin Khlebnikov)
  - VE/PROC: unblock more proc entries (Konstantin Khlebnikov) [PSBM-18889]
  - VE/PROC: unblock sysvipc interface (Konstantin Khlebnikov)
  - VE/PROC: fix bug in proc_readdir_de() (Konstantin Khlebnikov)
  - VE/PROC: replace glob_proc_root with S_ISVTX (Konstantin Khlebnikov)
  - VE/PROC: restricted proc-entries scope (Konstantin Khlebnikov) [PSBM-18019]
  - VE/DCACHE: reimplement d_root_check (Konstantin Khlebnikov)
  - VE/KOBJ: add function for send uevent in a currect exec_env only (Andrey Vagin)
  - VZPRIVNET: cache filtering result on dst (Pavel Emelyanov)
  - MISC: port of diff-misc-bits-2 (Dmitry Guryanov)
  - FS/QUOTA: Compatibility with older quotactl interface (Dmitry Guryanov)
  - UBC/SHMEM: remove beancounter (Konstantin Khlebnikov)
  - UBC/MEMCG: fix typo in mem_cgroup_apply_beancounter (Dmitry Guryanov)
  - UBC/MEMCG: change memsw before and after chaing memory (Konstantin Khlebnikov)
  - UBC/MEMCG: reset memsw limit before setting mem limit (Vladimir Davydov)
  - UBC: remove beancounter from struct pid (Konstantin Khlebnikov)
  - UBC: link with kmem controller (Konstantin Khlebnikov)
  - UBC: fix lost retval in memcg-ub link layer (Vladimir Davydov)
  - UBC: cleanup permission checks (Konstantin Khlebnikov)
  - UBC: tie beancounter and memory-cgroup together (Konstantin Khlebnikov)
  - UBC: link memcg with beancounter (Konstantin Khlebnikov)
  - VE/UBC/MM: enable memcg (Konstantin Khlebnikov)
  - mm: account all page tables for mm (Konstantin Khlebnikov)
  - simfs: to be substituted by bindmounts (Maxim V. Patlasov) [PSBM-18885 PSBM-18885 PSBM-34494 PSBM-20810]
  - MS/SIMFS: export statfs_by_dentry (Konstantin Khlebnikov)
  - VE/PRINTK: make log_from_idx, log_next use non-virtualized log_buf (Vladimir Davydov)
  - VE/PRINTK: printk virtualization (Vladimir Davydov) [PSBM-17899]
  - VE/NET: unblock net-namespaces (Konstantin Khlebnikov)
  - VE/NET: Allow userns root to control ppp device (Vladimir Davydov)
  - VE/NET: more get_exec_env() cleanups (Konstantin Khlebnikov)
  - VE/NET: hold ve ref until net is destroyed (Vladimir Davydov)
  - VE/NET: drop tcp_time_stamp fixup (Konstantin Khlebnikov)
  - VENET: cleanup owner_env references (Konstantin Khlebnikov)
  - VZETH: cleanup owner_env references (Konstantin Khlebnikov)
  - VE/NET: switch vz_security_*_check to netns (Konstantin Khlebnikov)
  - VE/NET: remove sysfs-related hacks for netdev (Konstantin Khlebnikov)
  - VE/NET: port of VZ VENET device (Stanislav Kinsbursky)
  - VE/NET: port of VZ VETH device (Stanislav Kinsbursky)
  - MS/PIDNS: don't force SIGKILL to tasks on child reaper death (Stanislav Kinsbursky)
  - MS/CGROUP: port kernel api (Vladimir Davydov) [PSBM-17927 PSBM-16529]
  - MS/CGROUP: self-destruction (without userspace helpers) (Konstantin Khlebnikov)
  - MS/CGROUP: export cgroup_kernel_close (Konstantin Khlebnikov)
  - cgroup: forbid mounting cgroups inside ve (Vladimir Davydov)
  - cgroup: adds kernel api stubs (Konstantin Khlebnikov)
  - cgroup: kernel api stubs (Konstantin Khlebnikov) [PSBM-17927]
  - x86/SYSCALL: remove sys32 vm86 warning (Dmitry Guryanov)
  - x86/NMI: introduce dumps via nmi (Dmitry Guryanov)
  - Initial patch commit + compilation fixes (Konstantin Khorenko) [PSBM-33584 PSBM-17651 PSBM-17886 PSBM-17909 PSBM-17918 PSBM-17915 PSBM-17917 PSBM-17914 PSBM-17902 PSBM-17924 PSBM-17926 PSBM-17924 PSBM-17918 PSBM-17930 PSBM-17931 PSBM-17945 PSBM-17960 PSBM-17971 PSBM-18875 PSBM-18876 PSBM-18877 PSBM-17908 PSBM-18878 PSBM-18879 PSBM-18056 PSBM-18882 PSBM-18884 PSBM-18899 PSBM-31125 PSBM-12955 PSBM-20089 PSBM-20089 PSBM-12523 PSBM-41530 OVZ-6600 OVZ-5192 PSBM-32912 PSBM-54816 PSBM-54819 PSBM-54928 PSBM-54928 PSBM-18113]
  - LICENSE: introduce COPYING.Parallels (Dmitry Guryanov)
  - MS/KBD: add file kbd_bind in sysfs, which allow unbind keyboard from tty (v2) (Andrey Vagin)
  - MS/DEVICE: input_mutex isn't static now (Andrey Vagin)
  - MS/NET/IPV6: remove duplicate neigh_ifdown (Vladimir Davydov) [PSBM-13449]
  - MS/MM/SLAB: show slab_info core (Dmitry Guryanov)
  - MS/NSPROXY: removing helper for restoring nsproxy (Konstantin Khlebnikov)
  - MS/IDLE: add boot param to forcibly enable intel auto demotion (Vladimir Davydov) [PSBM-11477]
  - MS/TTY: TIOSAK Secure Attention Key ioctl (Konstantin Khlebnikov) [PSBM-11881]
  - MS/FS/PROC: Drop the MS_RDONLY bit in proc_get_sb() (Stanislav Kinsbursky)
  - MS/FS/DCACHE: move vfs caches to headers (Dmitry Guryanov)
  - MS/DRV: move dev helpers to header (Andrey Vagin)
  - KBUILD: build should fail on modpost errors for external modules (Konstantin Khlebnikov)


