Apply debranding changes
Roll in i686 mods
audit-stop-scri-stack-frame.patch [puias]
32bit-Werror-warnings.patch [bug#12412]
32bit.patch [ay]
7-4.patch [T.Kabe, bug#13890]
efi-32bit.patch [ay]
spec_ctrl_i686.patch [T.Kabe bug#14353]
862.3.2) [pgreco]
862.11.6) [pgreco, bug#15174]
32bit-fixes-7_8.patch [puias+bug#12412]
i686-rate-7_8.patch [pgreco]
i686-mce-7_8.patch [pgreco]
Modify config file for x86_64 with extra features turned on including
Add in a patch that allows non-LogiTech remote to work [bug#5780]
JFS enabled [bug#7350]
NUMACHIP enabled [bug#7498]
AIC7xxx enabled [bug#7552]
Enabled via_velocity [bug#7877]
Add in a patch that fixes em28xx-cards [bug#8285]
Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
Enabled Keyboard GPIO [bug#9063]
Enabled XEN_FBDEV_FRONTEND [bug#9463]
Enabled LINE6_USB [bug#9569]
Enabled I2C_MUX [bug#9592]
Enabled spidev [bug#9955]
Add a patch [bug#10447]
Enable ATM drivers [bug#10845]
Add 9pfs config options [bug#10849]
Enable VFIO_PCI_VGA [bug#12435]
Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
Add a patch from [bug#12841]
Add a patch from [bug#12818]
Enabled RT2800USB_RT3573 [bug#13162]
Enable LDM_PARTITION [bug#13526]
Add a patch to fix misleading warning [bug#13990]
Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
Add a patch to fix build errors for EL7.5 [bug#14425]
Added a patch to fix alsa potentail crash [bug14779]
Add a patch to fix race in virtio_balloon [bug#15216]
Add shim requirement to the spec file for x86_64
Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
Add an i686 patch to fix Hyper-V issue [bug#15374]
Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
Apply a patch to fix cifs [bug#16824]
Added a triggerin scriptlet to rebuild the initramfs image
wireguard added
UEFI disabled in 32-bit kernel

mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]

pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}

drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]

i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]

video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)

selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
md: fix md io stats accounting broken (Ming Lei) [1927106]
redhat: Fix realtime_check for -private (Juri Lelli)

redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
redhat: Enable CKI RT verification (Juri Lelli)
RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]

scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
redhat: add CI file for kernel-private (Bruno Meneguele)

tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]

mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]

[pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
[pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
[tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
[tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
[tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
[tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
[tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
[tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
[iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
[iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
[iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
[scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
[scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
[scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
[netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]

[md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
[md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
[kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
[x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
[x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
[md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
[gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}

[kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
[nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
[net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
[net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}

[fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
[target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
[ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
[netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
[kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}

[x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
[scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
[video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
[video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
[scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
[scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
[s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]