Apply debranding changes
Roll in i686 mods
audit-stop-scri-stack-frame.patch [puias]
32bit-Werror-warnings.patch [bug#12412]
32bit.patch [ay]
7-4.patch [T.Kabe, bug#13890]
efi-32bit.patch [ay]
spec_ctrl_i686.patch [T.Kabe bug#14353]
862.3.2) [pgreco]
862.11.6) [pgreco, bug#15174]
32bit-fixes-7_8.patch [puias+bug#12412]
i686-rate-7_8.patch [pgreco]
i686-mce-7_8.patch [pgreco]
Modify config file for x86_64 with extra features turned on including
Add in a patch that allows non-LogiTech remote to work [bug#5780]
JFS enabled [bug#7350]
NUMACHIP enabled [bug#7498]
AIC7xxx enabled [bug#7552]
Enabled via_velocity [bug#7877]
Add in a patch that fixes em28xx-cards [bug#8285]
Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
Enabled Keyboard GPIO [bug#9063]
Enabled XEN_FBDEV_FRONTEND [bug#9463]
Enabled LINE6_USB [bug#9569]
Enabled I2C_MUX [bug#9592]
Enabled spidev [bug#9955]
Add a patch [bug#10447]
Enable ATM drivers [bug#10845]
Add 9pfs config options [bug#10849]
Enable VFIO_PCI_VGA [bug#12435]
Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
Add a patch from [bug#12841]
Add a patch from [bug#12818]
Enabled RT2800USB_RT3573 [bug#13162]
Enable LDM_PARTITION [bug#13526]
Add a patch to fix misleading warning [bug#13990]
Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
Add a patch to fix build errors for EL7.5 [bug#14425]
Added a patch to fix alsa potentail crash [bug14779]
Add a patch to fix race in virtio_balloon [bug#15216]
Add shim requirement to the spec file for x86_64
Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
Add an i686 patch to fix Hyper-V issue [bug#15374]
Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
Apply a patch to fix cifs [bug#16824]
Added a triggerin scriptlet to rebuild the initramfs image
wireguard added
UEFI disabled in 32-bit kernel

[net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
[net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}

[edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
[edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
[net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
[net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
[netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
[netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
[netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]

[net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
[scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]

[kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
[firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
[kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
[kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]

[kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
[crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
[crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]

[redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []

[fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]

[fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
[include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
[fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
[vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}

[x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
[mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
[fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
[powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
[fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]

[fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
[fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
[fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
[fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
[fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
[fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
[fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
[fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
[fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
[fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
[fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]

[x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
[mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
[mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
[mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
[wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
[wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
[net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]

[nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
[mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
[kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
[fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
[vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
[vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
[vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
[include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
[vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
[vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
[vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
[char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
[kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
[kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
[nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]

[netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
[scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
[hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
[hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
[x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
[mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
[s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
[fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
[kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
[documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
[fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
[scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
[fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}

[netdrv] net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget (Alaa Hleihel) [1845020]
[mm] memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event (Waiman Long) [1842715]
[mm] memcg: only free spare array when readers are done (Waiman Long) [1842715]
[powerpc] powerpc/crashkernel: Take "mem=" option into account (Pingfan Liu) [1751555]
[infiniband] IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode (Kamal Heib) [1597952]
[security] selinux: properly handle multiple messages in selinux_netlink_send() (Ondrej Mosnacek) [1839650] {CVE-2020-10751}
[netdrv] net: ena: Add PCI shutdown handler to allow safe kexec (Bhupesh Sharma) [1841578]
[x86] x86/speculation: Support old struct x86_cpu_id & x86_match_cpu() kABI (Waiman Long) [1827188] {CVE-2020-0543}
[documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827188] {CVE-2020-0543}
[documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827188] {CVE-2020-0543}
[cpufreq] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827188] {CVE-2020-0543}
[x86] x86/cpufeature: Fix various quality problems in the <asm/cpu_device_hd.h> header (Waiman Long) [1827188] {CVE-2020-0543}

[mm] mm/memory_hotplug.c: only respect mem= parameter during boot stage (Joel Savitz) [1838795]
[netdrv] qed: Reduce the severity of ptp debug message (Manish Chopra) [1703770]
[kernel] pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes (Jay Shin) [1836620]
[fs] gfs2: remove BUG_ON() from gfs2_log_alloc_bio() (Abhijith Das) [1828454]
[fs] gfs2: Even more gfs2_find_jhead fixes (Abhijith Das) [1828454]
[fs] quota: fix return value in dqget() (Eric Sandeen) [1842761]
[fs] proc_sysctl.c: fix potential page fault while unregistering sysctl table (Carlos Maiolino) [1843368]
[fs] ext4: fix error handling in ext4_ext_shift_extents (Lukas Czerner) [1843366]
[vhost] vhost: Check docket sk_family instead of call getname (Vladis Dronov) [1823302] {CVE-2020-10942}
[input] hyperv-keyboard - add module description (Mohammed Gamal) [1842689]
[hv] hv: Add a module description line to the hv_vmbus driver (Mohammed Gamal) [1842689]
[hid] hyperv: Add a module description line (Mohammed Gamal) [1842689]
[x86] sched/cputime: Improve cputime_adjust() (Oleg Nesterov) [1511040]
[acpi] ACPI: APEI: call into AER handling regardless of severity (Al Stone) [1737246]
[acpi] ACPI: APEI: handle PCIe AER errors in separate function (Al Stone) [1737246]
[acpi] ras: acpi/apei: cper: add support for generic data v3 structure (Al Stone) [1737246]
[acpi] ACPICA: ACPI 6.1: Updates for the HEST ACPI table (Al Stone) [1737246]
[acpi] ACPI / APEI: Switch to use new generic UUID API (Al Stone) [1737246]
[x86] x86/efi-bgrt: Quirk for BGRT when memory encryption active (Lenny Szubowicz) [1723477]
[scsi] scsi: megaraid_sas: Update driver version to 07.714.04.00-rc1 (Tomas Henzl) [1840550]
[scsi] scsi: megaraid_sas: TM command refire leads to controller firmware crash (Tomas Henzl) [1840550]
[scsi] scsi: megaraid_sas: Replace undefined MFI_BIG_ENDIAN macro with __BIG_ENDIAN_BITFIELD macro (Tomas Henzl) [1840550]
[scsi] scsi: megaraid_sas: Limit device queue depth to controller queue depth (Tomas Henzl) [1840550]
[vfio] vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson) [1820632] {CVE-2020-12888}
[vfio] vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson) [1820632] {CVE-2020-12888}
[vfio] vfio/type1: Support faulting PFNMAP vmas (Alex Williamson) [1820632] {CVE-2020-12888}
[vfio] vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (Alex Williamson) [1820632] {CVE-2020-12888}
[vfio] vfio/pci: call irq_bypass_unregister_producer() before freeing irq (Alex Williamson) [1820632] {CVE-2020-12888}
[vfio] vfio_pci: Enable memory accesses before calling pci_map_rom (Alex Williamson) [1820632] {CVE-2020-12888}
[fs] signal: Extend exec_id to 64bits (Chris von Recklinghausen) [1834650] {CVE-2020-12826}