ovmf-MdeModulePkg-HiiDatabase-Fix-potential-integer-overf.patch [bz#1691479]
ovmf-MdeModulePkg-HiiImage-Fix-stack-overflow-when-corrup.patch [bz#1691479]
ovmf-MdeModulePkg-PartitionDxe-Add-check-for-underlying-d.patch [bz#1691647]
ovmf-MdeModulePkg-UdfDxe-Refine-boundary-checks-for-file-.patch [bz#1691647]
ovmf-MdeModulePkg-UdfDxe-Add-boundary-check-the-read-of-F.patch [bz#1691647]
ovmf-MdeModulePkg-UdfDxe-Add-boundary-check-for-Component.patch [bz#1691647]
ovmf-MdeModulePkg-UdfDxe-Add-boundary-check-for-getting-v.patch [bz#1691647]
ovmf-MdeModulePkg-UsbBusDxe-Fix-wrong-buffer-length-used-.patch [bz#1697534]
Resolves: bz#1691479
2018-12181 OVMF: edk2: Stack buffer overflow with corrupted BMP [rhel-7])
Resolves: bz#1691647
2019-0160 OVMF: edk2: buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media [rhel-7])
Resolves: bz#1697534
2019-0161 ovmf: edk2: stack overflow in XHCI causing denial of service [rhel-7])

ovmf-MdeModulePkg-Variable-Fix-Timestamp-zeroing-issue-on.patch [bz#1666586]
ovmf-MdePkg-Add-more-checker-in-UefiDecompressLib-to-acce.patch [bz#1666586]
ovmf-IntelFrameworkModulePkg-Add-more-checker-in-UefiTian.patch [bz#1666586]
ovmf-BaseTools-Add-more-checker-in-Decompress-algorithm-t.patch [bz#1666586]
ovmf-BaseTools-Fix-UEFI-and-Tiano-Decompression-logic-iss.patch [bz#1666586]
ovmf-MdePkg-BaseUefiDecompressLib-Fix-UEFI-Decompression-.patch [bz#1666586]
ovmf-IntelFrameworkModulePkg-Fix-UEFI-and-Tiano-Decompres.patch [bz#1666586]
ovmf-MdeModulePkg-PartitionDxe-Ensure-blocksize-holds-MBR.patch [bz#1684007]
ovmf-MdeModulePkg-RamDiskDxe-Restrict-on-RAM-disk-size-CV.patch [bz#1684007]
ovmf-redhat-openssl-update-introduce-MOCK-shorthand-for-m.patch [bz#1650390]
ovmf-redhat-openssl-update-enable-the-bootstrap-container.patch [bz#1650390]
ovmf-redhat-consume-OpenSSL-1.1.0i-from-Fedora-28.patch [bz#1650390]
ovmf-Upgrade-OpenSSL-to-1.1.0j.patch [bz#1650390]
Resolves: bz#1650390
2018-5407 OVMF: openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) [rhel-7])
Resolves: bz#1666586
2017-5731 CVE-2017-5732 CVE-2017-5733 CVE-2017-5734 CVE-2017-5735 CVE-2018-3613 OVMF: various flaws [rhel-7])
Resolves: bz#1684007
2018-12180 OVMF: edk2: Buffer Overflow in BlockIo service for RAM disk [rhel-7.7])

ovmf-redhat-provide-firmware-descriptor-meta-files.patch [bz#1608599]
Resolves: bz#1608599
files for OVMF)

ovmf-redhat-provide-virtual-bundled-OpenSSL-in-OVMF.patch [bz#1607792]
Resolves: bz#1607792

OvmfPkg/PlatformBootManagerLib: connect consoles unconditionally [bz#1577546]
build OVMF varstore template with SB enabled / certs enrolled [bz#1561128]
connect Virtio RNG devices again [bz#1579518]
Resolves: bz#1577546
Resolves: bz#1561128
Resolves: bz#1579518
rng)

Rebase to [bz#1559542]
Resolves: bz#1559542
7.6)

ovmf-MdeModulePkg-Core-Dxe-log-informative-memprotect-msg.patch [bz#1520485]
ovmf-MdeModulePkg-BdsDxe-fall-back-to-a-Boot-Manager-Menu.patch [bz#1515418]
Resolves: bz#1515418
Resolves: bz#1520485

ovmf-UefiCpuPkg-CpuDxe-Fix-multiple-entries-of-RT_CODE-in.patch [bz#1518308]
ovmf-MdeModulePkg-DxeCore-Filter-out-all-paging-capabilit.patch [bz#1518308]
ovmf-MdeModulePkg-Core-Merge-memory-map-after-filtering-p.patch [bz#1518308]
Resolves: bz#1518308

ovmf-MdeModulePkg-Bds-Remove-assertion-in-BmCharToUint.patch [bz#1513632]
ovmf-MdeModulePkg-Bds-Check-variable-name-even-if-OptionN.patch [bz#1513632]
ovmf-MdeModulePkg-PciBus-Fix-bug-that-PCI-BUS-claims-too-.patch [bz#1514105]
ovmf-OvmfPkg-make-it-a-proper-BASE-library.patch [bz#1488247]
ovmf-OvmfPkg-create-a-separate-PlatformDebugLibIoPort-ins.patch [bz#1488247]
ovmf-OvmfPkg-save-on-I-O-port-accesses-when-the-debug-por.patch [bz#1488247]
ovmf-OvmfPkg-enable-DEBUG_VERBOSE-RHEL-only.patch [bz#1488247]
ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-QemuVide.patch [bz#1488247]
ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-NvmExpre.patch [bz#1488247]
ovmf-Revert-redhat-introduce-separate-silent-and-verbose-.patch [bz#1488247]
Resolves: bz#1488247
op unless a debug console is active)
Resolves: bz#1513632
ALT 7.5] AAVMF fails to boot after setting BootNext)
Resolves: bz#1514105
claim resources)

Rebase to 92d07e48907f [bz#1469787]
Resolves: bz#1469787
rebase-rhel-7.5) Rebase OVMF for RHEL-7.5)
Resolves: bz#1434740
Resolves: bz#1434747
Resolves: bz#1447027
Resolves: bz#1458192
storage" devices in XHCI ports)
Resolves: bz#1468526
Resolves: bz#1488247
Resolves: bz#1496170

ovmf-OvmfPkg-EnrollDefaultKeys-update-SignatureOwner-GUID.patch [bz#1443351]
ovmf-OvmfPkg-EnrollDefaultKeys-expose-CertType-parameter-.patch [bz#1443351]
ovmf-OvmfPkg-EnrollDefaultKeys-blacklist-empty-file-in-db.patch [bz#1443351]
ovmf-OvmfPkg-introduce-the-FD_SIZE_IN_KB-macro-build-flag.patch [bz#1443351]
ovmf-OvmfPkg-OvmfPkg.fdf.inc-extract-VARS_LIVE_SIZE-and-V.patch [bz#1443351]
ovmf-OvmfPkg-introduce-4MB-flash-image-mainly-for-Windows.patch [bz#1443351]
ovmf-OvmfPkg-raise-max-variable-size-auth-non-auth-to-33K.patch [bz#1443351]
ovmf-OvmfPkg-PlatformPei-handle-non-power-of-two-spare-si.patch [bz#1443351]
ovmf-redhat-update-local-build-instructions-with-D-FD_SIZ.patch [bz#1443351]
ovmf-redhat-update-OVMF-build-commands-with-D-FD_SIZE_4MB.patch [bz#1443351]
Resolves: bz#1443351

ovmf-ShellPkg-Shell-clean-up-bogus-member-types-in-SPLIT_.patch [bz#1442908]
ovmf-ShellPkg-Shell-eliminate-double-free-in-RunSplitComm.patch [bz#1442908]
Resolves: bz#1442908

ovmf-ArmVirtPkg-FdtClientDxe-supplement-missing-EFIAPI-ca.patch [bz#1430262]
ovmf-ArmVirtPkg-ArmVirtPL031FdtClientLib-unconditionally-.patch [bz#1430262]
ovmf-MdeModulePkg-RamDiskDxe-fix-C-string-literal-catenat.patch [bz#1430262]
ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-ACPI-GUID.patch [bz#1430262]
ovmf-EmbeddedPkg-introduce-PlatformHasAcpiLib.patch [bz#1430262]
ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-Device-Tree.patch [bz#1430262]
ovmf-ArmVirtPkg-add-PlatformHasAcpiDtDxe.patch [bz#1430262]
ovmf-ArmVirtPkg-enable-AcpiTableDxe-and-EFI_ACPI_TABLE_PR.patch [bz#1430262]
ovmf-ArmVirtPkg-FdtClientDxe-install-DT-as-sysconfig-tabl.patch [bz#1430262]
ovmf-ArmVirtPkg-PlatformHasAcpiDtDxe-don-t-expose-DT-if-Q.patch [bz#1430262]
ovmf-ArmVirtPkg-remove-PURE_ACPI_BOOT_ENABLE-and-PcdPureA.patch [bz#1430262]
Resolves: bz#1430262

ovmf-MdeModulePkg-Core-Dxe-downgrade-CodeSegmentCount-is-.patch [bz#1433428]
Resolves: bz#1433428

Rebase to upstream c325e41585e3 [bz#1416919]
Resolves: bz#1373812
Resolves: bz#1380282
1.0.2k-hobbled)
Resolves: bz#1412313
Resolves: bz#1416919
7.4)
Resolves: bz#1426330

rework downstream-only commit dde83a75b566 "setup the tree for the secure
encumbered files from the
rework downstream-only commit dfc3ca1ee509 "CryptoPkg/OpensslLib: Upgrade
encumbered files from the