Apply debranding changes
Roll in i686 mods
audit-stop-scri-stack-frame.patch [puias]
32bit-Werror-warnings.patch [bug#12412]
32bit.patch [ay]
7-4.patch [T.Kabe, bug#13890]
efi-32bit.patch [ay]
spec_ctrl_i686.patch [T.Kabe bug#14353]
862.3.2) [pgreco]
862.11.6) [pgreco, bug#15174]
32bit-fixes-7_8.patch [puias+bug#12412]
i686-rate-7_8.patch [pgreco]
i686-mce-7_8.patch [pgreco]
Modify config file for x86_64 with extra features turned on including
Add in a patch that allows non-LogiTech remote to work [bug#5780]
JFS enabled [bug#7350]
NUMACHIP enabled [bug#7498]
AIC7xxx enabled [bug#7552]
Enabled via_velocity [bug#7877]
Add in a patch that fixes em28xx-cards [bug#8285]
Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
Enabled Keyboard GPIO [bug#9063]
Enabled XEN_FBDEV_FRONTEND [bug#9463]
Enabled LINE6_USB [bug#9569]
Enabled I2C_MUX [bug#9592]
Enabled spidev [bug#9955]
Add a patch [bug#10447]
Enable ATM drivers [bug#10845]
Add 9pfs config options [bug#10849]
Enable VFIO_PCI_VGA [bug#12435]
Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
Add a patch from [bug#12841]
Add a patch from [bug#12818]
Enabled RT2800USB_RT3573 [bug#13162]
Enable LDM_PARTITION [bug#13526]
Add a patch to fix misleading warning [bug#13990]
Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
Add a patch to fix build errors for EL7.5 [bug#14425]
Added a patch to fix alsa potentail crash [bug14779]
Add a patch to fix race in virtio_balloon [bug#15216]
Add shim requirement to the spec file for x86_64
Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
Add an i686 patch to fix Hyper-V issue [bug#15374]
Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
Apply a patch to fix cifs [bug#16824]
Added a triggerin scriptlet to rebuild the initramfs image
wireguard added
UEFI disabled in 32-bit kernel

cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
redhat: genspec: generate changelog entries since last release (Augusto Caringi)

CI: Merge configuration (Veronika Kabatova)
[pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
[pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]

futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]

CI: Disable result checking for realtime check (Veronika Kabatova)
CI: Explicitly disable result checking for private CI (Veronika Kabatova)
CI: Rename variable (Veronika Kabatova)
mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}

Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
[s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]

mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]

pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}

drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]

i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]

video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)

selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
md: fix md io stats accounting broken (Ming Lei) [1927106]
redhat: Fix realtime_check for -private (Juri Lelli)

redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
redhat: Enable CKI RT verification (Juri Lelli)
RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]

scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
redhat: add CI file for kernel-private (Bruno Meneguele)

tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]

mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]