Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)

Address important covscan issues (#1996665), vol. 2

Address important covscan issues (#1996665)

Add support for read-only sqlite rpmdb (#1938928)
Drop compat .decode() method from returned Py3 strings (#1840142)

Add out-of-bounds checks to hdrblobInit() (#1929445)
Fixes CVE-2021-20266
Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)

Be more careful about copying data from signature header (#1958477)
Fixes CVE-2021-20271

Fix minor issues found by COVSCAN in fapolicyd plugin
Actually honor libarchive bcond at configure time (#1902887)

Bump up the limit of signature header to 64MB (#1918777)
Add fapolicyd plugin (#1923167)
Unblock signals in forked scriptlets (#1913765)
Fix ambiguous diagnostics output on file triggers (#1883338)
Ensure ELF files get stripped when debuginfo is disabled (#1634084)

Rebuild for libimaevm soname bump, now for real (#1896046)

Add limits to autopatch macro (#1834931)

Rebuild for libimaevm soname bump (#1896046)

Don't error out when replacing an invalid signature (#1874062)
Raise an expection when erasing a package fails in Python (#1872623)
Fix builds on NFS filesystems (#1840728)

Fix hang when signing with expired key (#1746353)

Fix configure option for --with ndb (#1817010, Matthew Almond)

Re-add selinux fix dropped in rebase

Rebase to 4.14.3 (#1765187)