Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2011.5.3uek]
- misc: pvpanic: add crash loaded event (zhenwei pi) [Orabug: 31677096]
- misc: pvpanic: move bit definition to uapi header file (zhenwei pi) [Orabug: 31677096]
- RDMA/netlink: Do not always generate an ACK for some netlink operations (Hakon Bugge) [Orabug: 31666971]
- bnxt_en: Fix statistics counters issue during ifdown with older firmware. (Michael Chan) [Orabug: 31660919]
- bnxt_en: Do not enable legacy TX push on older firmware. (Michael Chan) [Orabug: 31660919]
- bnxt_en: Store the running firmware version code. (Michael Chan) [Orabug: 31660919]
- uek-rpm: Disable secureboot signing for OL7 aarch64 (Somasundaram Krishnasamy) [Orabug: 31645596]
- PCI: pciehp: Fix indefinite wait on sysfs requests (Lukas Wunner) [Orabug: 31580249]
- x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS. (Anthony Steinhauser) [Orabug: 31557802] {CVE-2020-10767}
- fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Alexander Potapenko) [Orabug: 31350635] {CVE-2020-10732}
- rds/ib: Make i_{recv,send}_hdrs non-contigious (Hans Westgaard Ry) [Orabug: 31648239]
- uek-rpm: disable CONFIG_CRYPTO_DEV_CAVIUM_ZIP (Dave Kleikamp) [Orabug: 31667368]
- vfio-pci: protect remap_pfn_range() from simultaneous calls (Ankur Arora) [Orabug: 31663628] {CVE-2020-12888} {CVE-2020-12888}
- uek-rpm: drivers: enable VMD PCIe controller (Todd Vierling) [Orabug: 31636283]
- Revert 'uek-rpm: Move grub boot menu update to posttrans stage.' (Somasundaram Krishnasamy) [Orabug: 31689621]
- IB/sa: Resolv use-after-free in ib_nl_make_request() (Divya Indi) [Orabug: 31689703]
- certs: Remove Oracle cert compiled into the kernel (Eric Snowberg) [Orabug: 31689566]

[5.4.17-2011.5.2uek]
- drm/i915/gt: Correct mistake in cherry-pick (Jack Vogel) [Orabug: 31211659]
- efi/x86: Add TPM related EFI tables to unencrypted mapping checks (Tom Lendacky) [Orabug: 31627285]
- ocfs2: change slot number type s16 to u16 (Junxiao Bi) [Orabug: 31480603]
- ocfs2: fix value of OCFS2_INVALID_SLOT (Junxiao Bi) [Orabug: 31480603]
- ocfs2: fix panic on nfs server over ocfs2 (Junxiao Bi) [Orabug: 31480603]
- ocfs2: load global_inode_alloc (Junxiao Bi) [Orabug: 31480603]
- ocfs2: avoid inode removal while nfsd is accessing it (Junxiao Bi) [Orabug: 31480603]
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (Dan Carpenter) [Orabug: 31610239]
- scsi: qla2xxx: Keep initiator ports after RSCN (Roman Bolshakov) [Orabug: 31610239]
- scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (Daniel Wagner) [Orabug: 31610239]
- scsi: qla2xxx: Remove return value from qla_nvme_ls() (Daniel Wagner) [Orabug: 31610239]
- scsi: qla2xxx: Remove an unused function (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Fix endianness annotations in source files (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Fix endianness annotations in header files (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Use make_handle() instead of open-coding it (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from upper case into lower case (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Fix the code that reads from mailbox registers (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Use register names instead of register offsets (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Change two hardcoded constants into offsetof() / sizeof() expressions (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to FCP_PRIO_CFG_SIZE (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Simplify the functions for dumping firmware (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Fix spelling of a variable name (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Make qlafx00_process_aen() return void (Jason Yan) [Orabug: 31610239]
- scsi: qla2xxx: Use true, false for ha->fw_dumped (Jason Yan) [Orabug: 31610239]
- scsi: qla2xxx: Use true, false for need_mpi_reset (Jason Yan) [Orabug: 31610239]
- scsi: qla2xxx: Make qla_set_ini_mode() return void (Jason Yan) [Orabug: 31610239]
- scsi: qla2xxx: Fix failure message in qlt_disable_vha() (Viacheslav Dubeyko) [Orabug: 31610239]
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (Colin Ian King) [Orabug: 31610239]
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (Arun Easi) [Orabug: 31610239]
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (Bart Van Assche) [Orabug: 31610239]
- scsi: qla2xxx: Fix regression warnings (Nilesh Javali) [Orabug: 31610239]
- scsi: qla2xxx: Remove non functional code (Daniel Wagner) [Orabug: 31610239]
- scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (Arun Easi) [Orabug: 31610239]
- scsi: qla2xxx: add ring buffer for tracing debug logs (Rajan Shanmugavelu) [Orabug: 31610239]
- scsi: qla2xxx: Update driver version to 10.01.00.25-k (Himanshu Madhani) [Orabug: 31610239]
- scsi: qla2xxx: Set Nport ID for N2N (Quinn Tran) [Orabug: 31610239]
- scsi: qla2xxx: Handle NVME status iocb correctly (Arun Easi) [Orabug: 31610239]
- scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (Quinn Tran) [Orabug: 31610239]
- scsi: qla2xxx: Serialize fc_port alloc in N2N (Quinn Tran) [Orabug: 31610239]
- scsi: qla2xxx: Fix NPIV instantiation after FW dump (Quinn Tran) [Orabug: 31610239]
- scsi: qla2xxx: Fix RDP respond data format (Quinn Tran) [Orabug: 31610239]
- scsi: qla2xxx: Force semaph