diff --git a/.gitignore b/.gitignore
index f807a75..63009d9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
-SOURCES/kernel-rt-3.10.0-862.rt56.804.tar.xz
+SOURCES/kernel-rt-3.10.0-862.2.3.rt56.806.tar.xz
SOURCES/rheldup3.x509
SOURCES/rhelkpatch1.x509
diff --git a/.kernel-rt.metadata b/.kernel-rt.metadata
index 9c4689e..f5196b9 100644
--- a/.kernel-rt.metadata
+++ b/.kernel-rt.metadata
@@ -1,3 +1,3 @@
-02dd3c45f1ec6cc6864a8c2b923db6152241f9f3 SOURCES/kernel-rt-3.10.0-862.rt56.804.tar.xz
+3ee3e2b1e29d16f8e947daa0f22948bfaf83f65f SOURCES/kernel-rt-3.10.0-862.2.3.rt56.806.tar.xz
95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509
d90885108d225a234a5a9d054fc80893a5bd54d0 SOURCES/rhelkpatch1.x509
diff --git a/SPECS/kernel-rt.spec b/SPECS/kernel-rt.spec
index 56c496e..dfeb1b0 100644
--- a/SPECS/kernel-rt.spec
+++ b/SPECS/kernel-rt.spec
@@ -4,15 +4,13 @@
Summary: The Linux Realtime kernel
# catch building on Fedora
-%if "%{?dist}" == "" || "0%{?fedora}" != "0"
%global dist .el7
-%endif
# realtimeN
-%global rtbuild 804
+%global rtbuild 806
# RHEL7 build number
-%global rhel_build 862
+%global rhel_build 862.2.3
# The preempt RT patch level
%global rttag rt56
@@ -1400,6 +1398,55 @@ fi
%endif
%changelog
+* Mon Apr 30 2018 Clark Williams <williams@redhat.com> [3.10.0-862.2.3.rt56.806.el7]
+- [rt] Update source tree to match RHEL 7.5 tree [1549768 1462329]
+- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
+- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
+
+* Fri Apr 13 2018 Luis Claudio R. Goncalves <lgoncalv@redhat.com> [3.10.0-862.1.1.rt56.805.el7]
+- [rt] Update source tree to match RHEL 7.5 tree [1549768 1462329]
+- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
+- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
+- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
+- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
+- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
+- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
+- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
+- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
+- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
+- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
+- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
+- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
+- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
+- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags & wrapper (Mauricio Oliveira) [1563096 1553927]
+- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
+- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
+- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
+- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
+- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
+- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
+- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
+- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
+- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
+- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
+- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
+- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
+- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
+- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
+- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
+- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
+- [crypto] chelsio: make skb_put & friends return void pointers (Arjun Vynipadath) [1561899 1548047]
+- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
+- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
+- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
+- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
+- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
+- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
+- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
+- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
+- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
+- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}
+
* Thu Mar 22 2018 Luis Claudio R. Goncalves <lgoncalv@redhat.com> [3.10.0-862.rt56.804.el7]
- [rt] Update source tree to match RHEL 7.5 tree [1462329]
- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]