diff --git a/.gitignore b/.gitignore
index aaa8dda..2c7c773 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
-SOURCES/kernel-rt-3.10.0-1062.1.2.rt56.1025.tar.xz
+SOURCES/kernel-rt-3.10.0-1062.4.1.rt56.1027.tar.xz
 SOURCES/rheldup3.x509
 SOURCES/rhelkpatch1.x509
diff --git a/.kernel-rt.metadata b/.kernel-rt.metadata
index a5d77db..252d6e3 100644
--- a/.kernel-rt.metadata
+++ b/.kernel-rt.metadata
@@ -1,3 +1,3 @@
-53e22021b079ce01a587b9b87a932ad1b7ceb1d0 SOURCES/kernel-rt-3.10.0-1062.1.2.rt56.1025.tar.xz
+ce5d7f5a6437e8f11d9f9a6081ddcf6229897b27 SOURCES/kernel-rt-3.10.0-1062.4.1.rt56.1027.tar.xz
 95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509
 d90885108d225a234a5a9d054fc80893a5bd54d0 SOURCES/rhelkpatch1.x509
diff --git a/SOURCES/kernel-3.10.0-x86_64-rt-debug.config b/SOURCES/kernel-3.10.0-x86_64-rt-debug.config
index d0d6397..8c6f575 100644
--- a/SOURCES/kernel-3.10.0-x86_64-rt-debug.config
+++ b/SOURCES/kernel-3.10.0-x86_64-rt-debug.config
@@ -415,6 +415,7 @@ CONFIG_PARAVIRT_SPINLOCKS=y
 # CONFIG_XEN is not set
 # CONFIG_XEN_PRIVILEGED_GUEST is not set
 CONFIG_KVM_GUEST=y
+CONFIG_ARCH_CPUIDLE_HALTPOLL=y
 # CONFIG_KVM_DEBUG_FS is not set
 CONFIG_PARAVIRT_TIME_ACCOUNTING=y
 CONFIG_PARAVIRT_CLOCK=y
@@ -705,6 +706,8 @@ CONFIG_CPU_IDLE=y
 # CONFIG_CPU_IDLE_MULTIPLE_DRIVERS is not set
 # CONFIG_CPU_IDLE_GOV_LADDER is not set
 CONFIG_CPU_IDLE_GOV_MENU=y
+CONFIG_CPU_IDLE_GOV_HALTPOLL=y
+CONFIG_HALTPOLL_CPUIDLE=m
 # CONFIG_ARCH_NEEDS_CPU_IDLE_COUPLED is not set
 CONFIG_INTEL_IDLE=y
 
diff --git a/SOURCES/kernel-3.10.0-x86_64-rt-trace.config b/SOURCES/kernel-3.10.0-x86_64-rt-trace.config
index 929a3b7..267f4af 100644
--- a/SOURCES/kernel-3.10.0-x86_64-rt-trace.config
+++ b/SOURCES/kernel-3.10.0-x86_64-rt-trace.config
@@ -414,6 +414,7 @@ CONFIG_PARAVIRT_SPINLOCKS=y
 # CONFIG_XEN is not set
 # CONFIG_XEN_PRIVILEGED_GUEST is not set
 CONFIG_KVM_GUEST=y
+CONFIG_ARCH_CPUIDLE_HALTPOLL=y
 # CONFIG_KVM_DEBUG_FS is not set
 CONFIG_PARAVIRT_TIME_ACCOUNTING=y
 CONFIG_PARAVIRT_CLOCK=y
@@ -704,6 +705,8 @@ CONFIG_CPU_IDLE=y
 # CONFIG_CPU_IDLE_MULTIPLE_DRIVERS is not set
 # CONFIG_CPU_IDLE_GOV_LADDER is not set
 CONFIG_CPU_IDLE_GOV_MENU=y
+CONFIG_CPU_IDLE_GOV_HALTPOLL=y
+CONFIG_HALTPOLL_CPUIDLE=m
 # CONFIG_ARCH_NEEDS_CPU_IDLE_COUPLED is not set
 CONFIG_INTEL_IDLE=y
 
diff --git a/SOURCES/kernel-3.10.0-x86_64-rt.config b/SOURCES/kernel-3.10.0-x86_64-rt.config
index 5d21ebf..15d15cb 100644
--- a/SOURCES/kernel-3.10.0-x86_64-rt.config
+++ b/SOURCES/kernel-3.10.0-x86_64-rt.config
@@ -414,6 +414,7 @@ CONFIG_PARAVIRT_SPINLOCKS=y
 # CONFIG_XEN is not set
 # CONFIG_XEN_PRIVILEGED_GUEST is not set
 CONFIG_KVM_GUEST=y
+CONFIG_ARCH_CPUIDLE_HALTPOLL=y
 # CONFIG_KVM_DEBUG_FS is not set
 CONFIG_PARAVIRT_TIME_ACCOUNTING=y
 CONFIG_PARAVIRT_CLOCK=y
@@ -704,6 +705,8 @@ CONFIG_CPU_IDLE=y
 # CONFIG_CPU_IDLE_MULTIPLE_DRIVERS is not set
 # CONFIG_CPU_IDLE_GOV_LADDER is not set
 CONFIG_CPU_IDLE_GOV_MENU=y
+CONFIG_CPU_IDLE_GOV_HALTPOLL=y
+CONFIG_HALTPOLL_CPUIDLE=m
 # CONFIG_ARCH_NEEDS_CPU_IDLE_COUPLED is not set
 CONFIG_INTEL_IDLE=y
 
diff --git a/SPECS/kernel-rt.spec b/SPECS/kernel-rt.spec
index ace6fb7..87088df 100644
--- a/SPECS/kernel-rt.spec
+++ b/SPECS/kernel-rt.spec
@@ -7,10 +7,10 @@ Summary: The Linux Realtime kernel
 %global dist .el7
 
 # realtimeN
-%global rtbuild 1025
+%global rtbuild 1027
 
 # RHEL7 build number
-%global rhel_build 1062.1.2
+%global rhel_build 1062.4.1
 
 # The preempt RT patch level
 %global rttag rt56
@@ -1433,10 +1433,92 @@ fi
 %endif
 
 %changelog
-* Mon Sep 16 2019 Luis Claudio R. Goncalves <lgoncalv@redhat.com> [3.10.0-1062.1.2.rt56.1025.el7]
+* Wed Sep 25 2019 Luis Claudio R. Goncalves <lgoncalv@redhat.com> [3.10.0-1062.4.1.rt56.1027.el7]
 - [rt] Update source tree to match RHEL rhel-7.7.z tree [1740918 1708718]
 - [vhost] vhost: make sure log_num < in_num (Eugenio Perez) [1750879 1750880] {CVE-2019-14835}
 
+* Tue Sep 17 2019 Luis Claudio R. Goncalves <lgoncalv@redhat.com> [3.10.0-1062.3.1.rt56.1026.el7]
+- [rt] Update source tree to match RHEL rhel-7.7.z tree [1740918 1708718]
+- [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
+- [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
+- [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
+- [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
+- [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
+- [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
+- [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
+- [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
+- [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
+- [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
+- [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
+- [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
+- [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
+- [block] block: blk_init_allocated_queue() set q->fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
+- [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
+- [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
+- [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
+- [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
+- [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
+- [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
+- [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
+- [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
+- [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
+- [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
+- [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
+- [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
+- [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
+- [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
+- [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
+- [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
+- [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
+- [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
+- [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
+- [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
+- [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
+- [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
+- [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
+- [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
+- [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
+- [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
+- [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
+- [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
+- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
+- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
+- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
+- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
+- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
+- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
+- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
+- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
+- [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
+- [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
+- [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
+- [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
+- [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
+- [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
+- [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
+- [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
+- [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
+- [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
+- [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
+- [ipc] standardize code comments (Waiman Long) [1740178 1373519]
+- [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
+- [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
+- [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
+- [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
+- [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
+- [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
+- [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
+- [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
+- [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
+- [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
+- [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
+- [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]
+
+* Mon Aug 26 2019 Luis Claudio R. Goncalves <lgoncalv@redhat.com> [3.10.0-1062.2.1.rt56.1025.el7]
+- [rt] Update source tree to match RHEL rhel-7.7.z tree [1740918 1708718]
+- [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
+- [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]
+
 * Wed Aug 14 2019 Luis Claudio R. Goncalves <lgoncalv@redhat.com> [3.10.0-1062.1.1.rt56.1024.el7]
 - [rt] timers: condense pending bitmap information (Marcelo Tosatti) [1690543 1550584]
 - [rt] timers: do not raise softirq unconditionally (spinlockless version) (Marcelo Tosatti) [1690543 1550584]