diff --git a/.gitignore b/.gitignore
index 6471c4e..db01fcd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,5 @@
SOURCES/kernel-abi-whitelists-1160.tar.bz2
SOURCES/kernel-kabi-dw-1160.tar.bz2
-SOURCES/linux-3.10.0-1160.83.1.el7.tar.xz
+SOURCES/linux-3.10.0-1160.88.1.el7.tar.xz
SOURCES/rheldup3.x509
SOURCES/rhelkpatch1.x509
diff --git a/.kernel.metadata b/.kernel.metadata
index cbdcf0c..3982353 100644
--- a/.kernel.metadata
+++ b/.kernel.metadata
@@ -1,5 +1,5 @@
ba5599148e52ecd126ebcf873672e26d3288323e SOURCES/kernel-abi-whitelists-1160.tar.bz2
5000b85c42ef87b6835dd8eef063e4623c2e0fa9 SOURCES/kernel-kabi-dw-1160.tar.bz2
-b8c67631fd35d6a2d8e8a9dd30ae39420f9276ed SOURCES/linux-3.10.0-1160.83.1.el7.tar.xz
+4b2ec3a711793136f6d58a0656c6f384804f64c8 SOURCES/linux-3.10.0-1160.88.1.el7.tar.xz
95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509
d90885108d225a234a5a9d054fc80893a5bd54d0 SOURCES/rhelkpatch1.x509
diff --git a/README.debrand b/README.debrand
deleted file mode 100644
index 01c46d2..0000000
--- a/README.debrand
+++ /dev/null
@@ -1,2 +0,0 @@
-Warning: This package was configured for automatic debranding, but the changes
-failed to apply.
diff --git a/SOURCES/Makefile.common b/SOURCES/Makefile.common
index c725a4f..16eb1fb 100644
--- a/SOURCES/Makefile.common
+++ b/SOURCES/Makefile.common
@@ -9,7 +9,7 @@ RPMVERSION:=3.10.0
# marker is git tag which we base off of for exporting patches
MARKER:=v3.10
PREBUILD:=
-BUILD:=1160.83.1
+BUILD:=1160.88.1
DIST:=.el7
SPECFILE:=kernel.spec
RPM:=$(REDHAT)/rpm
diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
index af1d0b5..ead7175 100644
--- a/SPECS/kernel.spec
+++ b/SPECS/kernel.spec
@@ -20,10 +20,10 @@ Summary: The Linux kernel
%global distro_build 1160
%define rpmversion 3.10.0
-%define pkgrelease 1160.83.1.el7
+%define pkgrelease 1160.88.1.el7
# allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 1160.83.1%{?dist}
+%define specrelease 1160.88.1%{?dist}
%define pkg_release %{specrelease}%{?buildid}
@@ -1804,6 +1804,44 @@ fi
%kernel_variant_files %{with_kdump} kdump
%changelog
+* Sat Feb 18 2023 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]
+- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
+- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
+- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]
+
+* Fri Feb 10 2023 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]
+- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
+- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
+- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
+- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
+- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
+- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
+- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
+- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
+- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
+- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
+- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
+
+* Thu Feb 02 2023 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]
+- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
+- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
+- gitlab-ci: use CI templates from production branch (Michael Hofmann)
+- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
+- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
+- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
+- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]
+
+* Thu Jan 19 2023 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]
+- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
+- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
+- sctp: handle errors when updating asoc (Xin Long) [2054037]
+- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
+- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]
+
+* Thu Jan 12 2023 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]
+- blk-mq: fix flush-rq race (Ming Lei) [2088029]
+- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]
+
* Mon Dec 19 2022 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]
- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]