$ git diff --patch-with-stat --summary 9ae2040a0a71e561c49819edd7f5f00e588082a4..b220d5129c4839f3e41a8760af26cc9d399a9416

 .abf.yml             | 2 +-
 common.config        | 2 +-
 i386-common.config   | 2 ++
 kernel-release.spec  | 5 ++---
 x86_64-common.config | 2 ++
 5 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/.abf.yml b/.abf.yml
index 9297cbc..3ad3796 100644
--- a/.abf.yml
+++ b/.abf.yml
@@ -1,5 +1,5 @@
 sources:
   linux-4.14.tar.sign: 05874429ec327eddcc43057d0cf1072eabce8d03
   linux-4.14.tar.xz: c64d80ad01a6a77bf46bce1bdc5c7f28bfb6bfd5
-  patch-4.14.11.xz: bf0e89f57aca13a2f31bdefa39527b503ab5b47c
+  patch-4.14.13.xz: 41252e31940646bc2ada4f66863419f295ce8bbc
   saa716x-driver.tar.xz: 603d6e561f6c09b19b05ca53b55458caad849c97
diff --git a/common.config b/common.config
index ef3afe1..14e0c8d 100644
--- a/common.config
+++ b/common.config
@@ -8902,7 +8902,7 @@ CONFIG_ZX2967_WATCHDOG=m
 CONFIG_MFD_CPCAP=m
 CONFIG_REGULATOR_CPCAP=m
 # CONFIG_DRM_DEBUG_MM_SELFTEST is not set
-CONFIG_ROCKCHIP_CDN_DP=m
+CONFIG_ROCKCHIP_CDN_DP=y
 CONFIG_DRM_MSM_DSI_14NM_PHY=y
 CONFIG_DRM_TINYDRM=m
 CONFIG_TINYDRM_MI0283QT=m
diff --git a/i386-common.config b/i386-common.config
index c66f7e6..8edd6a2 100644
--- a/i386-common.config
+++ b/i386-common.config
@@ -123,6 +123,8 @@ CONFIG_X86_MCE_AMD=y
 CONFIG_X86_MCE_THRESHOLD=y
 # CONFIG_X86_MCE_INJECT is not set
 CONFIG_X86_THERMAL_VECTOR=y
+CONFIG_BUG_CPU_MELTDOWN=y
+CONFIG_PAGE_TABLE_ISOLATION=y
 
 #
 # Performance monitoring
diff --git a/kernel-release.spec b/kernel-release.spec
index 6453602..86b7944 100644
--- a/kernel-release.spec
+++ b/kernel-release.spec
@@ -6,7 +6,7 @@
 # compose tar.xz name and release
 %define kernelversion	4
 %define patchlevel	14
-%define sublevel	2
+%define sublevel	13
 %define relc		0
 # Only ever wrong on x.0 releases...
 %define previous	%{kernelversion}.%(echo $((%{patchlevel}-1)))
@@ -306,7 +306,7 @@ Patch145:	saa716x-driver-integration.patch
 #Patch200:	0001-ipc-namespace-a-generic-per-ipc-pointer-and-peripc_o.patch
 # NOT YET
 #Patch201:	0002-binder-implement-namepsace-support-for-Android-binde.patch
-Patch250:	4.14-C11.patch
+#Patch250:	4.14-C11.patch
 
 # Patches to external modules
 # Marked SourceXXX instead of PatchXXX because the modules
@@ -350,7 +350,6 @@ input and output, etc. \
 This version is a preview of an upcoming kernel version, and may be helpful if you are using \
 very current hardware.
 
-
 ### Global Requires/Provides
 #%define requires2	dracut >= 026
 %define requires3	kmod >= 12
diff --git a/x86_64-common.config b/x86_64-common.config
index 577ba73..1dd83e1 100644
--- a/x86_64-common.config
+++ b/x86_64-common.config
@@ -82,6 +82,8 @@ CONFIG_X86_MCE_AMD=y
 CONFIG_X86_MCE_THRESHOLD=y
 # CONFIG_X86_MCE_INJECT is not set
 CONFIG_X86_THERMAL_VECTOR=y
+CONFIG_BUG_CPU_MELTDOWN=y
+CONFIG_PAGE_TABLE_ISOLATION=y
 
 #
 # Performance monitoring