diff --git a/Makefile.rhelver b/Makefile.rhelver
index 5a29e6c..c406db4 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 2
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 218
+RHEL_RELEASE = 219
 
 #
 # ZSTREAM
@@ -66,4 +66,4 @@ ifneq ("$(ZSTREAM)", "yes")
   endif
 endif
 
-RTBUILD:=.219
+RTBUILD:=.220
diff --git a/kernel-rt-x86_64-debug-rhel.config b/kernel-rt-x86_64-debug-rhel.config
index c084dce..33f7343 100644
--- a/kernel-rt-x86_64-debug-rhel.config
+++ b/kernel-rt-x86_64-debug-rhel.config
@@ -857,7 +857,7 @@ CONFIG_CRYPTO_CRCT10DIF_PCLMUL=m
 CONFIG_CRYPTO_CRYPTD=y
 CONFIG_CRYPTO_CTR=y
 CONFIG_CRYPTO_CTS=y
-# CONFIG_CRYPTO_CURVE25519 is not set
+CONFIG_CRYPTO_CURVE25519=m
 CONFIG_CRYPTO_CURVE25519_X86=m
 CONFIG_CRYPTO_DEFLATE=y
 CONFIG_CRYPTO_DES3_EDE_X86_64=m
diff --git a/kernel-rt-x86_64-rhel.config b/kernel-rt-x86_64-rhel.config
index 1e61787..d41e92f 100644
--- a/kernel-rt-x86_64-rhel.config
+++ b/kernel-rt-x86_64-rhel.config
@@ -857,7 +857,7 @@ CONFIG_CRYPTO_CRCT10DIF_PCLMUL=m
 CONFIG_CRYPTO_CRYPTD=y
 CONFIG_CRYPTO_CTR=y
 CONFIG_CRYPTO_CTS=y
-# CONFIG_CRYPTO_CURVE25519 is not set
+CONFIG_CRYPTO_CURVE25519=m
 CONFIG_CRYPTO_CURVE25519_X86=m
 CONFIG_CRYPTO_DEFLATE=y
 CONFIG_CRYPTO_DES3_EDE_X86_64=m
diff --git a/kernel.spec b/kernel.spec
index f89a160..fba9c55 100755
--- a/kernel.spec
+++ b/kernel.spec
@@ -119,15 +119,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 218.rt14.219
+%define pkgrelease 219.rt14.220
 %define kversion 5
-%define tarfile_release 5.14.0-218.rt14.219.el9
+%define tarfile_release 5.14.0-219.rt14.220.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 218.rt14.219%{?buildid}%{?dist}
+%define specrelease 219.rt14.220%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-218.rt14.219.el9
+%define kabiversion 5.14.0-219.rt14.220.el9
 
 #
 # End of genspec.sh variables
@@ -3236,6 +3236,53 @@ fi
 #
 #
 %changelog
+* Tue Dec 20 2022 Luis Claudio R. Goncalves <lgoncalv@redhat.com> [5.14.0-219.rt14.220.el9]
+- [rt] build kernel-rt-5.14.0-219.rt14.220.el9 [2125474]
+- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (David Arcari) [2119068] {CVE-2022-2873}
+- redhat/configs: Enable CONFIG_CRYPTO_CURVE25519 (Prarit Bhargava) [2030750]
+- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Valentin Schneider) [2153181]
+- vmxnet3: use correct intrConf reference when using extended queues (Izabela Bakollari) [2150922]
+- vmxnet3: correctly report encapsulated LRO packet (Izabela Bakollari) [2150922]
+- net: move from strlcpy with unused retval to strscpy (Izabela Bakollari) [2150922]
+- vmxnet3: Implement ethtool's get_channels command (Izabela Bakollari) [2150922]
+- vmxnet3: Record queue number to incoming packets (Izabela Bakollari) [2150922]
+- powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address (Mamatha Inamdar) [2095499]
+- kernfs: remove redundant kernfs_rwsem declaration. (Luis Claudio R. Goncalves) [2152737]
+- kernfs: fix potential NULL dereference in __kernfs_remove (Luis Claudio R. Goncalves) [2152737]
+- kernfs: fix NULL dereferencing in kernfs_remove (Luis Claudio R. Goncalves) [2152737]
+- kernfs: prevent early freeing of root node (Luis Claudio R. Goncalves) [2152737]
+- kernfs: switch global kernfs_rwsem lock to per-fs lock (Luis Claudio R. Goncalves) [2152737]
+- tracing: Use a copy of the va_list for __assign_vstr() (Íñigo Huguet) [2143357]
+- tracing/events: Add __vstring() and __assign_vstr() helper macros (Íñigo Huguet) [2143357]
+- kunit/memcpy: Avoid pathological compile-time string size (Josef Oskera) [2139493]
+- mips: boot/compressed: use __NO_FORTIFY (Josef Oskera) [2139493]
+- fortify: Fix __compiletime_strlen() under UBSAN_BOUNDS_LOCAL (Josef Oskera) [2139493]
+- string: Introduce strtomem() and strtomem_pad() (Josef Oskera) [2139493]
+- fortify: Provide a memcpy trap door for sharp corners (Josef Oskera) [2139493]
+- fortify: Add Clang support (Josef Oskera) [2139493]
+- fortify: Make sure strlen() may still be used as a constant expression (Josef Oskera) [2139493]
+- fortify: Use __diagnose_as() for better diagnostic coverage (Josef Oskera) [2139493]
+- fortify: Make pointer arguments const (Josef Oskera) [2139493]
+- Compiler Attributes: Add __diagnose_as for Clang (Josef Oskera) [2139493]
+- Compiler Attributes: Add __overloadable for Clang (Josef Oskera) [2139493]
+- fortify: Update compile-time tests for Clang 14 (Josef Oskera) [2139493]
+- fortify: Replace open-coded __gnu_inline attribute (Josef Oskera) [2139493]
+- fortify: Detect struct member overflows in memset() at compile-time (Josef Oskera) [2139493]
+- fortify: Detect struct member overflows in memmove() at compile-time (Josef Oskera) [2139493]
+- fortify: Detect struct member overflows in memcpy() at compile-time (Josef Oskera) [2139493]
+- Compiler Attributes: Add __pass_object_size for Clang (Josef Oskera) [2139493]
+- lib/string_helpers: Introduce kasprintf_strarray() (Josef Oskera) [2139493]
+- string: uninline memcpy_and_pad (Josef Oskera) [2139493]
+- fortify: strlen: Avoid shadowing previous locals (Josef Oskera) [2139493]
+- fortify: Add compile-time FORTIFY_SOURCE tests (Josef Oskera) [2139493]
+- fortify: Allow strlen() and strnlen() to pass compile-time known lengths (Josef Oskera) [2139493]
+- fortify: Prepare to improve strnlen() and strlen() warnings (Josef Oskera) [2139493]
+- fortify: Fix dropped strcpy() compile-time write overflow check (Josef Oskera) [2139493]
+- fortify: Explicitly disable Clang support (Josef Oskera) [2139493]
+- fortify: Move remaining fortify helpers into fortify-string.h (Josef Oskera) [2139493]
+- lib/string: Move helper functions out of string.c (Josef Oskera) [2139493]
+- Redo missing uapi/linux/stddef.h: Add include guards (Patrick Talbert) [2132632]
+
 * Mon Dec 19 2022 Luis Claudio R. Goncalves <lgoncalv@redhat.com> [5.14.0-218.rt14.219.el9]
 - [rt] build kernel-rt-5.14.0-218.rt14.219.el9 [2125474]
 - arm64: tegra: Mark BPMP channels as no-memory-wc (Al Stone) [2129151]
diff --git a/sources b/sources
index f3018a8..c1eed71 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
 SHA512 (kernel-abi-whitelists-5.13.0-1.tar.bz2) = ceba454e1f590c1e4ef4115a75463ae3ac2c2aa7ec85fa14a2669d666c421483a38225ee19d7d72b4ac7032375741408b23543e43588538c80161ec0cf57051c
-SHA512 (linux-5.14.0-218.rt14.219.el9.tar.xz) = c1b6f63858ff46bdc42c71f769476f3398f00af9ff4c2c1acabbd6959ad26af5e7ddc850be01d3a2cb96a172500b8e1967c2203fb4f85ecab53f9e99ba344354
-SHA512 (kernel-abi-stablelists-5.14.0-218.rt14.219.el9.tar.bz2) = 38710c39d667170005b1c2bc78f74c15d790255194c45682d667b2802ef61aa5aa4e4fd937b4d5989120d5eb64155141a9930dcface0cefae2e48fb77b82a11f
-SHA512 (kernel-kabi-dw-5.14.0-218.rt14.219.el9.tar.bz2) = 565f812fa83a756ef7b91219031cfe80b1e853f22b4ed38ada76aed482caaf89df35e4d220f45728392765a757f8b0798e3b5a57fee0114e1d0379e887772578
+SHA512 (linux-5.14.0-219.rt14.220.el9.tar.xz) = 6a129f7fe8a1cc01a63ddf6d57e203dfb023967953d10de6c128a54cfdc10e69c81467362dd91cc1db15c29f8d53d61e6cc48f075606ca3070a9fe51646a25bc
+SHA512 (kernel-abi-stablelists-5.14.0-219.rt14.220.el9.tar.bz2) = 6bcd13176c37986a49f00881b11cda8fdee6d84b8cfbc0a318e61e6ed247f0f19016cac2a20c206ce38307802aba30a32ed97f668d101d32ddf56ba02ced15d9
+SHA512 (kernel-kabi-dw-5.14.0-219.rt14.220.el9.tar.bz2) = 565f812fa83a756ef7b91219031cfe80b1e853f22b4ed38ada76aed482caaf89df35e4d220f45728392765a757f8b0798e3b5a57fee0114e1d0379e887772578