For 2.0, we have a bunch of CVE-related patches sitting in the distgit repos that have never been moved back to the mainline branches (maistra-2.0). We should move them back, because if we start fixing other things in mainline they might not apply cleanly anymore.

Acceptance Criteria:

• Find all patches in the distgit repos for 2.0 and create PRs for them in github
• Remove %patch calls in the specfiles