The statedump fixes are quite coupled together with each other and much easier to backport in one go.
CAs from statedump signed by external CA cannot be initialised
Inconsistent skip options for state dump import
Unable to edit uninitialised CVC CA subject DN
Overwriting a CA with StateDump can leave cert/ee profiles in an invisible state
renameRole() tries to change primary key and triggers a HibernateException
Implement statedump Subject DN renaming properly inside EJBCA
Create CryptoToken key aliases (needed for InternalKeyBindings) during statedump import