# changelog

author: Johnnny Hughes <johnny@centos.org> - 4.9.20-203
changelog:
  - upgraded to upstream 4.9.20 LTS
  - removed patches 428 and 861 (now in upstream kernel)
  - switched CONFIG_RTC_DRV_SUN6I on aarch64 and armv7 from m to y.


author: Johnny Hughes <johnny@centos.org> - 4.9.24-203
changelog:
  - upgraded to upsream 4.9.24 LTS
  - Removed Patches 425, 855, 858 and 859 as they are now upstream
  - Added 'CONFIG_DEVPORT is not set' to config-generic (new config
    option for 4.9.24).  That is the Fedora 25 setting for DEVPORT


author: Johnny Hughes <johnny@centos.org> 4.9.57-204
changelog:
  - upgraded to upstream 4.9.57 LTS
  - Make sure to install objtool in -devel subpackage if it exists (rhbz 1321628)


author: Pablo Greco <pablo@fliagreco.com.ar> - 4.14.104-v1.el7
changelog:
  - Rebase to LTS 4.14.104
  - Fix postun script (https://lists.centos.org/pipermail/arm-dev/2019-March/003748.html)


author: Coty Sutherland <csutherl@redhat.com> - 0:7.0.69-9
changelog:
  - Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
  - Resolves: rhbz#1368122


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-2
changelog:
  - Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
  - Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-3
changelog:
  - Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
  - Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
  - Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-5
changelog:
  - Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
  - Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user


