Groups > linux.debian.maint.java > #12274

tomcat9 in buster-backports vs. security

Path	csiph.com!newsfeed.xs4all.nl!newsfeed8.news.xs4all.nl!bofh.it!news.nic.it!robomod
From	Thorsten Glaser <t.glaser@tarent.de>
Newsgroups	linux.debian.maint.java
Subject	tomcat9 in buster-backports vs. security
Date	Tue, 10 Aug 2021 22:10:01 +0200
Message-ID	<CKGet-FO-3@gated-at.bofh.it> (permalink)
X-Original-To	debian-java@lists.debian.org
X-Mailbox-Line	From debian-java-request@lists.debian.org Tue Aug 10 20:00:45 2021
Old-Return-Path	<t.glaser@tarent.de>
X-Amavis-Spam-Status	No, score=-6.602 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, KHOP_HELO_FCRDNS=0.398, LDO_WHITELIST=-5] autolearn=ham autolearn_force=no
X-Policyd-Weight	using cached result; rate: -3.5
Content-Language	de-DE-1901
MIME-Version	1.0
Content-Type	text/plain; charset=UTF-8
Content-Transfer-Encoding	QUOTED-PRINTABLE
X-Mailing-List	<debian-java@lists.debian.org> archive/latest/22903
List-ID	<debian-java.lists.debian.org>
List-URL	<https://lists.debian.org/debian-java/>
List-Archive	https://lists.debian.org/msgid-search/438ce4ac-f4f8-f946-1663-b029efae4577@tarent.de
Approved	robomod@news.nic.it
Lines	32
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Cc	debian-backports@lists.debian.org
X-Original-Date	Tue, 10 Aug 2021 22:00:22 +0200 (CEST)
X-Original-Message-ID	<438ce4ac-f4f8-f946-1663-b029efae4577@tarent.de>
Xref	csiph.com linux.debian.maint.java:12274

Show key headers only | View raw

Hi,

the tomcat9 backport is pretty much orphaned: newer tomcat9
versions don’t even build in buster any more¹, and both
bullseye² and buster received security fixes recently.

① One built in bullseye works on buster but that is, of course,
  no option for bpo. (It works for my sysvinit-compatible local
  builds though.)
② Although waiting for -3 before acting would be best.

Markus, Emmanuel, are you going to update the backport to the
latest version (9.0.43-3 or 9.0.43-3~deb11u1 once migrated)
fixing the compile time problem (some constants for Java™ 15
and newer are not defined yet) because the alternative is to
request removal of the backport now and informing the users.

bye,
//mirabilos
-- 
Infrastrukturexperte • tarent solutions GmbH
Am Dickobskreuz 10, D-53121 Bonn • http://www.tarent.de/
Telephon +49 228 54881-393 • Fax: +49 228 54881-235
HRB AG Bonn 5168 • USt-ID (VAT): DE122264941
Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg

*************************************************

Mit dem tarent-Newsletter nichts mehr verpassen: www.tarent.de/newsletter

*************************************************

Back to linux.debian.maint.java | Previous | Next — Next in thread | Find similar

Thread

tomcat9 in buster-backports vs. security Thorsten Glaser <t.glaser@tarent.de> - 2021-08-10 22:10 +0200
  Re: tomcat9 in buster-backports vs. security Markus Koschany <apo@debian.org> - 2021-08-10 22:40 +0200
    Re: tomcat9 in buster-backports vs. security Thorsten Glaser <t.glaser@tarent.de> - 2021-08-10 22:50 +0200
      Re: tomcat9 in buster-backports vs. security Markus Koschany <apo@debian.org> - 2021-08-10 23:00 +0200
        Re: tomcat9 in buster-backports vs. security Thorsten Glaser <t.glaser@tarent.de> - 2021-08-22 23:00 +0200
          Re: tomcat9 in buster-backports vs. security Markus Koschany <apo@debian.org> - 2021-10-14 23:30 +0200
            Re: tomcat9 in buster-backports vs. security Alexander Wirt <formorer@formorer.de> - 2021-10-15 11:00 +0200

csiph-web