Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.maint.java > #12275

Re: tomcat9 in buster-backports vs. security

From Markus Koschany <apo@debian.org>
Newsgroups linux.debian.maint.java
Subject Re: tomcat9 in buster-backports vs. security
Date 2021-08-10 22:40 +0200
Message-ID <CKGHv-P2-1@gated-at.bofh.it> (permalink)
References <CKGet-FO-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

Hi,

Am Dienstag, dem 10.08.2021 um 22:00 +0200 schrieb Thorsten Glaser:
[...]
> Markus, Emmanuel, are you going to update the backport to the
> latest version (9.0.43-3 or 9.0.43-3~deb11u1 once migrated)
> fixing the compile time problem (some constants for Java™ 15
> and newer are not defined yet) because the alternative is to
> request removal of the backport now and informing the users.

Currently I don't plan to update the bpo version of Tomcat 9 in Buster. If you
prefer the latest updates then I'd suggest to focus on bullseye-backports from
now on. I am not sure yet if the regression which I have fixed in 9.0.43-3
requires another security update for bullseye or buster at the moment, since an
easy workaround is available and probably not many users are affected. I will
monitor the situation though.

Regards,

Markus 

Back to linux.debian.maint.java | Previous | NextPrevious in thread | Next in thread | Find similar


Thread

tomcat9 in buster-backports vs. security Thorsten Glaser <t.glaser@tarent.de> - 2021-08-10 22:10 +0200
  Re: tomcat9 in buster-backports vs. security Markus Koschany <apo@debian.org> - 2021-08-10 22:40 +0200
    Re: tomcat9 in buster-backports vs. security Thorsten Glaser <t.glaser@tarent.de> - 2021-08-10 22:50 +0200
      Re: tomcat9 in buster-backports vs. security Markus Koschany <apo@debian.org> - 2021-08-10 23:00 +0200
        Re: tomcat9 in buster-backports vs. security Thorsten Glaser <t.glaser@tarent.de> - 2021-08-22 23:00 +0200
          Re: tomcat9 in buster-backports vs. security Markus Koschany <apo@debian.org> - 2021-10-14 23:30 +0200
            Re: tomcat9 in buster-backports vs. security Alexander Wirt <formorer@formorer.de> - 2021-10-15 11:00 +0200

csiph-web