tomcat9 in buster-backports vs. security
Hi,
the tomcat9 backport is pretty much orphaned: newer tomcat9
versions don’t even build in buster any more¹, and both
bullseye² and buster received security fixes recently.
① One built in bullseye works on buster but that is, of course,
no option for bpo. (It works for my sysvinit-compatible local
builds though.)
② Although waiting for -3 before acting would be best.
Markus, Emmanuel, are you going to update the backport to the
latest version (9.0.43-3 or 9.0.43-3~deb11u1 once migrated)
fixing the compile time problem (some constants for Java™ 15
and newer are not defined yet) because the alternative is to
request removal of the backport now and informing the users.
bye,
//mirabilos
--
Infrastrukturexperte • tarent solutions GmbH
Am Dickobskreuz 10, D-53121 Bonn • http://www.tarent.de/
Telephon +49 228 54881-393 • Fax: +49 228 54881-235
HRB AG Bonn 5168 • USt-ID (VAT): DE122264941
Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg
*************************************************
Mit dem tarent-Newsletter nichts mehr verpassen: www.tarent.de/newsletter
*************************************************
Reply to: