[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Tomcat 6 security vulnerabilities in Wheezy



Hi,

as you know Tomcat 6 is affected by new security vulnerabilities that
are fixed in version 6.0.45. Do you want me to replace the last version
I sent to you regarding Wheezy with this one or shall I upload version
6.0.41 instead, which is more tested, and prepare another upload
afterwards. I wouldn't mind this incremental approach but I could also
merge 6.0.45 into Wheezy right now.

The update for Jessie should be straight forward because src:tomcat6
only builds the unaffected servlet API, so we just need to replace the
upstream sources.

Regards,

Markus

Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: