Re: Tomcat 8 security update

[Moritz Muehlenhoff <jmm@inutil.org>]

On Mon, May 30, 2016 at 08:42:52AM +0200, Emmanuel Bourg wrote:
> Le 30/05/2016 à 01:24, Markus Koschany a écrit :
> 
> > OK, then let's update the third line to
> > 
> > chown -Rh $TOMCAT8_USER:$TOMCAT8_GROUP /etc/tomcat8/Catalina
> > /var/lib/tomcat8/webapps /var/lib/tomcat8/lib
> 
> I don't feel comfortable fixing #825786 directly in a stable security
> update. It would be safer to test it in unstable/testing first, we may
> have missed some important use cases.

Agreed, let's fix the remaining ones for now and have this cook in sid/stretch
first.

Cheers,
        Moritz