Re: ITP: temporary tomcat8-legacy
On 19.09.2017 09:56, Emmanuel Bourg wrote:
> Le 19/09/2017 à 08:27, Timo Aaltonen a écrit :
>
>> Actually, the alternative would be to upload 3.0.19 with an epoch. And
>> since pki-base is the only package that depends on it this would be safe
>> to do.
>
> I'd prefer an extra package rather than using an epoch. Either way,
> there are 6 CVEs open against resteasy, I'm not sure the security team
> will be happy with that.
>
> What errors do you get when building dogtag with the version 3.1?
I can fix the build errors where ClientResponseType was moved to
resteasy-legacy.jar, but starting the instance still fails:
https://pagure.io/dogtagpki/issue/2596
and nothing useful in the logs
--
t
Reply to: