Re: Wheezy update of tomcat6 and tomcat7?

[Ola Lundqvist <ola.lundqvist@gmail.com>]

Hi

Great! Should I mark this CVE as no-dsa or something else?

/ Ola

Sent from a phone

Den 7 jun 2017 23:13 skrev "Markus Koschany" <apo@debian.org>:

Am 07.06.2017 um 23:01 schrieb Ola Lundqvist:
> Dear maintainer(s),
>
> The Debian LTS team would like to fix the security issues which are
> currently open in the Wheezy version of tomcat6 and tomcat7:
> https://security-tracker.debian.org/tracker/CVE-2017-5664
>
> Would you like to take care of this yourself?

Hi Ola,

I intend to look into the issues soon as usual. Tomcat6 is no longer
supported by us btw.

Regards,

Markus