Re: Tomcat 7 security update

2016-04-16 Thread Florian Weimer
* Markus Koschany: > Am 16.04.2016 um 16:14 schrieb Florian Weimer: > [...] >> Packaging-wise, the changes look okay. Could you please upload? > > Uploaded to security-master. Have you tested these packages by running some real-world web application? Are they ready for release? Thanks.

Re: Need help to upgrade libnetlib-java package

2016-04-16 Thread Benjamin Mesing
Hi Andreas, ok, so  oss-parent seems to be not in Debian (it is here: https://repo1 .maven.org/maven2/org/sonatype/oss/oss-parent/7/oss-parent-7.pom). If it really is required, it need to be packaged. I tried to remove the parent entry from generator/pom, and build without it. Maybe oss-parent is

Re: Tomcat 7 security update

2016-04-16 Thread Florian Weimer
* Markus Koschany: > Am 28.03.2016 um 18:07 schrieb Markus Koschany: >> [first e-mail failed, attachment is compressed now] >> >> Hello Security Team, hello Java Team >> >> I have prepared security updates for Tomcat 7 fixing 9 CVEs in Wheezy >> and 7 CVEs in Jessie. > > Hi, > > since I haven't

Re: Tomcat 7 security update

2016-04-16 Thread Markus Koschany
Am 16.04.2016 um 16:14 schrieb Florian Weimer: [...] > Packaging-wise, the changes look okay. Could you please upload? Uploaded to security-master. Regards, Markus signature.asc Description: OpenPGP digital signature

Re: Tomcat 7 security update

2016-04-16 Thread Markus Koschany
Am 28.03.2016 um 18:07 schrieb Markus Koschany: > [first e-mail failed, attachment is compressed now] > > Hello Security Team, hello Java Team > > I have prepared security updates for Tomcat 7 fixing 9 CVEs in Wheezy > and 7 CVEs in Jessie. Hi, since I haven't heard anything negative about the