Re: Changes to get tomcat8 security fixes into Debian 9?

2020-03-05 Thread Markus Koschany
Hi Andreas, Am 05.03.20 um 09:34 schrieb Andreas Tille: > Hi, > > I was wondering, whether there is a chance to get CVE-2020-1938 fixed in > Tomcat8 in Stretch? If the chances are low possibly backporting Tomcat9 > to stretch-backports-sloppy would be a feasible way to go for me. What > would y

Changes to get tomcat8 security fixes into Debian 9?

2020-03-05 Thread Andreas Tille
Hi, I was wondering, whether there is a chance to get CVE-2020-1938 fixed in Tomcat8 in Stretch? If the chances are low possibly backporting Tomcat9 to stretch-backports-sloppy would be a feasible way to go for me. What would you recomment? Kind regards Andreas. -- http://fam-tille.de