tomcat9 in buster-backports vs. security

2021-08-10 Thread Thorsten Glaser
Hi, the tomcat9 backport is pretty much orphaned: newer tomcat9 versions don’t even build in buster any more¹, and both bullseye² and buster received security fixes recently. ① One built in bullseye works on buster but that is, of course, no option for bpo. (It works for my sysvinit-compatible

Re: tomcat9 in buster-backports vs. security

2021-08-10 Thread Markus Koschany
Hi, Am Dienstag, dem 10.08.2021 um 22:00 +0200 schrieb Thorsten Glaser: [...] > Markus, Emmanuel, are you going to update the backport to the > latest version (9.0.43-3 or 9.0.43-3~deb11u1 once migrated) > fixing the compile time problem (some constants for Java™ 15 > and newer are not defined yet

Re: tomcat9 in buster-backports vs. security

2021-08-10 Thread Thorsten Glaser
On Tue, 10 Aug 2021, Markus Koschany wrote: > Currently I don't plan to update the bpo version of Tomcat 9 in Buster. If you > prefer the latest updates then I'd suggest to focus on bullseye-backports from I think you misunderstood the intention of this request. Packages in $version-backports ha

Re: tomcat9 in buster-backports vs. security

2021-08-10 Thread Markus Koschany
Am Dienstag, dem 10.08.2021 um 22:47 +0200 schrieb Thorsten Glaser: > On Tue, 10 Aug 2021, Markus Koschany wrote: > > > Currently I don't plan to update the bpo version of Tomcat 9 in Buster. If > > you > > prefer the latest updates then I'd suggest to focus on bullseye-backports > > from > > I t