I am working on tomcat8 to address the two currently outstanding CVEs.
After I approached him for some guidance, Markus Koschany pointed out
that upstream has made an [END OF LIFE] announcement for Tomcat 8.0.
Support ends on 30th June.
The patches for the two currently outsanding CVEs apply relat
On Wed, Jun 27, 2018 at 08:33:48AM -0400, Antoine Beaupré wrote:
>
> As an outsider not very familiar with Tomcat, I guess the main question
> I would like to answer before figuring this out would be what kind of
> compatibility garantees does Tomcat provide between versions. If it
> respects semv
Antoine,
> >> I am not sure why the test suite fails nor why the output varies from
> >> one build to the next. Once a package is built, however, it passes the
> >> test suite reliably.
[…]
> Sure. I guess I see this from the perspective of "does the actual fix
> work or not" as well. ;)
Sorry to
