Bug 577626

Summary:	www-servers/tomcat-7.0.68-r1 dev-java/tomcat-servlet-api-7.0.68 stable request
Product:	Gentoo Linux	Reporter:	Miroslav Šulc <fordfrog>
Component:	[OLD] Keywording and Stabilization	Assignee:	Java team <java>
Status:	RESOLVED FIXED
Severity:	normal	CC:	ppc64
Priority:	Normal	Keywords:	STABLEREQ
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	575796

Description Miroslav Šulc gentoo-dev

2016-03-17 13:04:12 UTC

current stable version is affected by some CVEs


Author: Miroslav Šulc <fordfrog@gentoo.org>
Date:   Thu Feb 18 10:11:38 2016 +0100

    dev-java/tomcat-servlet-api: version bump
    
    Package-Manager: portage-2.2.27


Author: Miroslav Šulc <fordfrog@gentoo.org>
Date:   Fri Feb 19 22:45:21 2016 +0100

    www-servers/tomcat: removed oracle-javamail from deps and hence from tomcat classpath (bug #453212)
    
    this jar should not be on tomcat's classpath, if one needs it on global classpath, he/she should use TOMCAT_EXTRA_JARS in /etc/conf.d/tomcat-SLOT[-suffix] to put it on the global classpath. the before-the-fix version of the ebuilds made it impossible to put javamail jar inside web application as that resulted in conflict which could be avoided only by removal of javamail jar from the global classpath
    
    Package-Manager: portage-2.2.27

Comment 1 Agostino Sarubbo gentoo-dev

2016-03-17 20:36:22 UTC

amd64 stable

Comment 2 Agostino Sarubbo gentoo-dev

2016-03-17 20:37:16 UTC

x86 stable

Comment 3 Miroslav Šulc gentoo-dev

2016-05-25 17:59:40 UTC

it's now obsolete as 7.0.69 will go stable