Bug 577628

Summary:	please stabilize www-servers/tomcat-8.0.32-r1 and dev-java/tomcat-servlet-api-8.0.32
Product:	Gentoo Linux	Reporter:	Miroslav Šulc <fordfrog>
Component:	[OLD] Keywording and Stabilization	Assignee:	Java team <java>
Status:	RESOLVED FIXED
Severity:	normal	Keywords:	STABLEREQ
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	575796

Description Miroslav Šulc gentoo-dev

2016-03-17 13:06:30 UTC

current stable version is affected by some CVEs


Author: Miroslav Šulc <fordfrog@gentoo.org>
Date:   Wed Feb 10 15:46:03 2016 +0100

    dev-java/tomcat-servlet-api: version bump
    
    Package-Manager: portage-2.2.27

Author: Miroslav Šulc <fordfrog@gentoo.org>
Date:   Fri Feb 19 22:45:21 2016 +0100

    www-servers/tomcat: removed oracle-javamail from deps and hence from tomcat classpath (bug #453212)
    
    this jar should not be on tomcat's classpath, if one needs it on global classpath, he/she should use TOMCAT_EXTRA_JARS in /etc/conf.d/tomcat-SLOT[-suffix] to put it on the global classpath. the before-the-fix version of the ebuilds made it impossible to put javamail jar inside web application as that resulted in conflict which could be avoided only by removal of javamail jar from the global classpath
    
    Package-Manager: portage-2.2.27

Comment 1 Agostino Sarubbo gentoo-dev

2016-03-17 20:36:30 UTC

amd64 stable

Comment 2 Agostino Sarubbo gentoo-dev

2016-03-17 20:37:24 UTC

x86 stable. Closing.