Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 577628 - please stabilize www-servers/tomcat-8.0.32-r1 and dev-java/tomcat-servlet-api-8.0.32
Summary: please stabilize www-servers/tomcat-8.0.32-r1 and dev-java/tomcat-servlet-api...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Keywording and Stabilization (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Java team
URL:
Whiteboard:
Keywords: STABLEREQ
Depends on:
Blocks: CVE-2015-5174, CVE-2015-5345, CVE-2015-5346, CVE-2015-5351, CVE-2016-0706, CVE-2016-0714, CVE-2016-0763
  Show dependency tree
 
Reported: 2016-03-17 13:06 UTC by Miroslav Šulc
Modified: 2016-03-17 20:37 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Miroslav Šulc gentoo-dev 2016-03-17 13:06:30 UTC 
current stable version is affected by some CVEs


Author: Miroslav Šulc <fordfrog@gentoo.org>
Date:   Wed Feb 10 15:46:03 2016 +0100

    dev-java/tomcat-servlet-api: version bump
    
    Package-Manager: portage-2.2.27

Author: Miroslav Šulc <fordfrog@gentoo.org>
Date:   Fri Feb 19 22:45:21 2016 +0100

    www-servers/tomcat: removed oracle-javamail from deps and hence from tomcat classpath (bug #453212)
    
    this jar should not be on tomcat's classpath, if one needs it on global classpath, he/she should use TOMCAT_EXTRA_JARS in /etc/conf.d/tomcat-SLOT[-suffix] to put it on the global classpath. the before-the-fix version of the ebuilds made it impossible to put javamail jar inside web application as that resulted in conflict which could be avoided only by removal of javamail jar from the global classpath
    
    Package-Manager: portage-2.2.27
Comment 1 Agostino Sarubbo gentoo-dev 2016-03-17 20:36:30 UTC 
amd64 stable
Comment 2 Agostino Sarubbo gentoo-dev 2016-03-17 20:37:24 UTC 
x86 stable. Closing.