Hello,

Ubuntu Universe has a security bug in tomcat9 which has not been addressed for a long time. Other distros have addressed it; only Ubuntu+Debian has not.

In https://bugs.launchpad.net/ubuntu/+source/tomcat9/+bug/2047933 I have raised the issue and also proposed a fix, but nothing seems to happen.

In a side discussion of the same ticket, there is talk about handling Tomcat 9/10 for Ubuntu 24: The suggestion is for Ubuntu 24 to have Tomcat 10 only (i.e. do like Debian and only have one Tomcat generation per release). I think the discussion should be taken, but where?

--
Regards,
Troels Arvin

-- 
Ubuntu-devel-discuss mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss

Reply via email to