Control: tags -1 confirmed moreinfo Emmanuel Bourg: > Package: release.debian.org > Severity: normal > User: release.debian....@packages.debian.org > Usertags: unblock > > Hi, > > This is a pre-upload request to update tomcat8 to the version 8.5.14-1 > in stretch. This version is mostly a bug fix release, it also integrates > the fixes for 3 vulnerabilities (CVE-2017-5647, CVE-2017-5650, > CVE-2017-5651). > > The full changelog is available here: > > http://tomcat.apache.org/tomcat-8.5-doc/changelog.html#Tomcat_8.5.14_(markt) > > Backporting security fixes to the stable version of Tomcat has proven > to be a bit tedious in the past, so it would be appreciable to have > a version as fresh as possible in stretch to ease the maintenance work > on the long term. > > Thank you, > > Emmanuel Bourg >
ASSUMING that nothing in Debian stretch relies on the servlet4 preview parts, then ack, please go ahead. Please remove the moreinfo tag once the upload has been processed. Thanks, ~Niels