gerdogdu commented on PR #1114:
URL: https://github.com/apache/tomee/pull/1114#issuecomment-2022633477

   > @gerdogdu We only port CVE related things atm. It is sad, that Tomcat 
stopped maintaining 10.0.27, so we just cannot backport every bug fix, change, 
feature, which was added since 10.0.27 (resources, time, etc.). There are 
plenty of differences in (older) patch files between newer Tomcat releases. 
Feel free to start a discussion on the mailing list, if we want to drop TCK 
compliance and just upgrade to 10.1.x on the TomEE 9.1.x line. That way, we 
could just stop porting patches for an ancient piece of unmaintained software.
   
   I think we should focus on the using latest Tomcat 10 release instead of 
only gets CVE patches, it is so absurd. How do you ensure that getting only CVE 
patches not break the old Tomcat APIs? 
   
   EE 9 is a intermediate release with API change. I think we should drop TCK 
compatibility for 9 and look TCK compatibility for EE 10. 
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@tomee.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to