Bug#861681: unblock: tomcat8/8.5.14-1

2017-05-07 Thread Emmanuel Bourg
Le 7/05/2017 à 19:49, Niels Thykier a écrit :

> ASSUMING that nothing in Debian stretch relies on the servlet4 preview
> parts, then ack, please go ahead.  Please remove the moreinfo tag once
> the upload has been processed.

Thank you Niels. I confirm that the Servlet 4 preview isn't used in
Debian yet.

Emmanuel Bourg



Bug#861681: unblock: tomcat8/8.5.14-1

2017-05-07 Thread Niels Thykier
Control: tags -1 confirmed moreinfo

Emmanuel Bourg:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: unblock
> 
> Hi,
> 
> This is a pre-upload request to update tomcat8 to the version 8.5.14-1
> in stretch. This version is mostly a bug fix release, it also integrates
> the fixes for 3 vulnerabilities (CVE-2017-5647, CVE-2017-5650,
> CVE-2017-5651).
> 
> The full changelog is available here:
> 
> http://tomcat.apache.org/tomcat-8.5-doc/changelog.html#Tomcat_8.5.14_(markt)
> 
> Backporting security fixes to the stable version of Tomcat has proven
> to be a bit tedious in the past, so it would be appreciable to have
> a version as fresh as possible in stretch to ease the maintenance work
> on the long term.
> 
> Thank you,
> 
> Emmanuel Bourg
> 

ASSUMING that nothing in Debian stretch relies on the servlet4 preview
parts, then ack, please go ahead.  Please remove the moreinfo tag once
the upload has been processed.

Thanks,
~Niels