[Git][security-tracker-team/security-tracker][master] dla: claim tomcat8 + more explanations + last CVE was not-affected

[Sylvain Beucler]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e45c62f2 by Sylvain Beucler at 2019-08-06T20:45:52Z
dla: claim tomcat8 + more explanations + last CVE was not-affected

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -132,11 +132,13 @@ subversion
 --
 tika
 --
-tomcat8
+tomcat8 (Sylvain Beucler)
   NOTE: 20190522: FTBFS
   NOTE: Test SSL certificate expired, see https://bz.apache.org/bugzilla/show_bug.cgi?id=57655
   NOTE: Attempt to solve this by using certificates from latest tomcat8 package failed (Brian).
-  NOTE: 20190701: New CVE just piled up.
+  NOTE: 20190806: Abhijith says no: https://lists.debian.org/debian-lts/2019/07/msg00053.html
+  NOTE: 20190806: tomcat8 has an history of unexplained FTBFS: https://lists.debian.org/debian-lts/2018/07/msg00103.html
+  NOTE: 20190806: certificate updated in 8.0.14-1+deb8u12 expired 2019-02-27 indeed (Beuc)
 --
 wireshark (Thorsten Alteholz)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e45c62f2729055aedab1c73c49652ec386e54a66

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e45c62f2729055aedab1c73c49652ec386e54a66
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190806/4d9cb03a/attachment-0001.html>