solr-tomcat depends on tomcat6, which has multiple security issues
Bug #1358683 reported by
popl
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| lucene-solr (Ubuntu) |
New
|
Undecided
|
Unassigned | ||
Bug Description
Recently tomcat6 was obsoleted by tomcat7. solr-tomcat still relies on tomcat6, and there are other solr-related packages which also rely on tomcat6 (or libtomcat6-java):
$ apt-cache rdepends libtomcat6-java
libtomcat6-java
Reverse Depends:
libtomcat7-java
tomcat6-common
red5-server
libtomcat-
libtiles-java
libspring-
libjsf-impl-java
libjglobus-
libjetty-
libtomcat7-java
$ apt-cache rdepends tomcat6
tomcat6
Reverse Depends:
biomaj-watcher
tomcat6-user
solr-tomcat
libtomcat6-java
libapache2-mod-jk
jspwiki
guacamole-tomcat
|guacamole
| information type: | Private Security → Public |
To post a comment you must log in.
