Bug#845425: DataSource no longer accessible since jessie security update

Emmanuel Bourg ebourg at apache.org
Wed Nov 23 16:52:22 UTC 2016


Le 23/11/2016 à 17:06, Arne Nordmark a écrit :
> Yet another data point:
> 
> I rebuilt 7.0.56-3+deb8u5 with CVE-2016-6797.patch deleted, and again
> the problem goes away.

Would you be able to rebuild with this version of the
ResourceLinkFactory class and see if it works better?

https://raw.githubusercontent.com/apache/tomcat70/TOMCAT_7_0_73/java/org/apache/naming/factory/ResourceLinkFactory.java



More information about the pkg-java-maintainers mailing list