Re: Do not update to tomcat6-6.0.24-2.jpp5

CVE-2009-3555, CVE-2009-3548, and CVE-2009-0781 are all fixed or
worked around with releases after 6.0.18, that ought to provide some
assistance in convincing.
Jason

On Mon, Feb 8, 2010 at 12:00 PM, Boris Folgmann <[email protected]> wrote:
> Hi,
>
> Jason Corley schrieb/wrote:
>>
>> org.apache.jasper.JasperException: The absolute uri:
>> http://java.sun.com/jsp/jstl/core cannot be resolved in either web.xml
>> or the jar files deployed with this application
>
> You need the JARs for JSTL to make it work.
> Reading the post at
> https://issues.apache.org/bugzilla/show_bug.cgi?id=48701
> I doubt that the problem will be fixed, because it seems that they have now
> a more stricter check against the JSP spec. :-(
> So the best solution if one wants to update is to test all JSPs on a
> different machine before doing the update and then try to convince all
> authors of JSPs (colleagues, customers, ...) one hosts to fix their pages.
> Might be not easy. ;-)
>
> cu,
>        boris
>
> _______________________________________________
> JPackage-discuss mailing list
> [email protected]
> https://www.zarb.org/mailman/listinfo/jpackage-discuss
>