<!DOCTYPE html> <html> <head> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> </head> <body> Hello, Ubuntu Universe has a security bug in tomcat9 which has not been addressed for a long time. Other distros have addressed it; only Ubuntu+Debian has not. In <a class="moz-txt-link-freetext" href="https://bugs.launchpad.net/ubuntu/+source/tomcat9/+bug/2047933">https://bugs.launchpad.net/ubuntu/+source/tomcat9/+bug/2047933</a> I have raised the issue and also proposed a fix, but nothing seems to happen. In a side discussion of the same ticket, there is talk about handling Tomcat 9/10 for Ubuntu 24: The suggestion is for Ubuntu 24 to have Tomcat 10 only (i.e. do like Debian and only have one Tomcat generation per release). I think the discussion should be taken, but where? -- Regards, Troels Arvin </body> </html>