File _patchinfo of Package patchinfo.16168
<patchinfo incident="16168">
<issue tracker="bnc" id="1172562">servletapi5: servlet.jar not created</issue>
<issue tracker="bnc" id="1173103">VUL-1: tomcat: lots of tomcat files are writable for the tomcat user / tomcat group</issue>
<issue tracker="bnc" id="1092163">L3: systemd-tmpfiles messages about path below legacy directory</issue>
<packager>mateialbu</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for tomcat</summary>
<description>This update for tomcat fixes the following issues:
- Fixed the package alternatives for tomcat-servlet-4_0-api to use /usr/share/java/servlet.jar
instead of /usr/share/java/tomcat-servlet.jar - We kept /usr/share/java/tomcat-servlet.jar as
a symlink for compatibility reasons (bsc#1092163)
- Removed write permissions on several files and directories for the tomcat group (bsc#1172562)
- Changed the tomcat.pid location from /var/run to /run (bsc#1173103)
</description>
</patchinfo>