#1031816 tomcatjss: Migrate to Tomcat 10

Package:
src:tomcatjss
Source:
src:tomcatjss
Submitter:
Emmanuel Bourg
Date:
2025-04-22 17:09:07 UTC
Severity:
normal
#1031816#5
Date:
2023-02-23 11:29:46 UTC
From:
To:
libtomcatjss-java uses libtomcat9-java but this package is about to be removed.
libtomcat10-java should be used instead.
#1031816#10
Date:
2023-02-24 09:48:36 UTC
From:
To:
Upstream doesn't support tomcat10 yet, and tomcatjss fails to build with it.
#1031816#15
Date:
2023-03-23 17:00:42 UTC
From:
To:
Control: severity -1 serious

Unfortunately we can only support one Tomcat version per release. We should
either migrate to tomcat10 or maybe it is possible to embed some of the
required tomcat9 classes in your source package as a workaround provided the
changes are rather small and the security impact is negligible.

Regards,

Markus
#1031816#22
Date:
2023-03-24 07:21:53 UTC
From:
To:
Markus Koschany kirjoitti 23.3.2023 klo 19.00:

Right, but that's for bookworm+1? By that time I'm sure
jss/tomcatjss/dogtag have gained upstream support for tomcat10.
#1031816#27
Date:
2023-03-24 13:35:29 UTC
From:
To:
Am Freitag, dem 24.03.2023 um 09:21 +0200 schrieb Timo Aaltonen:

We are targeting Bookworm. We had Tomcat 8 in Stretch and Tomcat 9 in Buster
and Bullseye already. Tomcat 10 also targets Java 11 and later while Tomcat 9
was intended for Java 8 and later. We ship OpenJDK 17 in Bookworm. resteasy3.0
and tomcatjss are the only packages apart from i2p that still depend on
libtomcat9-java.
#1031816#32
Date:
2023-03-26 09:15:52 UTC
From:
To:
Markus Koschany kirjoitti 24.3.2023 klo 15.35:

Nice, so you expect them to migrate after bookworm is already frozen?
#1031816#37
Date:
2023-03-26 13:23:58 UTC
From:
To:
Am Sonntag, dem 26.03.2023 um 12:15 +0300 schrieb Timo Aaltonen:

Targeted fixes are still allowed. Including required tomcat9 classes in your
package may be a solution too. If you can find an agreement with the security
and release team, then even shipping libtomcat9-java might be possible. But
then your packages will not receive any security support.
#1031816#42
Date:
2023-04-25 13:09:51 UTC
From:
To:
I've added the release team to Cc, since trying to force a tomcat 9 -> 10
transition after the start of the transition freeze and after the start of
the soft freeze sounds forbidden to me.

cu
Adrian
#1031816#47
Date:
2023-05-22 20:07:36 UTC
From:
To:
Does that mean the two bugs (in tomcat9 and tomcatjss) should be tagged
"trixie sid" to no longer affect and bookworm will ship with two versions
of tomcat, or what else is now supposed to happen?

cu
Adrian
#1031816#54
Date:
2025-04-22 17:08:48 UTC
From:
To:
Dear submitter,

as the package tomcatjss has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see https://bugs.debian.org/1100392

The version of this package that was in Debian prior to this removal
can still be found using https://snapshot.debian.org/.

Please note that the changes have been done on the master archive and
will not propagate to any mirrors until the next dinstall run at the
earliest.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Thorsten Alteholz (the ftpmaster behind the curtain)