#1146376 trixie-pu: package tomcat-native/1.3.8-1~deb13u1

#1146376#5
Date:
2026-08-31 22:53:59 UTC
From:
To:
[ Reason ]
tomcat10 and tomcat11 no longer loads the Tomcat native library (using
the Apache Portable Runtime), provided by libtcnative-1, since the
version in trixie (1.3.1) is incompatible.

See the related bug reports:
- https://bugs.debian.org/1034492 (for libtomcat-1 / src:tomcat-native)
- https://bugs.debian.org/1038204 (for tomcat10)
- https://bugs.debian.org/1143583 (for tomcat11)

Please note that, while #1038204 was filed when the resulting message in
the tomcat10 logs was a warning, the current status is that both tomcat
versions refrain from loading the library, producing an error instead
(with SEVERE category).

[ Impact ]
Users of tomcat systems where libtcnative-1 is installed are not
actually using the features provided by the library. This has an impact
on performance, especially related to TLS connections and cryptographic
operations.

[ Tests ]
- Manually tested on trixie VMs with both tomcat10 and tomcat11.
  Verified that the error is no longer produced in the logs.
- Added dep-8 tests, whose results can be seen in:
  - With current trixie version:
https://debusine.debian.net/debian/developers/work-request/1206911/
  - With the proposed trixie upload:
https://debusine.debian.net/debian/developers/work-request/1201326/

[ Risks ]
IMO, the risk is low.  Backporting code to 1.3.1 to make it compatible
with both tomcat versions doesn't make too much sense. Tomcat is also
maintained in (old)stable by backporting full upstream versions.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [ ] the issue is verified as fixed in unstable: #1034492 currently
  happens in unstable, but fixing it requires an update of
  libtcnative-2 instead (to 2.0.15).

[ Changes ]
From d/changelog:

  * d/watch: limit the versions scanned to the 1.3.x:
    to make it possible to download the correct newer upstream versions
    with uscan.
  * New upstream version 1.3.8
    - Fix error by incompatible APR library for tomcat10 and tomcat11
      (Closes: #1034492)
    (Hopefully self explanatory)
  * Add dep-8 tests to check compatibility with tomcat 10 and 11:
    To have a reproducible way to test the changes and identify
    incompatibilities with future updates of tomcat{10,11}

[ Other info ]
N/A

Thanks,