Bug#263202: tomcat4 should be upgraded to 4.1.x in sarge

[Jerome Lacoste]

Subject: tomcat4 should be upgraded to 4.1.x in sarge
Package: tomcat4
Version: 4.0.4-4
Severity: normal

tomcat 4.0.4 is more than 2 years old. We cannot ship sarge with such an
old and important application.
The release problem may be related to log4j release critical issue. See
issue #221236
But both issues should be worked out at the same time if we want to
manage to get a recent tomcat in sarge.
There may also be security issues with old tomcat.
E.g. http://www.securityfocus.com/archive/1/292936/



-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux coffeebreak 2.4.24-1-686 #1 Tue Jan 6 21:29:44 EST 2004
i686
Locale: LANG=C, LC_CTYPE=C

Versions of packages tomcat4 depends on:
ii  adduser                       3.51       Add and remove users and
groups
ii  java-virtual-machine-dummy    1.0        Dummy package providing
java-virtu
ii  java2-runtime-dummy [java2-ru 1.0        Dummy package providing
java2-runt
ii  libtomcat4-java               4.0.4-4    Java Servlet engine -- core
librar
ii  logrotate                     3.6.5-2    Log rotation utility
ii  sysvinit                      2.85-9     System-V like init.

-- no debconf information