Bug#1034824: tomcat9 should not be released with Bookworm

Emmanuel Bourg ebourg at apache.org
Fri May 26 10:26:49 BST 2023


Le 26/05/2023 à 10:58, Moritz Muehlenhoff a écrit :

> Can't we just do the pragmatic fix of updating src:tomcat9 to only ship
> libtomcat9-java and libtomcat9-embed-java? The maintenance burden for
> security updates lies within the server stack, the percentage of issues
> affecting the libtomcat9-java binary packages as used by rdeps will be small
> to none?

dogtag-pki has a popcon of 4, do we really want to keep that package and 
tomcat9 for so few users? It could come back later in Bookworm as a 
backport once it supports Tomcat 10.

If tomcat9 is kept in Bookworm most users won't realize it's no longer 
supported. I think we should add a prominent warning in the NEWS file 
that it's not supported. I'd even suggest disabling the tomcat9 service 
when upgrading to force the users to act (either migrate to tomcat10, or 
re-enabling it willingly).

Emmanuel Bourg



More information about the pkg-java-maintainers mailing list