[MIR] tomcat7 (replaces tomcat6)

Bug #1009579 reported by James Page on 2012-06-06
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
jakarta-taglibs-standard (Ubuntu)
High
Unassigned
tomcat7 (Ubuntu)
High
Unassigned

Bug Description

[Availability]
Universe since 11.10

[Rationale]
Upgrade from tomcat6.
Supports newer Java specifications and has longer expected support lifetime.

[Security]
Upstream generally responsive to security issues in the past.

[Quality assurance]
Test suite enabled.

[Dependencies]
Require updating to switch to tomcat7 provided versions of servlet specifications (currently use libservlet2.5-java from tomcat6 source):
Reverse-Build-Depends-Indep
===========================
* excalibur-logkit
* fop
* libcommons-logging-java

Reverse-Build-Depends
=====================
* axis
* bsh
* hessian
* hsqldb
* libmx4j-java
* libreoffice

No reverse-depends on tomcat7.

Blueprint reference: https://blueprints.launchpad.net/ubuntu/+spec/servercloud-q-tomcat7

James Page (james-page) wrote :
Changed in tomcat7 (Ubuntu):
assignee: nobody → James Page (james-page)
status: New → In Progress
James Page (james-page) on 2012-06-15
description: updated
James Page (james-page) on 2012-06-15
summary: - [MIR] tomcat7
+ [MIR] tomcat7 (replaces tomcat6)
description: updated
Changed in tomcat7 (Ubuntu):
importance: Undecided → High
description: updated
James Page (james-page) on 2012-06-15
description: updated
Jamie Strandboge (jdstrand) wrote :

We've supported tomcat6 for a long time and there is no reason we shouldn't support tomcat7. ACK once tomcat6 is demoted.

Curious, does tomcat6 have the testsuite run during the build? If so, what would it take to get the tomcat7 testsuite running?

James Page (james-page) wrote :

The test suite does not run in tomcat6 - I'm working on making the test suite work ATM for tomcat7 - looks like it might need one extra dependency for main (jakarta-taglibs-standard) so not to much of a problem.

Changed in tomcat7 (Ubuntu):
milestone: none → quantal-alpha-2
Jamie Strandboge (jdstrand) wrote :

Nice. Thanks! :)

James Page (james-page) wrote :

Test suite enabled in most recent upload for Ubuntu; I'll get all changes fed back into Debian as well.

Changed in jakarta-taglibs-standard (Ubuntu):
milestone: none → quantal-alpha-2
James Page (james-page) wrote :

Additional MIR information for jakarta-taglibs-standard

[Availability]
Universe since 11.10

[Rationale]
Additional dependency for tomcat7 to support enablement of test suite during package build; also fixes issues in examples web application with missing dependencies.

[Security]
No outstanding CVE's

[Quality assurance]
Test suite not enabled due to missing testing dependencies (cactus).

[Dependencies]
No additional dependences other that those already provide in main or by the tomcat7 package.

[Background]
This package provides the Java Standard Tag Library implementation preferred by the Apache Tomcat project. This is an extension on top of the Servlet, JSP and EL API's already provided by Tomcat.

description: updated
Changed in jakarta-taglibs-standard (Ubuntu):
importance: Undecided → High
assignee: nobody → James Page (james-page)
James Page (james-page) on 2012-06-19
Changed in jakarta-taglibs-standard (Ubuntu):
status: New → In Progress
James Page (james-page) on 2012-06-19
Changed in tomcat7 (Ubuntu):
status: In Progress → New
Changed in jakarta-taglibs-standard (Ubuntu):
status: In Progress → New
assignee: James Page (james-page) → nobody
Changed in tomcat7 (Ubuntu):
assignee: James Page (james-page) → nobody
Michael Terry (mterry) on 2012-06-21
Changed in tomcat7 (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
Changed in jakarta-taglibs-standard (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
Changed in jakarta-taglibs-standard (Ubuntu):
milestone: quantal-alpha-2 → quantal-alpha-3
Changed in tomcat7 (Ubuntu):
milestone: quantal-alpha-2 → quantal-alpha-3
James Page (james-page) wrote :

Jamie

When do you think you will be able to complete this review? I've completed the seed change required to pull this onto the server ISO and would like to start on the transition servlet2.5 -> servlet3.0 transition to remove tomcat6 from main.

Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in jakarta-taglibs-standard (Ubuntu):
status: New → Confirmed
Changed in tomcat7 (Ubuntu):
status: New → Confirmed
Gema Gomez (gema) wrote :

This change seems to have become a problem in our server iso testing:
https://jenkins.qa.ubuntu.com/view/Quantal/view/ISO%20Testing%20Dashboard/job/quantal-server-amd64_tomcat-server/

so it should be fixed quick or the old tomcat be returned to the iso in the meantime.

tags: added: iso-testing qa-daily-testing
Jamie Strandboge (jdstrand) wrote :

jakarta-taglibs-standard:
- The package builds fine, but needs libservlet3.0-java from universe (but that comes from tomcat7 itself, so there is a circular build dependency)
- no CVE history
- no initscripts, dbus, setuid, sudoers, fscaps or cron jobs
- there appears to be some test data in standard/test but it doesn't appear to be used in the build
- Ubuntu does carry a delta, but it is primarily for packaging cleanups and a patch to work with Java 7
- the Ubuntu server team is subscribed to the bug
- there is a watch file
- Upstream seems inactive. The upstream source has not changed in 8 years. It looks like the project name changed (http://tomcat.apache.org/taglibs/) and that since the name change there have been a few more commits with the last one 3 years ago. They have not released a new version under the new name
- the current release is packaged
- is lintian clean
- debian/rules is reasonable
- there are a couple of javac warnings during the build, but they look harmless as they fallback to something sane

While upstream seems inactive, that is not always a problem (the software could be mature and working properly for people) and it has a good security history. There is also the issue of the circular build dependency between tomcat7 and jakarta-taglibs-standard, but I don't think this is a blocker, but rather something to make note of.

ACK (but please send the Ubuntu delta to Debian if you haven't already).

Changed in jakarta-taglibs-standard (Ubuntu):
status: Confirmed → Fix Committed
Changed in tomcat7 (Ubuntu):
status: Confirmed → Fix Committed
assignee: Jamie Strandboge (jdstrand) → nobody
Changed in jakarta-taglibs-standard (Ubuntu):
assignee: Jamie Strandboge (jdstrand) → nobody
Jamie Strandboge (jdstrand) wrote :

I have promoted tomcat7 and jakarta-taglibs-standard to main.

Changed in jakarta-taglibs-standard (Ubuntu):
status: Fix Committed → Fix Released
Changed in tomcat7 (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers

Related blueprints

Bug attachments