Comment 6 for bug 2047933

Revision history for this message
Seth Arnold (seth-arnold) wrote :

Actually, should we kill tomcat9 before Noble is released?

The 9.0.70-2 version was uploaded in october https://launchpad.net/ubuntu/+source/tomcat9 and it hasn't migrated from proposed to release yet because it trips autopkgtest failures https://ubuntu-archive-team.ubuntu.com/proposed-migration/update_excuses.html#tomcat9

The Debian changelog says:

  * Drop tomcat9 server packages because only one Tomcat version is supported
    per release. Only retain libtomcat9-java because of compatibility reasons
    for now. Users are strongly encouraged to switch to Tomcat 10 instead.
    (Closes: #1034824)

If this package migrates, we lose the tomcat9 server in noble and later. If this package doesn't migrate, then we keep shipping a vulnerable version. We could accept Troels's fixes, or we could drop the package entirely.

What's best?

Thanks