libcommons-dbcp-java 1.4-8 MIGRATED to testing

[Debian testing watch]

FYI: The status of the libcommons-dbcp-java source package
in Debian's testing distribution has changed.

  Previous version: 1.4-7
  Current version:  1.4-8

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#1034824: tomcat9 should not be released with Bookworm

[Markus Koschany]

First of all trapperkeeper-webserver-jetty9-clojure should add a build-
dependency on logback to detect such regressions in advance.

#1036250 is mainly a logback problem, not a tomcat problem. I still would like
to hear Emmanuel's opinion. We still could revert to libtomcat9-java, if we
don't find a solution though.

The tomcatjss / dogtag-pki situation is simple too. If there is no way to make
the application work with Tomcat 10, then there are three options:

1. Embed Tomcat 9 in your application by creating a standalone jar

2. Continue to use the current Tomcat 9 package as is but make sure that nobody
else than dogtag-pki uses it. (Package descriptions should be adjusted, and the
binary tomcat9 package should be probably removed too) Nobody should think that
we support two major Tomcat versions.

In any case the dogtag-pki maintainers must commit to at least three years of
security support, web application + Tomcat 9. Otherwise this is pointless.

3. Remove dogtag-pki and tomcatjss from testing and prepare backports as soon
as dogtag-pki and Co support Tomcat 10.

Markus


signature.asc
Description: This is a digitally signed message part
__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#1034824: tomcat9 should not be released with Bookworm

[Jérôme Charaoui]

Le 2023-05-25 à 17 h 41, Martin Hostettler a écrit :


Quoting from J�r�me Charaoui in (#1036250):

I did further tests with puppetserver, which is a downstream dependency
of trapperkeeper-webserver-jetty9-clojure and unfortunately, the web
requests (access) logging remains broken. There are no warnings or error
messages anywhere: as you can imagine, the logging events are simply
lost in the ether.

I'm not sure if the latest patches from 2023-05-22 do fix those, but there
was no follow up on the bug with details.


For the record, these patches only fix the build issue and work around 
the test failures by disabling the affected tests.


The logging problem is still present in puppetserver (and almost 
certainly puppetdb) with the patched 
trapperkeeper-webserver-jetty9-clojure package.


Thanks,

-- Jérôme

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#1034824: tomcat9 should not be released with Bookworm

[Martin Hostettler]

I was asked to send a update to this bug from my notes/open tabs.

From what i can see this is still a problem and it is getting very late
to fix all the fallout.

There are still 2 packages that are not fixed for this.

src:trapperkeeper-webserver-jetty9-clojure (#1036250) which is as far as
I understand a dependency of puppet, which is used by a lot of admins
including Debian's own DSA.

Which even after trying to fix the build problem left the package in a
state where it the whole logging is non functional: 

Quoting from J�r�me Charaoui in (#1036250):
> I did further tests with puppetserver, which is a downstream dependency 
> of trapperkeeper-webserver-jetty9-clojure and unfortunately, the web 
> requests (access) logging remains broken. There are no warnings or error 
> messages anywhere: as you can imagine, the logging events are simply 
> lost in the ether.

I'm not sure if the latest patches from 2023-05-22 do fix those, but there
was no follow up on the bug with details.

Then there is src:tomcatjss (1031816) which seems to have zero progress
since the bug was filed.

This is a dependency of at least dogtag-pki, pki-ca, pki-kra, pki-ocsp,
pki-server, pki-tks and pki-tps

I'm not sure what the actual state of src:logback is. It seems the problems
in trapperkeeper-webserver-jetty9-clojure are partially related to the
state of logback.
Do we know that it properly works with the tomcat10 migration patchset?
Logback seems to have quite a few reverse dependencies as well.


Some bugs have according to the bts been fixed and migrated meanwile:

#1035995: bazel-bootstrap
#1011597: tiles
#1033366: resteasy3.0

What is the plan here to get this in shape for in time before last unblock
requests for bookworm on the 28th?

 - Martin

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: start collecting tomcat transition related bugs

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> block 1034824 by 1036250
Bug #1034824 [src:tomcat9] tomcat9 should not be released with Bookworm
1034824 was not blocked by any bugs.
1034824 was not blocking any bugs.
Added blocking bug(s) of 1034824: 1036250
> block 1034824 by 1031816
Bug #1034824 [src:tomcat9] tomcat9 should not be released with Bookworm
1034824 was blocked by: 1036250
1034824 was not blocking any bugs.
Added blocking bug(s) of 1034824: 1031816
> block 1034824 by 1033366
Bug #1034824 [src:tomcat9] tomcat9 should not be released with Bookworm
1034824 was blocked by: 1036250 1031816
1034824 was not blocking any bugs.
Added blocking bug(s) of 1034824: 1033366
> block 1034824 by 1034855
Bug #1034824 [src:tomcat9] tomcat9 should not be released with Bookworm
1034824 was blocked by: 1036250 1033366 1031816
1034824 was not blocking any bugs.
Added blocking bug(s) of 1034824: 1034855
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1034824: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034824
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.