#1094 tomcat6 deprecation (fasttrack)
Closed None Opened 11 years ago by sochotni.

tomcat6 hasn't been updated in a long time (since June 2012), it has several security bugs which should be addressed etc. With introduction of automatic requires in Java land it's also causing some FTBFSs (mixing of tomcat-7.x and tomcat6 artifacts). Migration of tomcat6 packages is mostly trivial.

As noted in devel ML[1] I would like to possibly speed up the orphaning process in rawhide. I am in contact with few more people interested in tomcat6 in older Fedoras and if David doesn't get back soon(ish), we'll do the updates in F17/F18. But tomcat6 in rawhide should go buh-bye ASAP.

[1] http://lists.fedoraproject.org/pipermail/devel/2013-March/179847.html


The package should be orphaned long time ago.

+1 from me, I won't attend the meeting

Tomcat6 package has costed way too much invaluable time to people taking care of the Java stack while being unmaintained for such a long time that killing it immediately would be too slow :).

I managed to contact David. Situation is not ideal, but we've waited long enough so my proposal:

  • If tomcat6 in F19/rawhide is not fixed with regards to security issues and clashing provides for J2EE javax-XX stuff, reassign to myself (I'll deprecate the package in F19+ and file bugs for packages to migrate)
  • tomcat6 in F17/F18 will receive security fixes

Both points have deadline before next FESCO meeting (March 20th). I'll try to coordinate with David wrt security patches so they can be sent out ASAP (by end of the week ideally).

Can't attend the meeting unfortunately, but I'll read the log and reply to discussion here if needed.

From 2013-03-13 FESCo meeting - agreed to wait one week and revisit.

So a summary of last week:

  • tomcat6 has been deprecated in F19/rawhide
  • F17 and F18 are receiving updates[1]
  • I started mentoring new packagers that would eventually help specifically with maintaining tomcat6 (and possibly tomcat-7.x if the maintainer won't object)

From my POV this ticket can be closed, but I'll leave that up to you

[1] https://admin.fedoraproject.org/updates/search/tomcat6

Excellent. Thanks for bringing things to a good conclusion.

Login to comment on this ticket.

Metadata