debian/0000755000000000000000000000000011727030057007170 5ustar debian/watch0000644000000000000000000000017211667727300010230 0ustar version=3 http://svn.apache.org/repos/asf/tomcat/tc5.5.x/tags/ TOMCAT_(\d+)_(\d+)_(\d+)/ \ debian debian/orig-tar.sh debian/rules0000755000000000000000000000150211727025261010247 0ustar #!/usr/bin/make -f include /usr/share/cdbs/1/rules/debhelper.mk include /usr/share/cdbs/1/class/ant.mk DEB_ANT_CLEAN_TARGET := build-clean DEB_ANT_BUILD_TARGET := build-prepare build-only -propertyfile debian/ant.properties JAVA_HOME := /usr/lib/jvm/default-java JAR := $(JAVA_HOME)/bin/jar DEB_JARS := ant ant-launcher ant-trax el-api-2.1 install/libjasper-java:: cd build/shared/classes/ && $(JAR) cf ../../jasper.jar * $(JAR) umf debian/osgi.MF build/jasper.jar mv build/jasper.jar build/jasper-$(DEB_UPSTREAM_VERSION).jar dh_install -plibjasper-java build/jasper-$(DEB_UPSTREAM_VERSION).jar /usr/share/java dh_link -plibjasper-java /usr/share/java/jasper-$(DEB_UPSTREAM_VERSION).jar \ /usr/share/java/jasper-5.5.jar get-orig-source: uscan --download-version $(DEB_UPSTREAM_VERSION) --force-download debian/control0000644000000000000000000000166011727027534010604 0ustar Source: libjasper-java Section: java Priority: optional Maintainer: Debian Java Maintainers Uploaders: Marcus Better , Niels Thykier , Jakub Adam Build-Depends: ant, cdbs, debhelper (>= 7), default-jdk, libcommons-el-java, libcommons-logging-java, libecj-java, libservlet2.5-java Standards-Version: 3.9.3 Homepage: http://tomcat.apache.org Vcs-Svn: svn://svn.debian.org/svn/pkg-java/trunk/libjasper-java Vcs-Browser: http://svn.debian.org/wsvn/pkg-java/trunk/libjasper-java Package: libjasper-java Architecture: all Depends: libcommons-el-java, libcommons-logging-java, libecj-java, libservlet2.5-java, ${misc:Depends} Description: Implementation of the JSP Container Jasper2 is a implementation of the JSP Container for Apache Tomcat 5.5 that is clean and easy to extend. It also forms the basis of the JSP 2.0 implementation. debian/copyright0000644000000000000000000000111711667727300011132 0ustar This package was debianized by Stefan Gybas on 12-Feb-2002. The source was downloaded from . Jasper (which is a part of Apache Tomcat 5.5) is licensed under the terms of the Apache 2.0 License. Copyright 1999-2007 The Apache Software Foundation. The modifications and packaging for Debian are Copyright (C) 2005 Arnaud Vandyck, Copyright (C) 2006 Marcus Better, and are released under the same license as Tomcat itself. On Debian systems, the complete text of the Apache 2.0 License can be found in `/usr/share/common-licenses/Apache-2.0'. debian/compat0000644000000000000000000000000211667727300010375 0ustar 7 debian/source/0000755000000000000000000000000011727030057010470 5ustar debian/source/format0000644000000000000000000000001411667727276011721 0ustar 3.0 (quilt) debian/orig-tar.sh0000755000000000000000000000063311667727300011264 0ustar #!/bin/sh -e VERSION=$2 TAR=../libjasper-java_$VERSION.orig.tar.gz DIR=libjasper-java-$VERSION TAG=$(echo "TOMCAT_$VERSION" | sed -re's,\.,_,g') svn export http://svn.apache.org/repos/asf/tomcat/tc5.5.x/tags/${TAG}/jasper $DIR tar -c -z -f $TAR $DIR rm -rf $DIR ../$TAG # move to directory 'tarballs' if [ -r .svn/deb-layout ]; then . .svn/deb-layout mv $TAR $origDir && echo "moved $TAR to $origDir" fi debian/osgi.MF0000644000000000000000000000312211667727300010362 0ustar Bundle-ClassPath: . Bundle-Vendor: Apache Bundle-Localization: plugin Bundle-RequiredExecutionEnvironment: J2SE-1.4,CDC-1.0/Foundation-1.0,J 2SE-1.3 Bundle-Name: Apache Jasper 2 Plug-in Bundle-SymbolicName: org.apache.jasper Export-Package: org.apache.jasper,org.apache.jasper.compiler,org.apach e.jasper.compiler.tagplugin,org.apache.jasper.resources,org.apache.ja sper.runtime,org.apache.jasper.security,org.apache.jasper.servlet,org .apache.jasper.tagplugins.jstl,org.apache.jasper.tagplugins.jstl.core ,org.apache.jasper.util,org.apache.jasper.xmlparser Bundle-Version: 5.5.33 Bundle-ManifestVersion: 2 Import-Package: javax.servlet;version="2.4",javax.servlet.http;version ="2.4",javax.servlet.jsp;version="2.0",javax.servlet.jsp.el;version=" 2.0",javax.servlet.jsp.resources;version="2.0",javax.servlet.jsp.tage xt;version="2.0",javax.servlet.resources;version="2.4",javax.xml.pars ers,org.apache.commons.el;version="[1.0.0,2.0.0)",org.apache.commons. logging;version="[1.0.0,2.0.0)",org.apache.tools.ant;resolution:=opti onal,org.apache.tools.ant.taskdefs;resolution:=optional,org.apache.to ols.ant.types;resolution:=optional,org.apache.tools.ant.util;resoluti on:=optional,org.w3c.dom,org.xml.sax,org.xml.sax.ext,org.xml.sax.help ers,org.eclipse.jdt.core.compiler;resolution:=optional,org.eclipse.jd t.internal.compiler;resolution:=optional,org.eclipse.jdt.internal.com piler.classfmt;resolution:=optional,org.eclipse.jdt.internal.compiler .env;resolution:=optional,org.eclipse.jdt.internal.compiler.impl;reso lution:=optional,org.eclipse.jdt.internal.compiler.problem;resolution :=optional debian/ant.properties0000644000000000000000000000053611727025261012075 0ustar jsp-api.jar=/usr/share/java/jsp-api-2.1.jar servlet-api.jar=/usr/share/java/servlet-api-2.5.jar #ant.home=/usr/share/ant/ ant.jar=/usr/share/java/ant.jar compile.source=1.5 compile.target=1.5 commons-logging.jar=/usr/share/java/commons-logging.jar commons-el.jar=/usr/share/java/commons-el.jar jasper-compiler-jdt.jar=/usr/share/java/eclipse-ecj.jar debian/changelog0000644000000000000000000011160311727025547011054 0ustar libjasper-java (5.5.33-3) unstable; urgency=low * Team upload. * Replace dependencies on Servlet 2.4 library with 2.5. (Closes: #658804). * Bump Standards-Version to 3.9.3. No changes were required. [tony mancill] * Remove Michael Koch from Uploaders. (Closes: #654072) -- Miguel Landaeta Sat, 10 Mar 2012 17:07:23 -0430 libjasper-java (5.5.33-2) unstable; urgency=low * d/control: Update Vcs-Svn and Vcs-Browser * Add Jakub Adam to Uploaders * Add org.eclipse.jdt.internal and org.eclipse.jdt.core to Import-Package OSGi attribute (resolution optional) -- Jakub Adam Sun, 04 Dec 2011 12:55:01 +0100 libjasper-java (5.5.33-1) unstable; urgency=low * Team upload * Change debian/watch to point to upstream's svn repo. Create orig tarball by debian/orig-tar.sh. * Add a symlink /usr/share/java/jasper-5.5.jar. * Remove Arnaud from Uploaders list. * Remove Java runtime from Depends. * Update Standards-Version: 3.9.2. * Remove debian/README.source. * Use jar instead of zip. -- Torsten Werner Thu, 08 Sep 2011 21:45:25 +0200 libjasper-java (5.5.26-5) unstable; urgency=low * Removed versionless symlink of jasper.jar to avoid conflict with tomcat6's jasper.jar. (Closes: #572035) * Removed newly obsolete B-D on javahelper. -- Niels Thykier Mon, 01 Mar 2010 21:50:23 +0100 libjasper-java (5.5.26-4) unstable; urgency=low * Discard all binary packages and put jasper in its own package. * Bumped debhelper compat to 7. * Switched to cdbs instead of home-made debian/rules. * Changed source to 3.0 (quilt) and moved all changes in the diff.gz into its own patch. * Bumped Standard-Versions to 3.8.4. - Refer to common-licenses for apache2 license. - Change section to java. * Added README.source to explain how to create the orig.tar.gz. * Removed README.Debian and NEWS, they do not apply to the new package. -- Niels Thykier Sat, 06 Feb 2010 16:23:06 +0100 tomcat5.5 (5.5.26-3) unstable; urgency=high * CVE-2008-1947: Fix XSS issue in host-manager web application. Closes: #484643 -- Michael Koch Fri, 06 Jun 2008 09:34:15 +0200 tomcat5.5 (5.5.26-2) unstable; urgency=low * Fixed bootstrap.MF to put commons-logging-api.jar onto classpath instead of commons-logging-api-1.1.1.jar. Closes: #477363 -- Michael Koch Sun, 01 Jun 2008 11:34:40 +0200 tomcat5.5 (5.5.26-1) unstable; urgency=low [ Michael Koch ] * New upstream release. - CVE-2007-5333: unauthorized disclosure of information. Closes: #465645 - CVS-2007-6286: handling of empty requests. * debian/rules: Don't file when files to delete don't exist. Closes: #458977 * debian/tomcat5.5.init: Change directory to $CATALINA_BASE/temp before starting the daemon. Patch by David Pashley. Closes: #418826 * debian/tomcat5.5.init: Use 'printf' instead of 'echo -e'. Closes: #472899 [ Marcus Better ] * debian/policy/04webapps.policy: Grant read permission to JULI for the (non-existing) logging.properties file in the example webapps. Closes: #460839. -- Michael Koch Sat, 19 Apr 2008 23:18:30 +0200 tomcat5.5 (5.5.25-5) unstable; urgency=low * debian/tomcat5.5.init: Check if tomcat-users.xml exists. Thanks to Javier Serrano Polo for the patch. Closes: #445857. * debian/tomcat5.5-webapps.postrm: Purge links created in postinst script. Closes: #453879. * debian/tomcat5.5-admin.links: Fix symlink for commons-io.jar. Closes: #452366. * debian/tomcat5.5.init: Check user id of the user running the init script. Closes: #457956. * Renamed /etc/cron.daily/tomcat5.5 to /etc/cron.daily/tomcat55. Closes: #454296. * debian/tomcat5.5.init: source /etc/default/locale and export LANG so tomcat gets started with system locale. Originally reported to https://bugs.launchpad.net/ubuntu/+source/tomcat5.5/+bug/153672. -- Michael Koch Thu, 03 Jan 2008 13:23:44 +0100 tomcat5.5 (5.5.25-4) unstable; urgency=high * CVE-2007-5342: Fix unauthorized modification of data because of too open permissions. Closes: #458237. * Always clean temporary directory on startup. Closes: #456608. -- Michael Koch Sat, 29 Dec 2007 20:15:40 +0100 tomcat5.5 (5.5.25-3) unstable; urgency=low * debian/libtomcat5.5-java.links: Removed links for xml-apis.jar and xercesImpl.jar. Closes: #443382, #455495. * Added libgnumail-java to Build-Depends. Closes: #454312. * Updated Standards-Version to 3.7.3. -- Michael Koch Thu, 13 Dec 2007 22:15:18 +0100 tomcat5.5 (5.5.25-2) unstable; urgency=high [ Michael Koch ] CVE-2007-5461: * Fix absolute path traversal vulnerability. Closes: #448664. [ Marcus Better ] * Add required commons-io symlink to the admin webapp, which fixes WAR file uploads. (Closes: #452366) * debian/control: Use the new Homepage and Vcs-* fields. * debian/NEWS: Remove outdated entry. -- Michael Koch Fri, 30 Nov 2007 10:46:33 +0100 tomcat5.5 (5.5.25-1) unstable; urgency=high * New upstream release. Setting usrgency to high. - Fixes XSS issues. CVE-2007-1355, CVS-2007-2449 and CVE-2007-2450. * debian/policy/04webapps.policy: fix permissions on org.apache.tomcat.util.digester package. -- Michael Koch Wed, 03 Oct 2007 20:04:18 +0200 tomcat5.5 (5.5.23-1) unstable; urgency=low [ Marcus Better ] * New upstream version. * Don't include /var/lib/tomcat5.5/conf/catalina.policy since it is auto-generated at startup. Thanks to Javier Serrano Polo. (Closes: #426761) * Make sure files under /var/lib/tomcat5.5/conf are not executable. Thanks to Marco Nenciarini. (Closes: #426740) * Fixes a failure to start if the temp directory contained too many files. Thanks to Maarten van der Hoef (Closes: #427978) * tomcat5.5-admin now depends on libcommons-collections3-java and libcommons-digester-java. [ Michael Koch ] * Clean up correctly on (re-)build (Closes: #434617). * Replaced obsolete ${Source-Version} by ${source:Version}. * Added myself to Uploaders. * Updated (Build-)Depends on libcommons-modeler-java to (>= 2.0). * Clear up comment in debian/tomcat5.5.default about TOMCAT55_USER. (Closes: #425020). * Make cron.daily script work when package is removed but not purged (Closes: #436020). * Applied patch from David Pashley to move configuration from /var/lib/tomcat5.5/conf to /etc/tomcat5.5 (Closes: #434728). * Use ${catalina.base} instead of ${catalina.home} in debian/policy/50user.policy (Closes: #431704). * Make tomcat5.5 depend on libecj-java instead of ecj-bootstrap (Closes: #396170). * Don't make tomcat5.5 on two non-virtual java runtimes. Removed kaffe. * Don't let tomcat5.5 suggest libapache-mod-jk. Doesn't exist anymore. * Fixed watch file. * Set CATALINA_BASE to /var/lib/$NAME in debian/tomcat5.5.init. -- Michael Koch Sun, 02 Sep 2007 11:28:05 +0200 tomcat5.5 (5.5.20-5) unstable; urgency=low * Messages are now logged to the system log instead of the pipe "/var/log/tomcat5.5/catalina.out". (Closes: #402603, #402879) * The security manager is enabled by default. A warning is logged to the syslog when running under GCJ, which doesn't work in this mode currently. (Closes: #411137) * debian/rules: Set SHELL=/bin/bash as required. Thanks to David Pashley. (Closes: #413845) * Webapps are now permitted to read the properties "catalina.base" and "catalina.home". Thanks to Adrian Bridgett. (Closes: #412479) * Added the symlink "/usr/share/tomcat5.5/webapps" pointing to "/var/lib/tomcat5.5/webapps". Thanks to Cyrille and Florent Angebault. (Closes: #406614) * Build with source level 1.5, since GCJ now supports generics. (Closes: #424465) * Recognise Sun JDK 6 from the sun-java6-jdk package. * debian/control: Removed Stefan Gybas (on own request) and Wolfgang Baer from Uploaders. -- Marcus Better Tue, 24 Apr 2007 15:04:17 +0200 tomcat5.5 (5.5.20-4) unstable; urgency=low * The symlink "/usr/share/tomcat5.5/common/endorsed/xml-apis" is now correctly named "xml-apis.jar". Thanks to Javier Serrano Polo. (Closes: #402265) * The tomcat55 user now has write permissions to "/var/lib/tomcat5.5/conf", so that Tomcat can deploy webapps in WAR archives. (Closes: #402224) * The named pipe /var/log/tomcat5.5/catalina.out is now properly created. * The TOMCAT5_SHUTDOWN variable in /etc/default/tomcat5.5 is obsolete and has been removed. * The init script now supports the try-restart action. * Install the cron file. -- Marcus Better Sat, 9 Dec 2006 22:41:52 +0100 tomcat5.5 (5.5.20-3) experimental; urgency=low * Really fix the "/etc/init.d/tomcat5.5 status" command this time. (Closes: #398044) * Use jsvc for daemon startup, instead of the catalina.sh script. Daemon shutdown is now faster and more reliable. * Add missing permissions required by the admin webapp. Thanks to Jonathan-Marc Lapointe. * The CATALINA_OPTS variable in /etc/default/tomcat5.5 has been renamed to the more intuitive JAVA_OPTS. -- Marcus Better Sat, 25 Nov 2006 21:20:18 +0100 tomcat5.5 (5.5.20-2) unstable; urgency=medium * Now runs with java-gcj-compat. (Closes: #395167) * Add compatibility links for JDK 1.4. Thanks to Javier Serrano Polo. (Closes: #397996). * Fix accidental double removal of the tomcat55 user on purge in some cases. Thanks to Andreas Beckmann. (Closes: #393224) * Fix typo affecting "/etc/init.d/tomcat5.5 status" command. Thanks to Jhair Tocancipa Triana. (Closes: #398044) * Webapps are now installed in /usr/share/tomcat5.5-webapps. Their context definitions are copied into /var/lib/tomcat5.5/conf/Catalina/localhost on first install, but if removed they will no longer be re-enabled on every upgrade. Thanks to Adrian Bridgett. (Closes: #399184) * Change owner of various files from tomcat5 to tomcat55 on upgrade from release 5.5.17-1 or earlier. Thanks to Mike Whitaker. (Closes: #392569) * Don't use juli LogManager with java-gcj-compat, as workaround for bug #399251. * We no longer need xsltproc to generate documentation, since the required supporting functions are now available in main. * debian/ant.properties, debian/rules: Don't delete PureTLS code from the source. It will be ignored during build anyway. * Rebuild jkstatus-ant from source instead of using precompiled class files. * Simplified the .install files by grouping by directory. * Install forgotten files `catalina.properties', `logging.properties' and `context.xml' in /var/lib/tomcat5.5/conf. * Synchronized security policy files with upstream. * debian/rules: Don't use CDBS. Thus we no longer need a bogus "ant xxx" invocation in the "clean" target, and the script is simple enough anyway. -- Marcus Better Tue, 21 Nov 2006 12:06:17 +0100 tomcat5.5 (5.5.20-1) unstable; urgency=low * New upstream release. * Build JSP and servlet examples from source instead of copying them from libservlet2.4-java. (Closes: #393905) * debian/control: Add some missing dependencies. * Enable commons-daemon functionality, it should work correctly by now. * Make init script LSB compliant. * Don't call /etc/init.d/tomcat5.5 directly from the maintainer scripts. -- Marcus Better Mon, 23 Oct 2006 13:28:15 +0200 tomcat5.5 (5.5.17-2) unstable; urgency=low * debian/control: removed apache-utils version and added alternative apache2-utils (that provide the virtual apache-utils package) * debian/tomcat5.init: added Sun's jdk path as provided by sun-java5-bin package. (closes: #388617). * debian/control: updated apache2-common to apache2.2-common (closes: #391006) (thanks to Andrew Meaden and Luk Claes). * debian/control (depends): removed -webapps and -admin from Depends field and move them to Suggest to avoid circular dependencies, thanks to Bill Allombert. (closes: #387362). * tomcat5.5 has now the user tomcat55 and remove user tomcat5 if package tomcat5 is marked as purge or if it's never been installed (closes: #386831). -- Arnaud Vandyck Mon, 9 Oct 2006 16:36:25 +0200 tomcat5.5 (5.5.17-1) unstable; urgency=low * New upstream release. * debian/control: added tomcat5.5 dependency against ecj-boostrap so there is a jsp compiler closes: #384062). -- Arnaud Vandyck Tue, 12 Sep 2006 14:42:58 +0200 tomcat5.5 (5.5.15-1) experimental; urgency=low * Arnaud Vandyck : + All the work as been done by Wolfgang to have this package in Debian. + The package is now tomcat5.5 and not tomcat5. + Now build with gcj instead of kaffe. + Put cdbs and debhelper in Build-Depends. + Standards-Version updated to 3.7.2. + tomcat depends on tomcat-webapps and tomcat-admin, not only suggest * New major upstream release + New source layout - adaptions all over the place + Ported all patches to new source layout + Added patch (09_UseSystemDBCP.patch) to use system dbcp instead of repackaged tomcat stuff (naming-factory-dbcp.jar) + Drop now unneeded dependencies on libsaxpath-java, libjaxen-java, libregexp-java from build-dependencies and dependencies + Move dependency on libcommons-collections3-java, libcommons-fileupload-java, libcommons-beanutils-java and libcommons-digester-java to tomcat5-admin (only needed here) + Move libraries around as required by new binary layout (e.g. i18n jars into own directory) + Moved and linked new jars (tomcat-jkstatus-ant.jar, tomcat-juli.jar) + Updated 03catalina.policy to include tomcat-juli.jar, remove launcher.jar + Install ant task definitions with libtomcat5-java * Remove JDK 1.3 directories from JDK_DIRS in tomcat.init (not supported) * Updated tomcat.default to remove JDK 1.3 options * Updated description to include host-manager, fixed URLs * Minor updates in README.Debian -- Wolfgang Baer Fri, 27 Jan 2006 10:07:47 +0100 tomcat5 (5.0.30-9) unstable; urgency=low * kaffe compiler transition + Remove build.compiler jikes property + Modify tomcat5.init to use default compiler instead of jikes * Fix spelling error in README.Debian (closes: #346573) -- Wolfgang Baer Tue, 17 Jan 2006 11:50:52 +0100 tomcat5 (5.0.30-8) unstable; urgency=low * Correct description to refer to tomcat5-webapps (closes: #336984) * Test in tomcat5.init for JDK like environment so we are sure java-gcj-compat-dev is installed and used (closes: #337270) -- Wolfgang Baer Mon, 7 Nov 2005 19:17:58 +0100 tomcat5 (5.0.30-7) unstable; urgency=low * Move to main - upload with orig.tar.gz included * Works with kaffe (>= 1.1.6-3) and java-gcj-compat-dev + changed debian/control accordingly + adjusted tomcat5.init file * Removed libcommons-httpclient-java build-dep - not needed -- Wolfgang Baer Thu, 06 Oct 2005 21:59:36 +0200 tomcat5 (5.0.30-6) unstable; urgency=low * Move commons-fileupload jar from common/lib to server/lib * Copy fixed struts-config.xml during install over the old one. The fixed one is taken from upstream (published at download location) * Tomcat5 has a new context file handling. The xml files with the context of a webapp needs to be put into conf/[Engine name]/[Host name] whereas the default engine which serves the admin webapp has to be called "Catalina": + Create conf/Catalina/localhost directory during install + Deploy the context files for the webapps into this directory (closes: #315038) + Added NEWS.Debian file to inform about moving context files to new context directory hierarchy. * Install the jsp/servlet examples (closes: #325508, #325507, #326126) * Added unzip to build-deps (needed to unzip example webapps) * Cleaned up debian/rules a bit * libcommons-launcher-java dependency added in last upload (closes: #324041) * Works with latest kaffe vm (closes: #320845) - added versioned dependency * Changed depends to j2sdk1.3 | j2sdk1.4 | j2sdk1.5 | kaffe * Removed depends on j2sdk1.3 | j2sdk1.4 | j2sdk1.5 | kaffe | java-compiler as the above depends already includes an java-compiler as JDKs * Removed note in description about non-free JDKs - kaffe works and the info is superceded by the existance of java-package * Updated *.policy files to match new jars and fixed typos * As tomcat5 is now functional we can close the whishlist bugs for packaging tomcat5 (closes: #222876, #267741) * Disable commons-daemon copy/build - not available on all platforms + Added patch 15_dont_copy_daemon.patch + Removed related stuff from debian/rules and debian/control * Removed classpath entry from MF and added jars directly to setclasspath.sh + Patch 01_remove_classpath_manifest_a.patch removes the entry + Patch 01_remove_classpath_manifest_b.patch adds it to setclasspath.sh * Fixed typo CALALINA in README.Debian * Fixed lintian warning in tomcat5.postinst * Extended JDK_DIRS and enabled Security Manager for non-free JDKs * Build documentation through commandline xslt processing + Patch 03_fix_doc_stylesheet.patch to fix stylsheet variable definition + Added xsltproc to build-deps and process docs in debian/rules + Moved RELEASE-NOTES to webapps/ROOT where it belongs + Added tomcat-docs.xml context definition to allow linking and also starting tomcat5 without tomcat5-webapps installed (removed linking for tomcat-docs from server.xml) * Added myself to uploaders * Upload sponsored by Petter Reinholdtsen -- Wolfgang Baer Wed, 07 Sep 2005 17:25:44 +0200 tomcat5 (5.0.30-5) unstable; urgency=low * debian/control (libtomcat5-java: Depends): added libcommons-launcher-java -- Arnaud Vandyck Sat, 20 Aug 2005 10:34:05 +0200 tomcat5 (5.0.30-4) unstable; urgency=low * upload to unstable * debian/control: ant transition: change the dep from libant1.6-java to ant * debian/libtomcat5-java.links: added some links and corrected ant once * updated to libcommons-collection3-java -- Arnaud Vandyck Fri, 19 Aug 2005 16:06:27 +0200 tomcat5 (5.0.30-3) experimental; urgency=low * Added libapache2-mod-jk to suggests, missing libcommons-el-java to libtomcat5-java build-depends * Fixed/Added links in libtomcat5-java (jsp-api/commons-el jars added) * Changed JDK dirs (as generated by java-package), enabled security manager and therefore put kaffe as last jdk (currently has problems) * Fixed typo in ant.properties to correctly include logging-api.jar and fixed libtomcat5-java accordingly * Fixed servlet-api link in tomcat5-webapps.links and included needed jsp-api link * Standards-Version 3.6.2 - no changes required * Build-Deps to Build-Dep-Indep to fix linitan warning -- Wolfgang Baer Wed, 29 Jun 2005 22:32:49 +0200 tomcat5 (5.0.30-2) experimental; urgency=low * libtomcat5-java: does not provide commons-logging-api and commons-daemon but use symlink to /usr/share/java. Now, tomcat5 can start with non-free jdks (but it does not run with free one at the moment for me) (closes: #315038) -- Arnaud Vandyck Tue, 21 Jun 2005 12:44:21 +0200 tomcat5 (5.0.30-1) experimental; urgency=low * Initial release release based on tomcat4 package by Stefan Gybas. -- Arnaud Vandyck Sat, 11 Jun 2005 17:00:35 +0200 tomcat5.5 (5.5.26-2) unstable; urgency=low * Fixed bootstrap.MF to put commons-logging-api.jar onto classpath instead of commons-logging-api-1.1.1.jar. Closes: #477363 -- Michael Koch Sun, 01 Jun 2008 11:34:40 +0200 tomcat5.5 (5.5.26-1) unstable; urgency=low [ Michael Koch ] * New upstream release. - CVE-2007-5333: unauthorized disclosure of information. Closes: #465645 - CVS-2007-6286: handling of empty requests. * debian/rules: Don't file when files to delete don't exist. Closes: #458977 * debian/tomcat5.5.init: Change directory to $CATALINA_BASE/temp before starting the daemon. Patch by David Pashley. Closes: #418826 * debian/tomcat5.5.init: Use 'printf' instead of 'echo -e'. Closes: #472899 [ Marcus Better ] * debian/policy/04webapps.policy: Grant read permission to JULI for the (non-existing) logging.properties file in the example webapps. Closes: #460839. -- Michael Koch Sat, 19 Apr 2008 23:18:30 +0200 tomcat5.5 (5.5.25-5) unstable; urgency=low * debian/tomcat5.5.init: Check if tomcat-users.xml exists. Thanks to Javier Serrano Polo for the patch. Closes: #445857. * debian/tomcat5.5-webapps.postrm: Purge links created in postinst script. Closes: #453879. * debian/tomcat5.5-admin.links: Fix symlink for commons-io.jar. Closes: #452366. * debian/tomcat5.5.init: Check user id of the user running the init script. Closes: #457956. * Renamed /etc/cron.daily/tomcat5.5 to /etc/cron.daily/tomcat55. Closes: #454296. * debian/tomcat5.5.init: source /etc/default/locale and export LANG so tomcat gets started with system locale. Originally reported to https://bugs.launchpad.net/ubuntu/+source/tomcat5.5/+bug/153672. -- Michael Koch Thu, 03 Jan 2008 13:23:44 +0100 tomcat5.5 (5.5.25-4) unstable; urgency=high * CVE-2007-5342: Fix unauthorized modification of data because of too open permissions. Closes: #458237. * Always clean temporary directory on startup. Closes: #456608. -- Michael Koch Sat, 29 Dec 2007 20:15:40 +0100 tomcat5.5 (5.5.25-3) unstable; urgency=low * debian/libtomcat5.5-java.links: Removed links for xml-apis.jar and xercesImpl.jar. Closes: #443382, #455495. * Added libgnumail-java to Build-Depends. Closes: #454312. * Updated Standards-Version to 3.7.3. -- Michael Koch Thu, 13 Dec 2007 22:15:18 +0100 tomcat5.5 (5.5.25-2) unstable; urgency=high [ Michael Koch ] CVE-2007-5461: * Fix absolute path traversal vulnerability. Closes: #448664. [ Marcus Better ] * Add required commons-io symlink to the admin webapp, which fixes WAR file uploads. (Closes: #452366) * debian/control: Use the new Homepage and Vcs-* fields. * debian/NEWS: Remove outdated entry. -- Michael Koch Fri, 30 Nov 2007 10:46:33 +0100 tomcat5.5 (5.5.25-1) unstable; urgency=high * New upstream release. Setting usrgency to high. - Fixes XSS issues. CVE-2007-1355, CVS-2007-2449 and CVE-2007-2450. * debian/policy/04webapps.policy: fix permissions on org.apache.tomcat.util.digester package. -- Michael Koch Wed, 03 Oct 2007 20:04:18 +0200 tomcat5.5 (5.5.23-1) unstable; urgency=low [ Marcus Better ] * New upstream version. * Don't include /var/lib/tomcat5.5/conf/catalina.policy since it is auto-generated at startup. Thanks to Javier Serrano Polo. (Closes: #426761) * Make sure files under /var/lib/tomcat5.5/conf are not executable. Thanks to Marco Nenciarini. (Closes: #426740) * Fixes a failure to start if the temp directory contained too many files. Thanks to Maarten van der Hoef (Closes: #427978) * tomcat5.5-admin now depends on libcommons-collections3-java and libcommons-digester-java. [ Michael Koch ] * Clean up correctly on (re-)build (Closes: #434617). * Replaced obsolete ${Source-Version} by ${source:Version}. * Added myself to Uploaders. * Updated (Build-)Depends on libcommons-modeler-java to (>= 2.0). * Clear up comment in debian/tomcat5.5.default about TOMCAT55_USER. (Closes: #425020). * Make cron.daily script work when package is removed but not purged (Closes: #436020). * Applied patch from David Pashley to move configuration from /var/lib/tomcat5.5/conf to /etc/tomcat5.5 (Closes: #434728). * Use ${catalina.base} instead of ${catalina.home} in debian/policy/50user.policy (Closes: #431704). * Make tomcat5.5 depend on libecj-java instead of ecj-bootstrap (Closes: #396170). * Don't make tomcat5.5 on two non-virtual java runtimes. Removed kaffe. * Don't let tomcat5.5 suggest libapache-mod-jk. Doesn't exist anymore. * Fixed watch file. * Set CATALINA_BASE to /var/lib/$NAME in debian/tomcat5.5.init. -- Michael Koch Sun, 02 Sep 2007 11:28:05 +0200 tomcat5.5 (5.5.20-5) unstable; urgency=low * Messages are now logged to the system log instead of the pipe "/var/log/tomcat5.5/catalina.out". (Closes: #402603, #402879) * The security manager is enabled by default. A warning is logged to the syslog when running under GCJ, which doesn't work in this mode currently. (Closes: #411137) * debian/rules: Set SHELL=/bin/bash as required. Thanks to David Pashley. (Closes: #413845) * Webapps are now permitted to read the properties "catalina.base" and "catalina.home". Thanks to Adrian Bridgett. (Closes: #412479) * Added the symlink "/usr/share/tomcat5.5/webapps" pointing to "/var/lib/tomcat5.5/webapps". Thanks to Cyrille and Florent Angebault. (Closes: #406614) * Build with source level 1.5, since GCJ now supports generics. (Closes: #424465) * Recognise Sun JDK 6 from the sun-java6-jdk package. * debian/control: Removed Stefan Gybas (on own request) and Wolfgang Baer from Uploaders. -- Marcus Better Tue, 24 Apr 2007 15:04:17 +0200 tomcat5.5 (5.5.20-4) unstable; urgency=low * The symlink "/usr/share/tomcat5.5/common/endorsed/xml-apis" is now correctly named "xml-apis.jar". Thanks to Javier Serrano Polo. (Closes: #402265) * The tomcat55 user now has write permissions to "/var/lib/tomcat5.5/conf", so that Tomcat can deploy webapps in WAR archives. (Closes: #402224) * The named pipe /var/log/tomcat5.5/catalina.out is now properly created. * The TOMCAT5_SHUTDOWN variable in /etc/default/tomcat5.5 is obsolete and has been removed. * The init script now supports the try-restart action. * Install the cron file. -- Marcus Better Sat, 9 Dec 2006 22:41:52 +0100 tomcat5.5 (5.5.20-3) experimental; urgency=low * Really fix the "/etc/init.d/tomcat5.5 status" command this time. (Closes: #398044) * Use jsvc for daemon startup, instead of the catalina.sh script. Daemon shutdown is now faster and more reliable. * Add missing permissions required by the admin webapp. Thanks to Jonathan-Marc Lapointe. * The CATALINA_OPTS variable in /etc/default/tomcat5.5 has been renamed to the more intuitive JAVA_OPTS. -- Marcus Better Sat, 25 Nov 2006 21:20:18 +0100 tomcat5.5 (5.5.20-2) unstable; urgency=medium * Now runs with java-gcj-compat. (Closes: #395167) * Add compatibility links for JDK 1.4. Thanks to Javier Serrano Polo. (Closes: #397996). * Fix accidental double removal of the tomcat55 user on purge in some cases. Thanks to Andreas Beckmann. (Closes: #393224) * Fix typo affecting "/etc/init.d/tomcat5.5 status" command. Thanks to Jhair Tocancipa Triana. (Closes: #398044) * Webapps are now installed in /usr/share/tomcat5.5-webapps. Their context definitions are copied into /var/lib/tomcat5.5/conf/Catalina/localhost on first install, but if removed they will no longer be re-enabled on every upgrade. Thanks to Adrian Bridgett. (Closes: #399184) * Change owner of various files from tomcat5 to tomcat55 on upgrade from release 5.5.17-1 or earlier. Thanks to Mike Whitaker. (Closes: #392569) * Don't use juli LogManager with java-gcj-compat, as workaround for bug #399251. * We no longer need xsltproc to generate documentation, since the required supporting functions are now available in main. * debian/ant.properties, debian/rules: Don't delete PureTLS code from the source. It will be ignored during build anyway. * Rebuild jkstatus-ant from source instead of using precompiled class files. * Simplified the .install files by grouping by directory. * Install forgotten files `catalina.properties', `logging.properties' and `context.xml' in /var/lib/tomcat5.5/conf. * Synchronized security policy files with upstream. * debian/rules: Don't use CDBS. Thus we no longer need a bogus "ant xxx" invocation in the "clean" target, and the script is simple enough anyway. -- Marcus Better Tue, 21 Nov 2006 12:06:17 +0100 tomcat5.5 (5.5.20-1) unstable; urgency=low * New upstream release. * Build JSP and servlet examples from source instead of copying them from libservlet2.4-java. (Closes: #393905) * debian/control: Add some missing dependencies. * Enable commons-daemon functionality, it should work correctly by now. * Make init script LSB compliant. * Don't call /etc/init.d/tomcat5.5 directly from the maintainer scripts. -- Marcus Better Mon, 23 Oct 2006 13:28:15 +0200 tomcat5.5 (5.5.17-2) unstable; urgency=low * debian/control: removed apache-utils version and added alternative apache2-utils (that provide the virtual apache-utils package) * debian/tomcat5.init: added Sun's jdk path as provided by sun-java5-bin package. (closes: #388617). * debian/control: updated apache2-common to apache2.2-common (closes: #391006) (thanks to Andrew Meaden and Luk Claes). * debian/control (depends): removed -webapps and -admin from Depends field and move them to Suggest to avoid circular dependencies, thanks to Bill Allombert. (closes: #387362). * tomcat5.5 has now the user tomcat55 and remove user tomcat5 if package tomcat5 is marked as purge or if it's never been installed (closes: #386831). -- Arnaud Vandyck Mon, 9 Oct 2006 16:36:25 +0200 tomcat5.5 (5.5.17-1) unstable; urgency=low * New upstream release. * debian/control: added tomcat5.5 dependency against ecj-boostrap so there is a jsp compiler closes: #384062). -- Arnaud Vandyck Tue, 12 Sep 2006 14:42:58 +0200 tomcat5.5 (5.5.15-1) experimental; urgency=low * Arnaud Vandyck : + All the work as been done by Wolfgang to have this package in Debian. + The package is now tomcat5.5 and not tomcat5. + Now build with gcj instead of kaffe. + Put cdbs and debhelper in Build-Depends. + Standards-Version updated to 3.7.2. + tomcat depends on tomcat-webapps and tomcat-admin, not only suggest * New major upstream release + New source layout - adaptions all over the place + Ported all patches to new source layout + Added patch (09_UseSystemDBCP.patch) to use system dbcp instead of repackaged tomcat stuff (naming-factory-dbcp.jar) + Drop now unneeded dependencies on libsaxpath-java, libjaxen-java, libregexp-java from build-dependencies and dependencies + Move dependency on libcommons-collections3-java, libcommons-fileupload-java, libcommons-beanutils-java and libcommons-digester-java to tomcat5-admin (only needed here) + Move libraries around as required by new binary layout (e.g. i18n jars into own directory) + Moved and linked new jars (tomcat-jkstatus-ant.jar, tomcat-juli.jar) + Updated 03catalina.policy to include tomcat-juli.jar, remove launcher.jar + Install ant task definitions with libtomcat5-java * Remove JDK 1.3 directories from JDK_DIRS in tomcat.init (not supported) * Updated tomcat.default to remove JDK 1.3 options * Updated description to include host-manager, fixed URLs * Minor updates in README.Debian -- Wolfgang Baer Fri, 27 Jan 2006 10:07:47 +0100 tomcat5 (5.0.30-9) unstable; urgency=low * kaffe compiler transition + Remove build.compiler jikes property + Modify tomcat5.init to use default compiler instead of jikes * Fix spelling error in README.Debian (closes: #346573) -- Wolfgang Baer Tue, 17 Jan 2006 11:50:52 +0100 tomcat5 (5.0.30-8) unstable; urgency=low * Correct description to refer to tomcat5-webapps (closes: #336984) * Test in tomcat5.init for JDK like environment so we are sure java-gcj-compat-dev is installed and used (closes: #337270) -- Wolfgang Baer Mon, 7 Nov 2005 19:17:58 +0100 tomcat5 (5.0.30-7) unstable; urgency=low * Move to main - upload with orig.tar.gz included * Works with kaffe (>= 1.1.6-3) and java-gcj-compat-dev + changed debian/control accordingly + adjusted tomcat5.init file * Removed libcommons-httpclient-java build-dep - not needed -- Wolfgang Baer Thu, 06 Oct 2005 21:59:36 +0200 tomcat5 (5.0.30-6) unstable; urgency=low * Move commons-fileupload jar from common/lib to server/lib * Copy fixed struts-config.xml during install over the old one. The fixed one is taken from upstream (published at download location) * Tomcat5 has a new context file handling. The xml files with the context of a webapp needs to be put into conf/[Engine name]/[Host name] whereas the default engine which serves the admin webapp has to be called "Catalina": + Create conf/Catalina/localhost directory during install + Deploy the context files for the webapps into this directory (closes: #315038) + Added NEWS.Debian file to inform about moving context files to new context directory hierarchy. * Install the jsp/servlet examples (closes: #325508, #325507, #326126) * Added unzip to build-deps (needed to unzip example webapps) * Cleaned up debian/rules a bit * libcommons-launcher-java dependency added in last upload (closes: #324041) * Works with latest kaffe vm (closes: #320845) - added versioned dependency * Changed depends to j2sdk1.3 | j2sdk1.4 | j2sdk1.5 | kaffe * Removed depends on j2sdk1.3 | j2sdk1.4 | j2sdk1.5 | kaffe | java-compiler as the above depends already includes an java-compiler as JDKs * Removed note in description about non-free JDKs - kaffe works and the info is superceded by the existance of java-package * Updated *.policy files to match new jars and fixed typos * As tomcat5 is now functional we can close the whishlist bugs for packaging tomcat5 (closes: #222876, #267741) * Disable commons-daemon copy/build - not available on all platforms + Added patch 15_dont_copy_daemon.patch + Removed related stuff from debian/rules and debian/control * Removed classpath entry from MF and added jars directly to setclasspath.sh + Patch 01_remove_classpath_manifest_a.patch removes the entry + Patch 01_remove_classpath_manifest_b.patch adds it to setclasspath.sh * Fixed typo CALALINA in README.Debian * Fixed lintian warning in tomcat5.postinst * Extended JDK_DIRS and enabled Security Manager for non-free JDKs * Build documentation through commandline xslt processing + Patch 03_fix_doc_stylesheet.patch to fix stylsheet variable definition + Added xsltproc to build-deps and process docs in debian/rules + Moved RELEASE-NOTES to webapps/ROOT where it belongs + Added tomcat-docs.xml context definition to allow linking and also starting tomcat5 without tomcat5-webapps installed (removed linking for tomcat-docs from server.xml) * Added myself to uploaders * Upload sponsored by Petter Reinholdtsen -- Wolfgang Baer Wed, 07 Sep 2005 17:25:44 +0200 tomcat5 (5.0.30-5) unstable; urgency=low * debian/control (libtomcat5-java: Depends): added libcommons-launcher-java -- Arnaud Vandyck Sat, 20 Aug 2005 10:34:05 +0200 tomcat5 (5.0.30-4) unstable; urgency=low * upload to unstable * debian/control: ant transition: change the dep from libant1.6-java to ant * debian/libtomcat5-java.links: added some links and corrected ant once * updated to libcommons-collection3-java -- Arnaud Vandyck Fri, 19 Aug 2005 16:06:27 +0200 tomcat5 (5.0.30-3) experimental; urgency=low * Added libapache2-mod-jk to suggests, missing libcommons-el-java to libtomcat5-java build-depends * Fixed/Added links in libtomcat5-java (jsp-api/commons-el jars added) * Changed JDK dirs (as generated by java-package), enabled security manager and therefore put kaffe as last jdk (currently has problems) * Fixed typo in ant.properties to correctly include logging-api.jar and fixed libtomcat5-java accordingly * Fixed servlet-api link in tomcat5-webapps.links and included needed jsp-api link * Standards-Version 3.6.2 - no changes required * Build-Deps to Build-Dep-Indep to fix linitan warning -- Wolfgang Baer Wed, 29 Jun 2005 22:32:49 +0200 tomcat5 (5.0.30-2) experimental; urgency=low * libtomcat5-java: does not provide commons-logging-api and commons-daemon but use symlink to /usr/share/java. Now, tomcat5 can start with non-free jdks (but it does not run with free one at the moment for me) (closes: #315038) -- Arnaud Vandyck Tue, 21 Jun 2005 12:44:21 +0200 tomcat5 (5.0.30-1) experimental; urgency=low * Initial release release based on tomcat4 package by Stefan Gybas. -- Arnaud Vandyck Sat, 11 Jun 2005 17:00:35 +0200 debian/patches/0000755000000000000000000000000011727030057010617 5ustar debian/patches/series0000644000000000000000000000001711727025261012033 0ustar servlet25.diff debian/patches/servlet25.diff0000644000000000000000000000705211727025261013311 0ustar Description: Dummy compatibility with Servlet 2.5 API Author: Miguel Landaeta Bug-Debian: http://bugs.debian.org/658804 Forwarded: no Last-Update: 2012-03-10 --- libjasper-java-5.5.33.orig/src/share/org/apache/jasper/runtime/JspFactoryImpl.java +++ libjasper-java-5.5.33/src/share/org/apache/jasper/runtime/JspFactoryImpl.java @@ -20,8 +20,10 @@ import java.security.AccessController; import java.security.PrivilegedAction; import javax.servlet.Servlet; +import javax.servlet.ServletContext; import javax.servlet.ServletRequest; import javax.servlet.ServletResponse; +import javax.servlet.jsp.JspApplicationContext; import javax.servlet.jsp.JspFactory; import javax.servlet.jsp.JspEngineInfo; import javax.servlet.jsp.PageContext; @@ -175,4 +177,8 @@ public class JspFactoryImpl extends JspF return null; } } + + public JspApplicationContext getJspApplicationContext(ServletContext context) { + throw new UnsupportedOperationException("getJspApplicationContext"); + } } --- libjasper-java-5.5.33.orig/src/share/org/apache/jasper/runtime/JspContextWrapper.java +++ libjasper-java-5.5.33/src/share/org/apache/jasper/runtime/JspContextWrapper.java @@ -41,6 +41,8 @@ import javax.servlet.jsp.el.VariableReso import javax.servlet.jsp.tagext.BodyContent; import javax.servlet.jsp.tagext.VariableInfo; +import javax.el.ELContext; + import org.apache.commons.el.VariableResolverImpl; import org.apache.jasper.compiler.Localizer; @@ -451,5 +453,9 @@ public class JspContextWrapper } return alias; } + + public ELContext getELContext() { + throw new UnsupportedOperationException("getELContext"); + } } --- libjasper-java-5.5.33.orig/src/share/org/apache/jasper/servlet/JspCServletContext.java +++ libjasper-java-5.5.33/src/share/org/apache/jasper/servlet/JspCServletContext.java @@ -427,5 +427,10 @@ public class JspCServletContext implemen } + public String getContextPath() { + throw new UnsupportedOperationException("getContextPath"); + } + + } --- libjasper-java-5.5.33.orig/src/share/org/apache/jasper/compiler/ImplicitTagLibraryInfo.java +++ libjasper-java-5.5.33/src/share/org/apache/jasper/compiler/ImplicitTagLibraryInfo.java @@ -142,4 +142,8 @@ class ImplicitTagLibraryInfo extends Tag return tagFile; } + + public TagLibraryInfo[] getTagLibraryInfos() { + throw new UnsupportedOperationException("getTagLibraryInfos"); + } } --- libjasper-java-5.5.33.orig/src/share/org/apache/jasper/runtime/PageContextImpl.java +++ libjasper-java-5.5.33/src/share/org/apache/jasper/runtime/PageContextImpl.java @@ -44,6 +44,8 @@ import javax.servlet.jsp.el.ExpressionEv import javax.servlet.jsp.el.VariableResolver; import javax.servlet.jsp.tagext.BodyContent; +import javax.el.ELContext; + import org.apache.commons.el.ExpressionEvaluatorImpl; import org.apache.commons.el.VariableResolverImpl; import org.apache.jasper.Constants; @@ -933,4 +935,8 @@ public class PageContextImpl extends Pag return retValue; } + public ELContext getELContext() { + throw new UnsupportedOperationException("getELContext"); + } + } --- libjasper-java-5.5.33.orig/src/share/org/apache/jasper/compiler/TagLibraryInfoImpl.java +++ libjasper-java-5.5.33/src/share/org/apache/jasper/compiler/TagLibraryInfoImpl.java @@ -763,4 +763,8 @@ class TagLibraryInfoImpl extends TagLibr } protected TagLibraryValidator tagLibraryValidator; + + public TagLibraryInfo[] getTagLibraryInfos() { + throw new UnsupportedOperationException("getTagLibraryInfos"); + } }