Bug#548304: libcommon-collections3 should not be installed by tomcat5.5 by default (it should not be a depend)

[Javier Barroso]

Package: tomcat5.5
Version: 5.5.26-5
Severity: important

Hi,

We had a issue because /usr/share/tomcat5.5/common/lib/commons-collections3.jar was installed, and our app developped in its origin in a tomcat /opt installation, incluyed another commons-collections3 version.

So in a webservice we was making a post request from another server and commons-collections3 introduced incompatibilities with the other version.

Specifically our post request from localhost was:
POST /.../.../.. HTTP/1.1
Content-Type: x-application/hessian
User-Agent: Java/1.6.0_12
Host: xxxx:8080
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive
Transfer-Encoding: chunked


24e
POSTDATA

HTTP/1.1 200 OK

When I tried from the other server was:
POST /.../.../.. HTTP/1.1
Content-Type: x-application/hessian
User-Agent: Java/1.6.0_12
Host: xxxx:8080
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive
Transfer-Encoding: chunked


24e
POSTDATA

0

HTTP/1.1 200 OK

The '0' was the cause of malfunction of our app.

Removing /usr/share/tomcat5.5/common/lib/commons-collections3.jar and our app worked with its own commons-collections3.jar.

I think about using in both extremes the same commons-collections3.jar, would be a good workarround, but it is not the case.

The issue is, if tomcat5.5 tarball not include commons-collections3, why debian package should provide it ?

I would recommend downgrading from depend to recommend. What do you think ?

Do you know any workarround without having to remove this file ? I guess I can configure tomcat to search in other directory before than the default.

Thank you!


-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.30-1-686 (SMP w/2 CPU cores)
Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash