Bug#1114028: Regression of #1020948 introduced in bullseye-security (looking up for OpenJDK 17)

Santiago Ruano Rincón santiagorr at riseup.net
Thu Sep 11 13:40:08 BST 2025


El 10/09/25 a las 23:44, Markus Koschany escribió:
> On Fri, 5 Sep 2025 10:54:09 -0300 Santiago Ruano =?iso-8859-1?Q?Rinc=F3n?=
> <santiagorr at riseup.net> wrote:
> > Source: tomcat9
> > Version: 9.0.107-0+deb11u1
> > Severity: important
> > Tags: patch
> > X-Debbugs-Cc: debian-lts at lts.debian.org
> > 
> > Hello Markus,
> > 
> > tomcat9 9.0.107-0+deb11u1 removed the changed made by 9.0.43-2_deb11u5
> > in debian/libexec/tomcat-locate-java.sh that looks up for OpenJDK 17.
> > The same change (included below) obviously solves the regression.
> > 
> > I wonder if #1110075 relates to this change.
> 
> I agree that the removal of version 17 from the exec script was not
> intentional. However that would not explain the other errors the user reported
> in #1110075. There would have been different reports already if the startup of
> the server was a general problem. In bullseye openjdk-11 is the default-jre,
> which is also the version the package was tested against during its development
> cycle. I believe we should re-add 17 to the exec script and fix this issue with
> a regression update but I can't close #1110075 without further information.

Yes, after sending my previous email, I realised that #1110075 wouldn't
be actually explained by the same reasons.  Sorry if that was extra
noise.

Other than re-adding 17 to the exec script, I hope this dep-8 test could
help to identify this regression in the future:

diff --git a/debian/tests/control b/debian/tests/control
new file mode 100644
index 00000000..70ce2f08
--- /dev/null
+++ b/debian/tests/control
@@ -0,0 +1,2 @@
+Tests: detect-openjdk-17
+Depends: @, openjdk-17-jre
diff --git a/debian/tests/detect-openjdk-17 b/debian/tests/detect-openjdk-17
new file mode 100644
index 00000000..5fd57d3d
--- /dev/null
+++ b/debian/tests/detect-openjdk-17
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+sh /usr/libexec/tomcat9/tomcat-locate-java.sh

Currently testing in my tomcat9's fork. I'll report if this doesn't work
as expected.

Cheers,

 -- Santiago
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20250911/7bc6ae5b/attachment.sig>


More information about the pkg-java-maintainers mailing list