Ubuntu
tomcat8 package

Tomcat8 support after 2019 on 18.04 LTS

Asked by Pierre Pichon

Hi,

We are using 8.5.39-1ubuntu1~18.04.3 version on 18.04 LTS.

While validating changelog of the tomcat8 package, it look like bugs after 2019 are still on "need triage/needed" status.
(Some 16.04 ESM have 2020 bugs patched that are still on "triage" on 18.04)

Is it because no further patching will occur?
Is the package secure for production?

Regards,

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu tomcat8 Edit question
Assignee:
No assignee Edit question
Solved by:
Manfred Hampl
Solved:
Last query:
Last reply:
Revision history for this message
Manfred Hampl (m-hampl) said : 		#1

I guess the background of your problem is that tomcat8 is in the "universe" category. That means that canonical does not provide support, but delegates it to "the community". See also https://help.ubuntu.com/community/Repositories/Ubuntu

If nobody cares to check for required updates, then this package will stay in "needs triage", if the requirement for an update is seen, but no-one packages it, then it ill stay in "needed".

Revision history for this message
Manfred Hampl (m-hampl) said : 		#2

Additional remark: tomcat8 was in the "main" category in Ubuntu 16.04.

Revision history for this message
Pierre Pichon (tictactoc) said : 		#3

Thanks.

Is there a way to determine it is in universe? (Else than "https://packages.ubuntu.com")

When listing via apt list...
tomcat8/bionic-updates,bionic-security,now 8.5.39-1ubuntu1~18.04.3 all [installed]

I was thinking since it is "bionic-security" it was updated by Canonical.

Regards

Revision history for this message
Best Manfred Hampl (m-hampl) said : 		#4

Just click on the "Overwiew" text in the top left corner of this question document and you will reach https://launchpad.net/ubuntu/+source/tomcat8
(or visit https://launchpad.net/ubuntu and put tomcat into the search box and press "find a package").
That is the main page for tomcat8 on Ubuntu.

Revision history for this message
Pierre Pichon (tictactoc) said : 		#5

Thanks Manfred Hampl, that solved my question.