Your message dated Tue, 08 Nov 2011 19:17:26 +0000
with message-id <e1rnrak-0003xf...@franck.debian.org>
and subject line Bug#645221: fixed in tomcat6 6.0.32-7
has caused the Debian Bug report #645221,
regarding tomcat6: Tomcat6 initscript influenced by user's environment variables
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
645221: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645221
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: tomcat6
Version: 6.0.32-6
Severity: normal
Tags: l10n


Hi,

I use Tomcat6 on several machines running Debian Squeeze and Sid. Some of them 
are servers using locale en_GB.UTF-8, while my PC is using fr_FR.UTF-8. When 
I'm connecting on these servers, SSH forwards some environment variables, 
including LC_ALL.

Here is my PC's locale :

LANG=fr_FR.UTF-8
LANGUAGE=fr_FR.UTF-8
LC_CTYPE="fr_FR.UTF-8"
LC_NUMERIC="fr_FR.UTF-8"
LC_TIME="fr_FR.UTF-8"
LC_COLLATE="fr_FR.UTF-8"
LC_MONETARY="fr_FR.UTF-8"
LC_MESSAGES="fr_FR.UTF-8"
LC_PAPER="fr_FR.UTF-8"
LC_NAME="fr_FR.UTF-8"
LC_ADDRESS="fr_FR.UTF-8"
LC_TELEPHONE="fr_FR.UTF-8"
LC_MEASUREMENT="fr_FR.UTF-8"
LC_IDENTIFICATION="fr_FR.UTF-8"
LC_ALL=fr_FR.UTF-8


And here is the locale on the server when I'm connected to by SSH :

LANG=en_GB.UTF-8
LANGUAGE=en_GB:en
LC_CTYPE="fr_FR.UTF-8"
LC_NUMERIC="fr_FR.UTF-8"
LC_TIME="fr_FR.UTF-8"
LC_COLLATE="fr_FR.UTF-8"
LC_MONETARY="fr_FR.UTF-8"
LC_MESSAGES="fr_FR.UTF-8"
LC_PAPER="fr_FR.UTF-8"
LC_NAME="fr_FR.UTF-8"
LC_ADDRESS="fr_FR.UTF-8"
LC_TELEPHONE="fr_FR.UTF-8"
LC_MEASUREMENT="fr_FR.UTF-8"
LC_IDENTIFICATION="fr_FR.UTF-8"
LC_ALL=fr_FR.UTF-8



This is because Debian's openssh-client package has by default "SendEnv LANG 
LC_*" in /etc/ssh/ssh_config (which is not the case upstream according to the 
ssh_config(5) manpage)


After a server restart; if I run a test JSP script which outputs the day of 
week, I get "Thursday" :

SimpleDateFormat day_of_week = new SimpleDateFormat("EEEEEEEEE");
out.print(day_of_week.format(new java.util.Date()));


If I do a "/etc/init.d/tomcat6 restart", The same page gives "jeudi".

I added a line "unset LC_ALL" in /etc/default/tomcat6 and restarted Tomcat, and 
the test script gives now "Thursday".


Init scripts should not be influenced by user's environment, and restarting 
Tomcat by a user should not give a behaviour different to when Tomcat has been 
started on system boot.

The fix would be to unset LC_ALL variable in the init script provided by the 
package.


Regards,

Nicolas Pichon.





-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to fr_FR.UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages tomcat6 depends on:
ii  adduser                3.113      
ii  debconf [debconf-2.0]  1.5.41     
ii  tomcat6-common         6.0.32-6   
ii  ucf                    3.0025+nmu2

Versions of packages tomcat6 recommends:
pn  authbind  <none>

Versions of packages tomcat6 suggests:
ii  libtcnative-1     <none>  
ii  tomcat6-admin     6.0.32-6
ii  tomcat6-docs      <none>  
ii  tomcat6-examples  6.0.32-6
ii  tomcat6-user      6.0.32-6

-- Configuration Files:
/etc/default/tomcat6 changed [not included]
/etc/logrotate.d/tomcat6 changed [not included]
/etc/tomcat6/catalina.properties changed [not included]
/etc/tomcat6/context.xml changed [not included]
/etc/tomcat6/policy.d/03catalina.policy changed [not included]
/etc/tomcat6/policy.d/50local.policy changed [not included]
/etc/tomcat6/server.xml changed [not included]
/etc/tomcat6/tomcat-users.xml changed [not included]
/etc/tomcat6/web.xml changed [not included]

-- debconf information:
  tomcat6/javaopts: -Djava.awt.headless=true -Xmx128m -XX:+UseConcMarkSweepGC
  tomcat6/groupname: tomcat6
  tomcat6/username: tomcat6



--- End Message ---
--- Begin Message ---
Source: tomcat6
Source-Version: 6.0.32-7

We believe that the bug you reported is fixed in the latest version of
tomcat6, which is due to be installed in the Debian FTP archive:

libservlet2.5-java-doc_6.0.32-7_all.deb
  to main/t/tomcat6/libservlet2.5-java-doc_6.0.32-7_all.deb
libservlet2.5-java_6.0.32-7_all.deb
  to main/t/tomcat6/libservlet2.5-java_6.0.32-7_all.deb
libtomcat6-java_6.0.32-7_all.deb
  to main/t/tomcat6/libtomcat6-java_6.0.32-7_all.deb
tomcat6-admin_6.0.32-7_all.deb
  to main/t/tomcat6/tomcat6-admin_6.0.32-7_all.deb
tomcat6-common_6.0.32-7_all.deb
  to main/t/tomcat6/tomcat6-common_6.0.32-7_all.deb
tomcat6-docs_6.0.32-7_all.deb
  to main/t/tomcat6/tomcat6-docs_6.0.32-7_all.deb
tomcat6-examples_6.0.32-7_all.deb
  to main/t/tomcat6/tomcat6-examples_6.0.32-7_all.deb
tomcat6-extras_6.0.32-7_all.deb
  to main/t/tomcat6/tomcat6-extras_6.0.32-7_all.deb
tomcat6-user_6.0.32-7_all.deb
  to main/t/tomcat6/tomcat6-user_6.0.32-7_all.deb
tomcat6_6.0.32-7.debian.tar.gz
  to main/t/tomcat6/tomcat6_6.0.32-7.debian.tar.gz
tomcat6_6.0.32-7.dsc
  to main/t/tomcat6/tomcat6_6.0.32-7.dsc
tomcat6_6.0.32-7_all.deb
  to main/t/tomcat6/tomcat6_6.0.32-7_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 645...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
tony mancill <tmanc...@debian.org> (supplier of updated tomcat6 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Tue, 08 Nov 2011 10:42:32 -0800
Source: tomcat6
Binary: tomcat6-common tomcat6 tomcat6-user libtomcat6-java libservlet2.5-java 
libservlet2.5-java-doc tomcat6-admin tomcat6-examples tomcat6-docs 
tomcat6-extras
Architecture: source all
Version: 6.0.32-7
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 
<pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: tony mancill <tmanc...@debian.org>
Description: 
 libservlet2.5-java - Servlet 2.5 and JSP 2.1 Java API classes
 libservlet2.5-java-doc - Servlet 2.5 and JSP 2.1 Java API documentation
 libtomcat6-java - Servlet and JSP engine -- core libraries
 tomcat6    - Servlet and JSP engine
 tomcat6-admin - Servlet and JSP engine -- admin web applications
 tomcat6-common - Servlet and JSP engine -- common files
 tomcat6-docs - Servlet and JSP engine -- documentation
 tomcat6-examples - Servlet and JSP engine -- example web applications
 tomcat6-extras - Servlet and JSP engine -- additional components
 tomcat6-user - Servlet and JSP engine -- tools to create user instances
Closes: 645221 648038
Changes: 
 tomcat6 (6.0.32-7) unstable; urgency=medium
 .
   [ tony mancill ]
   * Team upload.
   * Add "unset LC_ALL" to /etc/defaults/tomcat6 to prevent user
     environment settings from leaking into the servlet container.
     - Thank you to Nicolas Pichon.  (Closes: #645221)
   * Apply patch for CVE-2011-1184 and CVE-2011-2526.
     - Thank you to Marc Deslauriers.  (Closes: #648038)
 .
   [ Niels Thykier ]
   * Added build-arch and build-indep targets in d/rules.
Checksums-Sha1: 
 c35015d1d8ded1646145971b33d08caddbc8fe93 2592 tomcat6_6.0.32-7.dsc
 504d2866065462e3301870f3f5590756b6b9c9d1 52706 tomcat6_6.0.32-7.debian.tar.gz
 fadd27cc043620cce205dfbeeed9bfc2faf8bd77 49070 tomcat6-common_6.0.32-7_all.deb
 3d85c1d470fd4fcb2d7fa39bc7bb56edb449e766 38692 tomcat6_6.0.32-7_all.deb
 72a840f6e9a8b995f7898c50f4038461d7630c88 29816 tomcat6-user_6.0.32-7_all.deb
 4dbb7f4c8dfa811045a08116a8eed7b8467baa50 3071364 
libtomcat6-java_6.0.32-7_all.deb
 5f0337c250daad6266e5c45a4e94f802acb9114a 194506 
libservlet2.5-java_6.0.32-7_all.deb
 ffa6d95bb5b1d9434484d400d9ad6e0a687cddbb 257214 
libservlet2.5-java-doc_6.0.32-7_all.deb
 bb64552b4895eafc121e4948f3c0ce6dad4b97ab 48546 tomcat6-admin_6.0.32-7_all.deb
 9178c583d7c2ad11f82d4fd491c9f68b575731ca 163482 
tomcat6-examples_6.0.32-7_all.deb
 4b8ee8ba7b7bd417b3bd0aba119cad0b2bb035a0 546638 tomcat6-docs_6.0.32-7_all.deb
 19d0aeb84b0a11acdf5f72b1230c9e1fc79368bd 12452 tomcat6-extras_6.0.32-7_all.deb
Checksums-Sha256: 
 b35d793d58444f47f7970c4ba86a632b78d3045c1b2c52a11d79f69c0df3a22d 2592 
tomcat6_6.0.32-7.dsc
 4cf8c48e300b9ed3233b0e2f3c6ead38291a3bfde5d3663b05cf633d3e03b489 52706 
tomcat6_6.0.32-7.debian.tar.gz
 69fcd4abea20778330fc7a78101f7198b5ea731d78d681d20c67bfe39a0c693f 49070 
tomcat6-common_6.0.32-7_all.deb
 391a6cbdf3c126948a5785d428393addc334d1b574459b7ea560bdd8de79fd2b 38692 
tomcat6_6.0.32-7_all.deb
 c785f3b1b44129fe048b70e69368451f50e93f7d9e9310fc49becfb3b6135495 29816 
tomcat6-user_6.0.32-7_all.deb
 36e3a5437ffd30e6955fe6a1c45a489823f505699ba606d962bb2549dec72b53 3071364 
libtomcat6-java_6.0.32-7_all.deb
 aaaf154b91235372a2b014a933dad9dbe31813fb1da66fd40fdc24e297d18e3e 194506 
libservlet2.5-java_6.0.32-7_all.deb
 ad2f31b1a68590f498207946dcae8e5cd2ee258bfd56a77e4a5f47ce3c30cb62 257214 
libservlet2.5-java-doc_6.0.32-7_all.deb
 94ad8e870840a21c4381b17c04ebf6cc02a8573c42bf9016f4b0ebbb44e4ff94 48546 
tomcat6-admin_6.0.32-7_all.deb
 07acf177bf4eff24fe5cc5987a1409c001b8904e6b4ffdccd84d86820d9f2b9e 163482 
tomcat6-examples_6.0.32-7_all.deb
 7f96027ec36e3720860648545bc02d23bbd8ed7bb44913845bf3bf8389695724 546638 
tomcat6-docs_6.0.32-7_all.deb
 f1c033f1d99a8120463ee7b11a1e962e461f95614fb8d1662712a5530cc92a43 12452 
tomcat6-extras_6.0.32-7_all.deb
Files: 
 1d2d7640e3d8c2ebf9dfdc33df8ecec0 2592 java optional tomcat6_6.0.32-7.dsc
 78996ddeb77d90f1287369794f511c19 52706 java optional 
tomcat6_6.0.32-7.debian.tar.gz
 aecc5b2d48e7c5661df4ac0e234aade9 49070 java optional 
tomcat6-common_6.0.32-7_all.deb
 4f6a110101f1cef7888f0fe71cb59f53 38692 java optional tomcat6_6.0.32-7_all.deb
 12b57634c7b869ac2cd5a22dcfdf50b8 29816 java optional 
tomcat6-user_6.0.32-7_all.deb
 db8a0f37ca4037d7825d4aedb79a7392 3071364 java optional 
libtomcat6-java_6.0.32-7_all.deb
 f0c02812589de66b382cb7e150b91951 194506 java optional 
libservlet2.5-java_6.0.32-7_all.deb
 3666fb091039b64cc83ce444701cbc63 257214 doc optional 
libservlet2.5-java-doc_6.0.32-7_all.deb
 83d81aba53b901c57508055f42f7b62b 48546 java optional 
tomcat6-admin_6.0.32-7_all.deb
 41d25c3ab70fc81dbf34ab9de42f32d1 163482 java optional 
tomcat6-examples_6.0.32-7_all.deb
 2f1229d7b2282e49b6a85f45d9ca85e1 546638 doc optional 
tomcat6-docs_6.0.32-7_all.deb
 8beade16423e0bce90a1af0f4a3a440e 12452 java optional 
tomcat6-extras_6.0.32-7_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQIcBAEBAgAGBQJOuX7aAAoJECHSBYmXSz6WqTAP/Ag0v7bxch4ZJvrhf1VCSvKI
zxTvkqLCN2lBr3jbAUtPGVRJlkVW+TjMEI4LmQNwVy4qJL3ZKLgUs/KtPbBJtAgY
CL1N+3HwksLaz86UtCkf++aGCxRP33zy4gT0B0vwsDglrjzUau2oVLAGeFeDALfb
n3NkTE4wFrThU+0qHbE4hF17tcZ6yEzR/UOIReNOSbq14Is+sWc4sWyfO0BUA1fi
5CKlbLFU6xykadSgeoic7a9KMc5hAnCpPQ0SdhWxCJofLlGFGqTHoRt3e1mJmCVY
EhgwraRfDEMAOpkHMArYb9r2I634yhYv6EhRyp9rmj5m38sOks9BdR6Lh+YHSvDK
dZZE1v5QoIuN7xsRn+V8XVE4Tzh9JeYjONkHb+JCy3Whiic5DyjbRe1HFYBcUQkb
Z1ycN2Q20LvECto/hJ/J626tvk5DWE9ZGMks4Q68qaURvd9ZXMjddxgLnoCnEyo+
5ITmKX1QCk5cwaSHWXtwfZ8JA1fv4PuNPYXFkr+CzW3QdUT1cLYeXeeWBbrYZyrP
L0MnrlSdZ0Was+H1LHvqz76u6gw6DNSIa0oJxzP2W2n26dsYV2Ow8fmxIR8tEhZj
mMM4HKTcuGjnACYO+58LXRbiOp6QygkewiOEBbF8f+RJr3tUl7+cA1e5pBDZlfHd
WDi3deF3CeR2ZFbPGpPy
=lKij
-----END PGP SIGNATURE-----



--- End Message ---
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Reply via email to