David Rees wrote:
> Hi Craig,
>
> > -----Original Message-----
> > From: Craig R. McClanahan [mailto:[EMAIL PROTECTED]]
> > >
> > > Frankly, I am disappointed in the development process of
> > Tomcat. I posted a
> > > simple documentation patch (See bug report 528) two weeks ago
> > for the FAQ
> > > included with the Tomcat 3.x and posted a couple messages about it. I
> > > haven't heard a thing about it and saw the release of 3.2.1 come and go
> > > without the documentation fix.
> > >
> >
> > The reason this occurred is that a significant security bug was found,
> > warranting an *immediate* 3.2.1 release that bypassed the usual
> > testing cycle
> > that a beta should go through. This wasn't the only thing that
> > didn't make it
> > -- but security issues are serious and need to be dealt with.
>
> I understand why it didn't get through when I re-mentioned it right before
> the release, that is completely understandable. The problem as I see it is
> that the bug report was in BugRat for a week (in addition to a normal post
> to tomcat-dev) before Tomcat 3.2.1 was released; plenty of time IMHO for
> such a simple documentation patch to be committed.
>
I'm glad you understood.
A week would be plenty of time, except that:
* All the active committers are spending most of their time on "3.3"
or 4.0, not on 3.2.
* I personally had some Sun deadlines (which required changes to
the 4.0 code) totally blown away by the need to do the security
updates, and I'm not caught up yet. (To their credit, Sun recognized
the priority issues involved in security fixes.)
Of course, these problems are fixable if we had more committers ... especially
ones interested in applying bug fixes to the current production release to keep
it stable and appropriate for production deployments.
(NOTE: Anyone who receives committer status gets commit access on all branches
of all the project's CVS repositories.)
>
> > Normal processing of bug fixes and patches on the "tomcat_32" tree is now
> > feasible for a 3.2.2 release.
> >
> > Hint: I am not the only committer on this project -- others are
> > welcome to help
> > integrate changes too.
>
> Right, I'm not about you specifically, Craig (I think you're doing good work
> on the 4.x tree and are usually very responsive on the tomcat-user/dev
> lists), but I really would have expected one of the committers to pick up
> the patch. I would just hate to see someone else pound their head against a
> wall for a few hours because of incorrect documentation.
>
> Anyway, slightly off-subject now.
>
> I'm curious to hear your reply to Jon's post.
>
> -Dave
Craig
