Hallo Carsten

Thank you for the information. A few points:

- Pound uses pcreposix, which in turn pulls in whatever version of pcre
is available. There is no usage of pcre per se.

- The component is optional. If pcreposix is not found, Pound will
happily use the libc regex.

I'll add a test for pcre2posix if available to the build process.

On Thu, 2021-11-18 at 18:35 +0100, Carsten Leonhardt via pound wrote:
> Hi Robert,
> 
> apparently the pcre library (named pcre3 in Debian) is obsolete and
> it
> is recommended to switch to pcre2. See the Debian bug report below.
> 
> "Bookworm" is the next Debian release, which is planned for 2023. "In
> time for the release of Bookworm" would probably mean a removal from
> the
> development version of Debian in 2022. As Ubuntu and probably other
> Debian derivatives base themselves on Debian's development version,
> this
> might affect those distributions earlier than 2023.
> 
> Regards
> 
> Carsten
> 
> 
> Matthew Vernon <[email protected]> writes:
> 
> > Source: pound
> > Severity: important
> > User: [email protected]
> > Usertags: obsolete-pcre3
> > 
> > Dear maintainer,
> > 
> > Your package still depends on the old, obsolete PCRE3[0] libraries
> > (i.e. libpcre3-dev). This has been end of life for a while now, and
> > upstream do not intend to fix any further bugs in it. Accordingly,
> > I
> > would like to remove the pcre3 libraries from Debian, preferably in
> > time for the release of Bookworm.
> > 
> > The newer PCRE2 library was first released in 2015, and has been in
> > Debian since stretch. Upstream's documentation for PCRE2 is
> > available
> > here: https://pcre.org/current/doc/html/
> > 
> > Many large projects that use PCRE have made the switch now (e.g.
> > git,
> > php); it does involve some work, but we are now at the stage where
> > PCRE3 should not be used, particularly if it might ever be exposed
> > to
> > untrusted input.
> > 
> > This mass bug filing was discussed on debian-devel@ in
> > https://lists.debian.org/debian-devel/2021/11/msg00176.html
> > 
> > Regards,
> > 
> > Matthew [0] Historical reasons mean that old PCRE is packaged as
> > pcre3 in Debian 
-- 
Robert Segall
Apsis GmbH
Postfach, Uetikon am See, CH-8707
Tel: +41-32-512 30 19


-- 
pound mailing list
[email protected]
https://admin.hostpoint.ch/mailman/listinfo/pound_apsis.ch

Reply via email to