[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2
** No longer affects: vte2.91 (Ubuntu) ** No longer affects: gnome-terminal (Ubuntu) ** Description changed: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. + Transition + == + https://people.canonical.com/~ubuntu-archive/transitions/html/pcre2-main.html + + https://people.canonical.com/~ubuntu-archive/transitions/html/pcre2.html + Other Info == In the original release of pcre2 in Jan 2015, the author says this is not just a drastic update to the original pcre but a "new project". He felt free to change names and options. https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40 released Jan 2017) Some discussion of how it's different: http://www.regular-expressions.info/pcre2.html ** Description changed: Availability Synced with Debian. Built for all supported architectures. Rationale = - Required by gnome-terminal 3.22+ and vte2.91 0.46+ + Required by vte2.91 0.46+ and gnome-terminal 3.22+. + The Ubuntu Desktop team has postponed the need for this transition by reverting the vte and gnome-terminal commits that switched to pcre2. Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. Transition == https://people.canonical.com/~ubuntu-archive/transitions/html/pcre2-main.html https://people.canonical.com/~ubuntu-archive/transitions/html/pcre2.html Other Info == In the original release of pcre2 in Jan 2015, the author says this is not just a drastic update to the original pcre but a "new project". He felt free to change names and options. https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40 released Jan 2017) Some discussion of how it's different: http://www.regular-expressions.info/pcre2.html -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/163 Title: [MIR] pcre2 Status in pcre2 package in Ubuntu: Incomplete Bug description: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by vte2.91 0.46+ and gnome-terminal 3.22+. The Ubuntu Desktop team has postponed the need for this transition by reverting the vte and gnome-terminal commits that switched to pcre2. Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-b
[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2
"Other distros do it" isn't sufficient rationale, by itself, to support putting pcre2 in main. We already ship it, the question is whether it should be in main, meaning whether Canonical will be responsible for support, providing security updates, etc. To mirror what doko mentioned earlier, what is needed to demote pcre3? Can we start (even a long-running) transition? (So there should be a tracker setup for that). There seems to be new security issues too. I don't have a preference on what version of pcre to use, there should just be a reasonable analysis of how far we are to being able to just one pcre, what the steps needed to get there, possibly bugs open or a transition tracker to follow progress, and whether we can more easily port what seems to require pcre2 now back to pcre3 in order to facilitate maintenance. Should we / can we invest time and effort in porting things from pcre3 to pcre2? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/163 Title: [MIR] pcre2 Status in gnome-terminal package in Ubuntu: Confirmed Status in pcre2 package in Ubuntu: Incomplete Status in vte2.91 package in Ubuntu: Confirmed Bug description: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. Other Info == In the original release of pcre2 in Jan 2015, the author says this is not just a drastic update to the original pcre but a "new project". He felt free to change names and options. https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40 released Jan 2017) Some discussion of how it's different: http://www.regular-expressions.info/pcre2.html To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2
It seems likely that Ubuntu will have to support/ship both PCRE and PCRE2 before long. At least some other distros (Fedora, Gentoo, Debian) appear to be doing that already. As mentioned above, for packaging purposes PCRE2 is effectively a new project, *not* a new version of the previous PCRE. The APIs are completely incompatible, and the previous PCRE is still getting bugfixes and seems to be supported/recommended for existing projects that already use it. There are a number of largish projects that don't support PCRE2 and presumably won't anytime soon (e.g. https://bz.apache.org/bugzilla/show_bug.cgi?id=57471). So it seems unlikely that the whole package ecosystem will ever simultaneously support a single incarnation of PCRE, allowing Ubuntu to ship only that one. Already some packages don't support the old incarnation, and as mentioned above, it's likely that some will never support the new incarnation. ** Bug watch added: bz.apache.org/bugzilla/ #57471 https://bz.apache.org/bugzilla/show_bug.cgi?id=57471 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/163 Title: [MIR] pcre2 Status in gnome-terminal package in Ubuntu: Confirmed Status in pcre2 package in Ubuntu: Incomplete Status in vte2.91 package in Ubuntu: Confirmed Bug description: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. Other Info == In the original release of pcre2 in Jan 2015, the author says this is not just a drastic update to the original pcre but a "new project". He felt free to change names and options. https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40 released Jan 2017) Some discussion of how it's different: http://www.regular-expressions.info/pcre2.html To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2
** Changed in: pcre2 (Ubuntu) Milestone: ubuntu-17.03 => ubuntu-17.05 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/163 Title: [MIR] pcre2 Status in gnome-terminal package in Ubuntu: Confirmed Status in pcre2 package in Ubuntu: Incomplete Status in vte2.91 package in Ubuntu: Confirmed Bug description: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. Other Info == In the original release of pcre2 in Jan 2015, the author says this is not just a drastic update to the original pcre but a "new project". He felt free to change names and options. https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40 released Jan 2017) Some discussion of how it's different: http://www.regular-expressions.info/pcre2.html To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2
To be clear, I share doko's feeling against having two versions of the library in main if it can be avoided -- this is certainly not a permanent situation, but most things don't appear to have switched to pcre2 just yet (and I would expect they would in the near-ish term). In that sense, I'd be more in favor of not upgrading vte/gnome-terminal for the time being. To make it simpler: how do we value the benefits of a new pcre2 in main (meaning possibly some new features of gnome-terminal and vte) against the (probably small, but still) maintenance burden of having two PCRE libraries in main or the need to hold gnome-terminal and vte back for this cycle? To me wearing the MIR team hat, the benefits don't outweigh the increased maintenance work (ie. you can do nothing to vte and gnome- terminal, and we're good), especially when you consider that pcre is the kind of thing that does tend to have CVEs every once in a while[1]. On the other hand, new features are shiny, but they look to me like they might be cherry-pickable. I'm open to be convinced, and the security team probably should have a say in it too (hence my suggestion of bringing it up on the mailing list). [1] http://www.cvedetails.com/product/5715/Pcre-Pcre.html?vendor_id=3265 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/163 Title: [MIR] pcre2 Status in gnome-terminal package in Ubuntu: Confirmed Status in pcre2 package in Ubuntu: Incomplete Status in vte2.91 package in Ubuntu: Confirmed Bug description: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. Other Info == In the original release of pcre2 in Jan 2015, the author says this is not just a drastic update to the original pcre but a "new project". He felt free to change names and options. https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40 released Jan 2017) Some discussion of how it's different: http://www.regular-expressions.info/pcre2.html To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2
I understand the concerns, and I share them, but I don't think we should alone make the decision. Perhaps bring this up for wider discussion on the ubuntu-devel mailing list? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/163 Title: [MIR] pcre2 Status in gnome-terminal package in Ubuntu: Confirmed Status in pcre2 package in Ubuntu: Incomplete Status in vte2.91 package in Ubuntu: Confirmed Bug description: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. Other Info == In the original release of pcre2 in Jan 2015, the author says this is not just a drastic update to the original pcre but a "new project". He felt free to change names and options. https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40 released Jan 2017) Some discussion of how it's different: http://www.regular-expressions.info/pcre2.html To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2
I added an Other Info section. ** Description changed: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. + + Other Info + == + In the original release of pcre2 in Jan 2015, the author says this is not just a drastic update to the original pcre but a "new project". He felt free to change names and options. + https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html + + pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40 + released Jan 2017) + + Some discussion of how it's different: + http://www.regular-expressions.info/pcre2.html -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/163 Title: [MIR] pcre2 Status in gnome-terminal package in Ubuntu: Confirmed Status in pcre2 package in Ubuntu: Incomplete Status in vte2.91 package in Ubuntu: Confirmed Bug description: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. Other Info == In the original release of pcre2 in Jan 2015, the author says this is not just a drastic update to the original pcre but a "new project". He felt free to change names and options. https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40 released Jan 2017) Some discussion of how it's different: http://www.regular-expressions.info/pcre2.html To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2
For zesty, I have proposed reverting the mandatory pcre2 changes so that we can do the vte/gnome-terminal update. See bug 1666264 Like I wrote there, I am concerned about how long these reverts can be maintained with new versions. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/163 Title: [MIR] pcre2 Status in gnome-terminal package in Ubuntu: Confirmed Status in pcre2 package in Ubuntu: Incomplete Status in vte2.91 package in Ubuntu: Confirmed Bug description: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: vte2.91 (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/163 Title: [MIR] pcre2 Status in gnome-terminal package in Ubuntu: Confirmed Status in pcre2 package in Ubuntu: Incomplete Status in vte2.91 package in Ubuntu: Confirmed Bug description: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: gnome-terminal (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/163 Title: [MIR] pcre2 Status in gnome-terminal package in Ubuntu: Confirmed Status in pcre2 package in Ubuntu: Incomplete Status in vte2.91 package in Ubuntu: Confirmed Bug description: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2
** Changed in: pcre2 (Ubuntu) Milestone: None => ubuntu-17.03 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/163 Title: [MIR] pcre2 Status in gnome-terminal package in Ubuntu: New Status in pcre2 package in Ubuntu: Incomplete Status in vte2.91 package in Ubuntu: New Bug description: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2
If y'all are indeed going to block on there not being allowed to have 2 pcre's in main, then I guess we'll either have to figure out how to hack vte2.91 and gnome-terminal to either not use pcre2 or instead use the older pcre3. Or we'll just keep using the current gnome-terminal/vte. $ reverse-depends -c main src:pcre3 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/163 Title: [MIR] pcre2 Status in gnome-terminal package in Ubuntu: New Status in pcre2 package in Ubuntu: Incomplete Status in vte2.91 package in Ubuntu: New Bug description: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2
> pcre3 is already in Ubuntu main we don't want to have two versions in main. please could you evaluate first what is needed to demote pcre3? ** Changed in: pcre2 (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/163 Title: [MIR] pcre2 Status in gnome-terminal package in Ubuntu: New Status in pcre2 package in Ubuntu: Incomplete Status in vte2.91 package in Ubuntu: New Bug description: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2
** Changed in: pcre2 (Ubuntu) Assignee: (unassigned) => Mathieu Trudel-Lapierre (cyphermox) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/163 Title: [MIR] pcre2 Status in gnome-terminal package in Ubuntu: New Status in pcre2 package in Ubuntu: New Status in vte2.91 package in Ubuntu: New Bug description: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2
** Description changed: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - - Please subscribe Ubuntu Desktop Bugs to this package. + - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == - As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. + As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/163 Title: [MIR] pcre2 Status in gnome-terminal package in Ubuntu: New Status in pcre2 package in Ubuntu: New Status in vte2.91 package in Ubuntu: New Bug description: Availability Synced with Debian. Built for all supported architectures. Rationale = Required by gnome-terminal 3.22+ and vte2.91 0.46+ Security At least one open security issue, affecting Ubuntu 16.04 LTS https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html https://security-tracker.debian.org/tracker/source-package/pcre2 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre Quality assurance = - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) to this package. https://bugs.launchpad.net/ubuntu/+source/pcre2 https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2 Upstream tests are run during the build but there is no autopkgtest Does not have 3.0 (quilt) set Dependencies Only build-dependencies are dpkg and debhelper. No other added dependencies. Standards compliance 3.9.6 Maintenance === - Actively developed upstream http://pcre.org/ Background information == As the package description states, the older version of this library is confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp