Public bug reported:

Bug Description
On Ubuntu 24.04 LTS (noble), it is currently impossible to install libpcre2-dev 
on a fully updated system because the runtime library libpcre2-8-0 has received 
a security update (10.42-4ubuntu2.1), while the corresponding development 
package libpcre2-dev is only available at the base version (10.42-4ubuntu2).
Because libpcre2-dev depends on an exact version match of the runtime library, 
the dependency graph is unsatisfiable once the runtime SRU is installed. This 
prevents the creation of valid development environments on Ubuntu 24.04 for 
software that depends on PCRE2 headers.
This issue is reproducible on a clean Ubuntu 24.04 ARM64 installation with 
standard repositories enabled.

Steps to Reproduce
        1. Install Ubuntu Server 24.04 LTS (noble) on ARM64
        2. Update the system:

        sudo apt update
        sudo apt full-upgrade
        
        3. Attempt to install the development package:

        sudo apt install libpcre2-dev
        
Actual Result
APT reports unsatisfiable dependencies:
 
        
        libpcre2-dev : Depends: libpcre2-8-0 (= 10.42-4ubuntu2)
        but 10.42-4ubuntu2.1 is to be installed
        E: Unable to correct problems, you have held broken packages.
        
apt policy libpcre2-dev shows that no matching 10.42-4ubuntu2.1 version of the 
development package exists in the archive:

        libpcre2-dev:
          Installed: (none)
          Candidate: 10.42-4ubuntu2
          Version table:
             10.42-4ubuntu2 500
                500 http://ports.ubuntu.com/ubuntu-ports noble/main arm64 
Packages
        
Expected Result
libpcre2-dev should be installable on a fully updated Ubuntu 24.04 system, 
either by:
        • Providing a rebuilt libpcre2-dev package matching the 
security-updated runtime version, or
        • Ensuring archive consistency such that development environments 
remain possible after SRUs.

Impact
This issue prevents installation of build dependencies for software that 
requires PCRE2 headers. It notably affects build-heavy toolchains and SDKs 
(e.g. Matter Test Harness, GStreamer-based software, native Python extensions), 
making Ubuntu 24.04 unusable as a development platform once security updates 
have been applied.
This is not user misconfiguration; it is the result of a strict version 
dependency combined with a runtime-only SRU. 
This problem affects libselinux1-dev, libzstd-dev, zlib1g-dev. 

Additional Notes
        • This appears to be a general class of issue for packages with strict 
-dev → runtime = version dependencies when runtime libraries receive SRU-only 
updates.
        • Downgrading the runtime library would resolve the dependency but is 
not acceptable from a security standpoint.
        • Rebuilding the libpcre2-dev package as a no-change or binNMU rebuild 
would restore consistency without altering headers or ABI.
        • “Debian bookworm ships a coherent libpcre2-dev/runtime pair, 
illustrating that the issue is specific to Ubuntu’s SRU rebuild policy rather 
than the library itself.”

Architecture
        • Ubuntu version: 24.04 LTS (noble)
        • Architecture: arm64
        • Repository: ports.ubuntu.com

Suggested Fix (Upstream)
Publish a rebuilt libpcre2-dev package matching the current runtime SRU version 
(10.42-4ubuntu2.1) to restore archive consistency.

** Affects: pcre2 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2151182

Title:
  libpcre2-dev cannot be installed on Ubuntu 24.04 (noble) due to
  missing rebuild after security update of libpcre2-8-0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pcre2/+bug/2151182/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to