- Package:
- src:inspircd
- Source:
- inspircd
- Submitter:
- Matthew Vernon
- Date:
- 2023-01-19 13:36:06 UTC
- Severity:
- important
Dear maintainer, Your package still depends on the old, obsolete PCRE3[0] libraries (i.e. libpcre3-dev). This has been end of life for a while now, and upstream do not intend to fix any further bugs in it. Accordingly, I would like to remove the pcre3 libraries from Debian, preferably in time for the release of Bookworm. The newer PCRE2 library was first released in 2015, and has been in Debian since stretch. Upstream's documentation for PCRE2 is available here: https://pcre.org/current/doc/html/ Many large projects that use PCRE have made the switch now (e.g. git, php); it does involve some work, but we are now at the stage where PCRE3 should not be used, particularly if it might ever be exposed to untrusted input. This mass bug filing was discussed on debian-devel@ in https://lists.debian.org/debian-devel/2021/11/msg00176.html Regards, Matthew [0] Historical reasons mean that old PCRE is packaged as pcre3 in Debian
Hi Matthew, Thank you for the bug report, just a quick note to indicate that upstream has added support for PCRE2 in inspircd 4 (not yet released though). cfr https://github.com/inspircd/inspircd/issues/1928
If you want to fix this on InspIRCd v3 there is a backported module in inspircd-contrib for PCRE2 which can be installed with `./modulemanager install m_regex_pcre2`. This module uses the same internal name so it can be used on the same network as a server using m_regex_pcre. Alternately, you can just ship a different regex backend instead. I'd personally recommend m_regex_stdlib as that requires no dependencies other than a C++11 compiler. ~ Sadie
As multiple distributions want to get rid of the old version of PCRE I have decided to import m_regex_pcre2 from inspircd-contrib. As of the next release (which will be happening on the 30th of this month) you'll be able to enable it the same way you enable m_regex_pcre. Hope this helps, ~ Sadie
Hello, Bug #1000104 in inspircd reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/debian/inspircd/-/commit/667c01813db5c5a4c75819504c4ce58651321c5a ------------------------------------------------------------------------ New upstream release * New upstream release + build libpcre2-dev, not libpcre3-dev (Closes: #1000104) ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/1000104
We believe that the bug you reported is fixed in the latest version of
inspircd, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1000104@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Filippo Giunchedi <filippo@debian.org> (supplier of updated inspircd package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 15 Jan 2023 16:05:01 +0100
Source: inspircd
Architecture: source
Version: 3.15.0-1
Distribution: unstable
Urgency: medium
Maintainer: Filippo Giunchedi <filippo@debian.org>
Changed-By: Filippo Giunchedi <filippo@debian.org>
Closes: 955479 1000104
Changes:
inspircd (3.15.0-1) unstable; urgency=medium
.
* New upstream release
+ build libpcre2-dev, not libpcre3-dev (Closes: #1000104)
+ ship upstream apparmor configuration (Closes: #955479)
* apparmor: allow local includes, part of #955479
Checksums-Sha1:
d2b90c33d52ade4d75fd468ea3590fa5a0205679 2174 inspircd_3.15.0-1.dsc
418e203c8e241983f1e4ba2880a9cf04d6602ad5 874629 inspircd_3.15.0.orig.tar.gz
d097d654a3dae25734965bab131b23a1e805016a 14580 inspircd_3.15.0-1.debian.tar.xz
6d9324f0d067aef91bedafcdf93b9f7f5a9c7f64 8277 inspircd_3.15.0-1_amd64.buildinfo
Checksums-Sha256:
59a118363b649530fb27230d15b25907b6be100d44e151db511d670aef153cd2 2174 inspircd_3.15.0-1.dsc
c3d201dd3577917bc94257ed8aa373c24bc03c456e55886497eb87e8520f2d4d 874629 inspircd_3.15.0.orig.tar.gz
aad526acdf0c954fca7c71000a6bbbefe426fa62f3ff74aa2582a2462a41c563 14580 inspircd_3.15.0-1.debian.tar.xz
c20099757db6867e93d50ae681bceab132b232253ca04ef2176d0d4dd3d530ae 8277 inspircd_3.15.0-1_amd64.buildinfo
Files:
aeef1d513c10ab2536a951988ac50455 2174 net optional inspircd_3.15.0-1.dsc
fd72195fd840b1025cc237caa60d79ce 874629 net optional inspircd_3.15.0.orig.tar.gz
bd234f248244c49d66f557bb4285c76b 14580 net optional inspircd_3.15.0-1.debian.tar.xz
d17b8fe3dc5e5112cb10a6d8b864973c 8277 net optional inspircd_3.15.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=CGvc
-----END PGP SIGNATURE-----