Your message dated Tue, 23 Nov 2021 12:33:40 +0000
with message-id <[email protected]>
and subject line Bug#999985: fixed in pound 3.0.1-2
has caused the Debian Bug report #999985,
regarding pound: depends on obsolete pcre3 library
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
999985: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=999985
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: pound
Severity: important
User: [email protected]
Usertags: obsolete-pcre3
Dear maintainer,
Your package still depends on the old, obsolete PCRE3[0] libraries
(i.e. libpcre3-dev). This has been end of life for a while now, and
upstream do not intend to fix any further bugs in it. Accordingly, I
would like to remove the pcre3 libraries from Debian, preferably in
time for the release of Bookworm.
The newer PCRE2 library was first released in 2015, and has been in
Debian since stretch. Upstream's documentation for PCRE2 is available
here: https://pcre.org/current/doc/html/
Many large projects that use PCRE have made the switch now (e.g. git,
php); it does involve some work, but we are now at the stage where
PCRE3 should not be used, particularly if it might ever be exposed to
untrusted input.
This mass bug filing was discussed on debian-devel@ in
https://lists.debian.org/debian-devel/2021/11/msg00176.html
Regards,
Matthew [0] Historical reasons mean that old PCRE is packaged as
pcre3 in Debian
--- End Message ---
--- Begin Message ---
Source: pound
Source-Version: 3.0.1-2
Done: Carsten Leonhardt <[email protected]>
We believe that the bug you reported is fixed in the latest version of
pound, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Carsten Leonhardt <[email protected]> (supplier of updated pound package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 23 Nov 2021 13:03:31 +0100
Source: pound
Architecture: source
Version: 3.0.1-2
Distribution: unstable
Urgency: medium
Maintainer: Carsten Leonhardt <[email protected]>
Changed-By: Carsten Leonhardt <[email protected]>
Closes: 999985
Changes:
pound (3.0.1-2) unstable; urgency=medium
.
* Disable linking to the obsolete libpcre3 (pcreposix) (Closes: #999985)
Checksums-Sha1:
1093976468e865016dfaee63c3937335b57603eb 2254 pound_3.0.1-2.dsc
8155f69d400828a320203cf7e4e421165bef4a7b 10132 pound_3.0.1-2.debian.tar.xz
Checksums-Sha256:
6a6a7d856e0a119cdb70a78d4f22754aedb8440b16ddf81b59d3f9b9737efa4b 2254
pound_3.0.1-2.dsc
bd5b26db31e4a23af0c45db42db41ea7e1a1e0d8a17a4220b0c8b32c5f29f477 10132
pound_3.0.1-2.debian.tar.xz
Files:
27f60aaaa9142008d6bcea56b54aac0c 2254 net optional pound_3.0.1-2.dsc
29af48b3fd36aff538d03d8cc3f1a79c 10132 net optional pound_3.0.1-2.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=BcJ2
-----END PGP SIGNATURE-----
--- End Message ---
