Your message dated Thu, 02 Dec 2021 14:36:34 +0000
with message-id <[email protected]>
and subject line Bug#1000109: fixed in ledger 3.2.1-8
has caused the Debian Bug report #1000109,
regarding ledger: depends on obsolete pcre3 library
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1000109: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000109
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: ledger
Severity: important
User: [email protected]
Usertags: obsolete-pcre3
Dear maintainer,
Your package still depends on the old, obsolete PCRE3[0] libraries
(i.e. libpcre3-dev). This has been end of life for a while now, and
upstream do not intend to fix any further bugs in it. Accordingly, I
would like to remove the pcre3 libraries from Debian, preferably in
time for the release of Bookworm.
The newer PCRE2 library was first released in 2015, and has been in
Debian since stretch. Upstream's documentation for PCRE2 is available
here: https://pcre.org/current/doc/html/
Many large projects that use PCRE have made the switch now (e.g. git,
php); it does involve some work, but we are now at the stage where
PCRE3 should not be used, particularly if it might ever be exposed to
untrusted input.
This mass bug filing was discussed on debian-devel@ in
https://lists.debian.org/debian-devel/2021/11/msg00176.html
Regards,
Matthew [0] Historical reasons mean that old PCRE is packaged as
pcre3 in Debian
--- End Message ---
--- Begin Message ---
Source: ledger
Source-Version: 3.2.1-8
Done: David Bremner <[email protected]>
We believe that the bug you reported is fixed in the latest version of
ledger, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
David Bremner <[email protected]> (supplier of updated ledger package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 02 Dec 2021 09:30:08 -0400
Source: ledger
Architecture: source
Version: 3.2.1-8
Distribution: unstable
Urgency: medium
Maintainer: David Bremner <[email protected]>
Changed-By: David Bremner <[email protected]>
Closes: 1000109
Changes:
ledger (3.2.1-8) unstable; urgency=medium
.
* Bug fix: "depends on obsolete pcre3 library", thanks to Matthew Vernon
(Closes: #1000109).
Checksums-Sha1:
3de255a97634dcc717f9a4b21dcba10f5da49ba1 2331 ledger_3.2.1-8.dsc
8cd9ee298a6b5401d9aa683a3595485d568213ce 8104 ledger_3.2.1-8.debian.tar.xz
Checksums-Sha256:
2d2b7c6dd2cd47a8e35aaaa5cb6aaafffbe3e21ae3d16b21f7c1911a4339647b 2331
ledger_3.2.1-8.dsc
8151aa7399e6b495c2307474b5563101ca9887808443a78a89923ea9f92d35d3 8104
ledger_3.2.1-8.debian.tar.xz
Files:
a8007f890fd5f126e3535fc8bdf19915 2331 utils optional ledger_3.2.1-8.dsc
58e19af75c9f9d033c36195d62c40aea 8104 utils optional
ledger_3.2.1-8.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEkiyHYXwaY0SiY6fqA0U5G1WqFSEFAmGozh4ACgkQA0U5G1Wq
FSG64BAAuSu7Tu4AOfQ8eG0GLFycIU7+ReeSI/3TAftDBVTELTS3U9SeyJ5pi1wD
0u+tm11tXl20qv16R1FdC/6po0UC40iSBBEeCCgUIy/9J4266OgjCGeCGKevxCUz
DIqFUSyGziEKVqLzbbLJsaqeEYX7Oe4fxTPId847VzE4I1VODSCC3KHQHPuTvklk
FxumgVc4x9qBhEcM59gTUVEjLYcMkw6kwOeEZCRw0JcinTWORqgRkhp18CW7o/BV
3HTnLbcAq/nIGwA/zKB5RIPI4yvYNEUE7yNWV50adHoOvwAGhWzqrQLosuiEQlgv
TJTsOC6+BU3cPgntwQfnCtbysiutFAD33yKCmSGt0CWryslzi86k0g1Zuf/tb6PV
Lr+4t0rPvm2agN7v9WMjz0/G6CGP+bdvgVZv6fVqMxsD8q/O2oTPCc5Ft6v8wWHZ
dQc33S7MaswTeUw/E/ltmy7PTuF1IBlHVX2FAYh9YOeuP50AZHBMTGmzfZ6QyV1t
9B136tcmelEg6PjWyxMUSV9w5xuAyPY1ymwVA7WFGRtI3bTfboY2Bqblv0PVeEuh
t+3s7W60kSCOnrps5yFSt7c2QqDHWGMnRdhpYe0eJFRugguhlMJJoiw/Nhe/6CcM
2Mx/Y6cAu1E2V452i6ZTAQLs29hNZCVN8F7wnYJPPhaI6heLgfI=
=hP+I
-----END PGP SIGNATURE-----
--- End Message ---
