apache2_2.4.52-3_sourceonly.changes ACCEPTED into experimental

2021-12-28 Thread Debian FTP Masters



Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Tue, 28 Dec 2021 21:20:05 +0100
Source: apache2
Architecture: source
Version: 2.4.52-3
Distribution: experimental
Urgency: medium
Maintainer: Debian Apache Maintainers 
Changed-By: Yadd 
Changes:
 apache2 (2.4.52-3) experimental; urgency=medium
 .
   * Fix autopkgtest with libpcre2 (autopkgtest still fails due to an SSL
 error)
   * Set hardening=+all instead of hardening=+bindnow
Checksums-Sha1: 
 381b63e43300f26becd435143215e116fe467ea1 3488 apache2_2.4.52-3.dsc
 0a28b84f906757d1d4f0a3c5ea67eebce421d366 891080 apache2_2.4.52-3.debian.tar.xz
Checksums-Sha256: 
 bcf9112d93e733d0318cfafc4b8320eced306013bd229b42d6336fc026ffbe5b 3488 
apache2_2.4.52-3.dsc
 a0a6b501a4d69bdd92ba34bf667e808c8b0409faf853c3c5ce3a83d6778b7ce6 891080 
apache2_2.4.52-3.debian.tar.xz
Files: 
 46d09cda089d7439b3f9e6b7dab3b19c 3488 httpd optional apache2_2.4.52-3.dsc
 7bf0f5d34a7c6015e3c2f5ee6a2fb6eb 891080 httpd optional 
apache2_2.4.52-3.debian.tar.xz

-BEGIN PGP SIGNATURE-
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=lSYL
-END PGP SIGNATURE-


Thank you for your contribution to Debian.



Processing of apache2_2.4.52-3_sourceonly.changes

2021-12-28 Thread Debian FTP Masters
apache2_2.4.52-3_sourceonly.changes uploaded successfully to localhost
along with the files:
  apache2_2.4.52-3.dsc
  apache2_2.4.52-3.debian.tar.xz

Greetings,

Your Debian queue daemon (running on host usper.debian.org)



apache2_2.4.52-2_sourceonly.changes ACCEPTED into experimental

2021-12-28 Thread Debian FTP Masters



Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Tue, 28 Dec 2021 20:01:43 +0100
Source: apache2
Architecture: source
Version: 2.4.52-2
Distribution: experimental
Urgency: medium
Maintainer: Debian Apache Maintainers 
Changed-By: Yadd 
Closes: 1000114
Changes:
 apache2 (2.4.52-2) experimental; urgency=medium
 .
   * Build with pcre2 (Closes: #1000114)
Checksums-Sha1: 
 24df80aeb69c3b262702491e5cdadadf6ce8fada 3474 apache2_2.4.52-2.dsc
 86a53e3b3c7cd215261ac14bca7558c2e173a46f 890768 apache2_2.4.52-2.debian.tar.xz
Checksums-Sha256: 
 8caf78d4eb34ea4bde694e48fc470ca2ab9f96768cf02d46ef221c9b05c0028c 3474 
apache2_2.4.52-2.dsc
 d00120b36fd572212e2ed886137d32904cae9308a7d624f1033bf31cc411dc92 890768 
apache2_2.4.52-2.debian.tar.xz
Files: 
 81b813a6c33850dc6dc8c96a70a51bbe 3474 httpd optional apache2_2.4.52-2.dsc
 41180a6b3549d15dd7d275e3ee8b1f83 890768 httpd optional 
apache2_2.4.52-2.debian.tar.xz

-BEGIN PGP SIGNATURE-
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=Ew5p
-END PGP SIGNATURE-


Thank you for your contribution to Debian.



Processing of apache2_2.4.52-2_sourceonly.changes

2021-12-28 Thread Debian FTP Masters
apache2_2.4.52-2_sourceonly.changes uploaded successfully to localhost
along with the files:
  apache2_2.4.52-2.dsc
  apache2_2.4.52-2.debian.tar.xz

Greetings,

Your Debian queue daemon (running on host usper.debian.org)



Bug#1000114: marked as done (apache2: depends on obsolete pcre3 library)

2021-12-28 Thread Debian Bug Tracking System
Your message dated Tue, 28 Dec 2021 19:33:34 +
with message-id 
and subject line Bug#1000114: fixed in apache2 2.4.52-2
has caused the Debian Bug report #1000114,
regarding apache2: depends on obsolete pcre3 library
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
1000114: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000114
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: apache2
Severity: important
User: matthew-pcre...@debian.org
Usertags: obsolete-pcre3

Dear maintainer,

Your package still depends on the old, obsolete PCRE3[0] libraries
(i.e. libpcre3-dev). This has been end of life for a while now, and
upstream do not intend to fix any further bugs in it. Accordingly, I
would like to remove the pcre3 libraries from Debian, preferably in
time for the release of Bookworm.

The newer PCRE2 library was first released in 2015, and has been in
Debian since stretch. Upstream's documentation for PCRE2 is available
here: https://pcre.org/current/doc/html/

Many large projects that use PCRE have made the switch now (e.g. git,
php); it does involve some work, but we are now at the stage where
PCRE3 should not be used, particularly if it might ever be exposed to
untrusted input.

This mass bug filing was discussed on debian-devel@ in
https://lists.debian.org/debian-devel/2021/11/msg00176.html

Regards,

Matthew [0] Historical reasons mean that old PCRE is packaged as
pcre3 in Debian 
--- End Message ---
--- Begin Message ---
Source: apache2
Source-Version: 2.4.52-2
Done: Yadd 

We believe that the bug you reported is fixed in the latest version of
apache2, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1000...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Yadd  (supplier of updated apache2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Tue, 28 Dec 2021 20:01:43 +0100
Source: apache2
Architecture: source
Version: 2.4.52-2
Distribution: experimental
Urgency: medium
Maintainer: Debian Apache Maintainers 
Changed-By: Yadd 
Closes: 1000114
Changes:
 apache2 (2.4.52-2) experimental; urgency=medium
 .
   * Build with pcre2 (Closes: #1000114)
Checksums-Sha1: 
 24df80aeb69c3b262702491e5cdadadf6ce8fada 3474 apache2_2.4.52-2.dsc
 86a53e3b3c7cd215261ac14bca7558c2e173a46f 890768 apache2_2.4.52-2.debian.tar.xz
Checksums-Sha256: 
 8caf78d4eb34ea4bde694e48fc470ca2ab9f96768cf02d46ef221c9b05c0028c 3474 
apache2_2.4.52-2.dsc
 d00120b36fd572212e2ed886137d32904cae9308a7d624f1033bf31cc411dc92 890768 
apache2_2.4.52-2.debian.tar.xz
Files: 
 81b813a6c33850dc6dc8c96a70a51bbe 3474 httpd optional apache2_2.4.52-2.dsc
 41180a6b3549d15dd7d275e3ee8b1f83 890768 httpd optional 
apache2_2.4.52-2.debian.tar.xz

-BEGIN PGP SIGNATURE-
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=Ew5p
-END PGP SIGNATURE End Message ---


Processed: Bug#1000114 marked as pending in apache2

2021-12-28 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 pending
Bug #1000114 [src:apache2] apache2: depends on obsolete pcre3 library
Ignoring request to alter tags of bug #1000114 to the same tags previously set

-- 
1000114: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000114
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1000114: apache2: depends on obsolete pcre3 library

2021-12-28 Thread Yadd

On 28/12/2021 19:40, Yadd wrote:

On 28/12/2021 08:25, Sebastiaan Couwenberg wrote:

On Sun, 21 Nov 2021 17:17:32 + Matthew Vernon wrote:

On 19/11/2021 21:46, Yadd wrote:

> Sadly pcre2 does not provide /usr/bin/pcre-config, I'm unable to do 
this

> change

Well, there is pcre2-config, but that's a little beside the point - 
pcre2 is not a drop-in replacement for pcre, so it is likely some 
code work will be required, probably by upstream.


There is support for pcre2 on trunk:

  https://github.com/apache/httpd/blob/trunk/include/ap_regex.h
  https://github.com/apache/httpd/blob/trunk/server/util_pcre.c

See also:


https://helperbyte.com/questions/457338/how-to-make-pcre2-support-for-apache-24 



Kind Regards,

Bas



Thanks,

I still have a problem with this part of the patch

@@ -115,7 +127,7 @@

  AP_DECLARE(void) ap_regfree(ap_regex_t *preg)
  {
-    (pcre_free)(preg->re_pcre);
+    pcre2_code_free(preg->re_pcre);
  }

I don't find any pcre2_code_free function, there are many pcre2*_free 
functions, which one is the good ?


Found, was a LDPATH problem



Bug#1000114: apache2: depends on obsolete pcre3 library

2021-12-28 Thread Yadd

On 28/12/2021 08:25, Sebastiaan Couwenberg wrote:

On Sun, 21 Nov 2021 17:17:32 + Matthew Vernon wrote:

On 19/11/2021 21:46, Yadd wrote:

> Sadly pcre2 does not provide /usr/bin/pcre-config, I'm unable to do 
this

> change

Well, there is pcre2-config, but that's a little beside the point - 
pcre2 is not a drop-in replacement for pcre, so it is likely some code 
work will be required, probably by upstream.


There is support for pcre2 on trunk:

  https://github.com/apache/httpd/blob/trunk/include/ap_regex.h
  https://github.com/apache/httpd/blob/trunk/server/util_pcre.c

See also:


https://helperbyte.com/questions/457338/how-to-make-pcre2-support-for-apache-24 



Kind Regards,

Bas



Thanks,

I still have a problem with this part of the patch

@@ -115,7 +127,7 @@

 AP_DECLARE(void) ap_regfree(ap_regex_t *preg)
 {
-(pcre_free)(preg->re_pcre);
+pcre2_code_free(preg->re_pcre);
 }

I don't find any pcre2_code_free function, there are many pcre2*_free 
functions, which one is the good ?