[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2

2017-05-02 Thread Jeremy Bicha
** No longer affects: vte2.91 (Ubuntu)

** No longer affects: gnome-terminal (Ubuntu)

** Description changed:

  Availability
  
  Synced with Debian. Built for all supported architectures.
  
  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+
  
  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre
  
  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2
  
  Upstream tests are run during the build but there is no autopkgtest
  
  Does not have 3.0 (quilt) set
  
  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.
  
  Standards compliance
  
  3.9.6
  
  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/
  
  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.
  
+ Transition
+ ==
+ https://people.canonical.com/~ubuntu-archive/transitions/html/pcre2-main.html
+ 
+ https://people.canonical.com/~ubuntu-archive/transitions/html/pcre2.html
+ 
  Other Info
  ==
  In the original release of pcre2 in Jan 2015, the author says this is not 
just a drastic update to the original pcre but a "new project". He felt free to 
change names and options.
  https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html
  
  pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40
  released Jan 2017)
  
  Some discussion of how it's different:
  http://www.regular-expressions.info/pcre2.html

** Description changed:

  Availability
  
  Synced with Debian. Built for all supported architectures.
  
  Rationale
  =
- Required by gnome-terminal 3.22+ and vte2.91 0.46+
+ Required by vte2.91 0.46+ and gnome-terminal 3.22+.
+ The Ubuntu Desktop team has postponed the need for this transition by 
reverting the vte and gnome-terminal commits that switched to pcre2.
  
  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre
  
  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2
  
  Upstream tests are run during the build but there is no autopkgtest
  
  Does not have 3.0 (quilt) set
  
  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.
  
  Standards compliance
  
  3.9.6
  
  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/
  
  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.
  
  Transition
  ==
  https://people.canonical.com/~ubuntu-archive/transitions/html/pcre2-main.html
  
  https://people.canonical.com/~ubuntu-archive/transitions/html/pcre2.html
  
  Other Info
  ==
  In the original release of pcre2 in Jan 2015, the author says this is not 
just a drastic update to the original pcre but a "new project". He felt free to 
change names and options.
  https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html
  
  pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40
  released Jan 2017)
  
  Some discussion of how it's different:
  http://www.regular-expressions.info/pcre2.html

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/163

Title:
  [MIR] pcre2

Status in pcre2 package in Ubuntu:
  Incomplete

Bug description:
  Availability
  
  Synced with Debian. Built for all supported architectures.

  Rationale
  =
  Required by vte2.91 0.46+ and gnome-terminal 3.22+.
  The Ubuntu Desktop team has postponed the need for this transition by 
reverting the vte and gnome-terminal commits that switched to pcre2.

  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  

[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2

2017-05-01 Thread Mathieu Trudel-Lapierre
"Other distros do it" isn't sufficient rationale, by itself, to support
putting pcre2 in main. We already ship it, the question is whether it
should be in main, meaning whether Canonical will be responsible for
support, providing security updates, etc.

To mirror what doko mentioned earlier, what is needed to demote pcre3?
Can we start (even a long-running) transition? (So there should be a
tracker setup for that).

There seems to be new security issues too.

I don't have a preference on what version of pcre to use, there should
just be a reasonable analysis of how far we are to being able to just
one pcre, what the steps needed to get there, possibly bugs open or a
transition tracker to follow progress, and whether we can more easily
port what seems to require pcre2 now back to pcre3 in order to
facilitate maintenance. Should we / can we invest time and effort in
porting things from pcre3 to pcre2?

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/163

Title:
  [MIR] pcre2

Status in gnome-terminal package in Ubuntu:
  Confirmed
Status in pcre2 package in Ubuntu:
  Incomplete
Status in vte2.91 package in Ubuntu:
  Confirmed

Bug description:
  Availability
  
  Synced with Debian. Built for all supported architectures.

  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+

  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre

  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2

  Upstream tests are run during the build but there is no autopkgtest

  Does not have 3.0 (quilt) set

  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.

  Standards compliance
  
  3.9.6

  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/

  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.

  Other Info
  ==
  In the original release of pcre2 in Jan 2015, the author says this is not 
just a drastic update to the original pcre but a "new project". He felt free to 
change names and options.
  https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html

  pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40
  released Jan 2017)

  Some discussion of how it's different:
  http://www.regular-expressions.info/pcre2.html

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2

2017-04-29 Thread willmo
It seems likely that Ubuntu will have to support/ship both PCRE and
PCRE2 before long. At least some other distros (Fedora, Gentoo, Debian)
appear to be doing that already.

As mentioned above, for packaging purposes PCRE2 is effectively a new
project, *not* a new version of the previous PCRE. The APIs are
completely incompatible, and the previous PCRE is still getting bugfixes
and seems to be supported/recommended for existing projects that already
use it. There are a number of largish projects that don't support PCRE2
and presumably won't anytime soon (e.g.
https://bz.apache.org/bugzilla/show_bug.cgi?id=57471).

So it seems unlikely that the whole package ecosystem will ever
simultaneously support a single incarnation of PCRE, allowing Ubuntu to
ship only that one. Already some packages don't support the old
incarnation, and as mentioned above, it's likely that some will never
support the new incarnation.

** Bug watch added: bz.apache.org/bugzilla/ #57471
   https://bz.apache.org/bugzilla/show_bug.cgi?id=57471

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/163

Title:
  [MIR] pcre2

Status in gnome-terminal package in Ubuntu:
  Confirmed
Status in pcre2 package in Ubuntu:
  Incomplete
Status in vte2.91 package in Ubuntu:
  Confirmed

Bug description:
  Availability
  
  Synced with Debian. Built for all supported architectures.

  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+

  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre

  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2

  Upstream tests are run during the build but there is no autopkgtest

  Does not have 3.0 (quilt) set

  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.

  Standards compliance
  
  3.9.6

  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/

  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.

  Other Info
  ==
  In the original release of pcre2 in Jan 2015, the author says this is not 
just a drastic update to the original pcre but a "new project". He felt free to 
change names and options.
  https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html

  pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40
  released Jan 2017)

  Some discussion of how it's different:
  http://www.regular-expressions.info/pcre2.html

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2

2017-04-03 Thread Mathieu Trudel-Lapierre
** Changed in: pcre2 (Ubuntu)
Milestone: ubuntu-17.03 => ubuntu-17.05

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/163

Title:
  [MIR] pcre2

Status in gnome-terminal package in Ubuntu:
  Confirmed
Status in pcre2 package in Ubuntu:
  Incomplete
Status in vte2.91 package in Ubuntu:
  Confirmed

Bug description:
  Availability
  
  Synced with Debian. Built for all supported architectures.

  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+

  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre

  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2

  Upstream tests are run during the build but there is no autopkgtest

  Does not have 3.0 (quilt) set

  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.

  Standards compliance
  
  3.9.6

  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/

  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.

  Other Info
  ==
  In the original release of pcre2 in Jan 2015, the author says this is not 
just a drastic update to the original pcre but a "new project". He felt free to 
change names and options.
  https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html

  pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40
  released Jan 2017)

  Some discussion of how it's different:
  http://www.regular-expressions.info/pcre2.html

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2

2017-02-23 Thread Mathieu Trudel-Lapierre
To be clear, I share doko's feeling against having two versions of the
library in main if it can be avoided -- this is certainly not a
permanent situation, but most things don't appear to have switched to
pcre2 just yet (and I would expect they would in the near-ish term). In
that sense, I'd be more in favor of not upgrading vte/gnome-terminal for
the time being.

To make it simpler: how do we value the benefits of a new pcre2 in main
(meaning possibly some new features of gnome-terminal and vte) against
the (probably small, but still) maintenance burden of having two PCRE
libraries in main or the need to hold gnome-terminal and vte back for
this cycle?

To me wearing the MIR team hat, the benefits don't outweigh the
increased maintenance work (ie. you can do nothing to vte and gnome-
terminal, and we're good), especially when you consider that pcre is the
kind of thing that does tend to have CVEs every once in a while[1].

On the other hand, new features are shiny, but they look to me like they
might be cherry-pickable. I'm open to be convinced, and the security
team probably should have a say in it too (hence my suggestion of
bringing it up on the mailing list).

[1] http://www.cvedetails.com/product/5715/Pcre-Pcre.html?vendor_id=3265

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/163

Title:
  [MIR] pcre2

Status in gnome-terminal package in Ubuntu:
  Confirmed
Status in pcre2 package in Ubuntu:
  Incomplete
Status in vte2.91 package in Ubuntu:
  Confirmed

Bug description:
  Availability
  
  Synced with Debian. Built for all supported architectures.

  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+

  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre

  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2

  Upstream tests are run during the build but there is no autopkgtest

  Does not have 3.0 (quilt) set

  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.

  Standards compliance
  
  3.9.6

  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/

  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.

  Other Info
  ==
  In the original release of pcre2 in Jan 2015, the author says this is not 
just a drastic update to the original pcre but a "new project". He felt free to 
change names and options.
  https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html

  pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40
  released Jan 2017)

  Some discussion of how it's different:
  http://www.regular-expressions.info/pcre2.html

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2

2017-02-23 Thread Mathieu Trudel-Lapierre
I understand the concerns, and I share them, but I don't think we should
alone make the decision. Perhaps bring this up for wider discussion on
the ubuntu-devel mailing list?

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/163

Title:
  [MIR] pcre2

Status in gnome-terminal package in Ubuntu:
  Confirmed
Status in pcre2 package in Ubuntu:
  Incomplete
Status in vte2.91 package in Ubuntu:
  Confirmed

Bug description:
  Availability
  
  Synced with Debian. Built for all supported architectures.

  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+

  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre

  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2

  Upstream tests are run during the build but there is no autopkgtest

  Does not have 3.0 (quilt) set

  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.

  Standards compliance
  
  3.9.6

  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/

  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.

  Other Info
  ==
  In the original release of pcre2 in Jan 2015, the author says this is not 
just a drastic update to the original pcre but a "new project". He felt free to 
change names and options.
  https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html

  pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40
  released Jan 2017)

  Some discussion of how it's different:
  http://www.regular-expressions.info/pcre2.html

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2

2017-02-21 Thread Jeremy Bicha
I added an Other Info section.

** Description changed:

  Availability
  
  Synced with Debian. Built for all supported architectures.
  
  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+
  
  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre
  
  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2
  
  Upstream tests are run during the build but there is no autopkgtest
  
  Does not have 3.0 (quilt) set
  
  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.
  
  Standards compliance
  
  3.9.6
  
  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/
  
  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.
+ 
+ Other Info
+ ==
+ In the original release of pcre2 in Jan 2015, the author says this is not 
just a drastic update to the original pcre but a "new project". He felt free to 
change names and options.
+ https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html
+ 
+ pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40
+ released Jan 2017)
+ 
+ Some discussion of how it's different:
+ http://www.regular-expressions.info/pcre2.html

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/163

Title:
  [MIR] pcre2

Status in gnome-terminal package in Ubuntu:
  Confirmed
Status in pcre2 package in Ubuntu:
  Incomplete
Status in vte2.91 package in Ubuntu:
  Confirmed

Bug description:
  Availability
  
  Synced with Debian. Built for all supported architectures.

  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+

  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre

  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2

  Upstream tests are run during the build but there is no autopkgtest

  Does not have 3.0 (quilt) set

  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.

  Standards compliance
  
  3.9.6

  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/

  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.

  Other Info
  ==
  In the original release of pcre2 in Jan 2015, the author says this is not 
just a drastic update to the original pcre but a "new project". He felt free to 
change names and options.
  https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html

  pcre3 has gotten some bugfix releases since then (from 8.36 to 8.40
  released Jan 2017)

  Some discussion of how it's different:
  http://www.regular-expressions.info/pcre2.html

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2

2017-02-20 Thread Jeremy Bicha
For zesty, I have proposed reverting the mandatory pcre2 changes so that
we can do the vte/gnome-terminal update. See bug 1666264

Like I wrote there, I am concerned about how long these reverts can be
maintained with new versions.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/163

Title:
  [MIR] pcre2

Status in gnome-terminal package in Ubuntu:
  Confirmed
Status in pcre2 package in Ubuntu:
  Incomplete
Status in vte2.91 package in Ubuntu:
  Confirmed

Bug description:
  Availability
  
  Synced with Debian. Built for all supported architectures.

  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+

  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre

  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2

  Upstream tests are run during the build but there is no autopkgtest

  Does not have 3.0 (quilt) set

  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.

  Standards compliance
  
  3.9.6

  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/

  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2

2017-02-17 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: vte2.91 (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/163

Title:
  [MIR] pcre2

Status in gnome-terminal package in Ubuntu:
  Confirmed
Status in pcre2 package in Ubuntu:
  Incomplete
Status in vte2.91 package in Ubuntu:
  Confirmed

Bug description:
  Availability
  
  Synced with Debian. Built for all supported architectures.

  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+

  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre

  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2

  Upstream tests are run during the build but there is no autopkgtest

  Does not have 3.0 (quilt) set

  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.

  Standards compliance
  
  3.9.6

  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/

  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2

2017-02-17 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: gnome-terminal (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/163

Title:
  [MIR] pcre2

Status in gnome-terminal package in Ubuntu:
  Confirmed
Status in pcre2 package in Ubuntu:
  Incomplete
Status in vte2.91 package in Ubuntu:
  Confirmed

Bug description:
  Availability
  
  Synced with Debian. Built for all supported architectures.

  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+

  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre

  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2

  Upstream tests are run during the build but there is no autopkgtest

  Does not have 3.0 (quilt) set

  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.

  Standards compliance
  
  3.9.6

  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/

  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2

2017-01-10 Thread Mathieu Trudel-Lapierre
** Changed in: pcre2 (Ubuntu)
Milestone: None => ubuntu-17.03

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/163

Title:
  [MIR] pcre2

Status in gnome-terminal package in Ubuntu:
  New
Status in pcre2 package in Ubuntu:
  Incomplete
Status in vte2.91 package in Ubuntu:
  New

Bug description:
  Availability
  
  Synced with Debian. Built for all supported architectures.

  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+

  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre

  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2

  Upstream tests are run during the build but there is no autopkgtest

  Does not have 3.0 (quilt) set

  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.

  Standards compliance
  
  3.9.6

  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/

  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2

2016-11-01 Thread Jeremy Bicha
If y'all are indeed going to block on there not being allowed to have 2
pcre's in main, then I guess we'll either have to figure out how to hack
vte2.91 and gnome-terminal to either not use pcre2 or instead use the
older pcre3. Or we'll just keep using the current gnome-terminal/vte.

$ reverse-depends -c main src:pcre3

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/163

Title:
  [MIR] pcre2

Status in gnome-terminal package in Ubuntu:
  New
Status in pcre2 package in Ubuntu:
  Incomplete
Status in vte2.91 package in Ubuntu:
  New

Bug description:
  Availability
  
  Synced with Debian. Built for all supported architectures.

  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+

  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre

  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2

  Upstream tests are run during the build but there is no autopkgtest

  Does not have 3.0 (quilt) set

  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.

  Standards compliance
  
  3.9.6

  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/

  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2

2016-11-01 Thread Matthias Klose
> pcre3 is already in Ubuntu main

we don't want to have two versions in main. please could you evaluate
first what is needed to demote pcre3?


** Changed in: pcre2 (Ubuntu)
   Status: New => Incomplete

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/163

Title:
  [MIR] pcre2

Status in gnome-terminal package in Ubuntu:
  New
Status in pcre2 package in Ubuntu:
  Incomplete
Status in vte2.91 package in Ubuntu:
  New

Bug description:
  Availability
  
  Synced with Debian. Built for all supported architectures.

  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+

  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre

  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2

  Upstream tests are run during the build but there is no autopkgtest

  Does not have 3.0 (quilt) set

  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.

  Standards compliance
  
  3.9.6

  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/

  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2

2016-10-31 Thread Michael Terry
** Changed in: pcre2 (Ubuntu)
 Assignee: (unassigned) => Mathieu Trudel-Lapierre (cyphermox)

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/163

Title:
  [MIR] pcre2

Status in gnome-terminal package in Ubuntu:
  New
Status in pcre2 package in Ubuntu:
  New
Status in vte2.91 package in Ubuntu:
  New

Bug description:
  Availability
  
  Synced with Debian. Built for all supported architectures.

  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+

  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre

  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2

  Upstream tests are run during the build but there is no autopkgtest

  Does not have 3.0 (quilt) set

  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.

  Standards compliance
  
  3.9.6

  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/

  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1636666] Re: [MIR] pcre2

2016-10-25 Thread Jeremy Bicha
** Description changed:

  Availability
  
  Synced with Debian. Built for all supported architectures.
  
  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+
  
  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre
  
  Quality assurance
  =
- - Please subscribe Ubuntu Desktop Bugs to this package.
+ - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2
  
  Upstream tests are run during the build but there is no autopkgtest
  
  Does not have 3.0 (quilt) set
  
  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.
  
  Standards compliance
  
  3.9.6
  
  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/
  
  Background information
  ==
- As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu.
+ As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/163

Title:
  [MIR] pcre2

Status in gnome-terminal package in Ubuntu:
  New
Status in pcre2 package in Ubuntu:
  New
Status in vte2.91 package in Ubuntu:
  New

Bug description:
  Availability
  
  Synced with Debian. Built for all supported architectures.

  Rationale
  =
  Required by gnome-terminal 3.22+ and vte2.91 0.46+

  Security
  
  At least one open security issue, affecting Ubuntu 16.04 LTS
  https://people.canonical.com/~ubuntu-security/cve/pkg/pcre2.html
  https://security-tracker.debian.org/tracker/source-package/pcre2
  https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pcre

  Quality assurance
  =
  - Please subscribe Ubuntu Desktop Bugs or Ubuntu Foundation Bugs (like pcre3) 
to this package.
  https://bugs.launchpad.net/ubuntu/+source/pcre2
  https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=pcre2

  Upstream tests are run during the build but there is no autopkgtest

  Does not have 3.0 (quilt) set

  Dependencies
  
  Only build-dependencies are dpkg and debhelper. No other added dependencies.

  Standards compliance
  
  3.9.6

  Maintenance
  ===
  - Actively developed upstream
  http://pcre.org/

  Background information
  ==
  As the package description states, the older version of this library is 
confusingly named pcre3 in Debian/Ubuntu. pcre3 is already in Ubuntu main.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/163/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp