Bug#1000114: apache2: depends on obsolete pcre3 library
On 28/12/2021 08:25, Sebastiaan Couwenberg wrote:
On Sun, 21 Nov 2021 17:17:32 + Matthew Vernon wrote:
On 19/11/2021 21:46, Yadd wrote:
> Sadly pcre2 does not provide /usr/bin/pcre-config, I'm unable to do
this
> change
Well, there is pcre2-config, but that's a little beside the point -
pcre2 is not a drop-in replacement for pcre, so it is likely some code
work will be required, probably by upstream.
There is support for pcre2 on trunk:
https://github.com/apache/httpd/blob/trunk/include/ap_regex.h
https://github.com/apache/httpd/blob/trunk/server/util_pcre.c
See also:
https://helperbyte.com/questions/457338/how-to-make-pcre2-support-for-apache-24
Kind Regards,
Bas
Thanks,
I still have a problem with this part of the patch
@@ -115,7 +127,7 @@
AP_DECLARE(void) ap_regfree(ap_regex_t *preg)
{
-(pcre_free)(preg->re_pcre);
+pcre2_code_free(preg->re_pcre);
}
I don't find any pcre2_code_free function, there are many pcre2*_free
functions, which one is the good ?
Bug#1000114: apache2: depends on obsolete pcre3 library
On 28/12/2021 19:40, Yadd wrote:
On 28/12/2021 08:25, Sebastiaan Couwenberg wrote:
On Sun, 21 Nov 2021 17:17:32 + Matthew Vernon wrote:
On 19/11/2021 21:46, Yadd wrote:
> Sadly pcre2 does not provide /usr/bin/pcre-config, I'm unable to do
this
> change
Well, there is pcre2-config, but that's a little beside the point -
pcre2 is not a drop-in replacement for pcre, so it is likely some
code work will be required, probably by upstream.
There is support for pcre2 on trunk:
https://github.com/apache/httpd/blob/trunk/include/ap_regex.h
https://github.com/apache/httpd/blob/trunk/server/util_pcre.c
See also:
https://helperbyte.com/questions/457338/how-to-make-pcre2-support-for-apache-24
Kind Regards,
Bas
Thanks,
I still have a problem with this part of the patch
@@ -115,7 +127,7 @@
AP_DECLARE(void) ap_regfree(ap_regex_t *preg)
{
- (pcre_free)(preg->re_pcre);
+ pcre2_code_free(preg->re_pcre);
}
I don't find any pcre2_code_free function, there are many pcre2*_free
functions, which one is the good ?
Found, was a LDPATH problem
Processed: Bug#1000114 marked as pending in apache2
Processing control commands: > tag -1 pending Bug #1000114 [src:apache2] apache2: depends on obsolete pcre3 library Ignoring request to alter tags of bug #1000114 to the same tags previously set -- 1000114: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000114 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Processing of apache2_2.4.52-2_sourceonly.changes
apache2_2.4.52-2_sourceonly.changes uploaded successfully to localhost along with the files: apache2_2.4.52-2.dsc apache2_2.4.52-2.debian.tar.xz Greetings, Your Debian queue daemon (running on host usper.debian.org)
Bug#1000114: marked as done (apache2: depends on obsolete pcre3 library)
Your message dated Tue, 28 Dec 2021 19:33:34 + with message-id and subject line Bug#1000114: fixed in apache2 2.4.52-2 has caused the Debian Bug report #1000114, regarding apache2: depends on obsolete pcre3 library to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 1000114: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000114 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems --- Begin Message --- Source: apache2 Severity: important User: matthew-pcre...@debian.org Usertags: obsolete-pcre3 Dear maintainer, Your package still depends on the old, obsolete PCRE3[0] libraries (i.e. libpcre3-dev). This has been end of life for a while now, and upstream do not intend to fix any further bugs in it. Accordingly, I would like to remove the pcre3 libraries from Debian, preferably in time for the release of Bookworm. The newer PCRE2 library was first released in 2015, and has been in Debian since stretch. Upstream's documentation for PCRE2 is available here: https://pcre.org/current/doc/html/ Many large projects that use PCRE have made the switch now (e.g. git, php); it does involve some work, but we are now at the stage where PCRE3 should not be used, particularly if it might ever be exposed to untrusted input. This mass bug filing was discussed on debian-devel@ in https://lists.debian.org/debian-devel/2021/11/msg00176.html Regards, Matthew [0] Historical reasons mean that old PCRE is packaged as pcre3 in Debian --- End Message --- --- Begin Message --- Source: apache2 Source-Version: 2.4.52-2 Done: Yadd We believe that the bug you reported is fixed in the latest version of apache2, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1000...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Yadd (supplier of updated apache2 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 28 Dec 2021 20:01:43 +0100 Source: apache2 Architecture: source Version: 2.4.52-2 Distribution: experimental Urgency: medium Maintainer: Debian Apache Maintainers Changed-By: Yadd Closes: 1000114 Changes: apache2 (2.4.52-2) experimental; urgency=medium . * Build with pcre2 (Closes: #1000114) Checksums-Sha1: 24df80aeb69c3b262702491e5cdadadf6ce8fada 3474 apache2_2.4.52-2.dsc 86a53e3b3c7cd215261ac14bca7558c2e173a46f 890768 apache2_2.4.52-2.debian.tar.xz Checksums-Sha256: 8caf78d4eb34ea4bde694e48fc470ca2ab9f96768cf02d46ef221c9b05c0028c 3474 apache2_2.4.52-2.dsc d00120b36fd572212e2ed886137d32904cae9308a7d624f1033bf31cc411dc92 890768 apache2_2.4.52-2.debian.tar.xz Files: 81b813a6c33850dc6dc8c96a70a51bbe 3474 httpd optional apache2_2.4.52-2.dsc 41180a6b3549d15dd7d275e3ee8b1f83 890768 httpd optional apache2_2.4.52-2.debian.tar.xz -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmHLYSwACgkQ9tdMp8mZ 7ungwRAAkqqXAiFfj2jeNkvPJKil0to/qbklSOggYQBkGcWoBbLGyoW6rRHcssDY t1iMcVaLyODfy4gwKyqST4NCVblnzogbzv8DMuRnL9z2C5YCvQ+WrC0zGo8HqBEU aGtBGHxk86JL/WgqVZLTUlHySo2466B93RlklOiTrgFn+KGvtvNAYDEwjl85O877 p37cDwNr1mbd0804Rsd0mA6fNXpIig9TCLOn4asi2CiBN0fQTn6rybfyXQlouqlc X9Ycb0EZEgUKm4zMCZUr2bantN1kUszgZhXwqYIQRTx8tpH5aY5cSgxGte1aFB8A uJyRIoLwoKIuH9jF+Yvz/iUAf3gJq5AR6gY0lXkc6gt5R+TioI9zn4n+C1zD1cpR dDRADZJCuUE8qYiuORMuqwiMnAHiSOqzv0pYLo3B34CW7mH1A9P62kU6QRZaEkdv n19GL7HwbMP29PsX6/JMNPzijyfDx7YYlkckoVUTRpCpwiAlUIfeZUIg2cEYyLF+ cCLllzdhsq9cDBq9X351Qfjx/NmggVWFT1jC6T7uzfbxbZUbmZ4wt7VQSTMK7FLC CubijlqwhZOY9L3NpeqOxiGmuZRlJYKpPnMqPtuiwe9BSmSvQ7ovnlgAoVY0BY97 VuYnP+KXk0o2mPcUBZkWcDwJpXHn0iCl7nJgfR3BcPU+lv64/BA= =Ew5p -END PGP SIGNATURE End Message ---
apache2_2.4.52-2_sourceonly.changes ACCEPTED into experimental
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 28 Dec 2021 20:01:43 +0100 Source: apache2 Architecture: source Version: 2.4.52-2 Distribution: experimental Urgency: medium Maintainer: Debian Apache Maintainers Changed-By: Yadd Closes: 1000114 Changes: apache2 (2.4.52-2) experimental; urgency=medium . * Build with pcre2 (Closes: #1000114) Checksums-Sha1: 24df80aeb69c3b262702491e5cdadadf6ce8fada 3474 apache2_2.4.52-2.dsc 86a53e3b3c7cd215261ac14bca7558c2e173a46f 890768 apache2_2.4.52-2.debian.tar.xz Checksums-Sha256: 8caf78d4eb34ea4bde694e48fc470ca2ab9f96768cf02d46ef221c9b05c0028c 3474 apache2_2.4.52-2.dsc d00120b36fd572212e2ed886137d32904cae9308a7d624f1033bf31cc411dc92 890768 apache2_2.4.52-2.debian.tar.xz Files: 81b813a6c33850dc6dc8c96a70a51bbe 3474 httpd optional apache2_2.4.52-2.dsc 41180a6b3549d15dd7d275e3ee8b1f83 890768 httpd optional apache2_2.4.52-2.debian.tar.xz -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmHLYSwACgkQ9tdMp8mZ 7ungwRAAkqqXAiFfj2jeNkvPJKil0to/qbklSOggYQBkGcWoBbLGyoW6rRHcssDY t1iMcVaLyODfy4gwKyqST4NCVblnzogbzv8DMuRnL9z2C5YCvQ+WrC0zGo8HqBEU aGtBGHxk86JL/WgqVZLTUlHySo2466B93RlklOiTrgFn+KGvtvNAYDEwjl85O877 p37cDwNr1mbd0804Rsd0mA6fNXpIig9TCLOn4asi2CiBN0fQTn6rybfyXQlouqlc X9Ycb0EZEgUKm4zMCZUr2bantN1kUszgZhXwqYIQRTx8tpH5aY5cSgxGte1aFB8A uJyRIoLwoKIuH9jF+Yvz/iUAf3gJq5AR6gY0lXkc6gt5R+TioI9zn4n+C1zD1cpR dDRADZJCuUE8qYiuORMuqwiMnAHiSOqzv0pYLo3B34CW7mH1A9P62kU6QRZaEkdv n19GL7HwbMP29PsX6/JMNPzijyfDx7YYlkckoVUTRpCpwiAlUIfeZUIg2cEYyLF+ cCLllzdhsq9cDBq9X351Qfjx/NmggVWFT1jC6T7uzfbxbZUbmZ4wt7VQSTMK7FLC CubijlqwhZOY9L3NpeqOxiGmuZRlJYKpPnMqPtuiwe9BSmSvQ7ovnlgAoVY0BY97 VuYnP+KXk0o2mPcUBZkWcDwJpXHn0iCl7nJgfR3BcPU+lv64/BA= =Ew5p -END PGP SIGNATURE- Thank you for your contribution to Debian.
Processing of apache2_2.4.52-3_sourceonly.changes
apache2_2.4.52-3_sourceonly.changes uploaded successfully to localhost along with the files: apache2_2.4.52-3.dsc apache2_2.4.52-3.debian.tar.xz Greetings, Your Debian queue daemon (running on host usper.debian.org)
apache2_2.4.52-3_sourceonly.changes ACCEPTED into experimental
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 28 Dec 2021 21:20:05 +0100 Source: apache2 Architecture: source Version: 2.4.52-3 Distribution: experimental Urgency: medium Maintainer: Debian Apache Maintainers Changed-By: Yadd Changes: apache2 (2.4.52-3) experimental; urgency=medium . * Fix autopkgtest with libpcre2 (autopkgtest still fails due to an SSL error) * Set hardening=+all instead of hardening=+bindnow Checksums-Sha1: 381b63e43300f26becd435143215e116fe467ea1 3488 apache2_2.4.52-3.dsc 0a28b84f906757d1d4f0a3c5ea67eebce421d366 891080 apache2_2.4.52-3.debian.tar.xz Checksums-Sha256: bcf9112d93e733d0318cfafc4b8320eced306013bd229b42d6336fc026ffbe5b 3488 apache2_2.4.52-3.dsc a0a6b501a4d69bdd92ba34bf667e808c8b0409faf853c3c5ce3a83d6778b7ce6 891080 apache2_2.4.52-3.debian.tar.xz Files: 46d09cda089d7439b3f9e6b7dab3b19c 3488 httpd optional apache2_2.4.52-3.dsc 7bf0f5d34a7c6015e3c2f5ee6a2fb6eb 891080 httpd optional apache2_2.4.52-3.debian.tar.xz -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmHLd/IACgkQ9tdMp8mZ 7umHmg//cJQj6cZPrTubhznymlZNUBKOyCC9kvImZkWxYkSB/lDHOKdKgCdRazLt eXMdPVrCk0shuQwd/FaAl2AMajBayoz9qNq4wEqmQWOtLi6fr5SiKuwakFqPkZqp re4vcQiY7bAWdPyUOLCiVCw/wGi9CxkQt0/YFM3SGdMLiYAS1HQDFBjx/ebosUfL 1n0Gl0otGH7kCXV4POmOitwIPjG0ZnUSy0d8yMnr/4L2Vsmi+kPJC7nMJ/o3x3El OkxXDp3UN/r/HCrlN0Ey/pVvUMIGviEcqmK0PX5bIoFgJpObdvYqU8tAANwuK6qz gTbhAvCPwlg6Zftjc1sU0a43r0omEpKcpIiDF3YofJe9aNBmJdbaejueWBpArgq6 JIiTpx/bfRL+p+18sigodWxKsKH1msgfsAyjHn76p9Vs9e2ciS4dEjrgj64Y7R9d 7grGdAtdtShvX5iGEM8bpesruTsRazpyxOCuzJj7n2YxWv2ZWwKxfubogAVZQZmt 7dddraPQLVdsndg+BQsyJgvo4qjM5n+OIEFoZdD4w8Hog1GuabrOkJAv1zASoV4V X+G3roE0gfgj8BxYMBvAQbaUxvtLdLfE3qBvAgQMqxG0MfpclDdV4wQ3bZ/5XwE4 f/MnEKliN5rsziVJS4cHIy/no+y0QjPDpKa4PupYWWtBD8pI13o= =lSYL -END PGP SIGNATURE- Thank you for your contribution to Debian.
