[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1000097: marked as done (compton: depends on obsolete pcre3 library)

Your message dated Fri, 18 Aug 2023 07:34:23 +0000
with message-id <E1qWtzz-009dxf-7L@fasolo.debian.org>
and subject line Bug#1000097: fixed in compton 1-2
has caused the Debian Bug report #1000097,
regarding compton: depends on obsolete pcre3 library
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1000097: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000097
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Source: compton
Severity: important
User: matthew-pcredep@debian.org
Usertags: obsolete-pcre3

Dear maintainer,

Your package still depends on the old, obsolete PCRE3[0] libraries
(i.e. libpcre3-dev). This has been end of life for a while now, and
upstream do not intend to fix any further bugs in it. Accordingly, I
would like to remove the pcre3 libraries from Debian, preferably in
time for the release of Bookworm.

The newer PCRE2 library was first released in 2015, and has been in
Debian since stretch. Upstream's documentation for PCRE2 is available
here: https://pcre.org/current/doc/html/

Many large projects that use PCRE have made the switch now (e.g. git,
php); it does involve some work, but we are now at the stage where
PCRE3 should not be used, particularly if it might ever be exposed to
untrusted input.

This mass bug filing was discussed on debian-devel@ in
https://lists.debian.org/debian-devel/2021/11/msg00176.html

Regards,

Matthew [0] Historical reasons mean that old PCRE is packaged as
pcre3 in Debian

--- End Message ---
--- Begin Message --- 
Source: compton
Source-Version: 1-2
Done: Bastian Germann <bage@debian.org>

We believe that the bug you reported is fixed in the latest version of
compton, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1000097@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Bastian Germann <bage@debian.org> (supplier of updated compton package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 18 Aug 2023 08:56:05 +0200
Source: compton
Architecture: source
Version: 1-2
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Closes: 908533 1000097
Changes:
 compton (1-2) unstable; urgency=medium
 .
   * QA upload.
   * Remove pcre support. (Closes: #1000097)
   * Correct the download source. (Closes: #908533)
Checksums-Sha1:
 7a093cbc44000bbf3b4963b7d8f71cb5329c0b21 1894 compton_1-2.dsc
 a55a202491737caf36feb736cfa28a4209c8e327 4744 compton_1-2.debian.tar.xz
 6f84eda57767b8067278de20404714af9650d41a 6320 compton_1-2_source.buildinfo
Checksums-Sha256:
 2a9a38daf35b5629f6acd6cd43b3644af7a6797b702f3d9dcd604fb98ad78a57 1894 compton_1-2.dsc
 cec1a9dd3890a2f70338266fcd3db2c1a0be800d46e56bee94604459cc0531ad 4744 compton_1-2.debian.tar.xz
 f7fffc62594f203ac3fdd5b1fa321e0cf4026b0e10c91d33c81885717b2f77fe 6320 compton_1-2_source.buildinfo
Files:
 98bfa5282f9f08bb3a2747acb294511a 1894 x11 optional compton_1-2.dsc
 abf37009c7b3ed2fa6f20317c231dab1 4744 x11 optional compton_1-2.debian.tar.xz
 4f822be025a22fdcf6d16446ba27caf8 6320 x11 optional compton_1-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=q+q7
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: