Report forwarded
to Dmitry Smirnov <onlyjob@debian.org>: Bug#1000093; Package src:mysql-workbench.
(Thu, 18 Nov 2021 12:35:40 GMT) (full text, mbox, link).
Acknowledgement sent
to Matthew Vernon <matthew@debian.org>:
New Bug report received and forwarded. Copy sent to Dmitry Smirnov <onlyjob@debian.org>.
(Thu, 18 Nov 2021 12:35:41 GMT) (full text, mbox, link).
Subject: mysql-workbench: depends on obsolete pcre3 library
Date: Thu, 18 Nov 2021 11:49:05 +0000
Source: mysql-workbench
Severity: important
User: matthew-pcredep@debian.org
Usertags: obsolete-pcre3
Dear maintainer,
Your package still depends on the old, obsolete PCRE3[0] libraries
(i.e. libpcre3-dev). This has been end of life for a while now, and
upstream do not intend to fix any further bugs in it. Accordingly, I
would like to remove the pcre3 libraries from Debian, preferably in
time for the release of Bookworm.
The newer PCRE2 library was first released in 2015, and has been in
Debian since stretch. Upstream's documentation for PCRE2 is available
here: https://pcre.org/current/doc/html/
Many large projects that use PCRE have made the switch now (e.g. git,
php); it does involve some work, but we are now at the stage where
PCRE3 should not be used, particularly if it might ever be exposed to
untrusted input.
This mass bug filing was discussed on debian-devel@ in
https://lists.debian.org/debian-devel/2021/11/msg00176.html
Regards,
Matthew [0] Historical reasons mean that old PCRE is packaged as
pcre3 in Debian
Severity set to 'serious' from 'important'
Request was from Matthew Vernon <matthew@debian.org>
to control@bugs.debian.org.
(Thu, 29 Jun 2023 20:15:38 GMT) (full text, mbox, link).
Information forwarded
to debian-bugs-dist@lists.debian.org, Dmitry Smirnov <onlyjob@debian.org>: Bug#1000093; Package src:mysql-workbench.
(Tue, 09 Jan 2024 12:51:01 GMT) (full text, mbox, link).
Acknowledgement sent
to Yavor Doganov <yavor@gnu.org>:
Extra info received and forwarded to list. Copy sent to Dmitry Smirnov <onlyjob@debian.org>.
(Tue, 09 Jan 2024 12:51:01 GMT) (full text, mbox, link).
Control: tags -1 + patch
Please find attached a patch, basically only build-tested (I also ran
it but I find it difficult to test specifically the affected code).
Added tag(s) patch.
Request was from Yavor Doganov <yavor@gnu.org>
to 1000093-submit@bugs.debian.org.
(Tue, 09 Jan 2024 12:51:01 GMT) (full text, mbox, link).
Added indication that bug 1000093 blocks 1071970
Request was from Simon McVittie <smcv@debian.org>
to control@bugs.debian.org.
(Sat, 15 Jun 2024 09:27:08 GMT) (full text, mbox, link).
Debbugs is free software and licensed under the terms of the GNU General
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.