Skip to content

Tracking: Migrate from PCRE to PCRE2 #356387

Open
Open
Tracking: Migrate from PCRE to PCRE2#356387
Labels
0.kind: bugSomething is broken1.severity: securityIssues which raise a security issue, or PRs that fix one3.skill: good-first-bugThis seems like it's fixable by a non-expert3.skill: sprintableA larger issue which is split into distinct actionable tasks5.scope: trackingLong-lived issue tracking long-term fixes or multiple sub-problems6.topic: old-versionsTickets pertaining to ongoing support of outdated versions of packages
Milestone
26.11

Description

@emilazy
emilazy
opened on Nov 16, 2024

PCRE2 was released in 2015. The original PCRE is end‐of‐life and will not receive further bug fixes. Debian decided to remove it years ago (they called their original‐PCRE package pcre3 for historical reasons), filed mass bug reports against packages still using it, and it has been gone entirely since the release of Bookworm last year. We should follow suit, upgrading packages to PCRE2 where possible and considering dropping obsolete software that won’t get updated to a supported version, especially if it processes untrusted input.

Issues and PRs

Action items

Blocked on upstream

Resolved items

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    0.kind: bugSomething is broken1.severity: securityIssues which raise a security issue, or PRs that fix one3.skill: good-first-bugThis seems like it's fixable by a non-expert3.skill: sprintableA larger issue which is split into distinct actionable tasks5.scope: trackingLong-lived issue tracking long-term fixes or multiple sub-problems6.topic: old-versionsTickets pertaining to ongoing support of outdated versions of packages

    Projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions