Source: pplatex
Severity: serious
Version: 1.0~beta2023.12.01.repack-1
User: matthew-pcre...@debian.org
Usertags: obsolete-pcre3

Dear maintainer,

Your package still depends on the old, obsolete PCRE3 library (i.e.
Build-Depends libpcre3-dev). This has been end of life for a while now,
and upstream do not intend to fix any further bugs in it. Accordingly,
the pcre3 libraries are being removed from Debian.

The newer PCRE2 library was first released in 2015, and has been in
Debian since stretch. Upstream's documentation for PCRE2 is available
here: https://pcre.org/current/doc/html/

Many large projects that use PCRE have made the switch now (e.g. git,
php); it does involve some work, but we are now at the stage where
PCRE3 should not be used, particularly if it might ever be exposed to
untrusted input.

This is an add-on to the mass bug filing that was discussed at
https://lists.debian.org/debian-devel/2021/11/msg00176.html

Reply via email to