zoneminder icon indicating copy to clipboard operation
zoneminder copied to clipboard

zoneminder: depends on obsolete pcre3 library

Open onlyjob opened this issue 4 years ago • 3 comments

As reported in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=999919, libPCRE3 is obsolete:

Your package still depends on the old, obsolete PCRE3[0] libraries (i.e. libpcre3-dev). This has been end of life for a while now, and upstream do not intend to fix any further bugs in it. Accordingly, I would like to remove the pcre3 libraries from Debian, preferably in time for the release of Bookworm.

The newer PCRE2 library was first released in 2015, and has been in Debian since stretch. Upstream's documentation for PCRE2 is available here: https://pcre.org/current/doc/html/

Many large projects that use PCRE have made the switch now (e.g. git, php); it does involve some work, but we are now at the stage where PCRE3 should not be used, particularly if it might ever be exposed to untrusted input.

Historical reasons mean that old PCRE is packaged as pcre3 in Debian

Please consider migrating to libpcre2-dev.

Please note that libpolkit-gobject-1-dev indirectly depends on obsolete libpcre3-dev through libglib2.0-dev on Debian so one have to build Zoneminder without Polkit to avoid installing both PCRE libraries simultaneously.

Currently Zoneminder fails to detect libpcre2-dev on build-time.

onlyjob avatar Nov 19 '21 00:11 onlyjob

I could have sworn I responded to this...

We have alternate code. Let's just deprecate the use of the PCRE case. pass -DZM_NO_PCRE=ON to cmake. We have been building our packages with this for some time. It

connortechnology avatar Sep 25 '22 14:09 connortechnology

Hi,

Is a switch to pcre2 finally planned?

Regards, David

david-geiger avatar Apr 18 '23 05:04 david-geiger

No plans. No one funding the work.

connortechnology avatar Apr 18 '23 11:04 connortechnology