Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update the dependency library rex_pcre to rex_pcre2 #156

Open
andrew99-lab opened this issue Jun 5, 2024 · 2 comments
Open

Update the dependency library rex_pcre to rex_pcre2 #156

andrew99-lab opened this issue Jun 5, 2024 · 2 comments
Assignees

Comments

@andrew99-lab
Copy link

rex_pcre depends on pcre-v1 (v8.45), which was released in 1997 and has now stopped supporting and maintaining.
For security and software update support considerations, is it a feasible measure to upgrade the rex_pcre that lua-casbin depends on to rex_pre2?

local rex = require ("rex_pcre")
local posix = require("posix.fnmatch")

The official pcre document clearly states(https://www.pcre.org/):

Versions
There are two major versions of the PCRE library. The current version, PCRE2, [released in 2015,](https://lists.exim.org/lurker/message/20150105.162835.0666407a.en.html) is now at version 10.39.

The older, but still widely deployed PCRE library, originally released in 1997, is at version 8.45. This version of PCRE is now at end of life, and is no longer being actively maintained. Version 8.45 is expected to be the final release of the older PCRE library, and new projects should use PCRE2 instead.
@casbin-bot
Copy link
Member

@Edmond-J-A @rushitote @techoner

@hsluoyz
Copy link
Member

hsluoyz commented Jun 5, 2024

@andrew99-lab hi, can you make a PR?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Development

No branches or pull requests

3 participants