DFSG NEW Queue

DFSG, Licensing & New Packages Team

libvmod-re2 2.0.0+20260327-1

Package Information

DescriptionRE2 regular expressions for Vinyl Cache

Vinyl Cache Module (VMOD) for access to the Google RE2 regular expression engine. Vinyl Cache VCL uses the PCRE library (Perl Compatible Regular Expressions) for its native regular expressions, which runs very efficiently for many common uses of pattern matching in VCL, as attested by years of successful use of PCRE with Vinyl Cache.

But for certain kinds of patterns, the worst-case running time of the PCRE matcher is exponential in the length of the string to be matched. The matcher uses backtracking, implemented with recursive calls to the internal match() function. In principle there is no upper bound to the possible depth of backtracking and recursion, except as imposed by the varnishd runtime parameters pcre_match_limit and pcre_match_limit_recursion; matches fail if either of these limits are met. Stack overflow caused by deep backtracking has occasionally been the subject of varnishd issues.

RE2 differs from PCRE in that it limits the syntax of patterns so that they always specify a regular language in the formally strict sense. Most notably, backreferences within a pattern are not permitted, for example (foo|bar)\1 to match foofoo and barbar, but not foobar or barfoo. See the link in SEE ALSO for the specification of RE2 syntax.

This means that an RE2 matcher runs as a finite automaton, which guarantees linear running time in the length of the matched string. There is no backtracking, and hence no risk of deep recursion or stack overflow.

MaintainerVinyl Cache Package Maintainers <team+varnish-team@tracker.debian.org>
Changed ByMarco d'Itri <md@linux.it>
Sponsormd@linux.it
Distributionexperimental
Architectureany
VCSgit: https://salsa.debian.org/varnish-team/libvmod-re2.git (browse)
Popcon Installs1
Binary NEWYes (binary-only upload)
Trackerhttps://tracker.debian.org/pkg/libvmod-re2
Uploaded3 hours ago

New Package Report

.changes
Changed-ByMarco d'Itri
Architecturesource amd64
Distributionexperimental
DateTue, 28 Apr 2026 05:02:43 +0200
Sourcelibvmod-re2
Version2.0.0+20260327-1
Changelog
libvmod-re2 (2.0.0+20260327-1) experimental; urgency=medium
 .
   * Converted to a Vinyl Cache vmod.
   * Binary package renamed from varnish-re2 to libvmod-re2.
.dsc
Sectionweb
Priorityoptional
Componentmain
Package-Listlibvmod-re2 deb web optional arch=any
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: libvmod-re2
Source: https://code.uplex.de/uplex-varnish/libvmod-re2

Files: *
Copyright: 2016, UPLEX Nils Goroll Systemoptimierung
License: BSD-2-clause

Files: debian/*
Copyright: 2021-2024, Michael Fladischer <fladi@debian.org>
License: BSD-2-clause

License: BSD-2-clause
  Redistribution and use in source and binary forms, with or without
  modification, are permitted provided that the following conditions
  are met:
  1. Redistributions of source code must retain the above copyright
     notice, this list of conditions and the following disclaimer.
  2. Redistributions in binary form must reproduce the above copyright
     notice, this list of conditions and the following disclaimer in
     the documentation and/or other materials provided with the
     distribution.
  .
  THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS''
  AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
  TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
  PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL AUTHOR OR
  CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
  LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
  USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
  ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
  OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
  OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  SUCH DAMAGE.

Back to Dashboard | View all reviews for this package