enable PCRE JIT support in nginx 1.1 on precise

I'll look in to this to see how we want to approach it. Thanks for the suggestion.

Heh... apparently marking it as Opinion means it's closed......
I'll mark this confirmed since it's definitely something that needs to be looked in to.

I looked into it. I agree that this would be nice to add and see no issues with adding it, but we won't be able to add it at this time. I'll include this when I have settled all concerns. There's no chance that it'll make it into 12.04. We'll see about 12.10.

Marked as "Wishlist" for feature inclusion requests.

This has been committed in Debian and will be in the 1.2.1 upload.

I just checked the corresponding pcre bug but it does not look like the pcre package has been updated to 8.20 or newer so I'm not sure how this is fixed.

Please clarify, thanks.

This bug was fixed in the package nginx - 1.2.1-2

---------------
nginx (1.2.1-2) unstable; urgency=medium

  [Cyril Lavier]
  * Urgency set to medium, security bug in naxsi module, fix via upstream.
  * debian/modules/naxsi:
    + Updated naxsi module to version 0.46-1 fixing the following security
      issue : potential file disclosure in nx_extract.

 -- Cyril Lavier <email address hidden> Wed, 27 Jun 2012 13:52:03 +0200

The problem isn't resolved at all in 12.04. The probleme is in pcre package that doesn't support pcre-git. You can see it by compiling nginx by yourself. at configure time :

[...]
checking for PCRE library ... found
checking for PCRE JIT support ... not found
[...]

The bug is not resolved at all, the bug is in libpcre3 package. If you try to configure nginx from sources you can see :

checking for PCRE library ... found
checking for PCRE JIT support ... not found

If the bug is in libpcre3, then this isn't a problem affecting nginx anymore. In Debian, we mark this as "blocked by some other bug in some other software".

I looked at the libpcre3 bug. This was fixed in later releases other than 12.04.

The problem with already-released versions of Ubuntu is that version bumps usually don't happen in software.

I also don't see an exemption from the technical board that would allow PCRE to be updated to the required version(s).

In nginx, this may already be "enabled" in the nginx side of things, which makes this "fix released" for the nginx package. If this feature doesn't enable in 12.04 due to a bug in the PCRE software, that's a completely separate bug from this that needs to be resolved separately. I don't foresee this being fixed in 12.04 though becUse this requires libpcre3 to be version bumped and I don't see that happening since whole version bumps on software inside already-released versions of Ubuntu is super super rare.