Recent flex security announcement

From	Mark Fletcher <mark27q1@gmail.com>
Newsgroups	linux.debian.user
Subject	Recent flex security announcement
Date	2016-08-26 02:20 +0200
Message-ID	<sad2h-888-1@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

I have a feeling I'm about to embarrass myself by displaying either
ignorance or a failure to spot the obvious, but here goes...

The other day there was a Debian security advisory about the flex package.
In my Debian machines, the fix can be installed by the usual apt commands.

However I also have Linux machines that don't use a package management
system, and there I also have a version of flex with the vulnerability, so
I wanted to get the source tarball of the fixed version (v2.6.1) so I could
build it for there too.

And the only place I can find 2.6.1 is on debian's package website. The
latest version the upstream site (source forge) has is v2.6.0 which as I
understand it has the vulnerability.

Anyone know what the deal is here?

Mark

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Recent flex security announcement Mark Fletcher <mark27q1@gmail.com> - 2016-08-26 02:20 +0200
  Re: Recent flex security announcement Greg Wooledge <wooledg@eeg.ccf.org> - 2016-08-26 14:20 +0200
    Re: Recent flex security announcement Mark Fletcher <mark27q1@gmail.com> - 2016-08-26 14:50 +0200
      Re: Recent flex security announcement Greg Wooledge <wooledg@eeg.ccf.org> - 2016-08-26 15:00 +0200
        Re: Recent flex security announcement Mark Fletcher <mark27q1@gmail.com> - 2016-08-26 15:50 +0200

csiph-web