Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #171452

Re: Recent flex security announcement

Show all headers | View raw

On Fri, Aug 26, 2016 at 12:41:54PM +0000, Mark Fletcher wrote:
> Stretch and sid are quoting version 2.6.1 and I can't see where they got
> that from, as upstream (sourceforge) latest version seems to be 2.6.0. And
> 2.6.1 claims to be the version with the fix.

*sigh* ... it just figures, as soon as you ask this, I cannot reach
http://ftp.gnu.org/ or https://ftp.gnu.org/ to look at the actual
versions.

Nor can I reach http://www.gnu.org/.  Nor can I ping either site.
Looks like they're just totally down.

However, https://packages.debian.org/stretch/flex does have a
flex_2.6.1.orig.tar.gz on it.  That's what Debian is using as their
upstream tarball, wherever it came from.  And in theory, the copyright
file should say where they got it from.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Recent flex security announcement Mark Fletcher <mark27q1@gmail.com> - 2016-08-26 02:20 +0200
  Re: Recent flex security announcement Greg Wooledge <wooledg@eeg.ccf.org> - 2016-08-26 14:20 +0200
    Re: Recent flex security announcement Mark Fletcher <mark27q1@gmail.com> - 2016-08-26 14:50 +0200
      Re: Recent flex security announcement Greg Wooledge <wooledg@eeg.ccf.org> - 2016-08-26 15:00 +0200
        Re: Recent flex security announcement Mark Fletcher <mark27q1@gmail.com> - 2016-08-26 15:50 +0200

csiph-web