Re: Recent flex security announcement

From	Mark Fletcher <mark27q1@gmail.com>
Newsgroups	linux.debian.user
Subject	Re: Recent flex security announcement
Date	2016-08-26 15:50 +0200
Message-ID	<sapGa-7Ij-25@gated-at.bofh.it> (permalink)
References	<sad2h-888-1@gated-at.bofh.it> <saoh3-6Or-7@gated-at.bofh.it> <saoK6-6YC-13@gated-at.bofh.it> <saoTL-7aM-29@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Fri, Aug 26, 2016 at 9:52 PM Greg Wooledge <wooledg@eeg.ccf.org> wrote:

> On Fri, Aug 26, 2016 at 12:41:54PM +0000, Mark Fletcher wrote:
> > Stretch and sid are quoting version 2.6.1 and I can't see where they got
> > that from, as upstream (sourceforge) latest version seems to be 2.6.0.
> And
> > 2.6.1 claims to be the version with the fix.
>
> *sigh* ... it just figures, as soon as you ask this, I cannot reach
> http://ftp.gnu.org/ or https://ftp.gnu.org/ to look at the actual
> versions.
>
> Nor can I reach http://www.gnu.org/.  Nor can I ping either site.
> Looks like they're just totally down.
>
> However, https://packages.debian.org/stretch/flex does have a
> flex_2.6.1.orig.tar.gz on it.  That's what Debian is using as their
> upstream tarball, wherever it came from.  And in theory, the copyright
> file should say where they got it from.
>

Aha! Mystery solved!

Sourceforge isn't the home for the project any more. It's now hosted at
https://github.com/westes/flex/releases

And there, in all its glory, is release 2.6.1.

Interestingly Google is still giving the old Sourceforge home first in
search results.

It did wander through my head yesterday that Sourceforge might not be the
home for the project any more, but Google seemed so sure... :)

Anyway thanks for the help Greg.

Mark

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Recent flex security announcement Mark Fletcher <mark27q1@gmail.com> - 2016-08-26 02:20 +0200
  Re: Recent flex security announcement Greg Wooledge <wooledg@eeg.ccf.org> - 2016-08-26 14:20 +0200
    Re: Recent flex security announcement Mark Fletcher <mark27q1@gmail.com> - 2016-08-26 14:50 +0200
      Re: Recent flex security announcement Greg Wooledge <wooledg@eeg.ccf.org> - 2016-08-26 15:00 +0200
        Re: Recent flex security announcement Mark Fletcher <mark27q1@gmail.com> - 2016-08-26 15:50 +0200

csiph-web