Accepted flex 2.5.39-8+deb8u2 (all source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 04 Sep 2016 07:04:46 +0200
Source: flex
Binary: flex flex-doc libfl-dev
Architecture: all source
Version: 2.5.39-8+deb8u2
Distribution: jessie-security
Urgency: high
Maintainer: Manoj Srivastava <srivasta@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 835542
Description:
flex - fast lexical analyzer generator
flex-doc - Documentation for flex (a fast lexical analyzer generator)
libfl-dev - static library for flex (a fast lexical analyzer generator)
Changes:
flex (2.5.39-8+deb8u2) jessie-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Tweak CVE-2016-6354 patch to have the changes propagated.
As noticed by Robert Shearman due to the patching of skel.c in previous
patches and thus updated timestamps, skel.c is not regenerated during
build, resulting in the CVE-2016-6354 fix actually not being applied
completely.
Thanks to Robert Shearman and Frank Heckenbach (Closes: #835542)
* Generated code, `max_size' seems to be of type `int', fix casts accordingly.
Regression introduced by the fix for CVE-2016-6354 in DSA-3653-1.
Thanks to Frank Heckenbach and Robert Shearman. (Closes: #835542)
Checksums-Sha1:
d35ccedf8c91cb13c817b1f2e3217f26fcc256ba 2125 flex_2.5.39-8+deb8u2.dsc
13213ad7b65d6d2dfdbf5f3b55568b786181b7b1 27828 flex_2.5.39-8+deb8u2.debian.tar.xz
992a4f1a9a35f68d8e2856c38654e3c0a8223267 740492 flex-doc_2.5.39-8+deb8u2_all.deb
Checksums-Sha256:
57b9ce84f0df938a17e49d99a20a7e269d4fa1bc3d7132d16a7b42faaa564ea0 2125 flex_2.5.39-8+deb8u2.dsc
10a97a9d951a408551a41f475a3aaf656724900335e72e955615895777586ad6 27828 flex_2.5.39-8+deb8u2.debian.tar.xz
e0453bed3f65f86235202c6f6d1670004eec7046ea1bf04ea8e4188ca7661125 740492 flex-doc_2.5.39-8+deb8u2_all.deb
Files:
66c8b25994a9592aa9e786074ee92a2a 2125 devel optional flex_2.5.39-8+deb8u2.dsc
962e5a161df9195e2ac751218e9aa720 27828 devel optional flex_2.5.39-8+deb8u2.debian.tar.xz
14588a55da893e338d4cd249e3698e55 740492 doc optional flex-doc_2.5.39-8+deb8u2_all.deb
-----BEGIN PGP SIGNATURE-----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=dbzy
-----END PGP SIGNATURE-----