-
flex (2.5.31-38ubuntu1) dapper; urgency=low
* Merge with the older 2.5.31-38, rather than syncing a new upstream from
sid to avoid new upstream bugs, while fixing two important bugs in our
current package: a timestamp skew FTBFS and the leak in the C++ scanner.
flex (2.5.31-38) unstable; urgency=low
* Bug fix: "flex_2.5.31-36(powerpc/unstable): FTBFS: ", thanks to Ryan
Murray. Since we already use MAINTAINER_MODE, there was no help there.
As a last resort, always touch scan.c if we do not find flex.
(Closes: #343355).
* Bug fix: "flex: [INTL:da] Danish debconf translation", thanks to Claus
Hindsgaul (Closes: #353900).
* Bug fix: "flex: Space leak in C++ scanner", thanks to Vincent Zweije
This may be a partial fix, but it seems to be good enough.
(Closes: #233215).
flex (2.5.31-37) unstable; urgency=low
* the source code has an '#ifdef HAVE_LOCALE_H' but forgets to actually
check for locale.h in configure. The report and patch thanks to Mike
Frysinger.
-- Adam Conrad <email address hidden> Mon, 8 May 2006 16:24:28 +1000
-
flex (2.5.31-36ubuntu2) dapper; urgency=low
* debian/local.mk: Remove skel.c to force regeneration from flex.skl.
-- Martin Pitt <email address hidden> Thu, 2 Mar 2006 09:53:26 +0100
-
flex (2.5.31-36ubuntu1) dapper; urgency=low
* SECURITY UPDATE: Buffer overflow in generated C parsers which use REJECT
or 'trailing context' rules.
* flex.skl: Fix allocation of yy_state_buf to provide enough space for the
longest possible token (forgotten sizeof multiplication).
* References:
CVE-2006-0459
Malone #30940
-- Martin Pitt <email address hidden> Wed, 1 Mar 2006 15:19:50 +0100
-
flex (2.5.31-36) unstable; urgency=low
* Bug fix: "flex: doxygen warning: argument `str' of command @param is
not found in the argumentlist", thanks to Ludovic Rousseau
(Closes: #320134).
* Bug fix: "flex generates a C file with improper macro defn; broke
Bison 2.1", thanks to Paul Eggert. Well, even though it is legal C99
to have empty arguments in macros (so it is legal to call a macro
taking one argument with no arguments), it was not legal C89 --
therefore, emit tqo different macros, with and without arguments -- to
cater to users running obsolete compilers. (Closes: #333231).
-- Manoj Srivastava <email address hidden> Sun, 23 Oct 2005 14:59:05 -0500
