From ee48f881b990ea2d29a709b023e9099e1ebef638 Mon Sep 17 00:00:00 2001 From: Manoj Srivastava Date: Sun, 31 Jul 2016 15:02:19 -0700 Subject: New upstream version, gixing security bugs. Signed-off-by: Manoj Srivastava --- debian/changelog | 10 ++++++++++ debian/control | 4 ++-- debian/watch | 11 +++-------- 3 files changed, 15 insertions(+), 10 deletions(-) diff --git a/debian/changelog b/debian/changelog index a910e72..77442d7 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,13 @@ +flex (2.6.1-1) unstable; urgency=low + + * New upstream version. The development of flex ias transitionaing to + github; updated the watch file. + * Bug fix: "CVE-2016-6354: buffer overflow in generated code + (yy_get_next_buffer)", thanks to Salvatore Bonaccorso. The latest + upstream has this bug fixed. (Closes: #832768). + + -- Manoj Srivastava Fri, 29 Jul 2016 18:07:24 -0700 + flex (2.6.0-11) unstable; urgency=low * Cherry pick fix from upstream. diff --git a/debian/control b/debian/control index b340606..049ed21 100644 --- a/debian/control +++ b/debian/control @@ -5,11 +5,11 @@ Section: devel Homepage: http://flex.sf.net/ Priority: optional Build-Depends: bison, gettext, texinfo, help2man, file, po-debconf, - debhelper (>= 9.0.0), dh-autoreconf, dpkg-dev (>= 1.16.0), + debhelper (>= 9.20141010), dh-autoreconf, dpkg-dev (>= 1.17.14), flex Build-Depends-Indep: texlive-latex-base, texlive-fonts-recommended, cm-super-minimal Maintainer: Manoj Srivastava -Standards-Version: 3.9.7 +Standards-Version: 3.9.8 Package: flex Architecture: any diff --git a/debian/watch b/debian/watch index c7446e6..992fa96 100644 --- a/debian/watch +++ b/debian/watch @@ -1,10 +1,5 @@ # format version number, currently 2; this line is compulsory! -version=3 - -http://sf.net/flex/flex-([\d\.]*)\.tar\.gz -#ftp://ftp.sf.net/pub/sourceforge/f/fl/flex/flex-([\d.]*)\.tar\.gz - -# If the project uses stable=even and unstable=odd (middle) version numbers, -# http://sf.net//-(\d+)\.(\d*[02468])\.(\d+)\.tar\.gz -# http://sf.net//-(\d+\.\d?[02468]\.\d+)\.tar\.gz +version=4 +https://github.com/westes/@PACKAGE@/releases \ + /westes/@PACKAGE@/releases/download/v[\d\.]*/@PACKAGE@@ANY_VERSION@@ARCHIVE_EXT@ debian uupdate -- cgit v1.2.3