[Bug 300338] [NEW] Please sync flex 2.5.35-4 (main) from Debian unstable (main).

[Kees Cook]

Public bug reported:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 affects ubuntu/flex
 status confirmed
 importance wishlist
 subscribe ubuntu-archive

Please sync flex 2.5.35-4 (main) from Debian unstable (main).

Explanation of the Ubuntu delta and why it can be dropped:
Ubuntu changes incorporated upstream.

Changelog since current jaunty version 2.5.35-3ubuntu1:
   * [f6cc9ae] Narrow buffer size changes to just IA64
     Increasing the buffer size on other architectures cause problems in
     corner cases not caught by the test suite. So perhaps it is not better
     to increase the buffer size unilatereally for all architectures, but
     to just increase it for the architecture it is required on, namely,
     IA64, and leave it unchanged on other architectures. This solution
     should fix the new grave bugs, while not reopening the original but
     that cause this change to be done in the first place.
     Grave Bug fix: flex scanner push-back overflow, thanks to Sergei
     Golovan                                       (Closes: #505056, #504030)
   * [debiandir:9a6d713] Fix VCS-Browser source field.
     Bug fix: Useless VCS-Browser control field, thanks to Vincent Fourmond
                                                   (Closes: #503732)
   * [d58780f] Wrap ECHO macro to avoid FORTIFY warnings
     This change will enable flex scanners to be compiled with
     -D_FORTIFY_SOURCE=2, which is a good thing security wise.
     Bug Fix: flex causing warnings when compiled with FORTIFY_SOURCE,
     thanks to Kees Cook.                           (Closes: #505233, #388438)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Kees Cook <kees at outflux.net>

iEYEARECAAYFAkklhtcACgkQH/9LqRcGPm0GGwCghvNRcylqXwRQPjZhbo9hN73q
AH0An1etUpsqH+PvdyEX+fZnPbOd+hUv
=gaBN
-----END PGP SIGNATURE-----

** Affects: flex (Ubuntu)
     Importance: Wishlist
         Status: Confirmed

-- 
Please sync flex 2.5.35-4 (main) from Debian unstable (main).
https://bugs.launchpad.net/bugs/300338
You received this bug notification because you are a member of Ubuntu
Package Archive Administrators, which is a direct subscriber.