CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

textproc/flex2.6.4_3

Fast lexical analyzer generator

Maintainer
mandree@FreeBSD.org
Packages
flex 2.6.4_3
Upstream
up to date
CPE
westes:flex from the port
WWW
https://github.com/westes/flex
Links
cgit · VuXML

Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2019-62935.5published 2019-01-15

An issue was discovered in the function mark_beginning_as_normal in nfa.c in flex 2.6.4. There is a stack exhaustion problem caused by the mark_beginning_as_normal function making recursive calls to itself in certain scenarios involving lots of '*' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (52)

Bernhard Froehlich (decke) · 2.6.4_3
textproc/flex: Fix deprecated CPE_VENDOR
54254c3c37
Muhammad Moinur Rahman (bofh) · 2.6.4_3
textproc/flex: Impelled to share/man

Approved by:    portmgr (blanket)
2f9710aa91
Stefan Eßer (se) · 2.6.4_2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.6.4_2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Stefan Eßer (se) · 2.6.4_2
textproc/flex: Add CPE information

Approved by:	portmgr (blanket)
ceea17788a
Matthias Andree (mandree) · 2.6.4_2
textproc/flex: set *_FOR_BUILD variables...

...to unbreak the build when ax_prog_cc_for_build.m4 hunts a host
compiler in path, pushing CC aside.

PR:		257622
Reported by:	Evgeniy Khramtsov
828ef20174
Mathieu Arnold (mat) · 2.6.4_2
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.6.4_2
Remove # $FreeBSD$ from Makefiles.
305f148f48
Matthias Andree (mandree) · 2.6.4_2
textproc/flex: Remove GNU m4 and GNU bison requisites

...bapt@ reports this port works perfectly with base yacc and m4.

Submitted by:	bapt@ (Baptiste Daroussin)
Differential Revision:	https://reviews.freebsd.org/D24016
0d383441ed
Matthias Andree (mandree) · 2.6.4_1
Take maintainership.
192d15559b
Rene Ladan (rene) · 2.6.4_1
Returns johans's ports to the pool after safekeeping his commit bit.
2f557a4678
Baptiste Daroussin (bapt) · 2.6.4_1
Install texinfo files (GNU info) into ${PREFIX}/share/info

After a discussion on the mailing list on moving manpages to
${PREFIX}/share/man for consistency with base where it is
installed in usr/share/man, it appeared the same should happen
to GNU info files which were installed under share in base and
not in ports.

Now texinfo is not in base on any of the supported version of FreeBSD
it is possible to proceed to this move and it is easier to do than
the manpage change.

Other benefit than consistency are less patching: all build tools but
cmake are expecting info files to be under share/info and cmake (patched here)
was having an exception for BSD so the patch makes FreeBSD case less
specific for them

Bump revision of all impacted ports

PR:		232907
exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D17816
7990f81066
Yuri Victorovich (yuri) · 2.6.4
textproc/flex: Update 2.6.1 -> 2.6.4

Changelog:
https://github.com/westes/flex/releases/tag/v2.6.4

PR:		226546
Approved by:	johans@FreeBSD.org (maintainer timeout; 103 days)
4d78e8f921
Dmitry Marakasov (amdmi3) · 2.6.1
- Add LICENSE - Switch to options helpers - Update WWW

Approved by:	portmgr blanket
63b189e07a
Jung-uk Kim (jkim) · 2.6.1
Set MAKEINFO to the full path of makeinfo when USES=makeinfo is set.

PR:		221027
Reviewed by:	mat
Approved by:	portmgr (antoine)
f872930d0e
Mathieu Arnold (mat) · 2.6.1
${RM} already has -f.

PR:		213570
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
eabbfd75e3
Mathieu Arnold (mat) · 2.6.1
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight
597afc47ba
Johan van Selst (johans) · 2.6.1
Update flex to 2.6.1
866daff543
Johan van Selst (johans) · 2.6.0
Update to flex 2.6.0 Announcement: http://sourceforge.net/p/flex/mailman/message/34626590/ Add port examples
3bf13ac1f5
Antoine Brodin (antoine) · 2.5.39_2
Cleanup plist
e3b883655f
Tijl Coosemans (tijl) · 2.5.39_2
Add USES=libtool
3b7f9a966b
Michael Gmelin (grembo) · 2.5.39_1
Remove deletion of LC_MESSAGES directories that are owned by devel/gettext

Reviewed by:	bdrewery
Approved by:	bdrewery
efc161dffd
Baptiste Daroussin (bapt) · 2.5.39_1
Fix build on system built WITHOUT_INFO

With hat:	portmgr
698f728a34
Johan van Selst (johans) · 2.5.39_1
Make sure static library libfl_pic.a contains position independent code. This fixes compilation of ports that insist on linking this library into a shared object file (specifically devel/libmatheval).

While here, remove unused ranlib patch lines.

PR:		ports/189323
Submitted by:	tijl
4007e179a6
Johan van Selst (johans) · 2.5.39
Update to flex 2.5.39
a8f1bd536e
Johan van Selst (johans) · 2.5.38_2
Disable installation of shared libraries. These cause problems with several ports.

PR:		ports/186790
Submitted by:	Matthew Rezny <matthew@reztek.cz> and others
665b5629cc
Johan van Selst (johans) · 2.5.38_1
Add missing .la files to plist

Reported by:	miwi
56bd9d44de
Johan van Selst (johans) · 2.5.38
Update to flex 2.5.38
e39a61ed15
Johan van Selst (johans) · 2.5.37_1
Avoid running ranlib again during installation phase, this fixes packaging as a regular user

Submitted by:	antoine
02dd5bfdbc
Johan van Selst (johans) · 2.5.37_1
Enable stage support + minor cleanups
f62f1934a3
Baptiste Daroussin (bapt) · 2.5.37_1
Add NO_STAGE all over the place in preparation for the staging support (cat: textproc)
0068f2d47f
Johan van Selst (johans) · 2.5.37_1
Add GNU m4 as run dependency of flex

Submitted by:	antoine
ff0c6848e6
Marcus von Appen (mva) · 2.5.37
- Convert USE_ICONV=yes to USES=iconv - Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig and   USE_GETTEXT=yes to USES=gettext while here
95e7081976
Alex Kozlov (ak) · 2.5.37
- Convert USE_GETTEXT to USES (part 4)

Approved by:	portmgr (bapt)
83f02b963c
Baptiste Daroussin (bapt) · 2.5.37
Convert USE_BISON to USES= bison

It brings bison as a build dependency in case it is set the following way:
USES= bison or USES= bison:build

it brings bison as a run dependency in case it is set the following way:
USES= bison:run

it brings bison both as a run and build dependency in case it the set the following way:
USES= bison:both

While here trim some headers
Convert some USE_GNOME= gnomehack to USES= pathfix
9250d94365
Johan van Selst (johans) · 2.5.37
- Update flex to 2.5.37 - Reduce Makefile header
79c4f0406f
Johan van Selst (johans) · 2.5.36
Update flex to 2.5.36 (bugfix release)
ffb53c6a4f
Johan van Selst (johans) · 2.5.35_4
Convert to new options framework
a619252257
Olli Hauer (ohauer) · 2.5.35_4
-remove MD5
fc03c837e2
Ade Lovett (ade) · 2.5.35_4
Bounce PORTREVISION for gettext-related ports.  Have fun, ya'll.
8d837132c7
Johan van Selst (johans) · 2.5.35_3
Fix build breakage caused by missing -E in previous commit. Oops.

Feature safe:	yes
f8a2f7d483
Johan van Selst (johans) · 2.5.35_3
Fix port installation for the INSTALL_AS_USER case. This doesn't affect regular (root) installs.

PR:		ports/143933
Submitted by:	gerald
Feature safe:	yes
2b037ad5fb
Johan van Selst (johans) · 2.5.35_3
Update my mail address to @FreeBSD.org

Feature safe:   yes
4aaac0b5f9
Johan van Selst (johans) · 2.5.35_3
- Enable NLS - Claim maintainership
36c08e3156
Johan van Selst (johans) · 2.5.35_2
Install additional info file. The flex man page is very brief and points to this info file.

PR:		ports/139163
Submitted by:	Anonymous <swell.k@gmail.com>
ca2a1b412f
Dmitry Marakasov (amdmi3) · 2.5.35_1
- Switch SourceForge ports to the new File Release System: categories starting with T,U,V
b2b01422b8
Max Brazhnikov (makc) · 2.5.35_1
install flex header to include/flex, thus resolve build problem for those, who use system flex (e.g. ports/126520)

Submitted by:	Andy Fawcett via irc
Approved by:	miwi (mentor)
42dd1523eb
Mark Linimon (linimon) · 2.5.35
Reset infofarmer due to maintainer-timeouts and no response to email.

Hat:	portmgr
d72c560b21
Andrew Pantyukhin (sat) · 2.5.35
- Update to 2.5.35
dbc4e3e5af
Andrew Pantyukhin (sat) · 2.5.34
- Update to 2.5.34
54439751b8