CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

textproc/flex2.6.4_3

Fast lexical analyzer generator

Maintainer
mandree@FreeBSD.org
Packages
flex 2.6.4_3
Upstream
up to date
CPE
westes:flex from the port
WWW
https://github.com/westes/flex
Links
cgit · VuXML

Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2019-62935.52019-01-15An issue was discovered in the function mark_beginning_as_normal in nfa.c in flex 2.6.4. There is a stack exhaustion problem caused by the mark_beginning_as_normal funct…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (52)

Ade Lovett (ade) · 2.5.33_1
Migration from bison 1.x to 2.x

PR:		117086
Tested by:	-exp runs
dbd39ca660
Andrew Pantyukhin (sat) · 2.5.33
Add port textproc/flex:

Flex is a tool for generating scanners. A scanner, sometimes called a
tokenizer, is a program which recognizes lexical patterns in text. The
flex program reads user-specified input files, or its standard input
if no file names are given, for a description of a scanner to generate.
The description is in the form of pairs of regular expressions and C
code, called rules. Flex generates a C source file named, "lex.yy.c",
which defines the function yylex(). The file "lex.yy.c" can be compiled
and linked to produce an executable. When the executable is run, it
analyzes its input for occurrences of text matching the regular
expressions for each rule. Whenever it finds a match, it executes the
corresponding C code.

WWW: http://flex.sourceforge.net/

Note that there's flex 2.5.4 in the base system. This port provides
a newer version for programs that require it, textproc/xxdiff for one.
7acd3ed4da