On Fri, Aug 26, 2016 at 12:41:54PM +0000, Mark Fletcher wrote: > Stretch and sid are quoting version 2.6.1 and I can't see where they got > that from, as upstream (sourceforge) latest version seems to be 2.6.0. And > 2.6.1 claims to be the version with the fix.
*sigh* ... it just figures, as soon as you ask this, I cannot reach http://ftp.gnu.org/ or https://ftp.gnu.org/ to look at the actual versions. Nor can I reach http://www.gnu.org/. Nor can I ping either site. Looks like they're just totally down. However, https://packages.debian.org/stretch/flex does have a flex_2.6.1.orig.tar.gz on it. That's what Debian is using as their upstream tarball, wherever it came from. And in theory, the copyright file should say where they got it from.
