-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 31 Aug 2024 00:36:07 +0200
Source: upx-ucl
Architecture: source
Version: 4.2.4-1
Distribution: unstable
Urgency: medium
Maintainer: Robert Luberda <robert@debian.org>
Changed-By: Robert Luberda <robert@debian.org>
Closes: 1062788 1071591
Changes:
upx-ucl (4.2.4-1) unstable; urgency=medium
.
* New upstream version:
+ fixes heap-based buffer overflow (CVE-2024-3209).
* Fix cross compilation failure: switch build system to "cmake" in
debian/rules, and let dh_auto_configure pass cross flags to cmake
(closes: #1062788). Thanks to Helmut Grohne.
* Add upstream-57763ca1-ELF-stubs-golang.patch taken from upstream
git repository to fix `CantPackException' error while compressing
golang binary (closes: #1071591).
* Bump Standards-Version to 4.7.0 (no changes).
Checksums-Sha1:
9059aca3158a93f6ef9eae29503a13681d103ffd 1884 upx-ucl_4.2.4-1.dsc
94232affd0ab7b616f2eebf0c005b90abe41ed5b 1284804 upx-ucl_4.2.4.orig.tar.xz
9000e669e7a14bb31ead9d7fe1fa021174d989a6 66828 upx-ucl_4.2.4-1.debian.tar.xz
bc25fc9214944df8e4b1a7f742207870043cc6dc 7321 upx-ucl_4.2.4-1_amd64.buildinfo
Checksums-Sha256:
e140256012cd58642d4b8957076d3a54ccd2e1b0328ba1a376b5e45829c67823 1884 upx-ucl_4.2.4-1.dsc
5ed6561607d27fb4ef346fc19f08a93696fa8fa127081e7a7114068306b8e1c4 1284804 upx-ucl_4.2.4.orig.tar.xz
893f7a550b70737f3b05bd858559d153fe93c12883928af6f9b0fcae16b32803 66828 upx-ucl_4.2.4-1.debian.tar.xz
8ce45998c39fe5ca878b9a89696c4045e0ba299ce88e06a6ba0b5a5becc38c75 7321 upx-ucl_4.2.4-1_amd64.buildinfo
Files:
986b4544a4a386d513d85c7de0639316 1884 utils optional upx-ucl_4.2.4-1.dsc
e00bd2fef36a86e8916a4b61d6807e2b 1284804 utils optional upx-ucl_4.2.4.orig.tar.xz
ad6828c13bbf5f13a7e1d73bad0e522b 66828 utils optional upx-ucl_4.2.4-1.debian.tar.xz
274d785b284edab92a8b6dd780cee4ca 7321 utils optional upx-ucl_4.2.4-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=3tum
-----END PGP SIGNATURE-----
Attachment:
pgp0JfqPKJrcv.pgp
Description: PGP signature