-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 11 Dec 2024 16:08:01 +0100
Source: upx-ucl
Architecture: source
Version: 3.96-2+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Robert Luberda <robert@debian.org>
Changed-By: Sylvain Beucler <beuc@debian.org>
Closes: 1033258
Changes:
upx-ucl (3.96-2+deb11u1) bullseye-security; urgency=high
.
* Non-maintainer upload by the LTS Security Team.
* CVE-2023-23456: A heap-based buffer overflow issue was discovered in
UPX in PackTmt::pack() in p_tmt.cpp file. The flow allows an attacker
to cause a denial of service (abort) via a crafted file.
(Closes: #1033258)
* debian/salsa-ci.yml: init CI config.
Checksums-Sha1:
6c682112e76be03707f2cf1a26364f28ee173d96 1899 upx-ucl_3.96-2+deb11u1.dsc
53c36d5ba589ded10a6bbd1c58cb74c466ca3204 792524 upx-ucl_3.96.orig.tar.xz
6eea49a9edf0974e9320ed043309a2c851942cb3 58920 upx-ucl_3.96-2+deb11u1.debian.tar.xz
c55716aaf4d8b6cb1e7dae1d9bf4b0695e3ba734 6158 upx-ucl_3.96-2+deb11u1_amd64.buildinfo
Checksums-Sha256:
36bb47ce186c6702aa696cf97ee03d0a4ec631b183afd41c0252d7c399bbb34e 1899 upx-ucl_3.96-2+deb11u1.dsc
47774df5c958f2868ef550fb258b97c73272cb1f44fe776b798e393465993714 792524 upx-ucl_3.96.orig.tar.xz
e038384c070f99645f1679e493b85adc5c96c5772b1a8b0218d332b002d0b29f 58920 upx-ucl_3.96-2+deb11u1.debian.tar.xz
8a5795906d1db46412ce8ddfdf440b4b3afafd89794f1e898a687fc45aeaa93f 6158 upx-ucl_3.96-2+deb11u1_amd64.buildinfo
Files:
90f723f6b0285c4604b82d4d0714b4d5 1899 utils optional upx-ucl_3.96-2+deb11u1.dsc
bf5564f33fe9062bc48b53abd4b34223 792524 utils optional upx-ucl_3.96.orig.tar.xz
d1bdbdb756e12ad2b0672aa2d41b4ae7 58920 utils optional upx-ucl_3.96-2+deb11u1.debian.tar.xz
1fa7fd0ce754fb060ace981a992143da 6158 utils optional upx-ucl_3.96-2+deb11u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEE1vEOfV7HXWKqBieIDTl9HeUlXjAFAmdZwTQACgkQDTl9HeUl
XjDmdA/+KGo5uoMm2ayPw9G72EGeKSERqfpR8e1vECVUwxAxcx/1zsf54aJRudzW
DbNiM4KiWwMpdQsLjOVI6H3ve3SZA61z/uW8XmPu/wNEYEy2eOincv0w2YXo+DNF
kqgbvKC4Wea1vSmjdNpzYbv0FrFEMKEfWTfpdeB7G5C9gU5kWcGZKuRlpEfVg0fn
ibHWsh2JobS8oDP5eiY48ODroX6y5+sJwYpcuAJgXKdrKFSf3FD+ZeJnL4mWdhKQ
4hlKnRsoafW1W0oVivgcFMwd9LWhH5ebbTkdosyPEbNJPlRJtsWfvvMtaNPS+fcB
GUcDofCNvQz+6zCxnJ2H+BsgcX86zZWUWKaovYYK2o+MJq748qLOMveOWVj1n0lc
e+FNSoWq4ZXV+Fjq1CUM+7pEUTw1gqFovyHFvspAuB/fcvWwuNyYR3dzbcQmL+ks
JHPZZ3irbCL5H9PkfWqiSREyx0SB1Q6qGnDueSKp38j0i6YzkmDVsC71uAAm6pDL
RRjEOI0YWoIDtJOrU+AR+UlPfe6GrBhWBsCd++778BVvJBF6sv4Q+FrX9/FowJ1J
vVJ9cduWIrlDvOA4oFQeDIc1weMCJ576sZCOczcwijgkFmRvCmQ6QTMQ0s8+cK0R
PKM99JMlGx3058IOYJYq+4sWeH+XKpetPRmuvMwvI/5KEZdrl9s=
=gAFk
-----END PGP SIGNATURE-----
Attachment:
pgpGNAICTooHX.pgp
Description: PGP signature