-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 31 Aug 2024 00:36:07 +0200 Source: upx-ucl Architecture: source Version: 4.2.4-1 Distribution: unstable Urgency: medium Maintainer: Robert Luberda <robert@debian.org> Changed-By: Robert Luberda <robert@debian.org> Closes: 1062788 1071591 Changes: upx-ucl (4.2.4-1) unstable; urgency=medium . * New upstream version: + fixes heap-based buffer overflow (CVE-2024-3209). * Fix cross compilation failure: switch build system to "cmake" in debian/rules, and let dh_auto_configure pass cross flags to cmake (closes: #1062788). Thanks to Helmut Grohne. * Add upstream-57763ca1-ELF-stubs-golang.patch taken from upstream git repository to fix `CantPackException' error while compressing golang binary (closes: #1071591). * Bump Standards-Version to 4.7.0 (no changes). Checksums-Sha1: 9059aca3158a93f6ef9eae29503a13681d103ffd 1884 upx-ucl_4.2.4-1.dsc 94232affd0ab7b616f2eebf0c005b90abe41ed5b 1284804 upx-ucl_4.2.4.orig.tar.xz 9000e669e7a14bb31ead9d7fe1fa021174d989a6 66828 upx-ucl_4.2.4-1.debian.tar.xz bc25fc9214944df8e4b1a7f742207870043cc6dc 7321 upx-ucl_4.2.4-1_amd64.buildinfo Checksums-Sha256: e140256012cd58642d4b8957076d3a54ccd2e1b0328ba1a376b5e45829c67823 1884 upx-ucl_4.2.4-1.dsc 5ed6561607d27fb4ef346fc19f08a93696fa8fa127081e7a7114068306b8e1c4 1284804 upx-ucl_4.2.4.orig.tar.xz 893f7a550b70737f3b05bd858559d153fe93c12883928af6f9b0fcae16b32803 66828 upx-ucl_4.2.4-1.debian.tar.xz 8ce45998c39fe5ca878b9a89696c4045e0ba299ce88e06a6ba0b5a5becc38c75 7321 upx-ucl_4.2.4-1_amd64.buildinfo Files: 986b4544a4a386d513d85c7de0639316 1884 utils optional upx-ucl_4.2.4-1.dsc e00bd2fef36a86e8916a4b61d6807e2b 1284804 utils optional upx-ucl_4.2.4.orig.tar.xz ad6828c13bbf5f13a7e1d73bad0e522b 66828 utils optional upx-ucl_4.2.4-1.debian.tar.xz 274d785b284edab92a8b6dd780cee4ca 7321 utils optional upx-ucl_4.2.4-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEENeh2+rTTcy6TtNI3Yx3nVTvor9QFAmbSSu0ACgkQYx3nVTvo r9RF5xAAj0dTQrTNwN8jltyQ3nm0MyilZo71m8v5QyUmZkbs7aM1NRzE/4VuDSuy DkayC9rXXpLqUmAAGbEc44yVsWh+xDRw9PKxaBiLrdw/d+y12Wy1Wj33HMurLtkH aD2NYEObrEkUZc5UKfgbI1zb/T79kkG77uAEGXtztVO/wBoYMVqrZkiyURC5f4Wz u0mQ9Bj6GZ88DNIrfeLdEtvWxpHCUQcmG9CWh51f1P+4roBIC+Y3WjJVi+UrgI7r ZAfobcuB5crbKRtvjnhuldpxaQpB8MfylQvFL0jup9rtNHfkSY1izr+fx6iaKiky PfuoPGP2BwFsvDlo51usYsK/4HXyVf/n6lAjkKd39+9IpMOKxrmPG3i8RdWlDD1+ 5loZZz4wgQxqb75idY3h0OwJnwfj2nkZIH0bNAouv2vLUHWnaA888ktKPJl04mNk T79MfJG3YDILdfBHfjtpBQ6oww3Imk6Uc9MWgspnDnzoASuLVnlBTAuqODWsRpnW jt13CsbrQBn7K5CXFuvWd2L3NYmFMKhytVw+qvN/NobTAkcthKRrH9uyA2WvklA8 1Lmg06Fypf3z2CqQon+NImaORP0vQCU+sI1Rlk9CuKMNgeKsXILgQPG88TrcP9Rn H4gCSTRMJXty6q2TRAzxMVXajCvxBhST0h1DUdtRPgNBGi4VmZk= =3tum -----END PGP SIGNATURE-----
