-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 22 Dec 2017 23:25:38 +0100 Source: upx-ucl Binary: upx-ucl Architecture: source amd64 Version: 3.94-4 Distribution: unstable Urgency: medium Maintainer: Robert Luberda <robert@debian.org> Changed-By: Robert Luberda <robert@debian.org> Description: upx-ucl - efficient live-compressor for executables Closes: 873260 882041 Changes: upx-ucl (3.94-4) unstable; urgency=medium . * Apply Mach-o-defend-against-bad-crafted-input.patch from upstream to fix crash on packing corrupted Mach-O file (CVE-2017-16869, closes: #882041). * Apply Protect-against-bad-crafted-input.patch from upstream to fix crashes found by AFL (CVE-2017-15056, closes: #873260). * Standards-Version: 4.1.2. Checksums-Sha1: b53ed6a2a7cb25e37f1896735724a23e0b4bf9e2 1866 upx-ucl_3.94-4.dsc 928a453f3eeae233d243b8bb543bcd6719e3f57f 15528 upx-ucl_3.94-4.debian.tar.xz 80285d147129729c54796e21720ccfdb0b37d7da 1230668 upx-ucl-dbgsym_3.94-4_amd64.deb 856366231dacb123c155124ab6b57f4392f5a912 5699 upx-ucl_3.94-4_amd64.buildinfo 5cfe807757ab0e6ae4be810539318ff725d8291f 382068 upx-ucl_3.94-4_amd64.deb Checksums-Sha256: c64efe70e39d3fe2c92186c18ca08a2b93bbb8babd65736215a85149bd2c81da 1866 upx-ucl_3.94-4.dsc e2452cadf894a45f70b8ccff452b5bce14246eee3d1b2c02ba799447773b4523 15528 upx-ucl_3.94-4.debian.tar.xz e4a317ea9fda4472c3181d9d817ec80c9e05a89e2fa63e2f3c7d2ed4215802b3 1230668 upx-ucl-dbgsym_3.94-4_amd64.deb 9d80b3cd95d11b959ab4fd5df9c3a7fe64d7d7d3d05165f9a51deb6fe5999315 5699 upx-ucl_3.94-4_amd64.buildinfo 2e595dedcb9fb6ec54774e4b97f3e90eadeca9e01081b2beb2189e1050964714 382068 upx-ucl_3.94-4_amd64.deb Files: ee2ce78f91c372b0ddf667581b2e71aa 1866 utils optional upx-ucl_3.94-4.dsc 192398d84c3d1d8daea4202c2434f418 15528 utils optional upx-ucl_3.94-4.debian.tar.xz 69479a1e73856d54fd5c42001f87e070 1230668 debug optional upx-ucl-dbgsym_3.94-4_amd64.deb 9f62a1c0d17ce0d55ce6885712d3ab38 5699 utils optional upx-ucl_3.94-4_amd64.buildinfo d24330dd8ce2ed95e850f98ed6cae9b4 382068 utils optional upx-ucl_3.94-4_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEENeh2+rTTcy6TtNI3Yx3nVTvor9QFAlo9hpwACgkQYx3nVTvo r9R3ew//SoUlibOsXOF6dt3QRHGJ5a9DOKZSPuxTlSjCO3JtDdaFPSQ4wqbcxXwG wv+Mq+wCHGhpACQyxpcRcHQGWNiIJzhOV77XoDfA0Ya/Chb+TkdSaf3/0AsOK1o0 MlDvMMhP7XcOOGS4WpAi17mXavNVdMd0Fl/dZ/2EnzeiWzGMkRLY3nIgpzyCEgPt /SpA9//rhyXiVM2upmyO/uwB1SnYSC3Rs33SW2mO7+6Ruhb0yJ4mdM9frxrQYDMU rWf4jREpQy/T1PGFdfHnoIHGbGA+Twl+8cSofVKeqc/AWxzCc8eNz8gDcktX2X3R 9KRLXZ6yRmiwWrTwoVpOS4wPeKSqKfVljkjBz7dBPgNwvkm7Sc4nx5z6EiSICiL1 /4rutdne+XLqxzdh3oIC3mKZQRjsAHwCsPQHiBv6v3T5VnBuClV5+yZEuL1Xe/tB vKhf9VMd3xN2BGYzsM3NbsNWHWgfDxTBBOH/0jW+uACHp85nvI9+iq7RrfW1Pv3B TiN6vAXHkLZdzyC7XPY+GKndMjP3iuOZp4Y+J9/OUidKYINAzVqf93N1FM88YXjc xdz5Evd+FeAKw7lvXOWz80HpzynriFjp/zbsgXBIUCN3ijQF5afdlvfroFgFXV0a WMuQTHZbdzd7+q3FJ3Gtng5sUz2j7Qn8GofLlxfF7Uj3o+WWDOg= =u2No -----END PGP SIGNATURE-----