-
upx-ucl (3.94-4) unstable; urgency=medium
* Apply Mach-o-defend-against-bad-crafted-input.patch from upstream
to fix crash on packing corrupted Mach-O file (CVE-2017-16869,
closes: #882041).
* Apply Protect-against-bad-crafted-input.patch from upstream to fix
crashes found by AFL (CVE-2017-15056, closes: #873260).
* Standards-Version: 4.1.2.
-- Robert Luberda <email address hidden> Fri, 22 Dec 2017 23:25:38 +0100
-
upx-ucl (3.94-3) unstable; urgency=medium
* Note in README.source that upx uses upstream-provided LZMA library
because lzma-dev package does not provide all the files necessary
to build upx (closes: #871647).
* Apply patch from Helmut Grohne to fix cross-compiling (closes: #871633):
+ let debhelper choose the correct CC;
+ fix build/host confusion;
+ ask dpkg for host endianness rather than maintaining a list.
* Standards-Version: 4.1.0.
-- Robert Luberda <email address hidden> Fri, 01 Sep 2017 23:43:04 +0200
-
upx-ucl (3.94-2) unstable; urgency=low
* Upload to unstable.
* Merge changes from version 3.91-3 and 3.91-4: add Check-DT_REL-i386.patch
and changelog entries.
* Standards-Version: 4.0.1.
-- Robert Luberda <email address hidden> Wed, 09 Aug 2017 22:59:28 +0200
