upx-ucl (4.2.4-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * d/p/CVE-2025-2849.patch: Import upstream patch to fix CVE-2025-2849 Fix
    heap-based buffer overflow in PackLinuxElf64::un_DT_INIT (closes: #1101500).

 -- Matheus Polkorny <mpolkorny@gmail.com>  Sat, 05 Apr 2025 22:37:37 -0300

upx-ucl (4.2.4-1) unstable; urgency=medium

  * New upstream version:
    + fixes heap-based buffer overflow (CVE-2024-3209).
  * Fix cross compilation failure: switch build system to "cmake" in
    debian/rules, and let dh_auto_configure pass cross flags to cmake
    (closes: #1062788). Thanks to Helmut Grohne.
  * Add upstream-57763ca1-ELF-stubs-golang.patch taken from upstream
    git repository to fix `CantPackException' error while compressing
    golang binary (closes: #1071591).
  * Bump Standards-Version to 4.7.0 (no changes).

 -- Robert Luberda <robert@debian.org>  Sat, 31 Aug 2024 00:36:07 +0200

upx-ucl (4.2.2-3) unstable; urgency=medium

  * Extract the list of architectures which binaries are supported by UPX to
    its own file, debian/supported-archs, and use it for tests run both by
    debian/rules and by autopkgtest. This fixes autopkgtest failure on s390x.
  * Drop, hopefully temporally, ppc64 and ppc64el from the list to fix FTBFS
    occurring on the former one in Debian, and on the latter one in Ubuntu.

 -- Robert Luberda <robert@debian.org>  Fri, 19 Jan 2024 00:32:09 +0100

upx-ucl (4.2.2-2) unstable; urgency=medium

  * debian/rules: Fix FTBFS on various architectures by ignoring test failures
    on architectures on which binary formats are not supported by UPX.
  * Fix a typo in a bug number in the preceding changelog entry.

 -- Robert Luberda <robert@debian.org>  Fri, 12 Jan 2024 21:36:31 +0100

upx-ucl (4.2.2-1) unstable; urgency=medium

  * New upstream version (closes: #1025053):
    - fixes heap-based buffer overflow issue CVE-2023-23456 (closes: #1033258);
    - fixes segmentation fault issue CVE-2023-23457 (closes: #1031874);
    - fixes execution of compressed MIPS binaries (closes: #1004137);
    - unfortunately both zlib and ucl libraries are now embedded into
      the upx-ucl binary - this should be fixed in the future somehow.
  * Remove no longer needed patches 02-arm64-crashes.patch and
    03-upstream-silence-compilation-warnings.patch.
  * Update debian/source/lintan-overrides in a try to disable its useless
    checks on debian/tests files (see: #1025452).
  * Update debian/rules for cmake that is now used by upstream.
  * Add new debian/test cases for the above CVE issues.
  * Update debian/copyright.
  * Update standards version to 4.6.2, no changes needed.

 -- Robert Luberda <robert@debian.org>  Thu, 11 Jan 2024 23:00:58 +0100

upx-ucl (3.96-3) unstable; urgency=medium

  [ Debian Janitor ]
  * Set field Upstream-Name in debian/copyright.
  * Set upstream metadata fields: Bug-Submit.
  * Update standards version to 4.5.1, no changes needed.

  [ Robert Luberda ]
  * Add 03-upstream-silence-compilation-warnings.patch from upstream's
    commit c6c2fc49e to fix FTBFS with new gcc (closes: #984379).
  * Add debian/source/lintan-overrides for binaries included in
    debian/test/data for autopkgtest purposes.
  * Fix a typo in debian/copyright (lintian).
  * Remove Homepage field from debian/upstream/metadata (lintian).
  * Update standards version to 4.6.0, no changes needed.

 -- Robert Luberda <robert@debian.org>  Thu, 14 Oct 2021 08:12:34 +0200

upx-ucl (3.96-2) unstable; urgency=medium

  * Add 02-arm64-crashes.patch that reverts one of upstream commits, what should
    fix crashes visible on arm64 (closes: #955157).
  * Bump debhelper's compat version to 13.

 -- Robert Luberda <robert@debian.org>  Fri, 05 Jun 2020 12:14:39 +0200

upx-ucl (3.96-1) unstable; urgency=medium

  * New upstream version:
    + fixes heap-based buffer over-read and invalid memory address dereference
      in canUnpack()  (CVE-2019-20021, CVE-2019-20053, closes: #947471).
  * Remove no longer needed patches: 02-Ignore-malformed-ElfXX_Shdr.patch,
    and 03-Malformed-input.patch.
  * Add autopkgtest checks for #947471.
  * Replace debian/compat with build-dependency on debhelper-compat.
  * Add upstream metadata file.
  * Standards-Version: 4.5.0.

 -- Robert Luberda <robert@debian.org>  Sun, 08 Mar 2020 13:48:26 +0100

upx-ucl (3.95-2) unstable; urgency=medium

  * Add two new patches, namely 02-Ignore-malformed-ElfXX_Shdr.patch, and
    03-Malformed-input.patch, taken from upstream to fix CVE-2019-14295,
    and CVE-2019-14296 (closes: #933232).
  * Add autopkgtest check for the above bug fix.
  * Bump debhelper's compat version to 12.
  * debian/rules: Use DPKG_*_MAINT_APPEND variables and buildflags.mk
    to setup build flags.
  * Standards-Version: 4.4.0.

 -- Robert Luberda <robert@debian.org>  Mon, 29 Jul 2019 21:10:27 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog upx-ucl`.
