• Re: upx-ucl: CVE-2025-2849

    From Carlos Henrique Lima Melara@21:1/5 to mpolkorny@gmail.com on Mon Apr 14 02:40:01 2025
    Hi maintainers,

    On Sun, 6 Apr 2025 01:06:44 -0300 Matheus Polkorny <mpolkorny@gmail.com> wrote:
    user debian-release@lists.debian.org
    usertags 1101500 + bsp-2025-04-brazil
    thanks

    I have imported and refreshed the upstream patch to address CVE-2025-2849.

    More details can be found in the following merge request: https://salsa.debian.org/debian/upx-ucl/-/merge_requests/3

    I will upload the prepared nmu shortly with a 2 days delay. If you
    prefer to do it yourself or need more time to review the changes, please
    let me know so I can postpone or cancel the upload.

    Cheers,
    Charles

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEECgzx8d8+AINglLHJt4M9ggJ8mQsFAmf8V4MACgkQt4M9ggJ8 mQuxlxAAusm44Y2pfAdNyaLrXHW/S+6UKGDX7o6uc/7HC+n0nXZf9jBblGEOeXSU Ng8tMDJW4RU/5hHR7bLqRcTU8P0OqEbm5akD2v7ctwqD7Fv2WWXkZPO2yStYzzNL RAo1S5EWcmNOLoOflCbYLQC1FBsWp4sXpHi7psVAKbW8HTZci5jWSpBray5Y8i6o StmDd/CCJGi6rnaiI6XKZ7sMn88tNdTm/a7dGprVB/H6YSc1WEJ3wgPPiXuFWWmK T/s1rclUBMh2b+2sv0ApXGRfXW8vpSwsTvi7Y7g+oSmkLAvOZvV3BIzPAbPkDwlM jbIH68Y3Z+5vbEDGHKK1Q+4FVN3yC7MjYFwwp8pQjozXtIpVlQGzfPXXpd6myc+l 1rYGKVoRCssN8PG5ntnAXTR7y9HkX8qRqYyZ4KyrGDB6iHz7pd78GLW7XAef3p5A 8G3UgSwr22wi3yGgH5hBAEw/rrUTWDm171AY3U1WVwT6irDskjHlxAtOthzugXZA wJnwtzQ0C39D+zPxa0L7GDmY2LHmzWI32Nw+P3OMWkAJFKg+r8FMGb4TZ/AOEEOU IIamER7KI9iRyKB+EAmpXZ/cgMP4ogCUfi/aQxYdcXR+i38MGvFgT5NZe8jHDWMK hI0WeDTkVapn/KBOfA8x7yrlKPNK1xUGQ/V6/w1j/IU4lQaPHp8=
    =GB5h
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)