File upx.changes of Package upx
------------------------------------------------------------------- Tue May 6 14:35:01 UTC 2025 - Jan Engelhardt <[email protected]> - Update to release 5.0.1 * Fix UPX-compressed armv7l,mipsel,ppc32 binaries crashing on launch - Delete 0001-More-checking-in-unpack.patch (merged) ------------------------------------------------------------------- Fri Mar 28 11:14:59 UTC 2025 - Jan Engelhardt <[email protected]> - Add 0001-More-checking-in-unpack.patch [boo#1240236, CVE-2025-2849] ------------------------------------------------------------------- Sat Feb 22 00:35:11 UTC 2025 - Jan Engelhardt <[email protected]> - Update to release 5.0.0 * ELF: use of memfd_create to support Enforcing mode of SELinux * ELF: two-step de-compression enables future per-PT_LOAD work * ELF: --unmap-all-pages completely avoids /proc/self/exe ------------------------------------------------------------------- Thu May 9 10:36:15 UTC 2024 - Jan Engelhardt <[email protected]> - Update to release 4.2.4 * Resolve "CantPackException: MemBuffer invalid array index 0 (0 bytes)" problem on armeabi ------------------------------------------------------------------- Wed Mar 27 20:59:57 UTC 2024 - Jan Engelhardt <[email protected]> - Update to release 4.2.3 * Resolve relocation overflow on PE binaries * Fix some segfaults under Linux and various binaries - Delete upx-aarch64.patch (merged) ------------------------------------------------------------------- Wed Jan 3 18:35:04 UTC 2024 - Jan Engelhardt <[email protected]> - Update to release 4.2.2 * Fix upx program crash on Oracle Cloud VM * Fix upx program crash on ARM64 machines with 64K page size * Fix a heap-buffer-overflow in upx ------------------------------------------------------------------- Wed Nov 1 19:30:37 UTC 2023 - Jan Engelhardt <[email protected]> - Update to release 4.2.1 * linux: /proc/self/exe now is optional ------------------------------------------------------------------- Thu Oct 26 09:53:44 UTC 2023 - Jan Engelhardt <[email protected]> - Update to release 4.2.0 * win32/pe and win64/pe: stricter relocation checks * new option ``--link`` to preserve hard-links (Unix only; use with care) * add support for NO_COLOR env var ------------------------------------------------------------------- Mon Oct 16 20:59:07 UTC 2023 - Lubos Kocman <[email protected]> - Fix typo in BSD-4-Clause ------------------------------------------------------------------- Thu Sep 21 11:26:11 UTC 2023 - Lubos Kocman <[email protected]> - Update license based on legal review Skipping "Simplified license" WITH LZMA-exception due to missing matching license identifier for now ------------------------------------------------------------------- Tue Aug 8 10:42:05 UTC 2023 - Jan Engelhardt <[email protected]> - Update to release 4.1 * ELF: handle shared libraries with more than 2 PT_LOAD segments ------------------------------------------------------------------- Mon Jan 30 17:14:15 UTC 2023 - Jan Engelhardt <[email protected]> - Update to release 4.0.2 * Fix unpack of ELF x86-64 that failed with "CantUnpackException: corrupt b_info" * Resolve SEGV on PackLinuxElf64::invert_pt_dynamic - Delete upx-endiantests.patch (conflict upstream) - Delete 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch (merged) ------------------------------------------------------------------- Sun Jan 15 10:35:30 UTC 2023 - Jan Engelhardt <[email protected]> - Add 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch [boo#1207122] [CVE-2023-23457] ------------------------------------------------------------------- Wed Nov 16 23:18:11 UTC 2022 - Jan Engelhardt <[email protected]> - Update to release 4.0.1 * Fix crash when a linux/armeb LZMA-packed binary unpacks itself. * Resolve "CantPackException: bad ElfXX_Shdrs" with staticly-linked programs. * Resolve "CantPackException: need DT_INIT;..." when attempting to re-compress an already packed binary. ------------------------------------------------------------------- Sat Oct 29 18:05:59 UTC 2022 - Jan Engelhardt <[email protected]> - Update to release 4.0 * Add support for EFI files - Delete 0001-Silence-yet-some-more-compilation-warnings.patch, 0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch ------------------------------------------------------------------- Tue Jun 1 07:28:38 UTC 2021 - Christophe Giboudeaux <[email protected]> - Add upstream change to fix build with GCC 11: * 0001-Silence-yet-some-more-compilation-warnings.patch ------------------------------------------------------------------- Wed May 19 10:36:10 UTC 2021 - Jan Engelhardt <[email protected]> - Add 0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch [CVE-2020-24119] [boo#1186238] ------------------------------------------------------------------- Thu Jan 23 06:58:20 UTC 2020 - Ismail Dönmez <[email protected]> - Update to version 3.96 * Bug fixes: [CVE-2019-1010048, boo#1141777] [CVE-2019-14296, boo#1143839] [CVE-2019-20021, boo#1159833] [CVE-2019-20053, boo#1159920] [CVE-2018-11243 partially - ticket 206 ONLY, boo#1094138] ------------------------------------------------------------------- Tue Oct 30 09:54:31 UTC 2018 - Jan Engelhardt <[email protected]> - Trim bias from description. ------------------------------------------------------------------- Sun Oct 28 18:27:40 UTC 2018 - Luigi Baldoni <[email protected]> - Update to version 3.95 * Flag --force-pie when ET_DYN main program is not marked as DF_1_PIE * Better compatibility with varying layout of address space on Linux * Support for 4 PT_LOAD layout in ELF generated by binutils-2.31 * bug fixes, particularly better diagnosis of malformed input * bug fixes - see https://github.com/upx/upx/milestone/4 - Dropped 0001-Protect-against-bad-crafted-input.patch, 0002-Protect-against-bad-crafted-input.patch and 0001-Mach-o-defend-against-bad-crafted-input.patch (merged upstream) - Drop lzma922.tar.bz2 (which wasn't being used in the first place) and lzma-x-endian.patch which no longer applies to the integrated lzma-sdk. The in-tree lzma-sdk is actually a fork from an older version but recommended by the author, see src/stub/src/c/Makevars.lzma - Spec cleanup ------------------------------------------------------------------- Sat Nov 18 09:56:22 UTC 2017 - [email protected] - Add 0001-Mach-o-defend-against-bad-crafted-input.patch [CVE-2017-16869] [boo#1068681] ------------------------------------------------------------------- Fri Oct 6 13:44:12 UTC 2017 - [email protected] - Update to new upstream release 3.94 * Add support for arm64-linux (aka aarch64). * Add support for --lzma compression on 64-bit PowerPC. * From 3.92: * Explicitly diagnose Go-language bad PT_LOAD. - Resolve apply/merge conflict of upx-endiantests.patch - Add 0001-Protect-against-bad-crafted-input.patch, 0002-Protect-against-bad-crafted-input.patch [boo#1062059] ------------------------------------------------------------------- Sun Nov 16 22:43:10 UTC 2014 - [email protected] - upx-endiantests.patch and lzma-x-endian.patch Correct endianness tests by only considering what the compiler says about target system and not a hardcoded architecture list. (drop upx-3.03_ia64-endianity.patch) - build with hidden visibility. ------------------------------------------------------------------- Mon Jan 20 09:56:37 UTC 2014 - [email protected] - fix build for factory ------------------------------------------------------------------- Fri Nov 22 07:37:43 UTC 2013 - [email protected] - Update to new upstream release 3.91 * Initial support for amd64-win64.pe - Refresh upx-3.03_ia64-endianity.patch after fuzz ------------------------------------------------------------------- Sun Mar 31 10:01:28 UTC 2013 - [email protected] - upx-aarch64.patch: Support for AArch64 ------------------------------------------------------------------- Wed Mar 27 14:04:01 UTC 2013 - [email protected] - Actually enable LZMA support, this needs LZMA SDK ------------------------------------------------------------------- Mon Mar 25 17:25:48 UTC 2013 - [email protected] - Update to version 3.09 * New option --preserve-build-id for GNU ELF. * Allow zero-filled final page in PackUnix::canUnpack(). * Bug fixes. ------------------------------------------------------------------- Thu Mar 8 22:21:33 CET 2012 - [email protected] - updated to 3.08 * optional LZMA compression ------------------------------------------------------------------- Thu Sep 9 16:42:51 UTC 2010 - [email protected] - updated to 3.07 * LZMA compression support ------------------------------------------------------------------- Wed Aug 18 17:50:52 CEST 2010 - [email protected] - updated to 3.05 (see NEWS) ------------------------------------------------------------------- Mon Oct 12 17:32:56 CEST 2009 - [email protected] - updated to 3.04 ------------------------------------------------------------------- Mon Jun 8 15:32:04 CEST 2009 - [email protected] - fixed char * -- const char * problem * const-cast.patch ------------------------------------------------------------------- Thu Jul 31 17:14:24 CEST 2008 - [email protected] - updated to 3.03: o optional LZMA compression ------------------------------------------------------------------- Mon Jan 21 16:20:47 CET 2008 - [email protected] - update to 3.02: * fix unmapping on arm-linux.elf * fix error checking in mmap for i386-linux.elf [triggered by -fPIE] * new options --no-mode, --no-owner and --no-time to disable preservation of mode (file permissions), file ownership and timestamps. * new format linux/mipsel supports ELF on [32-bit] R3000 * fix argv[0] on PowerPC with --lzma * another bug fixes ------------------------------------------------------------------- Thu Oct 4 22:44:58 CEST 2007 - [email protected] - use ia64 fix for hppa ------------------------------------------------------------------- Mon Jul 23 16:29:42 CEST 2007 - [email protected] - updated to 3.00 (supports some new formats) - fixed failed build on ia64 * ia64-endianity.patch ------------------------------------------------------------------- Thu Mar 29 10:19:30 CEST 2007 - [email protected] - buildrequire zlib-devel ------------------------------------------------------------------- Tue Oct 31 16:14:57 CET 2006 - [email protected] - build with RPM_OPT_FLAGS ------------------------------------------------------------------- Thu Oct 5 14:18:26 CEST 2006 - [email protected] - update to 2.02 * support for many new formats * various bugfixes - build for all architectures (new formats supported) ------------------------------------------------------------------- Wed Jan 25 21:44:47 CET 2006 - [email protected] - converted neededforbuild to BuildRequires ------------------------------------------------------------------- Thu Sep 29 00:25:12 CEST 2005 - [email protected] - add norootforbuild ------------------------------------------------------------------- Wed Aug 11 09:57:21 CEST 2004 - [email protected] - update to 1.25 ------------------------------------------------------------------- Thu Jul 24 19:37:55 CEST 2003 - [email protected] - update to version 1.24 ------------------------------------------------------------------- Fri May 10 14:04:47 CEST 2002 - [email protected] - removed malloc hacks (does not work this way with gcc-3.1) ------------------------------------------------------------------- Sat Apr 20 19:01:48 CEST 2002 - [email protected] - fixed changelog ------------------------------------------------------------------- Fri Apr 19 14:47:18 CEST 2002 - [email protected] - fixed to compile with gcc 3.1 ------------------------------------------------------------------- Mon Jan 14 14:43:39 CET 2002 - [email protected] - fix URL in spec file ------------------------------------------------------------------- Wed Jun 20 10:02:06 CEST 2001 - [email protected] - fix neededforbuild section ------------------------------------------------------------------- Fri Jun 15 09:40:08 CEST 2001 - [email protected] - initial package release (version 1.20)
