02befac8f9
Fix CVE-2023-23456: A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack() in p_tmt.cpp file. The flow allows an attacker to cause a denial of service (abort) via a crafted file. Fix CVE-2023-23457: A Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service. https://github.com/upx/upx/blob/v4.0.2/NEWS Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
16 lines
456 B
Makefile
16 lines
456 B
Makefile
################################################################################
|
|
#
|
|
# upx
|
|
#
|
|
################################################################################
|
|
|
|
UPX_VERSION = 4.0.2
|
|
UPX_SITE = https://github.com/upx/upx/releases/download/v$(UPX_VERSION)
|
|
UPX_SOURCE = upx-$(UPX_VERSION)-src.tar.xz
|
|
UPX_LICENSE = GPL-2.0+
|
|
UPX_LICENSE_FILES = COPYING
|
|
UPX_CPE_ID_VENDOR = upx_project
|
|
UPX_SUPPORTS_IN_SOURCE_BUILD = NO
|
|
|
|
$(eval $(host-cmake-package))
|