Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2023:0031-1

Опубликовано: 23 янв. 2023
Источник: suse-cvrf

Описание

Security update for upx

upx was updated to fix the following issues:

  • CVE-2023-23457: Fixed a segmentation fault when processing malicious elf files (boo#1207122)

Update to release 4.0.1

  • Fix crash when a linux/armeb LZMA-packed binary unpacks itself.
  • Resolve 'CantPackException: bad ElfXX_Shdrs' with staticly-linked programs.
  • Resolve 'CantPackException: need DT_INIT;...' when attempting to re-compress an already packed binary.

Update to release 4.0

  • Add support for EFI files

Список пакетов

SUSE Package Hub 15 SP4
upx-4.0.1-bp154.4.3.1
openSUSE Leap 15.4
upx-4.0.1-bp154.4.3.1

Ссылки

Описание

A Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service.

Затронутые продукты
SUSE Package Hub 15 SP4:upx-4.0.1-bp154.4.3.1
openSUSE Leap 15.4:upx-4.0.1-bp154.4.3.1
Ссылки