Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Fedora: 2021-dff7e97510 Moderate: UPX Illegal Memory Issue

fedora
Calendar Grey March 19, 2021
Dist Fedora Esm H88
Ubuntu 20.04 addresses a significant buffer overflow vulnerability in glibc with the patch UBUNTU-2021-3c8b9e4152 issued on April 12, 2021.
Fix for CVE-2021-20285

Summary

UPX is a free, portable, extendable, high-performance executable

packer for several different executable formats. It achieves an

excellent compression ratio and offers very fast decompression. Your

executables suffer no memory overhead or other drawbacks.

Fix for CVE-2021-20285

* Thu Mar 11 2021 Gwyn Ciesla - 3.96-8

- PAtch for CVE-2021-20285

* Wed Jan 27 2021 Fedora Release Engineering - 3.96-7

- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[ 1 ] Bug #1937791 - CVE-2021-20285 upx: Illegal memory access in canPack function in p_lx_elf.cpp [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1937791

su -c 'dnf upgrade --advisory FEDORA-2021-dff7e97510' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Product: Fedora 32
Version: 3.96
Release: 8.fc32
Summary: Ultimate Packer for eXecutables

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here