From f80daf5de1a55d151ebea892bfb8c527e84c135c Mon Sep 17 00:00:00 2001 From: John Reiser Date: Sat, 16 May 2015 15:33:31 -0700 Subject: [PATCH] CERT-FI Case 829767 UPX command line tools segfaults MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The vulnerabilities were discovered by Joonas Kuorilehto and Antti Häyrynen from Codenomicon. --- NEWS | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/NEWS b/NEWS index 5997fb16..83d230a2 100644 --- a/NEWS +++ b/NEWS @@ -5,6 +5,11 @@ User visible changes for UPX Changes in 3.92 (XX XXX 2015): * all pe formats: important internal changes - reunited the diverged source files - please report regressions into the bug tracker + * Fix CERT-FI Case 829767 UPX command line tools segfaults. + Received by UPX Team on 2015-May-08; originally reported + by Codenomicon to NCSC-FI on 2015-01-08. + The vulnerabilities were discovered by Joonas Kuorilehto and + Antti Häyrynen from Codenomicon Changes in 3.91 (30 Sep 2013): * Added experimental support for Windows 64-bit PE files, based on