BSD PortsVulnerable: version 5.2.1 is affected by 13 known vulnerabilities. See below.
wip/upx 5.2.1 NetBSD
Ultimate packer for executables
- System
- NetBSD
- Repository
- pkgsrc-wip
- Maintainer
- [email protected]
- Port added
- Last update
- Commit
ffb1c376a5- License
- gnu-gpl-v2
- Categories
- wip, archivers
Description
UPX is a free, portable, extendable, high-performance executable packer for several different executable formats. It achieves an excellent compression ratio and offers very fast decompression. Your executables suffer no memory overhead or other drawbacks because of in-place decompression.
In the other systems
The newest version among them is 5.2.1, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| NetBSD | wip/upx | 5.2.1 newest | 13 known | - | [email protected] | 2026-10-26 |
| FreeBSD | archivers/upx by name | 5.2.1 newest | none known | - | [email protected] | 2026-09-09 |
| DragonFly | archivers/upx by name | 5.0.0 behind since 2026-07-08 | none known | - | [email protected] | - |
| MidnightBSD | archivers/upx by name | 5.2.1 newest | no data | - | [email protected] | 2026-10-05 |
| HardenedBSD | archivers/upx by name | 5.2.1 newest | no data | - | [email protected] | - |
| GhostBSD | archivers/upx by name | 5.2.1 newest | no data | - | [email protected] | - |
Version history 1
Upstream's version as each commit to the port's Makefile set it, or as this site first saw it in the system's packages; the tree's own revisions are not versions here.
Install
From pkgsrc-wip (no binary package):
cd /usr/pkgsrc/wip/upx && make install cleanDependency graph
Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.
Dependencies
Run dependencies 2
No port depends on this one.
Known vulnerabilities 13
- upx: denial-of-service (CVE-2017-15056)
- upx: denial-of-service (CVE-2018-11243)
- upx: integer-overflow (CVE-2019-14295)
- upx: buffer-overflow (CVE-2019-14296)
- upx: heap-overflow (CVE-2019-20021)
- upx: denial-of-service (CVE-2019-20051)
- upx: denial-of-service (CVE-2019-20053)
- upx: heap-overflow (CVE-2020-24119)
- upx: denial-of-service (CVE-2021-20285)
- upx: denial-of-service (CVE-2021-30500)
- upx: denial-of-service (CVE-2021-30501)
- upx: heap-based-buffer-overflow (CVE-2023-23456)
- upx: denial-of-service (CVE-2023-23457)