CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

archivers/upx 5.2.1

Ultimate Packer for eXecutables

0
unaddressed
0
VuXML only
0
fixed
0
open problem reports

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 5.2.1
Upstream
up to date
Last update
to 5.2.1 · 74db5e3bb0
Quarterly
2026Q4: 5.2.1
WWW
https://upx.github.io/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install upx
installs 5.2.1 from latest; from quarterly (2026Q4) 5.2.1
Port
# cd /usr/ports/archivers/upx && make install clean
# make -C /usr/ports/archivers/upx config  # change options first
Size
780 KiB download · 3.1 MiB installed
Depends on
archivers/ucl 1.03_5
License
GPLv2+
Options
1 of 1 on in the package: DOCS

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 165.2.15.2.1–
FreeBSD 155.2.15.2.1–
FreeBSD 145.2.15.2.15.2.1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 155.2.15.2.1–
FreeBSD 145.2.15.2.15.2.1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 5.2.1.

Not counted (2)

CVEs that match this port only loosely: inherited from the whole project, or with versions that cannot be compared. What does this mean?

2 with versions that cannot be compared
The CVE record gives dates or the port uses snapshot versions (or the other way round), so the version of this port cannot be placed in the affected range.
CVECVSSPublishedDescription
CVE-2023-234565.32023-01-12A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack() in p_tmt.cpp file. The flow allows an attacker to cause a denial of service (abort) via a cra…
CVE-2023-234575.32023-01-12A Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access …

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (62)

Dmitry Marakasov (amdmi3) · 3.03
- Retire MASTER_SITE_SOURCEFORGE_EXTENDED, it's no longer needed - all mirrors actually have all distfiles - Merge all SF mirrors to MASTER_SITE_SOURCEFORGE, resort according to quick download speed survey - Fix MASTER_SITES for all port that have used SOURCEFORGE_EXTENTED

Approved by:	portmgr (pav)
535382b891
Max Khon (fjoe) · 3.03
Update to 3.03

PR:		128386
Submitted by:	Joseph S. Atkinson
277671106d
Max Khon (fjoe) · 3.02
- Update to 3.02 [1] - Update PORTDOCS [1] - Add LZMA support [2]

PR:		120354
Submitted by:	Felippe de Meirelles Motta [1], Joseph S. Atkinson [2]
afdb9c2fb6
Max Khon (fjoe) · 3.01
Not for sparc64. I do not have sparc64 hw to fix the build.
1c9053bea3
Max Khon (fjoe) · 3.01
Fix build on IA64.
882ca735c5
Max Khon (fjoe) · 3.01
Update to 3.01

PR:		115570
Submitted by:	mm@
a3d0659adc
Max Khon (fjoe) · 3.00
Fix build on -CURRENT.

Pointed out by:	pav via pointyhat
0b3a77f827
Max Khon (fjoe) · 3.00
Update to 3.00.

PR:		112560
Submitted by:	Peter Johnson
77cd0b9f54
Max Khon (fjoe) · 1.25
Mark the port as i386-only.

Noticed by:	rafan
bec5f46861
Max Khon (fjoe) · 1.25
Add SHA256 checksum.
b55b971ee3
Max Khon (fjoe) · 1.25
Update to 1.25.

PR:		72472
d16fe08ee1
Max Khon (fjoe) · 1.24
New port: upx 1.24

UPX is a free, portable, extendable, high-performance executable
packer for several different executable formats. It achieves an
excellent compression ratio and offers very fast decompression.
45eebd566c
« newest← newerpage 2 of 2