Gentoo Linux Security Advisory GLSA 200601-07 – Zero Day Initiative (ZDI) reported a heap buffer overflow vulnerability. The vulnerability is due to an incorrect boundary check of the user-supplied data prior to copying it to an insufficiently sized memory buffer. The flaw occurs when the application attempts to handle compressed UPX files. Versions less than 0.88 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/43087/glsa-200601-07.txt
Source: https://packetstormsecurity.com/files/43087/Gentoo-Linux-Security-Advisory-200601-7.html