Skip to content
OpenAdvisories
Medium ALAS2023-2023-157 2 CVEs

Moderate: yasm security update (Amazon Linux 2023)

Published Mar 30, 2023 · Updated Apr 4, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-33459: An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in nasm_parser_directive() in modules/parsers/nasm/nasm-parse.c. CVE-2021-33454: An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr_get_intnum() in libyasm/expr.c.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2023 yasm 0:1.3.0-13.amzn2023.0.3
Amazon Linux · 2023 yasm-debuginfo 0:1.3.0-13.amzn2023.0.3
Amazon Linux · 2023 yasm-debugsource 0:1.3.0-13.amzn2023.0.3
Amazon Linux · 2023 yasm-devel 0:1.3.0-13.amzn2023.0.3

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-33454.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-33459.html