ALAS2023-2023-172 — Important: nasm security update (Amazon Linux 2023)

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-44370: NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856

Fixed packages 6

Release	Package	Fixed in
Amazon Linux · 2023	nasm	0:2.15.05-1.amzn2023.0.4
Amazon Linux · 2023	nasm-debuginfo	0:2.15.05-1.amzn2023.0.4
Amazon Linux · 2023	nasm-debugsource	0:2.15.05-1.amzn2023.0.4
Amazon Linux · 2023	nasm-doc	0:2.15.05-1.amzn2023.0.4
Amazon Linux · 2023	nasm-rdoff	0:2.15.05-1.amzn2023.0.4
Amazon Linux · 2023	nasm-rdoff-debuginfo	0:2.15.05-1.amzn2023.0.4

Vulnerabilities 1

Unscored —

CVE-2022-44370

NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856

nasm nasm nasm Debian Ubuntu Azure Linux

Mar 29, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2022-44370.html