Stay Secure with the Latest Linux Advisories

security advisorybuffer overflowFedora

Fedora 26: 2018-48569250d1 Critical: nasm Buffer Overflow Issues

Security fix for CVE-2017-17810 CVE-2017-17811 CVE-2017-17812 CVE-2017-17813 CVE-2017-17814 CVE-2017-17815 CVE-2017-17816 CVE-2017-17817 CVE-2017-17818 CVE-2017-17819 CVE-2017-17820. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-48569250d1 2018-01-16 14:14:36.363618 --------------------------------------------------------------------------------Name : nasm Product : Fedora 26 Version : 2.13.02 Release : 1.fc26 URL : Summary : A portable x86 assembler which uses Intel-like syntax Description : NASM is the Netwide Assembler, a free portable assembler for the Intel 80x86 microprocessor series, using primarily the traditional Intel instruction mnemonics and syntax. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2017-17810 CVE-2017-17811 CVE-2017-17812 CVE-2017-17813 CVE-2017-17814 CVE-2017-17815 CVE-2017-17816 CVE-2017-17817 CVE-2017-17818 CVE-2017-17819 CVE-2017-17820 --------------------------------------------------------------------------------References: [ 1 ] Bug #1529312 - CVE-2017-17810 nasm: Segfault via mishandled macro calls in asm/preproc.c https://bugzilla.redhat.com/show_bug.cgi?id=1529312 [ 2 ] Bug #1529317 - CVE-2017-17811 nasm: Heap-based buffer overflow in paste_tokens function in asm/preproc.c https://bugzilla.redhat.com/show_bug.cgi?id=1529317 [ 3 ] Bug #1529319 - CVE-2017-17812 nasm: Heap-based buffer over-read in detoken function in asm/preproc.c https://bugzilla.redhat.com/show_bug.cgi?id=1529319 [ 4 ] Bug #1529326 - CVE-2017-17813 nasm: use-after-free in pp_list_one_macro function in asm/preproc.c https://bugzilla.redhat.com/show_bug.cgi?id=1529326 [ 5 ] Bug #1529327 - CVE-2017-17814 nasm: use-after-free in do_directive function in asm/preproc.c https://bugzilla.redhat.com/show_bug.cgi?id=1529327 [ 6 ] Bug #1529328 -CVE-2017-17815 nasm: Illegal address access in is_mmacro function in asm/preproc.c https://bugzilla.redhat.com/show_bug.cgi?id=1529328 [ 7 ] Bug #1529330 - CVE-2017-17816 nasm: Use-after-free in pp_getline function in asm/preproc.c https://bugzilla.redhat.com/show_bug.cgi?id=1529330 [ 8 ] Bug #1529331 - CVE-2017-17817 nasm: Use-after-free in pp_verror function in asm/preproc.c https://bugzilla.redhat.com/show_bug.cgi?id=1529331 [ 9 ] Bug #1529332 - CVE-2017-17818 nasm: Heap-based buffer over-read in paste_tokens function in asm/preproc.c https://bugzilla.redhat.com/show_bug.cgi?id=1529332 [ 10 ] Bug #1529334 - CVE-2017-17819 nasm: Illegal address access in find_cc function in asm/preproc.c https://bugzilla.redhat.com/show_bug.cgi?id=1529334 [ 11 ] Bug #1529335 - CVE-2017-17820 nasm: Use-after-free in pp_list_one_macro function in asm/preproc.c https://bugzilla.redhat.com/show_bug.cgi?id=1529335 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c ''''dnf upgrade nasm'''' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Important revisions for nasm in Fedora tackling several vulnerabilities. Vital for maintaining a secure system.. Fedora Update,nasm Security Patch,Buffer Overflow Fix,Use After Free Issue. . Severity: Critical. LinuxSecurity.com Team

Jan 16, 2018 •Critical Fedora