Amazon Linux 2023 Security Advisory: ALAS-2024-642
Advisory Release Date: 2024-06-06 20:47 Pacific
Advisory Updated Date: 2024-06-10 17:10 Pacific
Severity:
Medium
Issue Overview:
Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash). (CVE-2023-38665)
Affected Packages:
nasm
Issue Correction:
Run dnf update nasm --releasever 2023.4.20240611 to update your system.
New Packages:
aarch64:
nasm-rdoff-debuginfo-2.15.05-1.amzn2023.0.6.aarch64
nasm-rdoff-2.15.05-1.amzn2023.0.6.aarch64
nasm-debugsource-2.15.05-1.amzn2023.0.6.aarch64
nasm-debuginfo-2.15.05-1.amzn2023.0.6.aarch64
nasm-2.15.05-1.amzn2023.0.6.aarch64
noarch:
nasm-doc-2.15.05-1.amzn2023.0.6.noarch
src:
nasm-2.15.05-1.amzn2023.0.6.src
x86_64:
nasm-debuginfo-2.15.05-1.amzn2023.0.6.x86_64
nasm-debugsource-2.15.05-1.amzn2023.0.6.x86_64
nasm-2.15.05-1.amzn2023.0.6.x86_64
nasm-rdoff-debuginfo-2.15.05-1.amzn2023.0.6.x86_64
nasm-rdoff-2.15.05-1.amzn2023.0.6.x86_64