ALT-BU-2024-9792-1
Branch sisyphus_riscv64 update bulletin.
Package yasm updated to version 1.3.0-alt3 for branch sisyphus_riscv64.
Closed vulnerabilities
Modified: 2024-09-13
BDU:2023-05006
Уязвимость компонентов /libyasm/intnum.c и /elf/elf.c ассемблера Yasm, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2021-33454
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr_get_intnum() in libyasm/expr.c.
Modified: 2025-01-29
CVE-2023-31975
yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.
- http://www.openwall.com/lists/oss-security/2023/06/20/6
- http://www.openwall.com/lists/oss-security/2023/06/21/10
- http://www.openwall.com/lists/oss-security/2023/06/21/13
- http://www.openwall.com/lists/oss-security/2023/06/21/2
- http://www.openwall.com/lists/oss-security/2023/06/21/5
- http://www.openwall.com/lists/oss-security/2023/06/21/7
- http://www.openwall.com/lists/oss-security/2023/06/21/8
- http://www.openwall.com/lists/oss-security/2023/06/21/9
- http://www.openwall.com/lists/oss-security/2023/06/22/1
- http://www.openwall.com/lists/oss-security/2023/06/22/3
- http://www.openwall.com/lists/oss-security/2023/06/22/6
- http://www.openwall.com/lists/oss-security/2023/06/23/1
- http://www.openwall.com/lists/oss-security/2023/06/23/2
- http://www.openwall.com/lists/oss-security/2023/06/23/4
- http://www.openwall.com/lists/oss-security/2023/06/23/8
- http://www.openwall.com/lists/oss-security/2023/06/23/9
- http://www.openwall.com/lists/oss-security/2023/06/24/1
- https://github.com/yasm/yasm/issues/210
- http://www.openwall.com/lists/oss-security/2023/06/20/6
- http://www.openwall.com/lists/oss-security/2023/06/21/10
- http://www.openwall.com/lists/oss-security/2023/06/21/13
- http://www.openwall.com/lists/oss-security/2023/06/21/2
- http://www.openwall.com/lists/oss-security/2023/06/21/5
- http://www.openwall.com/lists/oss-security/2023/06/21/7
- http://www.openwall.com/lists/oss-security/2023/06/21/8
- http://www.openwall.com/lists/oss-security/2023/06/21/9
- http://www.openwall.com/lists/oss-security/2023/06/22/1
- http://www.openwall.com/lists/oss-security/2023/06/22/3
- http://www.openwall.com/lists/oss-security/2023/06/22/6
- http://www.openwall.com/lists/oss-security/2023/06/23/1
- http://www.openwall.com/lists/oss-security/2023/06/23/2
- http://www.openwall.com/lists/oss-security/2023/06/23/4
- http://www.openwall.com/lists/oss-security/2023/06/23/8
- http://www.openwall.com/lists/oss-security/2023/06/23/9
- http://www.openwall.com/lists/oss-security/2023/06/24/1
- https://github.com/yasm/yasm/issues/210
Modified: 2024-11-21
CVE-2023-37732
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.