]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
nasm: fix CVE-2020-21528
authorArchana Polampalli <archana.polampalli@windriver.com>
Tue, 5 Sep 2023 10:52:39 +0000 (10:52 +0000)
committerSteve Sakoman <steve@sakoman.com>
Tue, 5 Sep 2023 23:34:12 +0000 (13:34 -1000)
commit87c4ec2d73ac2e52005e16e38a9a12affb8d51bd
treee32e915740bf8411278cbdcb5aa3c1c87cb51c58
parent20b5ead99d4904e70ea22f573bfefec8c6e862a2
nasm: fix CVE-2020-21528

A Segmentation Fault issue discovered in in ieee_segment function in outieee.c
in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service
via crafted assembly file.

References:
https://nvd.nist.gov/vuln/detail/CVE-2020-21528

Upstream patches:
https://github.com/netwide-assembler/nasm/commit/93c774d482694643cafbc82578ac8b729fb5bc8b

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-devtools/nasm/nasm/CVE-2020-21528.patch [new file with mode: 0644]
meta/recipes-devtools/nasm/nasm_2.15.05.bb