Ubuntu alert USN-8248-1 (nasm)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8248-1] NASM vulnerabilities
Date:
             
 
Thu, 07 May 2026 13:28:12 +0000
Message-ID:
             
 
<E1wKylw-0007ss-TS@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-8248-1
May 07, 2026

nasm vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in NASM.

Software Description:
- nasm: Netwide Assembler

Details:

Daisy Chen discovered that NASM was vulnerable to a heap buffer overflow
when handling certain input. An attacker could possibly use this issue
to cause NASM to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2023-31722)

It was discovered that NASM incorrectly handled memory allocation.
An attacker could possibly use this issue to cause NASM to use
excessive resources, leading to a denial of service. This issue
only affected Ubuntu 24.04 LTS. (CVE-2021-33452, CVE-2021-33450)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
  nasm                            2.16.01-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 22.04 LTS
  nasm                            2.15.05-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary
changes.

References:
  https://ubuntu.com/security/notices/USN-8248-1
  CVE-2021-33450, CVE-2021-33452, CVE-2023-31722


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=sgS5
-----END PGP SIGNATURE-----