Ubuntu alert USN-648-1 (nasm)
| From: | Kees Cook <kees@ubuntu.com> | |
| To: | ubuntu-security-announce@lists.ubuntu.com | |
| Subject: | [USN-648-1] nasm vulnerability | |
| Date: | Tue, 30 Sep 2008 13:36:46 -0700 | |
| Message-ID: | <20080930203646.GS12527@outflux.net> | |
| Cc: | full-disclosure@lists.grok.org.uk, bugtraq@securityfocus.com |
=========================================================== Ubuntu Security Notice USN-648-1 September 30, 2008 nasm vulnerability CVE-2008-2719 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 8.04 LTS: nasm 0.99.06-2ubuntu0.1 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: Philipp Thomas discovered that the ppscan function of nasm contained an off-by-one error. If a user or automated system were tricked into assembling a specially crafted ASM file, a remote attacker could execute arbitrary commands with user privileges. Updated packages for Ubuntu 8.04 LTS: Source archives: http://security.ubuntu.com/ubuntu/pool/main/n/nasm/nasm_0... Size/MD5: 15907 894daa05dae4714c30419c98b2ceb40a http://security.ubuntu.com/ubuntu/pool/main/n/nasm/nasm_0... Size/MD5: 726 fb0bf3fde692980711ad529666405912 http://security.ubuntu.com/ubuntu/pool/main/n/nasm/nasm_0... Size/MD5: 867891 78a0e7b7785ff4241f454310d3c48f14 amd64 architecture (Athlon64, Opteron, EM64T Xeon): http://security.ubuntu.com/ubuntu/pool/main/n/nasm/nasm_0... Size/MD5: 839692 8041418bc0d1fef019e9109be3996e71 i386 architecture (x86 compatible Intel/AMD): http://security.ubuntu.com/ubuntu/pool/main/n/nasm/nasm_0... Size/MD5: 817098 57dc7b6ff3cce6ced499b6f8b479c06e lpia architecture (Low Power Intel Architecture): http://ports.ubuntu.com/pool/main/n/nasm/nasm_0.99.06-2ub... Size/MD5: 819156 e360526accd52ef2b4c57599c0833147 powerpc architecture (Apple Macintosh G3/G4/G5): http://ports.ubuntu.com/pool/main/n/nasm/nasm_0.99.06-2ub... Size/MD5: 844482 0c9b6c75f820f1929c6285590398cbfe sparc architecture (Sun SPARC/UltraSPARC): http://ports.ubuntu.com/pool/main/n/nasm/nasm_0.99.06-2ub... Size/MD5: 826730 b6fa477b03ba11303d63254aac7ee960 -- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security...