[Git][security-tracker-team/security-tracker][master] CVE-2018-8882/nasm fixed via new upstream version in unstable

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8ecca07e by Salvatore Bonaccorso at 2018-11-18T08:35:53Z
CVE-2018-8882/nasm fixed via new upstream version in unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -27102,11 +27102,12 @@ CVE-2018-8883 (Netwide Assembler (NASM) 2.13.02rc2 has a buffer over-read in the
 	[wheezy] - nasm <ignored> (Minor issue)
 	NOTE: https://bugzilla.nasm.us/show_bug.cgi?id=3392447
 CVE-2018-8882 (Netwide Assembler (NASM) 2.13.02rc2 has a stack-based buffer under-read ...)
-	- nasm <unfixed> (low; bug #894846)
+	- nasm 2.14-1 (low; bug #894846)
 	[stretch] - nasm <no-dsa> (Minor issue)
 	[jessie] - nasm <no-dsa> (Minor issue)
 	[wheezy] - nasm <ignored> (Minor issue)
 	NOTE: https://bugzilla.nasm.us/show_bug.cgi?id=3392445
+	NOTE: https://github.com/netwide-assembler/nasm/commit/c7c28357c85fb0bf4105419195bc204aea0fef35
 CVE-2018-8881 (Netwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read ...)
 	- nasm 2.13.02-0.1 (low)
 	[stretch] - nasm <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8ecca07e8fca197f1887ef9bd7733de47e42b678

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8ecca07e8fca197f1887ef9bd7733de47e42b678
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181118/9ecd758f/attachment.html>