Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:1218-1

Опубликовано: 14 апр. 2022
Источник: suse-cvrf

Описание

Security update for SDL2

This update for SDL2 fixes the following issues:

  • CVE-2021-33657: Fix a buffer overflow when parsing a crafted BMP image (bsc#1198001).

Список пакетов

SUSE Enterprise Storage 7
libSDL2-2_0-0-2.0.8-150200.11.6.1
libSDL2-devel-2.0.8-150200.11.6.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS
libSDL2-2_0-0-2.0.8-150200.11.6.1
libSDL2-devel-2.0.8-150200.11.6.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
libSDL2-2_0-0-2.0.8-150200.11.6.1
libSDL2-devel-2.0.8-150200.11.6.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP3
libSDL2-2_0-0-2.0.8-150200.11.6.1
libSDL2-devel-2.0.8-150200.11.6.1
SUSE Linux Enterprise Module for Package Hub 15 SP3
libSDL2-2_0-0-32bit-2.0.8-150200.11.6.1
SUSE Linux Enterprise Module for Package Hub 15 SP4
libSDL2-2_0-0-32bit-2.0.8-150200.11.6.1
SUSE Linux Enterprise Real Time 15 SP2
libSDL2-2_0-0-2.0.8-150200.11.6.1
libSDL2-devel-2.0.8-150200.11.6.1
SUSE Linux Enterprise Server 15 SP2-BCL
libSDL2-2_0-0-2.0.8-150200.11.6.1
libSDL2-devel-2.0.8-150200.11.6.1
SUSE Linux Enterprise Server 15 SP2-LTSS
libSDL2-2_0-0-2.0.8-150200.11.6.1
libSDL2-devel-2.0.8-150200.11.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
libSDL2-2_0-0-2.0.8-150200.11.6.1
libSDL2-devel-2.0.8-150200.11.6.1
SUSE Manager Proxy 4.1
libSDL2-2_0-0-2.0.8-150200.11.6.1
libSDL2-devel-2.0.8-150200.11.6.1
SUSE Manager Retail Branch Server 4.1
libSDL2-2_0-0-2.0.8-150200.11.6.1
libSDL2-devel-2.0.8-150200.11.6.1
SUSE Manager Server 4.1
libSDL2-2_0-0-2.0.8-150200.11.6.1
libSDL2-devel-2.0.8-150200.11.6.1
openSUSE Leap 15.3
libSDL2-2_0-0-2.0.8-150200.11.6.1
libSDL2-2_0-0-32bit-2.0.8-150200.11.6.1
libSDL2-devel-2.0.8-150200.11.6.1
libSDL2-devel-32bit-2.0.8-150200.11.6.1

Ссылки

Описание

There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution.

Затронутые продукты
SUSE Enterprise Storage 7:libSDL2-2_0-0-2.0.8-150200.11.6.1
SUSE Enterprise Storage 7:libSDL2-devel-2.0.8-150200.11.6.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libSDL2-2_0-0-2.0.8-150200.11.6.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libSDL2-devel-2.0.8-150200.11.6.1
Ссылки