Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:1273-1

Опубликовано: 20 апр. 2022
Источник: suse-cvrf

Описание

Security update for SDL

This update for SDL fixes the following issues:

  • CVE-2020-14409: Fixed an integer overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c. (bsc#1181202)
  • CVE-2020-14410: Fixed a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c. (bsc#1181201)
  • CVE-2021-33657: Fixed a Heap overflow problem in video/SDL_pixels.c. (bsc#1198001)

Список пакетов

SUSE Enterprise Storage 6
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Enterprise Storage 7
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Linux Enterprise High Performance Computing 15-ESPOS
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Linux Enterprise High Performance Computing 15-LTSS
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP3
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Linux Enterprise Module for Package Hub 15 SP3
libSDL-1_2-0-1.2.15-150000.3.19.1
SUSE Linux Enterprise Real Time 15 SP2
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Linux Enterprise Server 15 SP1-BCL
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Linux Enterprise Server 15 SP1-LTSS
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Linux Enterprise Server 15 SP2-BCL
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Linux Enterprise Server 15 SP2-LTSS
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Linux Enterprise Server 15-LTSS
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Linux Enterprise Server for SAP Applications 15
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Manager Proxy 4.1
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Manager Retail Branch Server 4.1
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
SUSE Manager Server 4.1
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
openSUSE Leap 15.3
libSDL-1_2-0-1.2.15-150000.3.19.1
libSDL-1_2-0-32bit-1.2.15-150000.3.19.1
libSDL-devel-1.2.15-150000.3.19.1
libSDL-devel-32bit-1.2.15-150000.3.19.1

Ссылки

Описание

SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.

Затронутые продукты
SUSE Enterprise Storage 6:libSDL-1_2-0-1.2.15-150000.3.19.1
SUSE Enterprise Storage 6:libSDL-devel-1.2.15-150000.3.19.1
SUSE Enterprise Storage 7:libSDL-1_2-0-1.2.15-150000.3.19.1
SUSE Enterprise Storage 7:libSDL-devel-1.2.15-150000.3.19.1
Ссылки

Описание

SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.

Затронутые продукты
SUSE Enterprise Storage 6:libSDL-1_2-0-1.2.15-150000.3.19.1
SUSE Enterprise Storage 6:libSDL-devel-1.2.15-150000.3.19.1
SUSE Enterprise Storage 7:libSDL-1_2-0-1.2.15-150000.3.19.1
SUSE Enterprise Storage 7:libSDL-devel-1.2.15-150000.3.19.1
Ссылки

Описание

There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution.

Затронутые продукты
SUSE Enterprise Storage 6:libSDL-1_2-0-1.2.15-150000.3.19.1
SUSE Enterprise Storage 6:libSDL-devel-1.2.15-150000.3.19.1
SUSE Enterprise Storage 7:libSDL-1_2-0-1.2.15-150000.3.19.1
SUSE Enterprise Storage 7:libSDL-devel-1.2.15-150000.3.19.1
Ссылки
Уязвимость SUSE-SU-2022:1273-1