Описание
Security update for SDL2
This update for SDL2 fixes the following issues:
- CVE-2021-33657: Fixed a heap overflow problem in video/SDL_pixels.c (bsc#1198001).
Список пакетов
SUSE Enterprise Storage 6
libSDL2-2_0-0-2.0.8-150000.3.21.1
libSDL2-devel-2.0.8-150000.3.21.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS
libSDL2-2_0-0-2.0.8-150000.3.21.1
libSDL2-devel-2.0.8-150000.3.21.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
libSDL2-2_0-0-2.0.8-150000.3.21.1
libSDL2-devel-2.0.8-150000.3.21.1
SUSE Linux Enterprise High Performance Computing 15-ESPOS
libSDL2-2_0-0-2.0.8-150000.3.21.1
libSDL2-devel-2.0.8-150000.3.21.1
SUSE Linux Enterprise High Performance Computing 15-LTSS
libSDL2-2_0-0-2.0.8-150000.3.21.1
libSDL2-devel-2.0.8-150000.3.21.1
SUSE Linux Enterprise Server 15 SP1-BCL
libSDL2-2_0-0-2.0.8-150000.3.21.1
libSDL2-devel-2.0.8-150000.3.21.1
SUSE Linux Enterprise Server 15 SP1-LTSS
libSDL2-2_0-0-2.0.8-150000.3.21.1
libSDL2-devel-2.0.8-150000.3.21.1
SUSE Linux Enterprise Server 15-LTSS
libSDL2-2_0-0-2.0.8-150000.3.21.1
libSDL2-devel-2.0.8-150000.3.21.1
SUSE Linux Enterprise Server for SAP Applications 15
libSDL2-2_0-0-2.0.8-150000.3.21.1
libSDL2-devel-2.0.8-150000.3.21.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
libSDL2-2_0-0-2.0.8-150000.3.21.1
libSDL2-devel-2.0.8-150000.3.21.1
Ссылки
- Link for SUSE-SU-2022:1313-1
- E-Mail link for SUSE-SU-2022:1313-1
- SUSE Security Ratings
- SUSE Bug 1198001
- SUSE CVE CVE-2021-33657 page
Описание
There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution.
Затронутые продукты
SUSE Enterprise Storage 6:libSDL2-2_0-0-2.0.8-150000.3.21.1
SUSE Enterprise Storage 6:libSDL2-devel-2.0.8-150000.3.21.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libSDL2-2_0-0-2.0.8-150000.3.21.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libSDL2-devel-2.0.8-150000.3.21.1
Ссылки
- CVE-2021-33657
- SUSE Bug 1198001
- SUSE Bug 1199105
- SUSE Bug 1200204