Описание
Security update for SDL2
This update for SDL2 fixes the following issues:
- CVE-2020-14409: Fixed Integer Overflow resulting in heap corruption in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP (bsc#1181202).
- CVE-2020-14410: Fixed heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP (bsc#1181201).
Список пакетов
openSUSE Leap 15.4
libSDL2-2_0-0-2.0.8-11.3.1
libSDL2-2_0-0-32bit-2.0.8-11.3.1
libSDL2-devel-2.0.8-11.3.1
libSDL2-devel-32bit-2.0.8-11.3.1
Ссылки
- E-Mail link for openSUSE-SU-2022:0104-2
- SUSE Security Ratings
- SUSE Bug 1181201
- SUSE Bug 1181202
- SUSE CVE CVE-2020-14409 page
- SUSE CVE CVE-2020-14410 page
Описание
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.
Затронутые продукты
openSUSE Leap 15.4:libSDL2-2_0-0-2.0.8-11.3.1
openSUSE Leap 15.4:libSDL2-2_0-0-32bit-2.0.8-11.3.1
openSUSE Leap 15.4:libSDL2-devel-2.0.8-11.3.1
openSUSE Leap 15.4:libSDL2-devel-32bit-2.0.8-11.3.1
Ссылки
- CVE-2020-14409
- SUSE Bug 1181202
Описание
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.
Затронутые продукты
openSUSE Leap 15.4:libSDL2-2_0-0-2.0.8-11.3.1
openSUSE Leap 15.4:libSDL2-2_0-0-32bit-2.0.8-11.3.1
openSUSE Leap 15.4:libSDL2-devel-2.0.8-11.3.1
openSUSE Leap 15.4:libSDL2-devel-32bit-2.0.8-11.3.1
Ссылки
- CVE-2020-14410
- SUSE Bug 1181201