Lucene search

K
suseSuseOPENSUSE-SU-2018:0734-1
HistoryMar 18, 2018 - 3:09 p.m.

Security update for SDL2, SDL2_image (important)

2018-03-1815:09:14
lists.opensuse.org
57

0.005 Low

EPSS

Percentile

74.5%

This update for SDL2 and SDL2_image fixes the following issues:

  • CVE-2017-14441: Code execution in the ICO image rendering (bsc#1084282).
  • CVE-2017-14440: Potential code execution in the ILBM image rendering
    functionality (bsc#1084257).
  • CVE-2017-12122: Potential code execution in the ILBM image rendering
    fuctionality (bsc#1084256).
  • CVE-2017-14448: Heap buffer overflow in the XCF image rendering
    functionality (bsc#1084303).
  • CVE-2017-14449: Double-Free in the XCF image rendering (bsc#1084297).
  • CVE-2017-14442: Stack buffer overflow the BMP image rendering
    functionality (bsc#1084304).
  • CVE-2017-14450: Buffer overflow in the GIF image parsing (bsc#1084288).

Bug fixes:

  • boo#1025413: Add dbus-ime.diff and build with fcitx.