Lucene search

K
suseSuseOPENSUSE-SU-2022:0104-1
HistoryApr 07, 2022 - 12:00 a.m.

Security update for SDL2 (important)

2022-04-0700:00:00
lists.opensuse.org
26

0.003 Low

EPSS

Percentile

66.0%

An update that fixes three vulnerabilities is now available.

Description:

This update for SDL2 fixes the following issues:

  • CVE-2020-14409: Fixed Integer Overflow resulting in heap corruption in
    SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP (bsc#1181202).
  • CVE-2020-14410: Fixed heap-based buffer over-read in
    Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP
    (bsc#1181201).

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.3:

    zypper in -t patch openSUSE-SLE-15.3-2022-104=1

  • openSUSE Backports SLE-15-SP3:

    zypper in -t patch openSUSE-2022-104=1