UbuntuUpdates.org

Package "libsdl1.2debian"

Name: libsdl1.2debian

Description:

Simple DirectMedia Layer
Latest version: 1.2.15+dfsg2-0.1ubuntu0.2
Release: bionic (18.04)
Level: security
Repository: main
Head package: libsdl1.2
Homepage: http://www.libsdl.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libsdl1.2debian"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libsdl1.2debian" in Bionic

Repository Area Version
base main 1.2.15+dfsg2-0.1
updates main 1.2.15+dfsg2-0.1ubuntu0.2

Changelog

Version: 1.2.15+dfsg2-0.1ubuntu0.2 2022-04-28 21:06:20 UTC

  libsdl1.2 (1.2.15+dfsg2-0.1ubuntu0.2) bionic-security; urgency=medium

  * SECURITY UPDATE: Heap-based buffer overflow
    - debian/patches/CVE-2021-33657.patch: allocate enough size to handle
      possible larger values with a 256-entry map in Map1to1 and Map1toN
      functions in src/video/SDL_pixels.c.
    - CVE-2021-33657

 -- Rodrigo Figueiredo Zaiden <email address hidden> Mon, 18 Apr 2022 18:44:16 -0300
Source diff to previous version
CVE-2021-33657 There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, a

Version: 1.2.15+dfsg2-0.1ubuntu0.1 2019-10-15 18:06:51 UTC

  libsdl1.2 (1.2.15+dfsg2-0.1ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - debian/patches/*.patch: sync security patches with 1.2.15+dfsg2-5
      package. Thanks to Abhijith PA and Felix Geyer.
    - CVE-2019-7572, CVE-2019-7573, CVE-2019-7574, CVE-2019-7575,
      CVE-2019-7576, CVE-2019-7577, CVE-2019-7578, CVE-2019-7635,
      CVE-2019-7636, CVE-2019-7637, CVE-2019-7638, CVE-2019-13616.

 -- Marc Deslauriers <email address hidden> Tue, 15 Oct 2019 09:49:28 -0400
CVE-2019-7572 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.
CVE-2019-7573 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the
CVE-2019-7574 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c.
CVE-2019-7575 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c.
CVE-2019-7576 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside th
CVE-2019-7577 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c.
CVE-2019-7578 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c.
CVE-2019-7635 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
CVE-2019-7636 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c.
CVE-2019-7637 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c.
CVE-2019-7638 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.
CVE-2019-13616 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called f


About   -   Send Feedback to @ubuntu_updates