UbuntuUpdates.org

Package "libsdl2"

Name: libsdl2

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Simple DirectMedia Layer
  • Simple DirectMedia Layer development files
  • Reference manual for libsdl2

Latest version: 2.0.8+dfsg1-1ubuntu1.18.04.4
Release: bionic (18.04)
Level: updates
Repository: universe

Links



Other versions of "libsdl2" in Bionic

Repository Area Version
base universe 2.0.8+dfsg1-1ubuntu1
security universe 2.0.8+dfsg1-1ubuntu1.18.04.4

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.0.8+dfsg1-1ubuntu1.18.04.4 2019-09-30 16:06:58 UTC

  libsdl2 (2.0.8+dfsg1-1ubuntu1.18.04.4) bionic-security; urgency=medium

  * SECURITY UPDATE: heap-based buffer over-read in Blit1to4
    - debian/patches/CVE-2019-7635.diff: add error checking to SDL_LoadBMP_RW
    - CVE-2019-7635
  * SECURITY UPDATE: heap-based buffer over-read in Map1toN and
     SDL_GetRGB
    - debian/patches/CVE-2019-7636_CVE-2019-7638.patch: add error checking to
      SDL_LoadBMP_RW
    - CVE-2019-7636
    - CVE-2019-7638

 -- Avital Ostromich <email address hidden> Wed, 28 Aug 2019 13:59:20 -0400

Source diff to previous version
CVE-2019-7635 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
CVE-2019-7636 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c.
CVE-2019-7638 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.

Version: 2.0.8+dfsg1-1ubuntu1.18.04.3 2019-03-18 12:06:30 UTC

  libsdl2 (2.0.8+dfsg1-1ubuntu1.18.04.3) bionic; urgency=medium

  [ Gianfranco Costamagna ]
  * Enable vulkan everywhere

  [ Ryan C. Gordon (icculus) ]
  * Disable --disable-loadso switch, it was useless and it is wrong
    in many cases (see LP: #1740517 for discussion)

 -- Gianfranco Costamagna <email address hidden> Thu, 28 Feb 2019 10:38:26 +0100

Source diff to previous version
1740517 [SRU] SDL2 2.0.6 isn't compiled with Vulkan support

Version: 2.0.8+dfsg1-1ubuntu1.18.04.1 2018-07-03 08:07:14 UTC

  libsdl2 (2.0.8+dfsg1-1ubuntu1.18.04.1) bionic; urgency=medium

  * debian/patches/SDL2-dynapi-symbol-resolution-fix.patch:
    cherry-pick upstream fix for Unity-based games shipping bundled
    libsdl2 version (LP: #1772471)
    - thanks Ryan Gordon for the patch and help!

 -- Gianfranco Costamagna <email address hidden> Tue, 22 May 2018 09:24:20 +0200

1772471 [SRU] Bug in SDL2 blocks Unity-based games



About   -   Send Feedback to @ubuntu_updates