USN-4156-2: SDL vulnerabilities
libsdl1.2 vulnerabilities
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.04 ESM
- Ubuntu 12.04 ESM
Summary
Several security issues were fixed in SDL.
Software Description
- libsdl1.2 – Simple DirectMedia Layer debug files
Details
USN-4156-1 fixed several vulnerabilities in SDL. This update provides
the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that SDL incorrectly handled certain images. If a user
were tricked into opening a crafted image file, a remote attacker could
use this issue to cause SDL to crash, resulting in a denial of service, or
possibly execute arbitary code.
Update instructions
The problem can be corrected by updating your system to the following package versions:
- Ubuntu 14.04 ESM
- libsdl1.2debian – 1.2.15-8ubuntu1.1+esm1
- Ubuntu 12.04 ESM
- libsdl1.2debian – 1.2.14-6.4ubuntu3.2
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
In general, a standard system update will make all the necessary changes.
References
- USN-4156-1
- CVE-2019-13616
- CVE-2019-7572
- CVE-2019-7573
- CVE-2019-7574
- CVE-2019-7575
- CVE-2019-7576
- CVE-2019-7577
- CVE-2019-7578
- CVE-2019-7635
- CVE-2019-7636
- CVE-2019-7637
Source: USN-4156-2: SDL vulnerabilities
