High ELSA-2019-4024 2 CVEs

Important: SDL security update (Oracle Linux 7)

Published Dec 2, 2019 · Updated Dec 2, 2019

Ecosystem: Oracle Linux

Summary

[1.2.15-15]
- Fix CVE-2019-13616 (a heap buffer over-read in BlitNtoN) (bug #1747237)
- Resolves: rhbz#1756276

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	SDL	0:1.2.15-15.el7_7
Oracle Linux · 7	SDL-devel	0:1.2.15-15.el7_7
Oracle Linux · 7	SDL-static	0:1.2.15-15.el7_7

Vulnerabilities 2

High 8.1

CVE-2019-14906

A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue…

Red Hat SDL

Jan 7, 2020
Unscored —

CVE-2019-13616

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in vi…

sdl-image1.2 libsdl2-image libsdl2-image sdl-image1.2 Debian Ubuntu Alpine

Jul 16, 2019