Red Hat Security AdvisoryRHSA-2019:3950
SDL security update
Released 2019-11-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) SDL-1.2.15-14.el7_7
- Red Hat Enterprise Linux Client Optional (v. 7) SDL-devel-1.2.15-14.el7_7, SDL-static-1.2.15-14.el7_7
- Red Hat Enterprise Linux ComputeNode (v. 7) SDL-1.2.15-14.el7_7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) SDL-devel-1.2.15-14.el7_7, SDL-static-1.2.15-14.el7_7
- Red Hat Enterprise Linux Server (v. 7) SDL-1.2.15-14.el7_7, SDL-1.2.15-14.el7_7.ppc, SDL-devel-1.2.15-14.el7_7 +1
- Red Hat Enterprise Linux Server Optional (v. 7) SDL-static-1.2.15-14.el7_7, SDL-static-1.2.15-14.el7_7.ppc
- Red Hat Enterprise Linux Workstation (v. 7) SDL-1.2.15-14.el7_7, SDL-devel-1.2.15-14.el7_7
- Red Hat Enterprise Linux Workstation Optional (v. 7) SDL-static-1.2.15-14.el7_7
Fixes 1 record
Priority MEDIUM 42
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.03729 · Published 2019-07-16 · Partial fix CWE-125