< back to search

shield Security update for sdl_image
sdksp4-SDL_image-13859

This update for SDL_image fixes the following issues: - CVE-2017-14442: A specially crafted BMP image could have caused a stack overflow for an attacker that can display a specially crafted image (bsc#1084304). - CVE-2017-14450: A specially crafted GIF image could have caused a buffer overflow on a global section for an attacker that can display an image (bsc#1084288). - CVE-2017-12122: An exploitable code execution vulnerability exists in the ILBM image rendering functionality. A specially crafted ILBM image can cause a heap overflow resulting in code execution. (bsc#1084256). - CVE-2017-14440: An exploitable code execution vulnerability exists in the ILBM image rendering functionality. A specially crafted ILBM image can cause a stack overflow resulting in code execution. (bsc#1084257). - CVE-2017-14448: An exploitable code execution vulnerability exists in the XCF image rendering functionality. A specially crafted XCF image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability. (bsc#1084303). - CVE-2018-3839: An exploitable code execution vulnerability exists in the XCF image rendering functionality. A specially crafted XCF image can cause an out-of-bounds write on the heap, resulting in code execution. (bsc#1089087).

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 11.4 unknown
  • Packages
    SDL_image
    Simple DirectMedia Layer--Sample Image Loading Library
    1.2.6-84.42.1 lock rpm lock src
    SDL_image-devel
    Libraries, includes and more to develop SDL_image applications
    1.2.6-84.42.1 lock rpm
SUSE Linux Enterprise Software Development Kit 11.4 unknown
  • Packages
    SDL_image
    Simple DirectMedia Layer--Sample Image Loading Library
    1.2.6-84.42.1 lock rpm lock src
    SDL_image-devel
    Libraries, includes and more to develop SDL_image applications
    1.2.6-84.42.1 lock rpm
SUSE Linux Enterprise Software Development Kit 11.4 unknown
  • Packages
    SDL_image
    Simple DirectMedia Layer--Sample Image Loading Library
    1.2.6-84.42.1 lock rpm lock src
    SDL_image-devel
    Libraries, includes and more to develop SDL_image applications
    1.2.6-84.42.1 lock rpm
SUSE Linux Enterprise Software Development Kit 11.4 unknown
  • Packages
    SDL_image
    Simple DirectMedia Layer--Sample Image Loading Library
    1.2.6-84.42.1 lock rpm lock src
    SDL_image-devel
    Libraries, includes and more to develop SDL_image applications
    1.2.6-84.42.1 lock rpm
SUSE Linux Enterprise Software Development Kit 11.4 unknown
  • Packages
    SDL_image
    Simple DirectMedia Layer--Sample Image Loading Library
    1.2.6-84.42.1 lock rpm lock src
    SDL_image-devel
    Libraries, includes and more to develop SDL_image applications
    1.2.6-84.42.1 lock rpm