openSUSE-SU-2018:3906-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2018:3906-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2018:3906-1
Related
Published
2018-11-24T17:19:59Z
Modified
2018-11-24T17:19:59Z
Summary
Security update for SDL2_image
Details

This update for SDL2_image fixes the following issues:

Security issues fixed:

  • CVE-2018-3839: Fixed an exploitable code execution vulnerability that existed in the XCF image rendering functionality of the Simple DirectMedia Layer (bsc#1089087).
  • CVE-2018-3977: Fixed a possible code execution via creafted XCF image that could have caused a heap overflow (bsc#1114519).

This update was imported from the openSUSE:Leap:15.0:Update update project.

References

Affected packages

SUSE:Package Hub 15 / SDL2_image

Package

Name
SDL2_image
Purl
pkg:rpm/suse/SDL2_image&distro=SUSE%20Package%20Hub%2015

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.4-bp150.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "libSDL2_image-2_0-0": "2.0.4-bp150.3.3.1",
            "libSDL2_image-devel": "2.0.4-bp150.3.3.1",
            "libSDL2_image-devel-64bit": "2.0.4-bp150.3.3.1",
            "libSDL2_image-2_0-0-64bit": "2.0.4-bp150.3.3.1"
        }
    ]
}