SDL-1.2.15-36.fc29
FEDORA-2019-7a554204c1 created by ppisar 2 years ago for Fedora 29
stable

This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files.

How to install

sudo dnf upgrade --advisory=FEDORA-2019-7a554204c1

This update has been submitted for testing by ppisar.

2 years ago

This update has been pushed to testing.

2 years ago
User Icon besser82 commented & provided feedback 2 years ago
karma

Works great! LGTM! =)

User Icon andilinux commented & provided feedback 2 years ago
karma

works great

User Icon filiperosset commented & provided feedback 2 years ago
karma

no regressions noted

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

2 years ago

This update has been submitted for stable by ppisar.

2 years ago

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata
Type
security
Severity
medium
Karma
3
Signed
Content Type
RPM
Test Gating
Builds
1
SDL-1.2.15-36.fc29
Settings
Unstable by Karma
-3
Stable by Karma
disabled
Stable by Time
disabled
Dates
submitted
2 years ago
in testing
2 years ago
in stable
2 years ago
BZ#1676509 CVE-2019-7577 SDL: Buffer over-read in function SDL_LoadWAV_RW in audio/SDL_wave.c
0
0
BZ#1676510 CVE-2019-7577 SDL: Buffer over-read in function SDL_LoadWAV_RW in audio/SDL_wave.c [fedora-all]
0
0
BZ#1676743 CVE-2019-7575 SDL: Heap based buffer overflow in function MS_ADPCM_decode in audio/SDL_wave.c
0
0
BZ#1676744 CVE-2019-7575 SDL: Heap based buffer overflow in function MS_ADPCM_decode in audio/SDL_wave.c [fedora-all]
0
0
BZ#1676749 CVE-2019-7574 SDL: heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c
0
0
BZ#1676750 CVE-2019-7574 SDL: heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c [fedora-all]
0
0
BZ#1676751 CVE-2019-7573 SDL: heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c
0
0
BZ#1676752 CVE-2019-7573 SDL: heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c [fedora-all]
0
0
BZ#1676753 CVE-2019-7572 SDL: Buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c
0
0
BZ#1676754 CVE-2019-7572 SDL: BUffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c [fedora-all]
0
0
BZ#1676755 CVE-2019-7576 SDL: heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c
0
0
BZ#1676756 CVE-2019-7576 SDL: heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c [fedora-all]
0
0
BZ#1676781 CVE-2019-7578 SDL: heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c
0
0
BZ#1676782 CVE-2019-7578 SDL: heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c [fedora-all]
0
0
BZ#1677143 CVE-2019-7638 SDL: heap-based buffer over-read in Map1toN in video/SDL_pixels.c
0
0
BZ#1677144 CVE-2019-7638 SDL: heap-based buffer over-read in Map1toN in video/SDL_pixels.c [fedora-all]
0
0
BZ#1677151 CVE-2019-7637 SDL: heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c
0
0
BZ#1677152 CVE-2019-7637 SDL: heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c [fedora-all]
0
0
BZ#1677156 CVE-2019-7636 SDL: heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c
0
0
BZ#1677157 CVE-2019-7636 SDL: heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c [fedora-all]
0
0
BZ#1677158 CVE-2019-7635 SDL: heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c
0
0
BZ#1677159 CVE-2019-7635 SDL: heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c [fedora-all]
0
0

Automated Test Results

Copyright © 2007-2019 Red Hat, Inc. and others.

Running bodhi-5.7.0 on bodhi-web-123-vfvfr.

bodhi is Free Software. Please file issues if you have any problems. Read the documentation.

• Composes • Legal • Privacy policy •