Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Fedora 29: FEDORA-2019-bd5021e771 Major LibXML2 Buffer Overflow

fedora
Calendar Grey November 15, 2018
Dist Fedora Esm H88
Ubuntu 20.04 GLFW update addresses major performance vulnerabilities, reinforcing software stability and user safety.
Security fix for CVE-2018-3977

Summary

Simple DirectMedia Layer (SDL) is a cross-platform multimedia library

designed to provide fast access to the graphics frame buffer and audio

device. This package contains a simple library for loading images of

various formats (BMP, PPM, PCX, GIF, JPEG, PNG) as SDL surfaces.

Security fix for CVE-2018-3977

* Tue Nov 6 2018 Pete Walter - 2.0.4-1

- Update to 2.0.4

* Thu Jul 12 2018 Fedora Release Engineering - 2.0.3-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[ 1 ] Bug #1646575 - CVE-2018-3977 SDL2_image: code execution in the XCF image rendering functionality

https://bugzilla.redhat.com/show_bug.cgi?id=1646575

su -c 'dnf upgrade --advisory FEDORA-2018-ae9027a506' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Product: Fedora 28
Version: 2.0.4
Release: 1.fc28
Summary: Image loading library for SDL

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here