Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 35: FEDORA-2022-971a3d2021 Important: mingw-SDL2 Security Update

fedora
Calendar Grey May 11, 2022
Dist Fedora Esm H88
Security update for Fedora 34 addressing CVE-2022-27470 in SDL font library to prevent memory issues.
Security fix for CVE-2022-27470

Summary

Simple DirectMedia Layer (SDL2) is a cross-platform multimedia library

designed to provide fast access to the graphics frame buffer and audio device.

This package contains a library that allows you to use TrueType fonts

to render text in SDL2 applications.

Security fix for CVE-2022-27470

* Wed May 4 2022 Artur Frenszek-Iwicki - 2.0.18-2

- Add a patch for CVE-2022-27470

[ 1 ] Bug #2081599 - CVE-2022-27470 sdf_ttf: Arbitrary memory overwrite occurs when loading glyphs and rendering text with a malformed TTF file

https://bugzilla.redhat.com/show_bug.cgi?id=2081599

su -c 'dnf upgrade --advisory FEDORA-2022-857d1f7050' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Product: Fedora 34
Version: 2.0.18
Release: 2.fc34
Summary: MinGW Windows port of the TrueType font handling library for SDL2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here