[ GLSA 201909-07 ] Simple DirectMedia Layer

[GLSA]

Gentoo Linux Security Advisory

Title: Simple DirectMedia Layer: Multiple vulnerabilities (GLSA 201909-07)
Severity: normal
Exploitable: remote
Date: 2019-09-08
Bug(s): #690064, #692392
ID: 201909-07

Synopsis

Multiple vulnerabilities have been found in Simple DirectMedia
Layer, the worst of which could result in the arbitrary execution of code.


Background

Simple DirectMedia Layer is a cross-platform development library
designed to provide low level access to audio, keyboard, mouse, joystick,
and graphics hardware via OpenGL and Direct3D.


Affected Packages

Package: media-libs/libsdl2
Vulnerable: < 2.0.10
Unaffected: >= 2.0.10
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Simple DirectMedia
Layer. Please review the CVE identifiers referenced below for details.


Impact

A remote attacker could entice a user to process a specially crafted
audio or video, possibly resulting in execution of arbitrary code with
the privileges of the process or a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Simple DirectMedia Layer users should upgrade to the latest version: