========================================================================== Ubuntu Security Notice USN-4143-1 September 30, 2019 SDL 2.0 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 19.04 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: SDL 2.0 could be made to crash or run programs as your login if it opened a specially crafted file. Software Description: - libsdl2: Simple DirectMedia Layer: cross-platform development library providing access to low level media interfaces Details: It was discovered that SDL 2.0 mishandled crafted image files resulting in an integer overflow. If a user were tricked into opening a malicious file, SDL 2.0 could be caused to crash or potentially run arbitrary code. (CVE-2017-2888) It was discovered that SDL 2.0 mishandled crafted image files. If a user were tricked into opening a malicious file, SDL 2.0 could be caused to crash or potentially run arbitrary code. (CVE-2019-7635, CVE-2019-7636, CVE-2019-7637, CVE-2019-7638) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04: libsdl2-2.0-0 2.0.9+dfsg1-1ubuntu1.19.04.1 Ubuntu 18.04 LTS: libsdl2-2.0-0 2.0.8+dfsg1-1ubuntu1.18.04.4 Ubuntu 16.04 LTS: libsdl2-2.0-0 2.0.4+dfsg1-2ubuntu2.16.04.2 In general, a standard system update will make all the necessary changes. References: https://usn.ubuntu.com/4143-1 CVE-2017-2888, CVE-2019-7635, CVE-2019-7636, CVE-2019-7637, CVE-2019-7638 Package Information: https://launchpad.net/ubuntu/+source/libsdl2/2.0.9+dfsg1-1ubuntu1.19.04.1 https://launchpad.net/ubuntu/+source/libsdl2/2.0.8+dfsg1-1ubuntu1.18.04.4 https://launchpad.net/ubuntu/+source/libsdl2/2.0.4+dfsg1-2ubuntu2.16.04.2