USN-4156-2: SDL vulnerabilities
USN-4156-1 fixed several vulnerabilities in SDL. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that SDL incorrectly handled certain images. If a user were tricked into opening a crafted image file, a remote attacker could use this issue to cause SDL to crash, resulting in a denial of service, or possibly execute arbitary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libsdl1.2debianto a version that resolves this vulnerability.Fixed in 1.2.15-8ubuntu1.1+esm1 - Upgrade
Upgrade
ubuntu/libsdl1.2debianto a version that resolves this vulnerability.Fixed in 1.2.14-6.4ubuntu3.2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-4156-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-4156-2
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID of this update?
The vulnerability ID of this update is USN-4156-2.
What software is affected by this vulnerability?
The software affected by this vulnerability is libsdl1.2debian version 1.2.15-8ubuntu1.1+esm1 on Ubuntu 14.04 and libsdl1.2debian version 1.2.14-6.4ubuntu3.2 on Ubuntu 12.04.
What is the severity of this vulnerability?
The severity of this vulnerability is not provided in the information given.
How can I fix this vulnerability?
To fix this vulnerability, update the affected software to the recommended version: libsdl1.2debian version 1.2.15-8ubuntu1.1+esm1 on Ubuntu 14.04 and libsdl1.2debian version 1.2.14-6.4ubuntu3.2 on Ubuntu 12.04.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability on the Ubuntu security advisory page: [USN-4156-2](https://ubuntu.com/security/USN-4156-2).