Control: tags -1 + confirmed
On 2019-07-27 13:32, Hugo Lefeuvre wrote:
libsdl2-image is currently affected by the following security issues in
stretch:
* CVE-2018-3977: Heap buffer overflow.
* CVE-2019-5052: integer overflow and subsequent buffer overflow in
IMG_pcx.c.
* CVE-2019-5051: heap-based buffer overflow in IMG_pcx.c.
* CVE-2019-7635: heap buffer overflow in Blit1to4 (IMG_bmp.c).
* CVE-2019-12216, CVE-2019-12217,
CVE-2019-12218, CVE-2019-12219,
CVE-2019-12220, CVE-2019-12221,
CVE-2019-12222: OOB R/W in IMG_LoadPCX_RW (IMG_pcx.c).
(for more information, see #932754)
Please go ahead; thanks.
Regards,
Adam
