Get Gentoo!
gentoo.org sites
gentoo.org Wiki Bugs Forums Packages
Planet Archives Sources
Infra Status

SDL 2: Multiple vulnerabilities — GLSA 202107-55

Multiple vulnerabilities have been found in libsdl2, the worst of which could result in a Denial of Service condition.

Affected packages

Package media-libs/libsdl2 on all architectures
Affected versions < 2.0.14-r1
Unaffected versions >= 2.0.14-r1

Background

Simple DirectMedia Layer is a cross-platform development library designed to provide low level access to audio, keyboard, mouse, joystick, and graphics hardware via OpenGL and Direct3D.

Description

Multiple vulnerabilities have been discovered in SDL 2. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All SDL 2 users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=media-libs/libsdl2-2.0.14-r1"

References

Release date
July 24, 2021

Latest revision
July 24, 2021: 1

Severity
low

Exploitable
remote

Bugzilla entries