Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2019.2471
SDL2_image -- multiple vulnerabilities
5 July 2019
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: SDL2_image
Publisher: FreeBSD
Operating System: FreeBSD
UNIX variants (UNIX, Linux, OSX)
Windows
Impact/Access: Execute Arbitrary Code/Commands -- Remote with User Interaction
Denial of Service -- Remote with User Interaction
Resolution: Patch/Upgrade
CVE Names: CVE-2019-5052 CVE-2019-5051
Original Bulletin:
http://www.vuxml.org/freebsd/3394bc2b-9da4-11e9-951e-14dae9d5a9d2.html
Comment: This advisory references vulnerabilities in products which run on
platforms other than FreeBSD. It is recommended that administrators
running SDL2_image check for an updated version of the software for
their operating system.
- --------------------------BEGIN INCLUDED TEXT--------------------
SDL2_image -- multiple vulnerabilities
Affected packages
sdl2_image < 2.0.5
Details
VuXML ID 3394bc2b-9da4-11e9-951e-14dae9d5a9d2
Discovery 2019-07-02
Entry 2019-07-03
SDL_image developers report:
Fixed a number of security issues:
TALOS-2019-0820
TALOS-2019-0821
TALOS-2019-0841
TALOS-2019-0842
TALOS-2019-0843
TALOS-2019-0844
References
CVE Name CVE-2019-5051
CVE Name CVE-2019-5052
URL https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0820
URL https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0821
URL https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0841
URL https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0842
URL https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0843
URL https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0844
Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=rSYc
-----END PGP SIGNATURE-----