Debian Security Advisory
DLA-1134-1 sdl-image1.2 -- LTS security update
- Date Reported:
- 16 Oct 2017
- Affected Packages:
- Security database references:
- In Mitre's CVE dictionary: CVE-2017-2887.
- More information:
It was discovered that there was a buffer overflow vulnerability in sdl-image1.2, an image loading library.
A specially crafted .xcf file could cause a stack-based buffer overflow resulting in potential code execution.
For Debian 7
Wheezy, this issue has been fixed in sdl-image1.2 version 1.2.12-2+deb7u1.
We recommend that you upgrade your sdl-image1.2 packages.