Ubuntu Security Notices
USN-5398-1

USN-5398-1: Simple DirectMedia Layer vulnerability

Publication date

28 April 2022

Overview

SDL (Simple DirectMedia Layer) could be made to crash or run programs if it opened a specially crafted file.

Releases

21.10 18.04 LTS 16.04 LTS 14.04 LTS

Packages

libsdl1.2 - Simple DirectMedia Layer
libsdl2 - Cross-platform multimedia library with low access to hardware

Details

It was discovered that SDL (Simple DirectMedia Layer) incorrectly handled
certain files. An attacker could possibly use this issue to cause a denial
of service, or possibly execute arbitrary code.

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release	Package Version
21.10 impish	libsdl2-2.0-0 – 2.0.14+dfsg2-3ubuntu0.1
18.04 bionic	libsdl1.2debian – 1.2.15+dfsg2-0.1ubuntu0.2
16.04 xenial	libsdl1.2debian – 1.2.15+dfsg1-3ubuntu0.1+esm1
14.04 trusty	libsdl1.2debian – 1.2.15-8ubuntu1.1+esm2

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

CVE-2021-33657

CVE-2021-33657