Bug#933218: stretch-pu: package libsdl2-image/2.0.1+dfsg-2+deb9u2

["Adam D. Barratt" <adam@adam-barratt.org.uk>]

Control: tags -1 + confirmed

On 2019-07-27 13:32, Hugo Lefeuvre wrote:
> libsdl2-image is currently affected by the following security issues in
> stretch:
>
> * CVE-2018-3977: Heap buffer overflow.
>
> * CVE-2019-5052: integer overflow and subsequent buffer overflow in
>   IMG_pcx.c.
>
> * CVE-2019-5051: heap-based buffer overflow in IMG_pcx.c.
>
> * CVE-2019-7635: heap buffer overflow in Blit1to4 (IMG_bmp.c).
>
> * CVE-2019-12216, CVE-2019-12217,
>   CVE-2019-12218, CVE-2019-12219,
>   CVE-2019-12220, CVE-2019-12221,
>   CVE-2019-12222: OOB R/W in IMG_LoadPCX_RW (IMG_pcx.c).
>
> (for more information, see #932754)

Please go ahead; thanks.

Regards,

Adam