Debian alert DLA-4382-1 (libsdl2)

From:
             
 
Thorsten Alteholz <debian@alteholz.de>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4382-1] libsdl2 security update
Date:
             
 
Tue, 25 Nov 2025 18:42:33 +0000
Message-ID:
             
 
<7f38c7bf-39d-7cb4-aa8a-86df671142@alteholz.de>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4382-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                    Thorsten Alteholz
November 25, 2025                             https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : libsdl2
Version        : 2.0.14+dfsg2-3+deb11u2
CVE ID         : CVE-2022-4743


A security vulnerability has been discovered in SDL2, the Simple
DirectMedia Layer library. This issue is related to memory leak, which 
might result in a denial of service.


For Debian 11 bullseye, this problem has been fixed in version
2.0.14+dfsg2-3+deb11u2.

We recommend that you upgrade your libsdl2 packages.

For the detailed security status of libsdl2 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libsdl2

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

-----BEGIN PGP SIGNATURE-----
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=T+VW
-----END PGP SIGNATURE-----