CVE-2019-13616 · cross-distro fix matrix

CVE-2019-13616: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.

Affects 8 Linux releases across 21 (distro × package) combinations.

Fix per ecosystem

Each block below is a distro release where CVE-2019-13616 has a known fix. Run the listed command on that distro to remediate.

Source: Debian Security Tracker

libsdl1.2→ fixed in1.2.15+dfsg2-5urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libsdl1.2
```
libsdl2→ fixed in2.0.10+dfsg1-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libsdl2
```
libsdl2-image→ fixed in2.0.5+dfsg1-2urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libsdl2-image
```
sdl-image1.2→ fixed in1.2.12-12urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y sdl-image1.2
```

Source: Debian Security Tracker

libsdl1.2→ fixed in1.2.15+dfsg2-5urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libsdl1.2
```
libsdl2→ fixed in2.0.10+dfsg1-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libsdl2
```
libsdl2-image→ fixed in2.0.5+dfsg1-2urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libsdl2-image
```
sdl-image1.2→ fixed in1.2.12-12urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y sdl-image1.2
```

Source: Debian Security Tracker

libsdl2→ fixed in2.0.10+dfsg1-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libsdl2
```
libsdl2-image→ fixed in2.0.5+dfsg1-2urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libsdl2-image
```
sdl-image1.2→ fixed in1.2.12-12urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y sdl-image1.2
```