The following updates has been released for Ubuntu Linux:

USN-4142-1: e2fsprogs vulnerability
USN-4142-2: e2fsprogs vulnerability
USN-4143-1: SDL 2.0 vulnerabilities

USN-4142-1: e2fsprogs vulnerability

=========================================================================
Ubuntu Security Notice USN-4142-1
September 30, 2019

e2fsprogs vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 19.04
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

e2fsprogs could be made to execute arbitrary code if it is running in
a crafted ext4 partition.

Software Description:
- e2fsprogs: ext2/ext3/ext4 file system utilities

Details:

It was discovered that e2fsprogs incorrectly handled certain ext4 partitions.
An attacker could possibly use this issue to execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
e2fsprogs 1.44.6-1ubuntu0.1

Ubuntu 18.04 LTS:
e2fsprogs 1.44.1-1ubuntu1.2

Ubuntu 16.04 LTS:
e2fsprogs 1.42.13-1ubuntu1.1

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4142-1
CVE-2019-5094

Package Information:
https://launchpad.net/ubuntu/+source/e2fsprogs/1.44.6-1ubuntu0.1
https://launchpad.net/ubuntu/+source/e2fsprogs/1.44.1-1ubuntu1.2
https://launchpad.net/ubuntu/+source/e2fsprogs/1.42.13-1ubuntu1.1

USN-4142-2: e2fsprogs vulnerability

=========================================================================
Ubuntu Security Notice USN-4142-2
September 30, 2019

e2fsprogs vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 14.04 ESM
- Ubuntu 12.04 ESM

Summary:

e2fsprogs could be made to execute arbitrary code if it is
running in a crafted ext4 partition.

Software Description:
- e2fsprogs: ext2/ext3/ext4 file system utilities

Details:

USN-4142-1 fixed a vulnerability in e2fsprogs. This update provides
the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

Original advisory details:

It was discovered that e2fsprogs incorrectly handled certain ext4 partitions.
An attacker could possibly use this issue to execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
e2fsprogs 1.42.9-3ubuntu1.3+esm1

Ubuntu 12.04 ESM:
e2fsprogs 1.42-1ubuntu2.4

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4142-2
https://usn.ubuntu.com/4142-1
CVE-2019-5094

USN-4143-1: SDL 2.0 vulnerabilities

==========================================================================
Ubuntu Security Notice USN-4143-1
September 30, 2019

SDL 2.0 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 19.04
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

SDL 2.0 could be made to crash or run programs as your login if it
opened a specially crafted file.

Software Description:
- libsdl2: Simple DirectMedia Layer: cross-platform development library
providing access to low level media interfaces

Details:

It was discovered that SDL 2.0 mishandled crafted image files resulting in an
integer overflow. If a user were tricked into opening a malicious file, SDL
2.0 could be caused to crash or potentially run arbitrary code.
(CVE-2017-2888)

It was discovered that SDL 2.0 mishandled crafted image files. If a user were
tricked into opening a malicious file, SDL 2.0 could be caused to crash or
potentially run arbitrary code.
(CVE-2019-7635, CVE-2019-7636, CVE-2019-7637, CVE-2019-7638)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
libsdl2-2.0-0 2.0.9+dfsg1-1ubuntu1.19.04.1

Ubuntu 18.04 LTS:
libsdl2-2.0-0 2.0.8+dfsg1-1ubuntu1.18.04.4

Ubuntu 16.04 LTS:
libsdl2-2.0-0 2.0.4+dfsg1-2ubuntu2.16.04.2

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4143-1
CVE-2017-2888, CVE-2019-7635, CVE-2019-7636, CVE-2019-7637,
CVE-2019-7638

Package Information:
https://launchpad.net/ubuntu/+source/libsdl2/2.0.9+dfsg1-1ubuntu1.19.04.1
https://launchpad.net/ubuntu/+source/libsdl2/2.0.8+dfsg1-1ubuntu1.18.04.4
https://launchpad.net/ubuntu/+source/libsdl2/2.0.4+dfsg1-2ubuntu2.16.04.2