Debian Package Tracker

general

source: libsdl2 (main)
version: 2.0.10+dfsg1-2
maintainer: Debian SDL packages maintainers (archive) (DMD)
uploaders: Sam Hocevar [DMD] – Felix Geyer [DMD] – Manuel A. Fernandez Montecelo [DMD]
arch: all any
std-ver: 4.2.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.0.2+dfsg1-6
o-o-sec: 2.0.2+dfsg1-6+deb8u2
oldstable: 2.0.5+dfsg1-2
stable: 2.0.9+dfsg1-1
testing: 2.0.10+dfsg1-2
unstable: 2.0.10+dfsg1-2

versioned links

2.0.2+dfsg1-6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0.2+dfsg1-6+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0.5+dfsg1-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0.9+dfsg1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0.10+dfsg1-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libsdl2-2.0-0 (4 bugs: 0, 4, 0, 0)
libsdl2-dev (3 bugs: 1, 2, 0, 0)
libsdl2-doc

action needed

2 bugs tagged patch in the BTS normal

The BTS contains patches fixing 2 bugs, consider including or untagging them.

Created: 2020-02-18 Last update: 2020-02-19 15:31

Does not build reproducibly during testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2020-02-09 Last update: 2020-02-18 15:00

1 new commit since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit aeb6a0bb49d5ddf184cbb43fa319867eca384570
Author: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Date:   Fri Feb 7 09:13:47 2020 +0100

    Fix autopkgtests, by making sure sdl2-config calls the correct pkg-config command

Created: 2020-02-07 Last update: 2020-02-13 02:09

12 ignored security issues in buster low

There are 12 open security issues in buster.

12 issues skipped by the security teams:

CVE-2019-7572: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.
CVE-2019-7573: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the wNumCoef loop).
CVE-2019-13626: SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c.
CVE-2019-7576: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop).
CVE-2019-7577: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c.
CVE-2019-7574: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c.
CVE-2019-7578: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c.
CVE-2019-7575: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c.
CVE-2019-13616: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
CVE-2019-7638: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.
CVE-2019-7635: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
CVE-2019-7636: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c.

Please fix them.

Created: 2019-02-07 Last update: 2020-02-08 07:00

3 ignored security issues in jessie low

There are 3 open security issues in jessie.

3 issues skipped by the security teams:

CVE-2019-13626: SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c.
CVE-2017-2888: An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.
CVE-2019-13616: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.

Please fix them.

Created: 2017-10-11 Last update: 2020-02-08 07:00

14 ignored security issues in stretch low

There are 14 open security issues in stretch.

14 issues skipped by the security teams:

CVE-2019-7572: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.
CVE-2019-7573: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the wNumCoef loop).
CVE-2019-13626: SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c.
CVE-2019-7576: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop).
CVE-2019-7577: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c.
CVE-2019-7574: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c.
CVE-2017-2888: An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.
CVE-2019-7578: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c.
CVE-2019-7575: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c.
CVE-2019-13616: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
CVE-2019-7638: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.
CVE-2019-7635: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
CVE-2019-7637: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c.
CVE-2019-7636: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c.

Please fix them.

Created: 2017-10-11 Last update: 2020-02-08 07:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.2.1).

Created: 2018-12-23 Last update: 2020-02-03 08:03

news

[rss feed]

[2020-02-08] libsdl2 2.0.10+dfsg1-2 MIGRATED to testing (Debian testing watch)
[2020-02-02] Accepted libsdl2 2.0.10+dfsg1-2 (source) into unstable (Debian FTP Masters) (signed by: Felix Geyer)
[2019-10-16] Accepted libsdl2 2.0.2+dfsg1-6+deb8u2 (source amd64) into oldoldstable (Hugo Lefeuvre)
[2019-09-25] libsdl2 2.0.10+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2019-09-19] Accepted libsdl2 2.0.10+dfsg1-1 (source) into unstable (Felix Geyer)
[2019-03-13] Accepted libsdl2 2.0.2+dfsg1-6+deb8u1 (source amd64) into oldstable (Abhijith PA)
[2019-02-05] libsdl2 2.0.9+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2019-02-02] Accepted libsdl2 2.0.9+dfsg1-1 (source) into unstable (Felix Geyer)
[2018-10-28] libsdl2 2.0.8+dfsg1-6 MIGRATED to testing (Debian testing watch)
[2018-10-25] Accepted libsdl2 2.0.8+dfsg1-6 (source amd64 all) into unstable (Manuel A. Fernandez Montecelo)
[2018-10-22] libsdl2 2.0.8+dfsg1-5 MIGRATED to testing (Debian testing watch)
[2018-10-20] Accepted libsdl2 2.0.8+dfsg1-5 (source amd64 all) into unstable (Manuel A. Fernandez Montecelo)
[2018-10-06] libsdl2 2.0.8+dfsg1-4 MIGRATED to testing (Debian testing watch)
[2018-10-04] Accepted libsdl2 2.0.8+dfsg1-4 (source) into unstable (Gianfranco Costamagna)
[2018-10-03] libsdl2 2.0.8+dfsg1-3.1 MIGRATED to testing (Debian testing watch)
[2018-09-30] Accepted libsdl2 2.0.8+dfsg1-3.1 (source) into unstable (Simon McVittie)
[2018-09-27] Accepted libsdl2 2.0.8+dfsg1-3 (source) into unstable (Gianfranco Costamagna)
[2018-09-20] libsdl2 2.0.8+dfsg1-2 MIGRATED to testing (Debian testing watch)
[2018-09-14] Accepted libsdl2 2.0.8+dfsg1-2 (source) into unstable (Felix Geyer) (signed by: Gianfranco Costamagna)
[2018-03-09] libsdl2 2.0.8+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2018-03-04] Accepted libsdl2 2.0.8+dfsg1-1 (source) into unstable (Felix Geyer)
[2017-11-15] libsdl2 2.0.7+dfsg1-3 MIGRATED to testing (Debian testing watch)
[2017-11-09] Accepted libsdl2 2.0.7+dfsg1-3 (source amd64 all) into unstable (Fabian Greffrath)
[2017-11-07] Accepted libsdl2 2.0.7+dfsg1-2 (source) into unstable (Gianfranco Costamagna)
[2017-11-06] Accepted libsdl2 2.0.7+dfsg1-1 (source amd64 all) into unstable (Fabian Greffrath)
[2017-10-21] libsdl2 2.0.6+dfsg1-4 MIGRATED to testing (Debian testing watch)
[2017-10-18] Accepted libsdl2 2.0.6+dfsg1-4 (source) into unstable (Felix Geyer)
[2017-10-15] libsdl2 2.0.6+dfsg1-3 MIGRATED to testing (Debian testing watch)
[2017-10-12] Accepted libsdl2 2.0.6+dfsg1-3 (source) into unstable (Felix Geyer)
[2017-10-05] libsdl2 2.0.6+dfsg1-2 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 10
RC: 1
I&N: 9
M&W: 0
F&P: 0
patch: 2

links

homepage
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.0.10+dfsg1-2ubuntu5
14 bugs
patches for 2.0.10+dfsg1-2ubuntu5