Debian Package Tracker
Register | Log in
Subscribe

libsdl2

Choose email to subscribe with

general
  • source: libsdl2 (main)
  • version: 2.0.14+dfsg2-3
  • maintainer: Debian SDL packages maintainers (archive) (DMD)
  • uploaders: Sam Hocevar [DMD] – Felix Geyer [DMD] – Simon McVittie [DMD] – Manuel A. Fernandez Montecelo [DMD]
  • arch: all any
  • std-ver: 4.5.1
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • oldstable: 2.0.5+dfsg1-2
  • old-sec: 2.0.5+dfsg1-2+deb9u1
  • stable: 2.0.9+dfsg1-1
  • testing: 2.0.14+dfsg2-3
  • unstable: 2.0.14+dfsg2-3
versioned links
  • 2.0.5+dfsg1-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.0.5+dfsg1-2+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.0.9+dfsg1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.0.14+dfsg2-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • libsdl2-2.0-0 (6 bugs: 0, 6, 0, 0)
  • libsdl2-dev (1 bugs: 0, 1, 0, 0)
  • libsdl2-doc
action needed
3 new commits since last upload, is it time to release? normal
vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:
commit 915a939869e87a04ab46bc99653ff180e2765977
Merge: 7e974a8 8fe9f22
Author: Simon McVittie <smcv@debian.org>
Date:   Fri Feb 19 17:43:43 2021 +0000

    Merge branch 'salsa-ci' into 'master'
    
    debian: Add salsa-ci
    
    See merge request sdl-team/libsdl2!12

commit 8fe9f22747bff89068e292e90d5f502f51fc6ead
Author: Guido Günther <agx@sigxcpu.org>
Date:   Fri Feb 19 10:25:50 2021 +0100

    debian: Add salsa-ci
    
    This disable blhc since those currently fail with
    
    $ blhc --debian --line-numbers --color ${SALSA_CI_BLHC_ARGS} ${WORKING_DIR}/*.build || [ $? -eq 1 ]
    1272:CPPFLAGS missing (-D_FORTIFY_SOURCE=2): gcc -o checkkeys ../../test/checkkeys.c -g -O2 -ffile-prefix-map=/builds/agx/libsdl2/debian/output/source_dir=. -fstack-protector-strong -Wformat -Werror=format-security -I/builds/agx/libsdl2/debian/output/source_dir/include -DHAVE_OPENGLES2 -DHAVE_OPENGL -g -lSDL2_test -L/builds/agx/libsdl2/debian/output/source_dir/build/.libs -lSDL2
    1272:LDFLAGS missing (-Wl,-z,relro): gcc -o checkkeys ../../test/checkkeys.c -g -O2 -ffile-prefix-map=/builds/agx/libsdl2/debian/output/source_dir=. -fstack-protector-strong -Wformat -Werror=format-security -I/builds/agx/libsdl2/debian/output/source_dir/include -DHAVE_OPENGLES2 -DHAVE_OPENGL -g -lSDL2_test -L/builds/agx/libsdl2/debian/output/source_dir/build/.libs -lSDL2
    ...

commit 7e974a8c6ffffbaf508fa2358974ebc1e6351022
Author: Simon McVittie <smcv@debian.org>
Date:   Thu Jan 28 22:03:51 2021 +0000

    d/rules: Pass CPPFLAGS and LDFLAGS while linking test programs
Created: 2021-01-29 Last update: 2021-04-07 22:37
lintian reports 1 warning normal
Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.
Created: 2021-01-27 Last update: 2021-01-27 03:03
14 low-priority security issues in buster low

There are 14 open security issues in buster.

14 issues left for the package maintainer to handle:
  • CVE-2019-13616: (needs triaging) SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
  • CVE-2019-13626: (needs triaging) SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c.
  • CVE-2019-7572: (needs triaging) SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.
  • CVE-2019-7573: (needs triaging) SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the wNumCoef loop).
  • CVE-2019-7574: (needs triaging) SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c.
  • CVE-2019-7575: (needs triaging) SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c.
  • CVE-2019-7576: (needs triaging) SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop).
  • CVE-2019-7577: (needs triaging) SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c.
  • CVE-2019-7578: (needs triaging) SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c.
  • CVE-2019-7635: (needs triaging) SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
  • CVE-2019-7636: (needs triaging) SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c.
  • CVE-2019-7638: (needs triaging) SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.
  • CVE-2020-14409: (needs triaging) SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.
  • CVE-2020-14410: (needs triaging) SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.

You can find information about how to handle these issues in the security team's documentation.

Created: 2021-02-19 Last update: 2021-03-21 19:04
Build log checks report 1 warning low
Build log checks report 1 warning
Created: 2021-01-13 Last update: 2021-01-13 03:00
news
[rss feed]
  • [2021-01-30] Accepted libsdl2 2.0.5+dfsg1-2+deb9u1 (source amd64 all) into oldstable (Thorsten Alteholz)
  • [2021-01-24] libsdl2 2.0.14+dfsg2-3 MIGRATED to testing (Debian testing watch)
  • [2021-01-18] Accepted libsdl2 2.0.14+dfsg2-3 (source) into unstable (Simon McVittie)
  • [2021-01-18] libsdl2 2.0.14+dfsg2-2 MIGRATED to testing (Debian testing watch)
  • [2021-01-12] Accepted libsdl2 2.0.14+dfsg2-2 (source) into unstable (Simon McVittie)
  • [2021-01-06] Accepted libsdl2 2.0.14+dfsg2-1 (source) into experimental (Simon McVittie)
  • [2020-10-09] libsdl2 2.0.12+dfsg1-4 MIGRATED to testing (Debian testing watch)
  • [2020-10-09] libsdl2 2.0.12+dfsg1-4 MIGRATED to testing (Debian testing watch)
  • [2020-10-04] Accepted libsdl2 2.0.12+dfsg1-4 (source) into unstable (Fabian Greffrath)
  • [2020-10-03] Accepted libsdl2 2.0.12+dfsg1-3 (source amd64 all) into unstable (Fabian Greffrath)
  • [2020-08-24] libsdl2 2.0.12+dfsg1-2 MIGRATED to testing (Debian testing watch)
  • [2020-08-18] Accepted libsdl2 2.0.12+dfsg1-2 (source) into unstable (Fabian Greffrath)
  • [2020-06-01] libsdl2 2.0.12+dfsg1-1 MIGRATED to testing (Debian testing watch)
  • [2020-05-26] Accepted libsdl2 2.0.12+dfsg1-1 (source) into unstable (Simon McVittie)
  • [2020-04-27] Accepted libsdl2 2.0.12+dfsg1-1~exp1 (source) into experimental (Simon McVittie)
  • [2020-04-19] libsdl2 2.0.10+dfsg1-3 MIGRATED to testing (Debian testing watch)
  • [2020-04-13] Accepted libsdl2 2.0.10+dfsg1-3 (source) into unstable (Simon McVittie)
  • [2020-02-08] libsdl2 2.0.10+dfsg1-2 MIGRATED to testing (Debian testing watch)
  • [2020-02-02] Accepted libsdl2 2.0.10+dfsg1-2 (source) into unstable (Felix Geyer)
  • [2019-10-16] Accepted libsdl2 2.0.2+dfsg1-6+deb8u2 (source amd64) into oldoldstable (Hugo Lefeuvre)
  • [2019-09-25] libsdl2 2.0.10+dfsg1-1 MIGRATED to testing (Debian testing watch)
  • [2019-09-19] Accepted libsdl2 2.0.10+dfsg1-1 (source) into unstable (Felix Geyer)
  • [2019-03-13] Accepted libsdl2 2.0.2+dfsg1-6+deb8u1 (source amd64) into oldstable (Abhijith PA)
  • [2019-02-05] libsdl2 2.0.9+dfsg1-1 MIGRATED to testing (Debian testing watch)
  • [2019-02-02] Accepted libsdl2 2.0.9+dfsg1-1 (source) into unstable (Felix Geyer)
  • [2018-10-28] libsdl2 2.0.8+dfsg1-6 MIGRATED to testing (Debian testing watch)
  • [2018-10-25] Accepted libsdl2 2.0.8+dfsg1-6 (source amd64 all) into unstable (Manuel A. Fernandez Montecelo)
  • [2018-10-22] libsdl2 2.0.8+dfsg1-5 MIGRATED to testing (Debian testing watch)
  • [2018-10-20] Accepted libsdl2 2.0.8+dfsg1-5 (source amd64 all) into unstable (Manuel A. Fernandez Montecelo)
  • [2018-10-06] libsdl2 2.0.8+dfsg1-4 MIGRATED to testing (Debian testing watch)
  • 1
  • 2
bugs [bug history graph]
  • all: 8
  • RC: 0
  • I&N: 8
  • M&W: 0
  • F&P: 0
  • patch: 0
links
  • homepage
  • lintian (0, 1)
  • buildd: logs, checks, clang, reproducibility, cross
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 2.0.14+dfsg2-3
  • 16 bugs

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing