Debian Package Tracker

general

source: libsdl2 (main)
version: 2.0.12+dfsg1-1
maintainer: Debian SDL packages maintainers (archive) (DMD)
uploaders: Sam Hocevar [DMD] – Felix Geyer [DMD] – Manuel A. Fernandez Montecelo [DMD]
arch: all any
std-ver: 4.5.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.0.2+dfsg1-6
o-o-sec: 2.0.2+dfsg1-6+deb8u2
oldstable: 2.0.5+dfsg1-2
stable: 2.0.9+dfsg1-1
testing: 2.0.12+dfsg1-1
unstable: 2.0.12+dfsg1-1

versioned links

2.0.2+dfsg1-6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0.2+dfsg1-6+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0.5+dfsg1-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0.9+dfsg1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0.12+dfsg1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libsdl2-2.0-0 (4 bugs: 0, 4, 0, 0)
libsdl2-dev (1 bugs: 0, 1, 0, 0)
libsdl2-doc

action needed

Does not build reproducibly during testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2020-03-19 Last update: 2020-06-04 01:14

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 2.0.12+dfsg1-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit daee5d214c121b4ec43027ad153ae41c273fce70
Author: Steve Langasek <steve.langasek@ubuntu.com>
Date:   Thu May 28 07:52:07 2020 +0200

    Use clang:native instead of clang to make autopkgtest cross friendly

Created: 2020-05-28 Last update: 2020-06-04 00:05

lintian reports 1 warning normal

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2020-05-21 Last update: 2020-05-21 00:05

12 ignored security issues in buster low

There are 12 open security issues in buster.

12 issues skipped by the security teams:

CVE-2019-7572: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.
CVE-2019-7573: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the wNumCoef loop).
CVE-2019-13626: SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c.
CVE-2019-7576: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop).
CVE-2019-7577: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c.
CVE-2019-7574: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c.
CVE-2019-7578: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c.
CVE-2019-7575: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c.
CVE-2019-13616: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
CVE-2019-7638: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.
CVE-2019-7635: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
CVE-2019-7636: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c.

Please fix them.

Created: 2019-02-07 Last update: 2020-06-01 06:08

3 ignored security issues in jessie low

There are 3 open security issues in jessie.

3 issues skipped by the security teams:

CVE-2019-13626: SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c.
CVE-2017-2888: An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.
CVE-2019-13616: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.

Please fix them.

Created: 2017-10-11 Last update: 2020-06-01 06:08

14 ignored security issues in stretch low

There are 14 open security issues in stretch.

14 issues skipped by the security teams:

CVE-2019-7572: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.
CVE-2019-7573: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the wNumCoef loop).
CVE-2019-13626: SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c.
CVE-2019-7576: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop).
CVE-2019-7577: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c.
CVE-2019-7574: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c.
CVE-2017-2888: An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.
CVE-2019-7578: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c.
CVE-2019-7575: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c.
CVE-2019-13616: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
CVE-2019-7638: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.
CVE-2019-7635: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
CVE-2019-7637: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c.
CVE-2019-7636: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c.

Please fix them.

Created: 2017-10-11 Last update: 2020-06-01 06:08

news

[rss feed]

[2020-06-01] libsdl2 2.0.12+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2020-05-26] Accepted libsdl2 2.0.12+dfsg1-1 (source) into unstable (Simon McVittie)
[2020-04-27] Accepted libsdl2 2.0.12+dfsg1-1~exp1 (source) into experimental (Simon McVittie)
[2020-04-19] libsdl2 2.0.10+dfsg1-3 MIGRATED to testing (Debian testing watch)
[2020-04-13] Accepted libsdl2 2.0.10+dfsg1-3 (source) into unstable (Simon McVittie)
[2020-02-08] libsdl2 2.0.10+dfsg1-2 MIGRATED to testing (Debian testing watch)
[2020-02-02] Accepted libsdl2 2.0.10+dfsg1-2 (source) into unstable (Felix Geyer)
[2019-10-16] Accepted libsdl2 2.0.2+dfsg1-6+deb8u2 (source amd64) into oldoldstable (Hugo Lefeuvre)
[2019-09-25] libsdl2 2.0.10+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2019-09-19] Accepted libsdl2 2.0.10+dfsg1-1 (source) into unstable (Felix Geyer)
[2019-03-13] Accepted libsdl2 2.0.2+dfsg1-6+deb8u1 (source amd64) into oldstable (Abhijith PA)
[2019-02-05] libsdl2 2.0.9+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2019-02-02] Accepted libsdl2 2.0.9+dfsg1-1 (source) into unstable (Felix Geyer)
[2018-10-28] libsdl2 2.0.8+dfsg1-6 MIGRATED to testing (Debian testing watch)
[2018-10-25] Accepted libsdl2 2.0.8+dfsg1-6 (source amd64 all) into unstable (Manuel A. Fernandez Montecelo)
[2018-10-22] libsdl2 2.0.8+dfsg1-5 MIGRATED to testing (Debian testing watch)
[2018-10-20] Accepted libsdl2 2.0.8+dfsg1-5 (source amd64 all) into unstable (Manuel A. Fernandez Montecelo)
[2018-10-06] libsdl2 2.0.8+dfsg1-4 MIGRATED to testing (Debian testing watch)
[2018-10-04] Accepted libsdl2 2.0.8+dfsg1-4 (source) into unstable (Gianfranco Costamagna)
[2018-10-03] libsdl2 2.0.8+dfsg1-3.1 MIGRATED to testing (Debian testing watch)
[2018-09-30] Accepted libsdl2 2.0.8+dfsg1-3.1 (source) into unstable (Simon McVittie)
[2018-09-27] Accepted libsdl2 2.0.8+dfsg1-3 (source) into unstable (Gianfranco Costamagna)
[2018-09-20] libsdl2 2.0.8+dfsg1-2 MIGRATED to testing (Debian testing watch)
[2018-09-14] Accepted libsdl2 2.0.8+dfsg1-2 (source) into unstable (Felix Geyer) (signed by: Gianfranco Costamagna)
[2018-03-09] libsdl2 2.0.8+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2018-03-04] Accepted libsdl2 2.0.8+dfsg1-1 (source) into unstable (Felix Geyer)
[2017-11-15] libsdl2 2.0.7+dfsg1-3 MIGRATED to testing (Debian testing watch)
[2017-11-09] Accepted libsdl2 2.0.7+dfsg1-3 (source amd64 all) into unstable (Fabian Greffrath)
[2017-11-07] Accepted libsdl2 2.0.7+dfsg1-2 (source) into unstable (Gianfranco Costamagna)
[2017-11-06] Accepted libsdl2 2.0.7+dfsg1-1 (source amd64 all) into unstable (Fabian Greffrath)

bugs [bug history graph]

all: 6
RC: 0
I&N: 6
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 1)
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.0.12+dfsg1-1ubuntu1
16 bugs
patches for 2.0.12+dfsg1-1ubuntu1