Register | Log in

libsdl2-image

Choose email to subscribe with

general

source: libsdl2-image (main)
version: 2.0.4+dfsg1-1
maintainer: Debian SDL packages maintainers (archive) [DMD]
uploaders: Felix Geyer [DMD] – Manuel A. Fernandez Montecelo [DMD]
arch: any
std-ver: 4.2.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 2.0.0+dfsg-3+deb8u1
old-sec: 2.0.0+dfsg-3+deb8u1
stable: 2.0.1+dfsg-2+deb9u1
stable-sec: 2.0.1+dfsg-2+deb9u1
testing: 2.0.4+dfsg1-1
unstable: 2.0.4+dfsg1-1

versioned links

2.0.0+dfsg-3+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0.1+dfsg-2+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0.4+dfsg1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libsdl2-image-2.0-0
libsdl2-image-dev

action needed

4 security issues in jessie high

There are 4 open security issues in jessie.

2 important issues:

CVE-2019-12218: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a NULL pointer dereference in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c.
CVE-2019-12216: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a heap-based buffer overflow in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c.

2 issues skipped by the security teams:

CVE-2018-3977: An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
CVE-2019-7635: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.

Please fix them.

Created: 2018-11-02 Last update: 2019-05-23 05:42

4 security issues in stretch high

There are 4 open security issues in stretch.

2 important issues:

CVE-2019-12218: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a NULL pointer dereference in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c.
CVE-2019-12216: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a heap-based buffer overflow in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c.

2 issues skipped by the security teams:

CVE-2018-3977: An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
CVE-2019-7635: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.

Please fix them.

Created: 2018-11-02 Last update: 2019-05-23 05:42

3 security issues in buster high

There are 3 open security issues in buster.

3 important issues:

CVE-2019-12218: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a NULL pointer dereference in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c.
CVE-2019-12216: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a heap-based buffer overflow in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c.
CVE-2019-7635: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.

Please fix them.

Created: 2019-03-24 Last update: 2019-05-23 05:42

3 security issues in sid high

There are 3 open security issues in sid.

3 important issues:

CVE-2019-12218: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a NULL pointer dereference in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c.
CVE-2019-12216: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a heap-based buffer overflow in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c.
CVE-2019-7635: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.

Please fix them.

Created: 2019-03-24 Last update: 2019-05-23 05:42

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.3.0 instead of 4.2.1).

Created: 2018-12-23 Last update: 2019-02-03 21:24

news

[2019-02-08] libsdl2-image 2.0.4+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2019-02-03] Accepted libsdl2-image 2.0.4+dfsg1-1 (source) into unstable (Felix Geyer)
[2018-11-07] libsdl2-image 2.0.3+dfsg1-3 MIGRATED to testing (Debian testing watch)
[2018-11-05] Accepted libsdl2-image 2.0.3+dfsg1-3 (source amd64) into unstable (Chris Lamb)
[2018-10-25] libsdl2-image 2.0.3+dfsg1-2 MIGRATED to testing (Debian testing watch)
[2018-10-19] Accepted libsdl2-image 2.0.3+dfsg1-2 (source amd64) into unstable (Manuel A. Fernandez Montecelo)
[2018-06-27] Accepted libsdl2-image 2.0.1+dfsg-2+deb9u1 (source) into proposed-updates->stable-new, proposed-updates (Felix Geyer)
[2018-04-22] Accepted libsdl2-image 2.0.0+dfsg-3+deb8u1 (source amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Felix Geyer)
[2018-04-19] Accepted libsdl2-image 2.0.1+dfsg-2+deb9u1 (source) into stable->embargoed, stable (Felix Geyer)
[2018-04-19] Accepted libsdl2-image 2.0.0+dfsg-3+deb8u1 (source amd64) into oldstable->embargoed, oldstable (Felix Geyer)
[2018-03-10] libsdl2-image 2.0.3+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2018-03-04] Accepted libsdl2-image 2.0.3+dfsg1-1 (source) into unstable (Felix Geyer)
[2017-11-15] libsdl2-image 2.0.2+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2017-11-10] Accepted libsdl2-image 2.0.2+dfsg1-1 (source amd64) into unstable (Fabian Greffrath)
[2017-10-24] libsdl2-image 2.0.1+dfsg-4 MIGRATED to testing (Debian testing watch)
[2017-10-18] Accepted libsdl2-image 2.0.1+dfsg-4 (source) into unstable (Felix Geyer)
[2017-08-06] libsdl2-image 2.0.1+dfsg-3 MIGRATED to testing (Debian testing watch)
[2017-07-31] Accepted libsdl2-image 2.0.1+dfsg-3 (source amd64) into unstable (Manuel A. Fernandez Montecelo)
[2016-02-07] libsdl2-image 2.0.1+dfsg-2 MIGRATED to testing (Debian testing watch)
[2016-01-27] Accepted libsdl2-image 2.0.1+dfsg-2 (source) into unstable (Gianfranco Costamagna)
[2016-01-26] Accepted libsdl2-image 2.0.1+dfsg-1 (source) into unstable (Gianfranco Costamagna)
[2013-09-19] libsdl2-image 2.0.0+dfsg-3 MIGRATED to testing (Debian testing watch)
[2013-09-08] Accepted libsdl2-image 2.0.0+dfsg-3 (source amd64) (Felix Geyer)
[2013-09-05] libsdl2-image 2.0.0+dfsg-2 MIGRATED to testing (Debian testing watch)
[2013-08-25] Accepted libsdl2-image 2.0.0+dfsg-2 (source amd64) (Felix Geyer)
[2013-08-21] Accepted libsdl2-image 2.0.0+dfsg-1 (source amd64) (Felix Geyer)
[2013-08-20] libsdl2-image 2.0.0~rc1+dfsg-1 MIGRATED to testing (Debian testing watch)
[2013-08-09] Accepted libsdl2-image 2.0.0~rc1+dfsg-1 (source amd64) (Felix Geyer)

bugs [bug history graph]

all: 0

links

homepage
lintian
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.0.4+dfsg1-1

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing