libsdl2-image - Debian Package Tracker

general

source: libsdl2-image (main)
version: 2.0.5+dfsg1-2
maintainer: Debian SDL packages maintainers (archive) (DMD)
uploaders: Felix Geyer [DMD] – Manuel A. Fernandez Montecelo [DMD]
arch: any
std-ver: 4.2.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.0.1+dfsg-2+deb9u2
o-o-sec: 2.0.1+dfsg-2+deb9u1
oldstable: 2.0.4+dfsg1-1+deb10u1
stable: 2.0.5+dfsg1-2
testing: 2.0.5+dfsg1-2
unstable: 2.0.5+dfsg1-2

versioned links

2.0.1+dfsg-2+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0.1+dfsg-2+deb9u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0.4+dfsg1-1+deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0.5+dfsg1-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libsdl2-image-2.0-0
libsdl2-image-dev

action needed

4 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit c0edab0ac1230e396805c53eae4c6100059d0f0e
Author: Simon McVittie <smcv@debian.org>
Date:   Mon Sep 6 19:07:15 2021 +0100

    Populate symbols file

commit 2fdf747e6eb76da2f8323965537fb4f15ef40997
Author: Simon McVittie <smcv@debian.org>
Date:   Mon Sep 6 19:00:15 2021 +0100

    Add the skeleton of a .symbols file

commit e92791a3ef0f49c387c4c75ea39caeda60a5f5d8
Author: Simon McVittie <smcv@collabora.com>
Date:   Fri Apr 24 13:23:55 2020 +0100

    Add an autopkgtest using a slightly modified version of showimage
    
    Taken from the libsdl2-image package in the Steam Runtime.
    
    Signed-off-by: Simon McVittie <smcv@collabora.com>

commit e52425080a54ca0f60e18fbdd3e9f833a8f60734
Author: Simon McVittie <smcv@debian.org>
Date:   Mon Sep 6 18:42:49 2021 +0100

    Add patch to add a -quit option to the showimage example
    
    This allows it to be used as a non-interactive smoke-test.

Created: 2021-09-06 Last update: 2021-09-20 05:42

3 low-priority security issues in buster low

There are 3 open security issues in buster.

3 issues left for the package maintainer to handle:

CVE-2019-13616: (needs triaging) SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
CVE-2019-5059: (needs triaging) An exploitable code execution vulnerability exists in the XPM image rendering functionality of SDL2_image 2.0.4. A specially crafted XPM image can cause an integer overflow, allocating too small of a buffer. This buffer can then be written out of bounds resulting in a heap overflow, ultimately ending in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
CVE-2019-5060: (needs triaging) An exploitable code execution vulnerability exists in the XPM image rendering function of SDL2_image 2.0.4. A specially crafted XPM image can cause an integer overflow in the colorhash function, allocating too small of a buffer. This buffer can then be written out of bounds, resulting in a heap overflow, ultimately ending in code execution. An attacker can display a specially crafted image to trigger this vulnerability.

You can find information about how to handle these issues in the security team's documentation.

Created: 2021-02-19 Last update: 2021-08-15 00:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.0 instead of 4.2.1).

Created: 2018-12-23 Last update: 2021-08-18 14:03

news

[rss feed]

[2020-02-09] libsdl2-image 2.0.5+dfsg1-2 MIGRATED to testing (Debian testing watch)
[2020-02-03] Accepted libsdl2-image 2.0.5+dfsg1-2 (source) into unstable (Felix Geyer)
[2019-08-21] Accepted libsdl2-image 2.0.4+dfsg1-1+deb10u1 (source amd64) into proposed-updates->stable-new, proposed-updates (Hugo Lefeuvre)
[2019-07-30] Accepted libsdl2-image 2.0.1+dfsg-2+deb9u2 (source amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Hugo Lefeuvre)
[2019-07-29] libsdl2-image 2.0.5+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2019-07-23] Accepted libsdl2-image 2.0.5+dfsg1-1 (source) into unstable (Felix Geyer)
[2019-07-22] Accepted libsdl2-image 2.0.0+dfsg-3+deb8u2 (source amd64) into oldoldstable (Hugo Lefeuvre)
[2019-02-08] libsdl2-image 2.0.4+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2019-02-03] Accepted libsdl2-image 2.0.4+dfsg1-1 (source) into unstable (Felix Geyer)
[2018-11-07] libsdl2-image 2.0.3+dfsg1-3 MIGRATED to testing (Debian testing watch)
[2018-11-05] Accepted libsdl2-image 2.0.3+dfsg1-3 (source amd64) into unstable (Chris Lamb)
[2018-10-25] libsdl2-image 2.0.3+dfsg1-2 MIGRATED to testing (Debian testing watch)
[2018-10-19] Accepted libsdl2-image 2.0.3+dfsg1-2 (source amd64) into unstable (Manuel A. Fernandez Montecelo)
[2018-06-27] Accepted libsdl2-image 2.0.1+dfsg-2+deb9u1 (source) into proposed-updates->stable-new, proposed-updates (Felix Geyer)
[2018-04-22] Accepted libsdl2-image 2.0.0+dfsg-3+deb8u1 (source amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Felix Geyer)
[2018-04-19] Accepted libsdl2-image 2.0.1+dfsg-2+deb9u1 (source) into stable->embargoed, stable (Felix Geyer)
[2018-04-19] Accepted libsdl2-image 2.0.0+dfsg-3+deb8u1 (source amd64) into oldstable->embargoed, oldstable (Felix Geyer)
[2018-03-10] libsdl2-image 2.0.3+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2018-03-04] Accepted libsdl2-image 2.0.3+dfsg1-1 (source) into unstable (Felix Geyer)
[2017-11-15] libsdl2-image 2.0.2+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2017-11-10] Accepted libsdl2-image 2.0.2+dfsg1-1 (source amd64) into unstable (Fabian Greffrath)
[2017-10-24] libsdl2-image 2.0.1+dfsg-4 MIGRATED to testing (Debian testing watch)
[2017-10-18] Accepted libsdl2-image 2.0.1+dfsg-4 (source) into unstable (Felix Geyer)
[2017-08-06] libsdl2-image 2.0.1+dfsg-3 MIGRATED to testing (Debian testing watch)
[2017-07-31] Accepted libsdl2-image 2.0.1+dfsg-3 (source amd64) into unstable (Manuel A. Fernandez Montecelo)
[2016-02-07] libsdl2-image 2.0.1+dfsg-2 MIGRATED to testing (Debian testing watch)
[2016-01-27] Accepted libsdl2-image 2.0.1+dfsg-2 (source) into unstable (Gianfranco Costamagna)
[2016-01-26] Accepted libsdl2-image 2.0.1+dfsg-1 (source) into unstable (Gianfranco Costamagna)
[2013-09-19] libsdl2-image 2.0.0+dfsg-3 MIGRATED to testing (Debian testing watch)
[2013-09-08] Accepted libsdl2-image 2.0.0+dfsg-3 (source amd64) (Felix Geyer)

bugs [bug history graph]

all: 0

links

homepage
lintian
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.0.5+dfsg1-2