libsdl3-image - Debian Package Tracker

general

source: libsdl3-image (main)
version: 3.4.8+ds-1
maintainer: Debian SDL packages maintainers (archive) (DMD)
uploaders: Simon McVittie (DMD) – Manuel A. Fernandez Montecelo (DMD) – Felix Geyer (DMD)
arch: all any
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

stable: 3.2.4+ds-1
testing: 3.4.8+ds-1
unstable: 3.4.8+ds-1

versioned links

3.2.4+ds-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.4.8+ds-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libsdl3-image-dev
libsdl3-image-doc
libsdl3-image-tests
libsdl3-image0

action needed

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2026-117557: SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/IMG_lbm.c that skips bitplane count validation when HAM mode is set. Attackers can supply a crafted ILBM file with more than 8 HAM bitplanes to read past the colormap stack array, causing crashes or disclosing stack memory.

Created: 2026-10-28 Last update: 2026-10-28 20:31

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2026-117557: SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/IMG_lbm.c that skips bitplane count validation when HAM mode is set. Attackers can supply a crafted ILBM file with more than 8 HAM bitplanes to read past the colormap stack array, causing crashes or disclosing stack memory.

Created: 2026-10-28 Last update: 2026-10-28 20:31

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 3.4.8+ds2-1, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 7be3208841b94a48f8aa042fb83b4cea59d322d2
Author: Simon McVittie <smcv@debian.org>
Date:   Tue Oct 6 21:51:05 2026 +0100

    Update changelog

commit 6d6ab78856fbc2819a20baa69e75e77ad7d5d3ce
Merge: 1c5e0fe 4fdf763
Author: Simon McVittie <smcv@debian.org>
Date:   Tue Oct 6 21:49:55 2026 +0100

    Update upstream source from tag 'upstream/3.4.8+ds2'
    
    Update to upstream version '3.4.8+ds2'
    with Debian dir 3a179bf241536735cbdc6ed91f31951fda792563

commit 4fdf7638d1381c599e3df0f58c572ab1a823100a
Author: Simon McVittie <smcv@debian.org>
Date:   Tue Oct 6 21:49:54 2026 +0100

    New upstream version 3.4.8+ds2

commit 1c5e0fe3e5701fdc5c96b23deb80b8b1db5a3552
Author: Simon McVittie <smcv@debian.org>
Date:   Tue Oct 6 21:49:09 2026 +0100

    Revert "d/watch: Download 3.4.8 as a git tag rather than a tarball"
    
    This reverts commit 37fc8f4124a3d0ee5f98a4258366731602cca24f.

Created: 2026-10-06 Last update: 2026-11-09 17:32

lintian reports 1 warning normal

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2026-10-04 Last update: 2026-10-04 06:01

1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:

CVE-2026-117557: (needs triaging) SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/IMG_lbm.c that skips bitplane count validation when HAM mode is set. Attackers can supply a crafted ILBM file with more than 8 HAM bitplanes to read past the colormap stack array, causing crashes or disclosing stack memory.

You can find information about how to handle this issue in the security team's documentation.

Created: 2026-10-28 Last update: 2026-10-28 20:31

news

[rss feed]

[2026-10-09] libsdl3-image 3.4.8+ds-1 MIGRATED to testing (Debian testing watch)
[2026-10-03] Accepted libsdl3-image 3.4.8+ds-1 (source) into unstable (Simon McVittie)
[2026-09-09] libsdl3-image 3.4.6+ds-1 MIGRATED to testing (Debian testing watch)
[2026-09-04] Accepted libsdl3-image 3.2.4+ds-1+deb13u1 (source) into proposed-updates (Debian FTP Masters)
[2026-09-02] Accepted libsdl3-image 3.4.6+ds-1 (source) into unstable (Simon McVittie)
[2026-08-14] libsdl3-image 3.4.4+ds-2 MIGRATED to testing (Debian testing watch)
[2026-08-09] Accepted libsdl3-image 3.4.4+ds-2 (source) into unstable (Simon McVittie)
[2026-05-08] libsdl3-image 3.4.4+ds-1 MIGRATED to testing (Debian testing watch)
[2026-05-02] Accepted libsdl3-image 3.4.4+ds-1 (source) into unstable (Simon McVittie)
[2026-04-16] libsdl3-image 3.4.2+ds-1 MIGRATED to testing (Debian testing watch)
[2026-04-10] Accepted libsdl3-image 3.4.2+ds-1 (source) into unstable (Simon McVittie)
[2026-01-27] libsdl3-image 3.4.0+ds-1 MIGRATED to testing (Debian testing watch)
[2026-01-22] Accepted libsdl3-image 3.4.0+ds-1 (source) into unstable (Simon McVittie)
[2026-01-20] Accepted libsdl3-image 3.3.4+ds-2 (source) into experimental (Simon McVittie)
[2026-01-19] Accepted libsdl3-image 3.3.4+ds-1 (source) into experimental (Simon McVittie)
[2026-01-08] libsdl3-image 3.2.6+ds-1 MIGRATED to testing (Debian testing watch)
[2026-01-02] Accepted libsdl3-image 3.2.6+ds-1 (source) into unstable (Simon McVittie)
[2025-03-09] libsdl3-image 3.2.4+ds-1 MIGRATED to testing (Debian testing watch)
[2025-03-04] Accepted libsdl3-image 3.2.4+ds-1 (source) into unstable (Simon McVittie)
[2025-03-03] Accepted libsdl3-image 3.2.2+ds-2 (source) into unstable (Simon McVittie)
[2025-03-03] Accepted libsdl3-image 3.2.2+ds-1 (source) into unstable (Simon McVittie)
[2025-02-10] libsdl3-image 3.2.0+ds-2 MIGRATED to testing (Debian testing watch)
[2025-02-04] Accepted libsdl3-image 3.2.0+ds-2 (source) into unstable (Simon McVittie)
[2025-02-03] Accepted libsdl3-image 3.2.0+ds-1 (source) into unstable (Simon McVittie)
[2025-01-24] Accepted libsdl3-image 3.1.1+ds-1 (source) into unstable (Simon McVittie)
[2025-01-19] Accepted libsdl3-image 3.1.0+ds-2 (source) into unstable (Simon McVittie)
[2025-01-08] Accepted libsdl3-image 3.1.0+ds-1 (source) into unstable (Simon McVittie)
[2024-11-04] Accepted libsdl3-image 3~git20241102~b1c8ec7+ds-1 (source) into experimental (Simon McVittie)
[2024-10-04] Accepted libsdl3-image 3~git20240925~6f45843+ds-1 (source) into experimental (Simon McVittie)
[2024-09-17] Accepted libsdl3-image 3~git20240915~6f04db8+ds-1 (source) into experimental (Simon McVittie)

bugs [bug history graph]

all: 0

links

homepage
lintian (0, 1)
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.4.8+ds-1