sdl-image1.2 - Debian Package Tracker

general

source: sdl-image1.2 (main)
version: 1.2.12-13
maintainer: Debian SDL packages maintainers (archive) (DMD)
uploaders: Felix Geyer [DMD] – Manuel A. Fernandez Montecelo [DMD]
arch: any
std-ver: 4.6.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.2.12-5+deb9u2
o-o-sec: 1.2.12-5+deb9u1
oldstable: 1.2.12-10+deb10u1
stable: 1.2.12-12
testing: 1.2.12-13
unstable: 1.2.12-13

versioned links

1.2.12-5+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.2.12-5+deb9u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.2.12-10+deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.2.12-12: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.2.12-13: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libsdl-image1.2
libsdl-image1.2-dev

action needed

1 new commit since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit d82351a52914ec91541cc1f82214493cdd37bd43
Author: Simon McVittie <smcv@debian.org>
Date:   Sun Dec 5 11:55:25 2021 +0000

    Reformat patch metadata in the gbp-pq-like dialect of DEP-3

Created: 2021-12-05 Last update: 2022-05-27 17:38

lintian reports 3 warnings normal

Lintian reports 3 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2020-07-29 Last update: 2022-01-01 04:35

3 low-priority security issues in buster low

There are 3 open security issues in buster.

3 issues left for the package maintainer to handle:

CVE-2019-5059: (needs triaging) An exploitable code execution vulnerability exists in the XPM image rendering functionality of SDL2_image 2.0.4. A specially crafted XPM image can cause an integer overflow, allocating too small of a buffer. This buffer can then be written out of bounds resulting in a heap overflow, ultimately ending in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
CVE-2019-5060: (needs triaging) An exploitable code execution vulnerability exists in the XPM image rendering function of SDL2_image 2.0.4. A specially crafted XPM image can cause an integer overflow in the colorhash function, allocating too small of a buffer. This buffer can then be written out of bounds, resulting in a heap overflow, ultimately ending in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
CVE-2019-13616: (needs triaging) SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.

You can find information about how to handle these issues in the security team's documentation.

Created: 2021-02-19 Last update: 2022-03-26 14:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.1 instead of 4.6.0).

Created: 2022-05-11 Last update: 2022-05-11 23:24

news

[rss feed]

[2021-12-09] sdl-image1.2 1.2.12-13 MIGRATED to testing (Debian testing watch)
[2021-12-03] Accepted sdl-image1.2 1.2.12-13 (source) into unstable (Simon McVittie)
[2019-09-24] sdl-image1.2 1.2.12-12 MIGRATED to testing (Debian testing watch)
[2019-09-18] Accepted sdl-image1.2 1.2.12-12 (source) into unstable (Felix Geyer)
[2019-08-31] Accepted sdl-image1.2 1.2.12-5+deb9u2 (source amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Hugo Lefeuvre)
[2019-08-31] Accepted sdl-image1.2 1.2.12-10+deb10u1 (source amd64) into proposed-updates->stable-new, proposed-updates (Hugo Lefeuvre)
[2019-08-13] sdl-image1.2 1.2.12-11 MIGRATED to testing (Debian testing watch)
[2019-08-08] Accepted sdl-image1.2 1.2.12-11 (source) into unstable (Hugo Lefeuvre)
[2019-07-27] Accepted sdl-image1.2 1.2.12-5+deb8u2 (source amd64) into oldoldstable (Hugo Lefeuvre)
[2018-11-10] sdl-image1.2 1.2.12-10 MIGRATED to testing (Debian testing watch)
[2018-11-05] Accepted sdl-image1.2 1.2.12-10 (source amd64) into unstable (Chris Lamb)
[2018-10-29] sdl-image1.2 1.2.12-9 MIGRATED to testing (Debian testing watch)
[2018-10-23] Accepted sdl-image1.2 1.2.12-9 (source amd64) into unstable (Manuel A. Fernandez Montecelo)
[2018-04-30] Accepted sdl-image1.2 1.2.12-5+deb8u1 (source amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Felix Geyer)
[2018-04-30] Accepted sdl-image1.2 1.2.12-5+deb9u1 (source) into proposed-updates->stable-new, proposed-updates (Felix Geyer)
[2018-04-28] Accepted sdl-image1.2 1.2.12-5+deb9u1 (source) into stable->embargoed, stable (Felix Geyer)
[2018-04-28] Accepted sdl-image1.2 1.2.12-5+deb8u1 (source amd64) into oldstable->embargoed, oldstable (Felix Geyer)
[2018-04-06] Accepted sdl-image1.2 1.2.12-2+deb7u2 (source amd64) into oldoldstable (Markus Koschany)
[2018-03-08] sdl-image1.2 1.2.12-8 MIGRATED to testing (Debian testing watch)
[2018-03-05] Accepted sdl-image1.2 1.2.12-8 (source) into unstable (Felix Geyer)
[2017-10-24] sdl-image1.2 1.2.12-7 MIGRATED to testing (Debian testing watch)
[2017-10-18] Accepted sdl-image1.2 1.2.12-7 (source) into unstable (Felix Geyer)
[2017-10-16] Accepted sdl-image1.2 1.2.12-2+deb7u1 (source amd64) into oldoldstable (Chris Lamb)
[2017-08-09] sdl-image1.2 1.2.12-6 MIGRATED to testing (Debian testing watch)
[2017-08-03] Accepted sdl-image1.2 1.2.12-6 (source amd64) into unstable (Manuel A. Fernandez Montecelo)
[2013-09-12] sdl-image1.2 1.2.12-5 MIGRATED to testing (Debian testing watch)
[2013-09-01] Accepted sdl-image1.2 1.2.12-5 (source amd64) (Felix Geyer)
[2013-08-12] sdl-image1.2 1.2.12-4 MIGRATED to testing (Debian testing watch)
[2013-07-19] Accepted sdl-image1.2 1.2.12-4 (source amd64) (Manuel A. Fernandez Montecelo)
[2013-05-22] sdl-image1.2 1.2.12-3 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 0

links

homepage
lintian (0, 3)
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.2.12-13build1
4 bugs