Format: 1.8
Date: Wed, 12 Aug 2026 11:20:16 +0100
Binary: libsdl2-image-2.0-0 libsdl2-image-2.0-0-dbgsym libsdl2-image-dev libsdl2-image-tests libsdl2-image-tests-dbgsym
Source: libsdl2-image
Architecture: amd64 i386 source
Version: 2.8.8+dfsg-1+deb13u1~1+14+gd43c6246
Distribution: UNRELEASED
Urgency: medium
Maintainer: Debian SDL packages maintainers <pkg-sdl-maintainers@lists.alioth.debian.org>
Changed-By: Snapshot <snapshot@localhost>
Closes: 1133010
Description: 
 libsdl2-image-2.0-0 - Image loading library for Simple DirectMedia Layer 2, libraries
 libsdl2-image-dev - Image loading library for Simple DirectMedia Layer 2, development
 libsdl2-image-tests - Image loading library for Simple DirectMedia Layer 2 - tests
Changes:
 libsdl2-image (2.8.8+dfsg-1+deb13u1~1+14+gd43c6246) UNRELEASED; urgency=medium
 .
   * Snapshot build (local package)
 .
   [ Aquila Macedo Costa ]
   * d/p/Fixed-out-of-bounds-read-in-XCF-image-loader-thanks-Sebas.patch:
     Import upstream patch for CVE-2026-35444 (Closes: #1133010)
   * d/patches: Add selected upstream malformed-image parser robustness fixes:
     - d/p/xpm-Remove-QUICK_COLORHASH-replace-it-with-inline-code-th.patch:
       check XPM color hash entries before use
     - d/p/Fix-heap-buffer-overflow-WRITE-in-LBM-palette-CWE-122.patch:
       fix LBM palette overflow
     - d/p/xcf-Fix-heap-buffer-overflow-READ-in-XCF-RLE-decoder-CWE-.patch:
       add XCF RLE decoder bounds checks
     - d/p/Fix-heap-buffer-overflow-READ-in-XCF-do_layer_surface-CWE.patch,
       d/p/xcf-Added-an-SDL_SetError-when-rejecting-out-of-bounds-ti.patch:
       add XCF do_layer_surface tile bounds check, report invalid XCF tile data
       through SDL_SetError()
     - d/p/xcf-fix-null-pointer-dereference-when-read_xcf_hierarchy-.patch:
       check XCF hierarchy read failures before dereferencing
     - d/p/tga-reject-images-with-zero-width-or-height.patch:
       reject TGA images with zero width or height
     - d/p/Fixed-out-of-bound-read-in-GIF-decoder.patch:
       fix out-of-bounds reads in the GIF decoder
 .
   [ Simon McVittie ]
   * d/control, d/gbp.conf: Branch for trixie
   * d/patches: Improve patch metadata: add CVE ID, Debian bug number,
     upstream commit references, etc.
   * d/patches: Re-export patches with their mechanically-generated names and
     apply them in the same order that upstream did, to make it more obvious
     how this version compares with 2.8.12
   * d/patches: Add additional robustness fixes for parsing malformed images:
     - d/p/xcf-Permit-empty-strings-in-read_string.patch:
       Avoid an out-of-bounds write if XCF files contain a zero-length string
     - d/p/IMG_xcf.c-read_string-add-back-the-positive-string-size-c.patch:
       Harden XCF parsing against extremely long strings
 .
   [ Snapshot ]
   * snapshot: commit d43c6246 (14 commits after 2.8.8+dfsg-1)
Checksums-Sha1: 
 afef6cf352d7d995f431c0ff1f3e0a40cf7be5ed 1693 libsdl2-image_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246.dsc
 dfb19d31392a572f5954f6d14421cdae1a44f1ab 17100 libsdl2-image_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246.debian.tar.xz
 ed9fb2fbd32f4cc50769a0d90541e7918f4fbea0 10545 libsdl2-image_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_source.buildinfo
 4a3b729fa9aa68c5215bd4bdc44b545a829c4bbe 180912 libsdl2-image-2.0-0-dbgsym_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.deb
 7ea7ab6508a3e85d355b40c6a8954e9af482fd6f 67940 libsdl2-image-2.0-0_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.deb
 deb6227dcfa01abff7ad7442ae5b36818c17a182 81220 libsdl2-image-dev_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.deb
 8d2b74254e0bde221bcde5d5364830be1fefcd60 36580 libsdl2-image-tests-dbgsym_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.deb
 7807e4c4bae4ad02e67ea94deda6e7bdfebf61ca 67580 libsdl2-image-tests_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.deb
 4bd736cdda26bc97d64a7c32d7388a4af9f0e9e2 12174 libsdl2-image_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.buildinfo
 5ed9ac9eaed86f72beddf0e032d08c8177cf6c94 168620 libsdl2-image-2.0-0-dbgsym_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.deb
 5f58eee3363eb063e9415cfbd4af12aa8bdcd74b 71768 libsdl2-image-2.0-0_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.deb
 8a68c31a816571101dfd26c0870225cb318b6e1e 86536 libsdl2-image-dev_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.deb
 73a5d37bdb0b74d9c0e5224468a6c99988bc781a 35424 libsdl2-image-tests-dbgsym_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.deb
 bd2241706001e5fe406883005a0dc38408201ea6 69480 libsdl2-image-tests_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.deb
 631ac80e677542ae9d44533119da21a009b9e084 12066 libsdl2-image_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.buildinfo
Checksums-Sha256: 
 7387a6b52d88f5b4c34c24e325b860798c5c88ef0ab91d1e1a7b81be2e1338b6 1693 libsdl2-image_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246.dsc
 b688c3344b971fd20387e4a0cf96c220b0740dc3bc09ce85389d149b184db125 17100 libsdl2-image_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246.debian.tar.xz
 050581095d54fddda0124c42eaac76ea5d29b899aa057da5c65e6922e7760f1c 10545 libsdl2-image_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_source.buildinfo
 8d0bb3cfdf1533f3b7541229efec6caac9fe76fc9b42cd955c07a07f67b043cd 180912 libsdl2-image-2.0-0-dbgsym_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.deb
 e40a11e47482ae1fcb05e23e1d229b3ba1b1ac3d5e9e92b845b573c98e5aebdb 67940 libsdl2-image-2.0-0_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.deb
 09e784292712d44a4096f27450827c3c0ec57ceaa2e3dbd77e47c1db68894cf4 81220 libsdl2-image-dev_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.deb
 3d3b58739ecf0557c26429374a81f5a6c17a102b5255a7f27279e871bbb3f338 36580 libsdl2-image-tests-dbgsym_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.deb
 33ae609cffbccbfac06370000b2d8a19f11affbb4098f2f0739d182774fa057c 67580 libsdl2-image-tests_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.deb
 40b9d2ae8136e18098e1d181e14dc400a7606407dbd34399ca1a04d807361c06 12174 libsdl2-image_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.buildinfo
 26677db2d58d8f42702d9df86c53b250f5fa051eabe32f39442ca6a3c1ff528b 168620 libsdl2-image-2.0-0-dbgsym_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.deb
 ac61b46ad561a4281437a47a0ec043bd64ca0fb7b2a494ee393f4ca6ab53e76b 71768 libsdl2-image-2.0-0_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.deb
 81175695eb6dc888f81dd36cb584c1086807615c50802eb213d594d0ec954457 86536 libsdl2-image-dev_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.deb
 1d9d0781c21cfad94ebb96ae859ccc7822a0a722a190d901319e09a7eeaeac58 35424 libsdl2-image-tests-dbgsym_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.deb
 ac643f7ad5c693882a8b89e17641d389c5200716533076e63bfa6810bb0f3561 69480 libsdl2-image-tests_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.deb
 ed1bfe7768d4f451277fea349a29acfcbd769bffd054bf1f65566245af3867bf 12066 libsdl2-image_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.buildinfo
Files: 
 5c262b901344920ffecd6b7a3d8bb3b8 1693 libs optional libsdl2-image_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246.dsc
 90c887f76089985e18e084a4eba4bfb7 17100 libs optional libsdl2-image_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246.debian.tar.xz
 ddad1064e5860bf0525c3c250bf9439c 10545 libs optional libsdl2-image_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_source.buildinfo
 3731c17d232d6e8bf931897fe2b07212 180912 debug optional libsdl2-image-2.0-0-dbgsym_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.deb
 c2b1b3c2a8b13f51bbbd67db4bb0d03b 67940 libs optional libsdl2-image-2.0-0_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.deb
 f9396b1aa2a60851e6b4bbabc3b5e704 81220 libdevel optional libsdl2-image-dev_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.deb
 3700ac343ab848380adb53c166b331bc 36580 debug optional libsdl2-image-tests-dbgsym_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.deb
 4b1a865767973a608b95eb4ec74770e4 67580 misc optional libsdl2-image-tests_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.deb
 8f5ada3df375e5c46c7f7762322203d7 12174 libs optional libsdl2-image_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_amd64.buildinfo
 e0d506cb910f55fcd01469e0146607bf 168620 debug optional libsdl2-image-2.0-0-dbgsym_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.deb
 6e25d2d69341e1ecfbf36cf927fc401d 71768 libs optional libsdl2-image-2.0-0_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.deb
 78280b7f37b4fd86718ca6dbd1f16181 86536 libdevel optional libsdl2-image-dev_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.deb
 66e3d948ee48de60d646252d15a0d31f 35424 debug optional libsdl2-image-tests-dbgsym_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.deb
 14cf629d78e0fb1c5d214fb1281c0e6d 69480 misc optional libsdl2-image-tests_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.deb
 129bda3bc239ef20c3f284653a40ca0b 12066 libs optional libsdl2-image_2.8.8+dfsg-1+deb13u1~1+14+gd43c6246_i386.buildinfo