pillow 7.2.0-1ubuntu0.3 source package in Ubuntu
Changelog
pillow (7.2.0-1ubuntu0.3) groovy-security; urgency=medium * SECURITY UPDATE: OOB read in Jpeg2KDecode - debian/patches/CVE-2021-25287_8.patch: handle different widths for each band in src/libImaging/Jpeg2KDecode.c. - CVE-2021-25287 - CVE-2021-25288 * SECURITY UPDATE: DOS in PsdImagePlugin - debian/patches/CVE-2021-28675.patch: sanity check the number of input layers in Tests/test_decompression_bomb.py, Tests/test_file_apng.py, Tests/test_file_blp.py, Tests/test_file_tiff.py, src/PIL/ImageFile.py, src/PIL/PsdImagePlugin.py. - CVE-2021-28675 * SECURITY UPDATE: FLI DOS - debian/patches/CVE-2021-28676.patch: check the block advance in src/libImaging/FliDecode.c. - CVE-2021-28676 * SECURITY UPDATE: EPS DOS on _open - debian/patches/CVE-2021-28677.patch: properly handle line endings in src/PIL/EpsImagePlugin.py. - CVE-2021-28677 * SECURITY UPDATE: BLP DOS - debian/patches/CVE-2021-28678.patch: check that reads return data in src/PIL/BlpImagePlugin.py. - CVE-2021-28678 -- Marc Deslauriers <email address hidden> Tue, 18 May 2021 07:10:06 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Groovy
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- python
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
pillow_7.2.0.orig.tar.xz | 32.0 MiB | 8ab9247b05129164d3f5f060d171242cb29c0f4e3da8a4b4ca9a64b85663fa5a |
pillow_7.2.0-1ubuntu0.3.debian.tar.xz | 30.0 KiB | bbefbec9fdf0c30a81e65a21312dd173320b4871460543905a25b962a718bc93 |
pillow_7.2.0-1ubuntu0.3.dsc | 2.4 KiB | 29a4cb1f7173c6815cc96b45bdf2c7d4cfff4f37e94538a58d337754418f1c09 |
Available diffs
Binary packages built by this source
- python-pil-doc: No summary available for python-pil-doc in ubuntu groovy.
No description available for python-pil-doc in ubuntu groovy.
- python3-pil: No summary available for python3-pil in ubuntu groovy.
No description available for python3-pil in ubuntu groovy.
- python3-pil-dbg: No summary available for python3-pil-dbg in ubuntu groovy.
No description available for python3-pil-dbg in ubuntu groovy.
- python3-pil.imagetk: No summary available for python3-pil.imagetk in ubuntu groovy.
No description available for python3-pil.imagetk in ubuntu groovy.
- python3-pil.imagetk-dbg: No summary available for python3-pil.imagetk-dbg in ubuntu groovy.
No description available for python3-
pil.imagetk- dbg in ubuntu groovy.