Debian
pillow package

pillow 8.1.1-1 source package in Debian

Changelog

pillow (8.1.1-1) unstable; urgency=high

  * New upstream version.
    - Use more specific regex chars to prevent ReDoS. CVE-2021-25292.
    - Fix OOB Read in TiffDecode.c, and check the tile validity before reading.
      CVE-2021-25291.
    - Fix negative size read in TiffDecode.c. CVE-2021-25290.
    - Fix OOB read in SgiRleDecode.c. CVE-2021-25293.
    - Incorrect error code checking in TiffDecode.c. CVE-2021-25289.

 -- Matthias Klose <email address hidden>  Thu, 04 Mar 2021 07:13:48 +0100

Upload details

Uploaded by:
Matthias Klose
Uploaded to:
Sid
Original maintainer:
Matthias Klose
Architectures:
any all
Section:
misc
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Downloads

File Size SHA-256 Checksum
pillow_8.1.1-1.dsc 2.4 KiB 5e1ac3e7e3b8e75e822c91f2a8663e19f281490d661b6c4242caee3f677bb7f1
pillow_8.1.1.orig.tar.xz 37.5 MiB b6dcd8ee90ae09fd3876d1770cd1c569befcfef3ec81177e024e2617338480b5
pillow_8.1.1-1.debian.tar.xz 15.3 KiB 5ffcb5c59c1ee9cf8df8a0ab29c9a43b807ef88acb96551b56b75ea67a2756c3

Available diffs

No changes file available.

Binary packages built by this source