Ubuntu
pillow package

pillow 8.1.2+dfsg-0.3ubuntu0.1 source package in Ubuntu

Changelog

pillow (8.1.2+dfsg-0.3ubuntu0.1) impish-security; urgency=medium

  * SECURITY UPDATE: regular expression DoS
    - debian/patches/CVE-2021-23437.patch: raise ValueError if color
      specifier is too long in Tests/test_imagecolor.py,
      src/PIL/ImageColor.py.
    - CVE-2021-23437
  * SECURITY UPDATE: improper initialization
    - debian/patches/CVE-2022-22815.patch: initialize coordinates to zero
      in Tests/test_imagepath.py, src/path.c.
    - CVE-2022-22815
  * SECURITY UPDATE: buffer over-read during initialization
    - debian/patches/CVE-2022-22816.patch: handle case where path count is
      zero in Tests/test_imagepath.py, src/path.c.
    - CVE-2022-22816
  * SECURITY UPDATE: evaluation of arbitrary expressions
    - debian/patches/CVE-2022-22817.patch: restrict builtins for
      ImageMath.eval in Tests/test_imagemath.py, src/PIL/ImageMath.py.
    - CVE-2022-22817

 -- Marc Deslauriers <email address hidden>  Wed, 12 Jan 2022 12:49:56 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Impish
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
pillow_8.1.2+dfsg.orig.tar.xz 35.8 MiB 7fb9b5e9306bfc30990322314cd92b6befd8e6ab9af6ef5bbccca18f938e4e49
pillow_8.1.2+dfsg-0.3ubuntu0.1.debian.tar.xz 23.4 KiB 3c3672e1f1288c4016914a5faf2245e8c809f512dd572ffcc0a80aac1b047cf6
pillow_8.1.2+dfsg-0.3ubuntu0.1.dsc 2.5 KiB 627889680b5feb54beeed3ff4871738296b0afa5c8eefdde384ab7a340002b23

View changes file

Binary packages built by this source

python-pil-doc: No summary available for python-pil-doc in ubuntu impish.

No description available for python-pil-doc in ubuntu impish.

python3-pil: No summary available for python3-pil in ubuntu impish.

No description available for python3-pil in ubuntu impish.

python3-pil-dbg: No summary available for python3-pil-dbg in ubuntu impish.

No description available for python3-pil-dbg in ubuntu impish.

python3-pil.imagetk: No summary available for python3-pil.imagetk in ubuntu impish.

No description available for python3-pil.imagetk in ubuntu impish.

python3-pil.imagetk-dbg: No summary available for python3-pil.imagetk-dbg in ubuntu impish.

No description available for python3-pil.imagetk-dbg in ubuntu impish.