SUSE-SU-2016:0924-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2016:0924-1

Related

Published

2016-03-31T12:18:26Z

Modified

2016-03-31T12:18:26Z

Summary

Security update for python-Pillow

Details

This update for python-Pillow fixes the following security issues:

Fixed an integer overflow in Resample.c causing writes in the Python heap.
Fixed a buffer overflow in PcdDecode.c causing a segfault when opening PhotoCD files. CVE-2016-TBD
Fixed a buffer overflow in FliDecode.c causing a segfault when opening FLI files. CVE-2016-0775 (fixes bsc#965582)
Fixed a buffer overflow in TiffDecode.c causing an arbitrary amount of memory to be overwritten when opening a specially crafted invalid TIFF file. CVE-2016-0740 (fixes bsc#965579)

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.0-9.1

{
    "binaries": [
        {
            "python-Pillow": "2.7.0-9.1"
        }
    ]
}