SUSE-SU-2016:0935-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2016:0935-1

Related

Published

2016-04-01T13:29:16Z

Modified

2016-04-01T13:29:16Z

Summary

Security update for python-Pillow

Details

This update for python-Pillow fixes the following security issues:

CVE-2016-0775: Fixed a buffer overflow in FliDecode.c causing a segfault when opening FLI files. (bsc#965582)
CVE-2016-0740: Fixed a buffer overflow in TiffDecode.c causing an arbitrary amount of memory to be overwritten when opening a specially crafted invalid TIFF file. (bsc#965579)
Fixed an integer overflow in Resample.c causing writes in the Python heap.
Fixed a buffer overflow in PcdDecode.c causing a segfault when opening PhotoCD files.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.0-3.1

{
    "binaries": [
        {
            "python-Pillow": "2.7.0-3.1"
        }
    ]
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.0-3.1

{
    "binaries": [
        {
            "python-Pillow": "2.7.0-3.1"
        }
    ]
}