[Secure-testing-team] Bug#776303: CVE-2014-9601

Moritz Muehlenhoff jmm at debian.org
Mon Jan 26 13:18:59 UTC 2015


Source: pillow
Severity: important
Tags: security

This was fixed upstream in 2.7.0 and was assigned CVE-2014-9601:
http://pillow.readthedocs.org/releasenotes/2.7.0.html#png-text-chunk-size-limits

Isolated fix is here:
https://github.com/python-pillow/Pillow/commit/b3e09122e527ae554eb590741bbd7611d5710e40

Cheers,
        Moritz



More information about the Secure-testing-team mailing list