Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 889594 - <dev-python/pillow-9.4.0: multiple vulnerabilities
Summary: <dev-python/pillow-9.4.0: multiple vulnerabilities
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
URL: https://github.com/python-pillow/Pill...
Whiteboard: B3 [glsa+]
Keywords:
Depends on: 889598
Blocks:
  Show dependency tree
 
Reported: 2023-01-03 20:42 UTC by John Helmert III
Modified: 2024-05-05 07:38 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2023-01-03 20:42:11 UTC 
"- Fixed null pointer dereference crash with malformed font #6846 [@radarhere]"

Among other likely security-impactful changes.
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2023-01-04 12:24:56 UTC 
Cleanup done.
Comment 2 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2023-01-04 17:42:57 UTC 
Thanks!
Comment 3 Larry the Git Cow gentoo-dev 2024-05-05 07:37:36 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=816096872d7a07e6233fbe06019e8382ea181358

commit 816096872d7a07e6233fbe06019e8382ea181358
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2024-05-05 07:36:46 +0000
Commit:     Hans de Graaff <graaff@gentoo.org>
CommitDate: 2024-05-05 07:37:30 +0000

    [ GLSA 202405-12 ] Pillow: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/889594
    Bug: https://bugs.gentoo.org/903664
    Bug: https://bugs.gentoo.org/916907
    Bug: https://bugs.gentoo.org/922577
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: Hans de Graaff <graaff@gentoo.org>

 glsa-202405-12.xml | 46 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 46 insertions(+)