Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 889594

Summary: <dev-python/pillow-9.4.0: multiple vulnerabilities
Product: Gentoo Security Reporter: John Helmert III <ajak>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: IN_PROGRESS ---    
Severity: minor CC: mgorny, python
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
URL: https://github.com/python-pillow/Pillow/releases/tag/9.4.0
Whiteboard: B3 [glsa]
Package list:
Runtime testing required: ---
Bug Depends on: 889598    
Bug Blocks:    

Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2023-01-03 20:42:11 UTC
"- Fixed null pointer dereference crash with malformed font #6846 [@radarhere]"

Among other likely security-impactful changes.
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2023-01-04 12:24:56 UTC
Cleanup done.
Comment 2 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2023-01-04 17:42:57 UTC
Thanks!