Bug 889594

Summary:	<dev-python/pillow-9.4.0: multiple vulnerabilities
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	minor	CC:	mgorny, python
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/python-pillow/Pillow/releases/tag/9.4.0
Whiteboard:	B3 [glsa+]
Package list:		Runtime testing required:	---
Bug Depends on:	889598
Bug Blocks:

Description John Helmert III archtester

2023-01-03 20:42:11 UTC

"- Fixed null pointer dereference crash with malformed font #6846 [@radarhere]"

Among other likely security-impactful changes.

Comment 1 Michał Górny archtester

2023-01-04 12:24:56 UTC

Cleanup done.

Comment 2 John Helmert III archtester

2023-01-04 17:42:57 UTC

Thanks!

Comment 3 Larry the Git Cow gentoo-dev

2024-05-05 07:37:36 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=816096872d7a07e6233fbe06019e8382ea181358

commit 816096872d7a07e6233fbe06019e8382ea181358
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2024-05-05 07:36:46 +0000
Commit:     Hans de Graaff <graaff@gentoo.org>
CommitDate: 2024-05-05 07:37:30 +0000

    [ GLSA 202405-12 ] Pillow: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/889594
    Bug: https://bugs.gentoo.org/903664
    Bug: https://bugs.gentoo.org/916907
    Bug: https://bugs.gentoo.org/922577
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: Hans de Graaff <graaff@gentoo.org>

 glsa-202405-12.xml | 46 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 46 insertions(+)