Index: security/vuxml/vuln.xml =================================================================== --- security/vuxml/vuln.xml (revision 425855) +++ security/vuxml/vuln.xml (working copy) @@ -58,6 +58,35 @@ * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> + + Pillow -- multiple vulnerabilities + + + py-pillow + 3.3.2 + + + + +

Pillow reports:

+
Pillow prior to 3.3.2 may experience integer overflow errors in map.c when reading specially crafted image files. This may lead to memory disclosure or corruption.
+
Pillow prior to 3.3.2 and PIL 1.1.7 (at least) do not check for negative image sizes in ImagingNew in Storage.c. A negative image size can lead to a smaller allocation than expected, leading to arbitrary writes.
+

+ + + + http://pillow.readthedocs.io/en/3.4.x/releasenotes/3.3.2.html + https://github.com/python-pillow/Pillow/issues/2105 + CVE-2016-9189 + CVE-2016-9190 + + + 2016-09-06 + 2016-11-10 + + + openssl -- multiple vulnerabilities