[Secure-testing-commits] r31166 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Jan 7 05:41:38 UTC 2015


Author: carnil
Date: 2015-01-07 05:41:36 +0000 (Wed, 07 Jan 2015)
New Revision: 31166

Modified:
   data/CVE/list
Log:
Add pillow issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-01-07 05:39:31 UTC (rev 31165)
+++ data/CVE/list	2015-01-07 05:41:36 UTC (rev 31166)
@@ -1,3 +1,9 @@
+CVE-2015-XXXX [DoS]
+	- pillow <unfixed>
+	- python-imaging <removed>
+	NOTE: https://github.com/python-pillow/Pillow/commit/b3e09122e527ae554eb590741bbd7611d5710e40
+	NOTE: http://pillow.readthedocs.org/releasenotes/2.7.0.html#png-text-chunk-size-limits
+	TODO: check
 CVE-2015-XXXX [isofs: unchecked printing of ER records]
 	- linux <unfixed>
 	- linux-2.6 <removed>




More information about the Secure-testing-commits mailing list