[Git][security-tracker-team/security-tracker][master] lts: pillow ignored rather than not-affected in bullseye
Utkarsh Gupta (@utkarsh)
utkarsh at debian.org
Mon Jul 27 19:26:42 BST 2026
Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker
Commits:
49117d2d by Utkarsh Gupta at 2026-07-27T23:53:23+05:30
lts: pillow ignored rather than not-affected in bullseye
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -12355,7 +12355,7 @@ CVE-2026-59205 (Pillow is a Python imaging library. Prior to 12.3.0, Pillow's Im
CVE-2026-59204 (Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/lib ...)
- pillow 12.3.0-1 (bug #1142274)
[bookworm] - pillow <postponed> (Minor issue, DoS)
- [bullseye] - pillow <not-affected> (JPEG2000 support not built)
+ [bullseye] - pillow <ignored> (JPEG2000 support not built)
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j
NOTE: https://github.com/python-pillow/Pillow/pull/9704
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca (12.3.0)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/49117d2db05928430d67132c57975a85b94123c6
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/49117d2db05928430d67132c57975a85b94123c6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260727/cca01e82/attachment.htm>
More information about the debian-security-tracker-commits
mailing list