Skip to content

Latest commit

 

History

History
46 lines (28 loc) · 1.32 KB

8.1.1.rst

File metadata and controls

46 lines (28 loc) · 1.32 KB
Raw

8.1.1

Security

Fix CVE-2021-25289

Note

More information about this vulnerability included in database record 2021-25289

The previous fix for 2020-35654 was insufficient due to incorrect error checking in TiffDecode.c.

Fix CVE-2021-25290

Note

More information about this vulnerability included in database record 2021-25290

In TiffDecode.c, there is a negative-offset memcpy with an invalid size.

Fix CVE-2021-25291

Note

More information about this vulnerability included in database record 2021-25291

In TiffDecode.c, invalid tile boundaries could lead to an out-of-bounds read in TIFFReadRGBATile.

Fix CVE-2021-25292

Note

More information about this vulnerability included in database record 2021-25292:

The PDF parser has a catastrophic backtracking regex that could be used as a DOS attack.

Fix CVE-2021-25293

Note

More information about this vulnerability included in database record 2021-25293

There is an out-of-bounds read in SgiRleDecode.c since Pillow 4.3.0.

Other Changes

A crash with the feature flags for libimagequant, libjpeg-turbo, WebP and XCB on unreleased Python 3.10 has been fixed (5193).