Skip to content
OpenAdvisories
Medium DLA-422-1 2 CVEs

python-imaging - security update

Published Feb 21, 2016 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 python-imaging 1.1.7-2+deb6u2

Vulnerabilities 2

  • Medium 6.5

    Pillow Buffer overflow in ImagingFliDecode

    Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.

  • Medium 6.5

    Pillow buffer overflow in ImagingPcdDecode

    Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PhotoCD file.