Package: python3-pil Version: 11.1.0-5+deb13u3 Severity: important Tags: patch X-Debbugs-Cc: [email protected], [email protected]
Dear Maintainer,
Writing long PDF file (250 pages) fails with:
Traceback (most recent call last):
File "/usr/lib/python3.14/site-packages/qubespdfconverter/client.py",
line 436, in _publish
await self._save_reps(pages)
File "/usr/lib/python3.14/site-packages/qubespdfconverter/client.py",
line 478, in _save_reps
await asyncio.get_running_loop().run_in_executor(
...<8 lines>...
)
File "/usr/lib64/python3.14/concurrent/futures/thread.py", line 86, in run
result = ctx.run(self.task)
File "/usr/lib64/python3.14/concurrent/futures/thread.py", line 73, in run
return fn(*args, **kwargs)
File "/usr/lib64/python3.14/site-packages/PIL/Image.py", line 2713, in
save
save_handler(self, fp, filename)
~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^
File "/usr/lib64/python3.14/site-packages/PIL/PdfImagePlugin.py", line
44, in _save_all
_save(im, fp, filename, save_all=True)
~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib64/python3.14/site-packages/PIL/PdfImagePlugin.py", line
190, in _save
existing_pdf = PdfParser.PdfParser(f=fp, filename=filename_str,
mode="r+b")
File "/usr/lib64/python3.14/site-packages/PIL/PdfParser.py", line 405, in
__init__
self.read_pdf_info()
~~~~~~~~~~~~~~~~~~^^
File "/usr/lib64/python3.14/site-packages/PIL/PdfParser.py", line 583, in
read_pdf_info
self.read_trailer()
~~~~~~~~~~~~~~~~~^^
File "/usr/lib64/python3.14/site-packages/PIL/PdfParser.py", line 686, in
read_trailer
self.read_prev_trailer(self.trailer_dict[b"Prev"])
~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib64/python3.14/site-packages/PIL/PdfParser.py", line 706, in
read_prev_trailer
check_format_condition(
~~~~~~~~~~~~~~~~~~~~~~^
trailer_dict[b"Prev"] not in processed_offsets, "trailer loop found"
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
)
^
File "/usr/lib64/python3.14/site-packages/PIL/PdfParser.py", line 89, in
check_format_condition
raise PdfFormatError(error_message)
PIL.PdfParser.PdfFormatError: trailer loop found
This started happening after updating python3-pil from 11.1.0-5+deb13u2 to
11.1.0-5+deb13u3.
Looking at the changes, it's caused by CVE-2026-42310.patch.
Upstream has a fix for this issue already:
https://github.com/python-pillow/Pillow/commit/78ee80a6fdd4b787f71880f10e66d6b989c6e58d
-- System Information:
Debian Release: 13.5
APT prefers stable-security
APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.18.35-1.qubes.fc41.x86_64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages python3-pil depends on:
ii libc6 2.41-12+deb13u3
ii libfreetype6 2.13.3+dfsg-1+deb13u1
ii libimagequant0 2.18.0-1+b2
ii libjpeg62-turbo 1:2.1.5-4
ii liblcms2-2 2.16-2+deb13u2
ii libopenjp2-7 2.5.3-2.1~deb13u2
ii libraqm0 0.10.2-1
ii libtiff6 4.7.0-3+deb13u2
ii libwebp7 1.5.0-0.1
ii libwebpdemux2 1.5.0-0.1
ii libwebpmux3 1.5.0-0.1
ii libxcb1 1.17.0-2+b1
ii media-types 13.0.0
ii python3 3.13.5-1
ii python3-pil.imagetk 11.1.0-5+deb13u3
ii zlib1g 1:1.3.dfsg+really1.3.1-1+b1
Versions of packages python3-pil recommends:
ii python3-olefile 0.47-1
Versions of packages python3-pil suggests:
pn python-pil-doc <none>
-- no debconf information
--
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
signature.asc
Description: PGP signature
