Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9c592330 by Salvatore Bonaccorso at 2022-11-20T21:13:40+01:00
Add Debian bug reference for CVE-2022-45199/pillow
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1127,7 +1127,7 @@ CVE-2022-3980 (An XML External Entity (XEE) vulnerability
allows server-side req
CVE-2022-37406
RESERVED
CVE-2022-45199 (Pillow before 9.3.0 allows denial of service via
SAMPLESPERPIXEL. ...)
- - pillow <unfixed>
+ - pillow <unfixed> (bug #1024512)
[bullseye] - pillow <not-affected> (Vulnerable code not present,
introduced in 9.2.0)
[buster] - pillow <not-affected> (Vulnerable code not present,
introduced in 9.2.0)
NOTE:
https://github.com/python-pillow/Pillow/commit/2444cddab2f83f28687c7c20871574acbb6dbcf3
(9.3.0)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9c592330aa29c8c28652893572a4dcc71b232037
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9c592330aa29c8c28652893572a4dcc71b232037
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
