Utkarsh Gupta pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
49117d2d by Utkarsh Gupta at 2026-07-27T23:53:23+05:30
lts: pillow ignored rather than not-affected in bullseye
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -12355,7 +12355,7 @@ CVE-2026-59205 (Pillow is a Python imaging library.
Prior to 12.3.0, Pillow's Im
CVE-2026-59204 (Pillow is a Python imaging library. From 8.2.0 through 12.2.0,
src/lib ...)
- pillow 12.3.0-1 (bug #1142274)
[bookworm] - pillow <postponed> (Minor issue, DoS)
- [bullseye] - pillow <not-affected> (JPEG2000 support not built)
+ [bullseye] - pillow <ignored> (JPEG2000 support not built)
NOTE:
https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j
NOTE: https://github.com/python-pillow/Pillow/pull/9704
NOTE: Fixed by:
https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca
(12.3.0)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/49117d2db05928430d67132c57975a85b94123c6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/49117d2db05928430d67132c57975a85b94123c6
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits