Update 7.1.0 release notes with CVEs#4538

Merged

radarhere merged 1 commit intopython-pillow:masterfrom

hugovk:update-7.1.0-release-notes

Apr 10, 2020

Member

hugovk commented Apr 7, 2020 •

edited

Loading

CVE-2020-10177: Fix multiple OOB reads in FLI decoding #4503 Fix multiple OOB reads in FLI decoding
CVE-2020-10378: Fix bounds overflow in PCX decoding #4506 Fix bounds overflow in PCX decoding
CVE-2020-10379: Fix 2 buffer overflows in TIFF decoding #4507 Fix two buffer overflows in TIFF decoding
CVE-2020-10994: Fix bounds overflow in JPEG 2000 decoding #4505 Fix bounds overflow in JPEG 2000 decoding
CVE-2020-11538: Fix buffer overflow in SGI-RLE decoding #4504 Fix buffer overflow in SGI-RLE decoding


          Update release notes with CVEs [CI skip]

3f2205d

hugovk added the Documentation label

Member

radarhere commented Apr 9, 2020

Is one still pending?

Member Author

hugovk commented Apr 9, 2020

No, this is all five.

radarhere merged commit 41b554b into python-pillow:master

hugovk deleted the update-7.1.0-release-notes branch

April 10, 2020 05:00

joshuarli mentioned this pull request

fix(security): Bump Pillow getsentry/sentry#19662

Merged

hugovk mentioned this pull request

CVE for <7.1.0 references non-existent 6.2.3 release #4750

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels