Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "python-imaging", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-imaging-compat", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-imaging-dbg", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-imaging-doc", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-imaging-sane", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-imaging-sane-dbg", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-imaging-tk", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-imaging-tk-dbg", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-pil", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-pil-dbg", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-pil-dbgsym", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-pil-doc", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-pil.imagetk", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-pil.imagetk-dbg", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-pil.imagetk-dbgsym", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-sane", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-sane-dbg", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python-sane-dbgsym", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python3-imaging", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python3-imaging-dbg", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python3-imaging-sane", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python3-imaging-sane-dbg", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python3-imaging-tk", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python3-imaging-tk-dbg", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python3-pil", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python3-pil-dbg", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python3-pil-dbgsym", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python3-pil.imagetk", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python3-pil.imagetk-dbg", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python3-pil.imagetk-dbgsym", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python3-sane", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python3-sane-dbg", "binary_version": "2.3.0-1ubuntu3.4" }, { "binary_name": "python3-sane-dbgsym", "binary_version": "2.3.0-1ubuntu3.4" } ], "ubuntu_priority": "low" }