diff --git a/docs/releasenotes/3.1.1.rst b/docs/releasenotes/3.1.1.rst index 49427609e..d02f68aa3 100644 --- a/docs/releasenotes/3.1.1.rst +++ b/docs/releasenotes/3.1.1.rst @@ -14,7 +14,7 @@ Buffer overflow in TiffDecode.c Pillow 3.1.0 and earlier when linked against libtiff >= 4.0.0 on x64 may overflow a buffer when reading a -specially crafted tiff file. +specially crafted tiff file. Specifically, libtiff >= 4.0.0 changed the return type of ``TIFFScanlineSize`` from ``int32`` to machine dependent @@ -36,7 +36,7 @@ Buffer overflow in FliDecode.c ++++++++++++++++++++++++++++++ In all versions of Pillow, dating back at least to -the last PIL 1.1.7 release, FliDecode.c has a buffer overflow error. +the last PIL 1.1.7 release, FliDecode.c has a buffer overflow error. Around line 192: @@ -70,7 +70,7 @@ Buffer overflow in PcdDecode.c ++++++++++++++++++++++++++++++ In all versions of Pillow, dating back at least to the -last PIL 1.1.7 release, ``PcdDecode.c`` has a buffer overflow error. +last PIL 1.1.7 release, ``PcdDecode.c`` has a buffer overflow error. The ``state.buffer`` for ``PcdDecode.c`` is allocated based on a 3 bytes per pixel sizing, where ``PcdDecode.c`` wrote into the buffer diff --git a/docs/releasenotes/3.1.2.rst b/docs/releasenotes/3.1.2.rst index 5bf66650c..289430a71 100644 --- a/docs/releasenotes/3.1.2.rst +++ b/docs/releasenotes/3.1.2.rst @@ -14,7 +14,7 @@ Buffer overflow in Jpeg2KEncode.c Pillow between 2.5.0 and 3.1.1 may overflow a buffer when writing large Jpeg2000 files, allowing for code execution or other -memory corruption. +memory corruption. This occurs specifically in the function ``j2k_encode_entry``, at the line: diff --git a/docs/releasenotes/8.0.1.rst b/docs/releasenotes/8.0.1.rst index 263917922..c3909ac86 100644 --- a/docs/releasenotes/8.0.1.rst +++ b/docs/releasenotes/8.0.1.rst @@ -9,7 +9,7 @@ Fix CVE-2020-15999 .. note:: More information about this vulnerability included in database record :cve:`2020-15999` -Update FreeType in wheels to `2.10.4`_ +Update FreeType in wheels to `2.10.4`_ ++++++++++++++++++++++++++++++++++++++ * A heap buffer overflow has been found in the handling of embedded PNG bitmaps, diff --git a/docs/releasenotes/8.1.1.rst b/docs/releasenotes/8.1.1.rst index 7f871bac1..7b56b838e 100644 --- a/docs/releasenotes/8.1.1.rst +++ b/docs/releasenotes/8.1.1.rst @@ -4,7 +4,7 @@ Security ======== -Fix CVE-2021-25289 +Fix CVE-2021-25289 ^^^^^^^^^^^^^^^^^^ .. note:: More information about this vulnerability included in database record :cve:`2021-25289`