Pillow/docs/releasenotes/3.1.1.rst
2024-03-15 10:01:42 -04:00

20 lines
672 B
ReStructuredText

3.1.1
-----
Security
========
:cve:`2016-0740`: Fix buffer overflow in ``libImaging/TiffDecode.c``
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Buffer overflow in the ImagingLibTiffDecode function in
``libImaging/TiffDecode.c`` in Pillow before 3.1.1 allows remote attackers to
overwrite memory via a crafted TIFF file.
:cve:`2016-0775`: Fix buffer overflow in ``libImaging/FliDecode.c``
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Buffer overflow in the ImagingFliDecode function in ``libImaging/FliDecode.c``
in Pillow before 3.1.1 allows remote attackers to cause a denial of service
(crash) via a crafted FLI file.