Pillow/docs/releasenotes/2.3.2.rst
Alex Clark ae5f1de624 Back fill release notes for #7864
- Back fill release notes for 3.1.1
- Add credits to 2.3.2, 2.5.2
2024-03-15 10:01:42 -04:00

15 lines
335 B
ReStructuredText

2.3.2
-----
Security
========
:cve:`2014-3589`: Fix DOS attack
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
``PIL/IcnsImagePlugin.py`` in Python Imaging Library (PIL) and Pillow before 2.3.2 and
2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted
block size.
Found and reported by Andrew Drake of dropbox.com