mirror of
https://github.com/python-pillow/Pillow.git
synced 2024-12-26 18:06:18 +03:00
ae5f1de624
- Back fill release notes for 3.1.1 - Add credits to 2.3.2, 2.5.2
15 lines
335 B
ReStructuredText
15 lines
335 B
ReStructuredText
2.3.2
|
|
-----
|
|
|
|
Security
|
|
========
|
|
|
|
:cve:`2014-3589`: Fix DOS attack
|
|
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|
|
|
|
``PIL/IcnsImagePlugin.py`` in Python Imaging Library (PIL) and Pillow before 2.3.2 and
|
|
2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted
|
|
block size.
|
|
|
|
Found and reported by Andrew Drake of dropbox.com
|