PYSEC-2022-42980
At a glance
- Published
- Updated
- CVE
- CVE-2022-45199
- Aliases
- BIT-pillow-2022-45199, GHSA-q4mp-jvh2-76fj
Description
Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.
Affected packages
| Package | Versions |
|---|---|
| PyPI · pillow | introduced 0, fixed 2444cddab2f83f28687c7c20871574acbb6dbcf3 ; introduced 9.2.0, fixed 9.3.0 |
References
- https://github.com/python-pillow/Pillow/pull/6700 WEB
- https://bugs.gentoo.org/878769 WEB
- https://github.com/python-pillow/Pillow/releases/tag/9.3.0 WEB
- https://github.com/python-pillow/Pillow/commit/2444cddab2f83f28687c7c20871574acbb6dbcf3 FIX
- https://github.com/advisories/GHSA-q4mp-jvh2-76fj ADVISORY
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — PyPA Advisory Database |