CVE-2014-3598

Advisory

pillow before 2.5.3 is vulnerable to a DoS in the Jpeg2KImagePlugin.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

------------------

- Fixed CVE-2014-3598, a DOS in the Jpeg2KImagePlugin (backport)
[Andrew Drake]

Resources

• https://pypi.org/project/pillow
• https://pyup.io/changelogs/pillow/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3598
• https://pypi.python.org/pypi/Pillow/2.5.3
• http://lists.opensuse.org/opensuse-updates/2015-04/msg00056.html