PVE-2023-55182

Advisory

Pillow-simd includes a security fix: Pillow will now decode the data in its natural CMYK …

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL. See CVE-2022-45199. …

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.html#decode-jpeg-compressed-blp1-data-in-original-mode