Skip to content

Latest commit

 

History

History
20 lines (14 loc) · 727 Bytes

6.2.2.rst

File metadata and controls

20 lines (14 loc) · 727 Bytes

6.2.2

Security

This release fixes several buffer overruns and DOS attacks.

2019-19911: DOS attack vulnerability

If an FPX image reports that it has a large number of bands, a large amount of resources will be used when trying to process the image. This is fixed by limiting the number of bands to those usable by Pillow.

2020-5310, 2020-5311, 2020-5312, 2020-5313: Overflow checks added

Overflow checks have been added when calculating the size of a memory block to be reallocated in the processing of TIFF, SGI, PCX and FLI images.