Code

Security fixes for 8.2.0#5377

Code

Merged

hugovk merged 10 commits intopython-pillow:masterpython-pillow/Pillow:masterfrom hugovk:security-and-release-noteshugovk/Pillow:security-and-release-notesCopy head branch name to clipboardApr 1, 2021

Commits

Commits on Apr 1, 2021

• Add security release notes

  hugovk

  committed
  8ec0278

  Copy full SHA for 8ec0278

• Fix OOB Read in Jpeg2KDecode CVE-2021-25287,CVE-2021-25288

  Show description for 3bf5edd
  

  wiredfool

  authored and

  hugovk

  committed
  3bf5edd

  Copy full SHA for 3bf5edd

• Fix EPS DOS on _open -- CVE-2021-28677

  Show description for 5a5e6db
  

  wiredfool

  authored and

  hugovk

  committed
  5a5e6db

  Copy full SHA for 5a5e6db

• Fix FLI DOS -- CVE-2021-28676

  Show description for bb6c11f
  

  wiredfool

  authored and

  hugovk

  committed
  bb6c11f

  Copy full SHA for bb6c11f

• Fix Memory DOS in ImageFont

  Show description for ba65f0b
  

  wiredfool

  authored and

  hugovk

  committed
  ba65f0b

  Copy full SHA for ba65f0b

• Fix DOS in PSDImagePlugin -- CVE-2021-28675

  Show description for 22e9bee
  

  wiredfool

  authored and

  hugovk

  committed
  22e9bee

  Copy full SHA for 22e9bee

• Fix BLP DOS -- CVE-2021-28678

  Show description for 496245a
  

  wiredfool

  authored and

  hugovk

  committed
  496245a

  Copy full SHA for 496245a

• Reorder, roughly alphabetic

  hugovk

  committed
  fea4196

  Copy full SHA for fea4196

• Review, typos and lint

  hugovk

  committed
  8febdad

  Copy full SHA for 8febdad

• Fix typo [ci skip]

  Show description for 694c84f
  

  hugovk

  and

  radarhere

  authored
  694c84f

  Copy full SHA for 694c84f