PYSEC-2022-42979

Affected Products

Timeline

• Nov 14, 2022 CVE Published
• Dec 6, 2023 CVE Updated

References

• https://bugs.gentoo.org/855683 url
• https://cwe.mitre.org/data/definitions/409.html url
• https://github.com/python-pillow/Pillow/commit/11918eac0628ec8ac0812670d9838361ead2d6a4 fix
• https://github.com/python-pillow/Pillow/pull/6402 fix
• https://github.com/python-pillow/Pillow/releases/tag/9.2.0 fix