Your message dated Mon, 26 Dec 2022 21:01:14 +0100
with message-id <[email protected]>
and subject line Re: Accepted pillow 9.3.0-1 (source) into unstable
has caused the Debian Bug report #1024512,
regarding pillow: CVE-2022-45199: Limit SAMPLESPERPIXEL to avoid runtime DOS
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1024512: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1024512
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: pillow
Version: 9.2.0-1.1
Severity: important
Tags: security upstream
Forwarded: https://github.com/python-pillow/Pillow/pull/6700
X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Hi,
The following vulnerability was published for pillow.
CVE-2022-45199[0]:
| Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2022-45199
https://www.cve.org/CVERecord?id=CVE-2022-45199
[1] https://github.com/python-pillow/Pillow/pull/6700
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: pillow
Source-Version: 9.3.0-1
This upload fixed CVE-2022-45199 / #1024512 .
On Mon, Dec 26, 2022 at 12:33:19PM +0000, Debian FTP Masters wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Format: 1.8
> Date: Mon, 26 Dec 2022 12:37:12 +0100
> Source: pillow
> Architecture: source
> Version: 9.3.0-1
> Distribution: unstable
> Urgency: medium
> Maintainer: Matthias Klose <[email protected]>
> Changed-By: Matthias Klose <[email protected]>
> Changes:
> pillow (9.3.0-1) unstable; urgency=medium
> .
> * New upstream version.
> * Bump standards version.
> Checksums-Sha1:
> 79f6b986bab029d07fa516e2988380125ecd3517 2285 pillow_9.3.0-1.dsc
> 40ee955a6ea27a15980d52ab70feeba2258902b2 40764464 pillow_9.3.0.orig.tar.xz
> 634170b86006d136b0a17d8416a70d7df2c51c59 16412 pillow_9.3.0-1.debian.tar.xz
> 0b9616f39549a08cb016b9ceb94e2c3e939d3934 11127
> pillow_9.3.0-1_source.buildinfo
> Checksums-Sha256:
> 47bd9c0e161b7e695343d586ee4ff7ac1a3368e356b84d8b66fa615abc5bff80 2285
> pillow_9.3.0-1.dsc
> fafdf152013f1781a0852d49eadca12b914a8a49bf8c3dabe20b33009ce8b78d 40764464
> pillow_9.3.0.orig.tar.xz
> 8c2558b513564adeb4f5bf8a0f0b7475d3b1bd3360bfee29ccd44f95cbf1f5b4 16412
> pillow_9.3.0-1.debian.tar.xz
> cdeb8367aefae64d52ff9c55cac6c5732bae9e63be1eb457db2285cf55f57ffd 11127
> pillow_9.3.0-1_source.buildinfo
> Files:
> d6f1d830b3034535bbfa5af1e34aeb01 2285 python optional pillow_9.3.0-1.dsc
> f277bf6c1b24590690245e13e25201c9 40764464 python optional
> pillow_9.3.0.orig.tar.xz
> 7fe18147b79787ed0973963601bb73b6 16412 python optional
> pillow_9.3.0-1.debian.tar.xz
> 07b5865e085637d5db3b0bf02993276f 11127 python optional
> pillow_9.3.0-1_source.buildinfo
>
> -----BEGIN PGP SIGNATURE-----
>
> iQJEBAEBCAAuFiEE1WVxuIqLuvFAv2PWvX6qYHePpvUFAmOpiogQHGRva29AZGVi
> aWFuLm9yZwAKCRC9fqpgd4+m9fdDD/4w/h1Jqx0S15Mj7o69svLxqhVoZFUUxx97
> hdBpB46fXMIFhoLR/g9fPhlZT74QqtE/YrLmDtygNeikYDyFGIJUn2ghh7AChEnP
> 2WsgCND6cRF9hbFS8VmF0ef/cl/g8CuOyZuAS9ZPDw/hDZ6jisJB9Tr5p6ywANg3
> rp2h6jQLR5Brb9vcu/hkVsQ20vWmND6m2NGv3wMLT80hyqJQ8pUf24vPDN8Qb7w9
> dFaEym+n++/50o8V0sXbbR8xFxAPfuJ6ceeK1gKK4I8I/UhPKIXJ2RQPaAx3/6Pi
> 4ole8Xix+wQRy39Zq+kpy8RVepjLzdoy9SVEdsHX9zyk1Ste7UwspH80Yw8pjAmU
> xCtJfb6jxI2oXfDG/OMUekFpegxfU7IBacqSZD1eKdJSSe2KOf/inVBSOwDQF4Y+
> 92JY6mmuB8I5bhgXdKVnSD1ALG5QEvRwMWmnNJ5pD8vGFIpGykXel0lmWNQTr5Dk
> Wog9muEkV8WPRKO+bVLnFpgY9X75bWM1sB3czeFMju56ZrF9XkVNDlsfUGqQ8KGu
> aP7W0F2AB/CstoAe9k5QZpLnL59WwMT3Kj+sfGcSlGcSR76L/fo37UnoxIOHmT2O
> SLFvRaaScHhptoYsU956UhzWe1kxBuVsceWdnlGAAc12zyahvzJrUMhru7pPlM7U
> Zq3aoLEwBQ==
> =UnUK
> -----END PGP SIGNATURE-----
>
--- End Message ---
