Debian Security Advisory DSA 3009-1 (python-imaging - security update)

Summary
Andrew Drake discovered that missing input sanitising in the icns decoder of the Python Imaging Library could result in denial of service if a malformed image is processed.
Solution
For the stable distribution (wheezy), this problem has been fixed in version 1.1.7-4+deb7u1. For the unstable distribution (sid), this problem has been fixed in version 2.5.3-1 of the pillow source package. We recommend that you upgrade your python-imaging packages.
Insight
The Python Imaging Library (PIL) adds an image object to your Python interpreter. You can load images from a variety of file formats, and apply a rich set of image operations to them.
Affected
python-imaging on Debian Linux
Detection
This check tests the installed software version using the apt package manager.
References