Andrew Drake discovered that missing input sanitising in the icns decoder of the Python Imaging Library could result in denial of service if a malformed image is processed.

For the stable distribution (wheezy), this problem has been fixed in version 1.1.7-4+deb7u1. For the unstable distribution (sid), this problem has been fixed in version 2.5.3-1 of the pillow source package. We recommend that you upgrade your python-imaging packages.

The Python Imaging Library (PIL) adds an image object to your Python interpreter. You can load images from a variety of file formats, and apply a rich set of image operations to them.

python-imaging on Debian Linux

This check tests the installed software version using the apt package manager.

• http://www.debian.org/security/2014/dsa-3009.html

---

Updated on 2015-03-25