Ubuntu Security Notice 3230-1 - It was discovered that Pillow incorrectly handled certain compressed text chunks in PNG images. A remote attacker could possibly use this issue to cause Pillow to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. Cris Neckar discovered that Pillow incorrectly handled certain malformed images. A remote attacker could use this issue to cause Pillow to crash, resulting in a denial of service, or possibly obtain sensitive information. Various other issues were also addressed.
4567359cee610c1b04db446afb56c869241835ed35475927c8df05f4fa248e88
Ubuntu Security Notice 3229-1 - It was discovered that the Python Imaging Library incorrectly handled certain compressed text chunks in PNG images. A remote attacker could possibly use this issue to cause the Python Imaging Library to crash, resulting in a denial of service. Cris Neckar discovered that the Python Imaging Library incorrectly handled certain malformed images. A remote attacker could use this issue to cause the Python Imaging Library to crash, resulting in a denial of service, or possibly obtain sensitive information. Various other issues were also addressed.
566781995fa869e79dd291a7fae8254b49124816bd9cda1d033a34a25f9cea04
Gentoo Linux Security Advisory 201612-52 - Multiple vulnerabilities have been found in Pillow, the worst of which may allow execution of arbitrary code. Versions less than 3.4.2 are affected.
dc6cfdf781d5bcc68f16a55acbf3745a6ef66306c51a82bbaa90cfe1edb0cb11