Nixpkgs security tracker
Activity log
- Created suggestion
Pillow has an out-of-bounds write when loading PSD images
Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, n out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.
References
Affected products
- ==>= 10.3.0, < 12.1.1
Matching in nixpkgs
pkgs.python312Packages.pillow
Friendly PIL fork (Python Imaging Library)
-
nixos-unstable 11.3.0
pkgs.python313Packages.pillow
Friendly PIL fork (Python Imaging Library)
pkgs.python314Packages.pillow
Friendly PIL fork (Python Imaging Library)
pkgs.python312Packages.pillow-heif
Python library for working with HEIF images and plugin for Pillow
-
nixos-unstable 0.22.0
pkgs.python312Packages.pillow-jpls
JPEG-LS plugin for the Python Pillow library
-
nixos-unstable 1.3.2
pkgs.python312Packages.pillowfight
Eases the transition from PIL to Pillow for Python packages
-
nixos-unstable 0.4
pkgs.python313Packages.pillow-heif
Python library for working with HEIF images and plugin for Pillow
pkgs.python313Packages.pillow-jpls
JPEG-LS plugin for the Python Pillow library
pkgs.python313Packages.pillowfight
Eases the transition from PIL to Pillow for Python packages
pkgs.python314Packages.pillow-heif
Python library for working with HEIF images and plugin for Pillow
pkgs.python314Packages.pillow-jpls
JPEG-LS plugin for the Python Pillow library
pkgs.python314Packages.pillowfight
Eases the transition from PIL to Pillow for Python packages
pkgs.python312Packages.types-pillow
Typing stubs for Pillow
-
nixos-unstable 10.2.0.20240822
-
nixos-25.11 10.2.0.20240822
- nixpkgs-25.11-darwin 10.2.0.20240822
pkgs.python313Packages.types-pillow
Typing stubs for Pillow
-
nixos-unstable 10.2.0.20240822
- nixpkgs-unstable 10.2.0.20240822
- nixos-unstable-small 10.2.0.20240822
-
nixos-25.11 10.2.0.20240822
- nixpkgs-25.11-darwin 10.2.0.20240822
pkgs.python314Packages.types-pillow
Typing stubs for Pillow
-
nixos-unstable -
- nixpkgs-unstable 10.2.0.20240822
- nixos-unstable-small 10.2.0.20240822
pkgs.python312Packages.pypillowfight
Library containing various image processing algorithms
-
nixos-unstable 0.3.0-unstable-2024-07-07
pkgs.python313Packages.pypillowfight
Library containing various image processing algorithms
-
nixos-unstable 0.3.0-unstable-2024-07-07
pkgs.python314Packages.pypillowfight
Library containing various image processing algorithms
pkgs.python312Packages.pillow-avif-plugin
Pillow plugin that adds support for AVIF files
-
nixos-unstable 1.4.6
pkgs.python313Packages.pillow-avif-plugin
Pillow plugin that adds support for AVIF files
-
nixos-unstable 1.4.6
Package maintainers
-
@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>
-
@RatCornu Balthazar Patiachvili <ratcornu+programmation@skaven.org>
-
@D4ndellion Daniel Olsen <daniel@dodsorf.as>
-
@bcdarwin Ben Darwin <bcdarwin@gmail.com>
-
@pyrox0 Pyrox <pyrox@pyrox.dev>
-
@arjan-s Arjan Schrijver <github@anymore.nl>
-
@kuflierl Kennet Flierl <kuflierl@gmail.com>