[ubuntu/noble-security] pillow 10.2.0-1ubuntu1.3 (Accepted)

[Shishir Subedi]

pillow (10.2.0-1ubuntu1.3) noble-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds read via TGA RLE encoder
    - debian/patches/CVE-2026-59198.patch: Prevent saving 1 mode images as TGA
      with run-length encoding (#9709) in Tests/test_file_tga.py,
      src/PIL/TgaImagePlugin.py.
    - CVE-2026-59198

Date: 2026-08-28 07:15:12.818716+00:00
Changed-By: Hurman <hurman at canonical.com>
Signed-By: Shishir Subedi <shishirsub10 at gmail.com>
https://launchpad.net/ubuntu/+source/pillow/10.2.0-1ubuntu1.3
-------------- next part --------------
Sorry, changesfile not available.