[ubuntu/resolute-security] pillow 12.1.1-2ubuntu1.3 (Accepted)

[Shishir Subedi]

pillow (12.1.1-2ubuntu1.3) resolute-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds read via TGA RLE encoder
    - debian/patches/CVE-2026-59198.patch: Prevent saving 1 mode images as TGA
      with run-length encoding (#9709) in Tests/test_file_tga.py,
      src/PIL/TgaImagePlugin.py.
    - CVE-2026-59198

Date: 2026-08-28 07:15:36.077877+00:00
Changed-By: Hurman <hurman at canonical.com>
Signed-By: Shishir Subedi <shishirsub10 at gmail.com>
https://launchpad.net/ubuntu/+source/pillow/12.1.1-2ubuntu1.3
-------------- next part --------------
Sorry, changesfile not available.