django-badgify-lab (0.1.5), django-oscar (>=1.0.0, <=1.0.2) +1 more potentially affected by CVE-2014-3598 via pillow (>=2.0.0, <=2.4.0)

pillow PYPI version =2.0.0, =1.0.0, =1.0.2 - planadversity 1.0.2 Source cves: CVE-2014-3598 Source advisory: OSV:GHSA-J6F7-G425-4GMX...

django-badgify-lab (0.1.5), django-oscar (>=1.0.0, <=1.0.2) +1 more potentially affected by CVE-2014-3598 via pillow (>=2.0.0, <=2.4.0)

pillow PYPI version =2.0.0, =1.0.0, =1.0.2 - planadversity 1.0.2 Source cves: CVE-2014-3598 Source advisory: GHSA-J6F7-G425-4GMX...

CVE-2014-3598

The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image...

django-badgify-lab (0.1.5), django-oscar (>=1.0.0, <=1.0.2) +1 more potentially affected by CVE-2014-3598 via pillow (>=2.0.0, <=2.4.0)

pillow PYPI version =2.0.0, =1.0.0, =1.0.2 - planadversity 1.0.2 Source cves: CVE-2014-3598 Source advisory: OSV:PYSEC-2015-15...

django-badgify-lab (0.1.5), django-oscar (>=1.0.0, <=1.0.2) +1 more potentially affected by CVE-2014-3598 via pillow (>=2.0.0, <=2.4.0)

pillow PYPI version =2.0.0, =1.0.0, =1.0.2 - planadversity 1.0.2 Source cves: CVE-2014-3598 Source advisory: MEND:CVE-2014-3598...

CVE-2014-3598

CVE-2014-3598 affects the Python Pillow library. The vulnerability is in the Jpeg2KImagePlugin and is exploitable via a crafted image, allowing a denial-of-service condition. It concerns Pillow versions before 2.5.3; upgrading to 2.5.3 or newer mitigates the issue (per linked advisories and CVE r...

openSUSE Security Update : python-Pillow (openSUSE-2015-337)

python-pillow was updated to 2.7.0 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2014-9601: Remote attackers could cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed. - CVE-2014-3598: Remote...