Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: python-pillow/Pillow
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 8.1.0
Choose a base ref
...
head repository: python-pillow/Pillow
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 8.1.1
Choose a head ref
  • 12 commits
  • 30 files changed
  • 3 contributors

Commits on Mar 1, 2021

  1. Added import test

    @radarhere
    radarhere committed Mar 1, 2021
    Configuration menu
    Copy the full SHA
    a0a5b7a View commit details
    Browse the repository at this point in the history

  2. PyModule_AddObject fix for Python 3.10

    @radarhere
    radarhere committed Mar 1, 2021
    Configuration menu
    Copy the full SHA
    2ba5eb1 View commit details
    Browse the repository at this point in the history

  3. Incorrect error code checking in TiffDecode.c 

    * since Pillow 8.1.0
* CVE-2021-25289
    @wiredfool @radarhere
    wiredfool authored and radarhere committed Mar 1, 2021
    Configuration menu
    Copy the full SHA
    cbfdde7 View commit details
    Browse the repository at this point in the history

  4. Fix OOB read in SgiRleDecode.c 

    * From Pillow 4.3.0->8.1.0
* CVE-2021-25293
    @wiredfool @radarhere
    wiredfool authored and radarhere committed Mar 1, 2021
    Configuration menu
    Copy the full SHA
    f891baa View commit details
    Browse the repository at this point in the history

  5. Fix negative size read in TiffDecode.c 

    * Caught by oss-fuzz runs
* CVE-2021-25290
    @wiredfool @radarhere
    wiredfool authored and radarhere committed Mar 1, 2021
    Configuration menu
    Copy the full SHA
    e25be1e View commit details
    Browse the repository at this point in the history

  6. Fix for CVE-2021-25291 

    * Invalid tile boundaries lead to OOB Read in TiffDecode.c, in TiffReadRGBATile
* Check the tile validity before attempting to read.
    @wiredfool @radarhere
    wiredfool authored and radarhere committed Mar 1, 2021
    Configuration menu
    Copy the full SHA
    8b8076b View commit details
    Browse the repository at this point in the history

  7. Use more specific regex chars to prevent ReDoS 

    * CVE-2021-25292
    @hugovk @radarhere
    hugovk authored and radarhere committed Mar 1, 2021
    Configuration menu
    Copy the full SHA
    521dab9 View commit details
    Browse the repository at this point in the history

  8. Release notes for 8.1.1

    @wiredfool @radarhere
    wiredfool authored and radarhere committed Mar 1, 2021
    Configuration menu
    Copy the full SHA
    973a4c3 View commit details
    Browse the repository at this point in the history

  9. Credits

    @wiredfool @radarhere
    wiredfool authored and radarhere committed Mar 1, 2021
    Configuration menu
    Copy the full SHA
    d25036f View commit details
    Browse the repository at this point in the history

  10. Update CHANGES.rst [ci skip]

    @radarhere
    radarhere committed Mar 1, 2021
    Configuration menu
    Copy the full SHA
    7d29665 View commit details
    Browse the repository at this point in the history

  11. Added 8.1.1 release notes to index

    @radarhere
    radarhere committed Mar 1, 2021
    Configuration menu
    Copy the full SHA
    179cd1c View commit details
    Browse the repository at this point in the history

  12. 8.1.1 version bump

    @radarhere
    radarhere committed Mar 1, 2021
    Configuration menu
    Copy the full SHA
    741d874 View commit details
    Browse the repository at this point in the history
Loading