Change log : python-imaging package : Ubuntu

1.1.7-4ubuntu0.12.04.3

Published in precise-updates on 2017-03-13

Published in precise-security on 2017-03-13

python-imaging (1.1.7-4ubuntu0.12.04.3) precise-security; urgency=medium

  * SECURITY UPDATE: information disclosure via crafted image
    - map.c: add overflow checks.
    - CVE-2016-9189
  * SECURITY UPDATE: code execution via crafted image
    - libImaging/Storage.c: add size check.
    - CVE-2016-9190
  * SECURITY-UPDATE: potential PNG decompression DOS
    - PIL/PngImagePlugin.py: rename len variables as length and limit size.
    - CVE-2014-9601

 -- Marc Deslauriers <email address hidden>  Fri, 10 Mar 2017 08:50:53 -0500

Available diffs

diff from 1.1.7-4ubuntu0.12.04.2 to 1.1.7-4ubuntu0.12.04.3 (2.9 KiB)

1.1.7-4ubuntu0.12.04.2

Superseded in precise-updates on 2017-03-13

Superseded in precise-security on 2017-03-13

python-imaging (1.1.7-4ubuntu0.12.04.2) precise-security; urgency=medium

  * SECURITY UPDATE: Fixes for buffer overflows
    - PIL/IcnsImagePlugin.py, libImaging/PcdDecode.c, libImaging/FliDecode.c
    - CVE-2016-0775
    - CVE-2016-2533
    - CVE-2014-3596
    - Kudos to Andrew Drake and Eric Soroos for discovering these issues.

 -- Emily Ratliff <email address hidden>  Fri, 09 Sep 2016 14:45:49 -0500

Available diffs

diff from 1.1.7-4ubuntu0.12.04.1 to 1.1.7-4ubuntu0.12.04.2 (872 bytes)

1.1.7+2.0.0-1ubuntu1.1

Obsolete in saucy-updates on 2015-04-24

Obsolete in saucy-security on 2015-04-24

python-imaging (1.1.7+2.0.0-1ubuntu1.1) saucy-security; urgency=medium

  * SECURITY UPDATE: insecure use of temporary files
    - debian/patches/CVE-2014-193x.patch: use tempfile.mkstemp() in
      PIL/EpsImagePlugin.py, PIL/Image.py, PIL/IptcImagePlugin.py,
      PIL/JpegImagePlugin.py.
    - CVE-2014-1932
    - CVE-2014-1933
 -- Marc Deslauriers <email address hidden>   Mon, 31 Mar 2014 10:20:43 -0400

Available diffs

diff from 1.1.7+2.0.0-1ubuntu1 (in Ubuntu) to 1.1.7+2.0.0-1ubuntu1.1 (1.6 KiB)

1.1.7-4ubuntu0.12.04.1

Superseded in precise-updates on 2016-09-15

Superseded in precise-security on 2016-09-15

python-imaging (1.1.7-4ubuntu0.12.04.1) precise-security; urgency=medium

  * SECURITY UPDATE: insecure use of temporary files
    - PIL/EpsImagePlugin.py, PIL/Image.py, PIL/IptcImagePlugin.py,
      PIL/JpegImagePlugin.py: use tempfile.mkstemp().
    - https://github.com/wiredfool/Pillow/commit/1e331e3e6a40141ca8eee4f5da9f74e895423b66
    - CVE-2014-1932
    - CVE-2014-1933
 -- Marc Deslauriers <email address hidden>   Mon, 31 Mar 2014 10:25:50 -0400

Available diffs

diff from 1.1.7-4 (in Debian) to 1.1.7-4ubuntu0.12.04.1 (1.5 KiB)

1.1.7-1ubuntu0.2

Obsolete in lucid-updates on 2016-10-26

Obsolete in lucid-security on 2016-10-26

python-imaging (1.1.7-1ubuntu0.2) lucid-security; urgency=medium

  * SECURITY UPDATE: insecure use of temporary files
    - PIL/EpsImagePlugin.py, PIL/Image.py, PIL/IptcImagePlugin.py,
      PIL/JpegImagePlugin.py: use tempfile.mkstemp().
    - https://github.com/wiredfool/Pillow/commit/1e331e3e6a40141ca8eee4f5da9f74e895423b66
    - CVE-2014-1932
    - CVE-2014-1933
 -- Marc Deslauriers <email address hidden>   Mon, 31 Mar 2014 10:26:39 -0400

Available diffs

diff from 1.1.7-1ubuntu0.1 (in Ubuntu) to 1.1.7-1ubuntu0.2 (1.2 KiB)
diff from 1.1.7-1 (in Ubuntu) to 1.1.7-1ubuntu0.2 (1.5 KiB)

1.1.7-4ubuntu0.12.10.1

Obsolete in quantal-updates on 2015-04-24

Obsolete in quantal-security on 2015-04-24

python-imaging (1.1.7-4ubuntu0.12.10.1) quantal-security; urgency=medium

  * SECURITY UPDATE: insecure use of temporary files
    - PIL/EpsImagePlugin.py, PIL/Image.py, PIL/IptcImagePlugin.py,
      PIL/JpegImagePlugin.py: use tempfile.mkstemp().
    - https://github.com/wiredfool/Pillow/commit/1e331e3e6a40141ca8eee4f5da9f74e895423b66
    - CVE-2014-1932
    - CVE-2014-1933
 -- Marc Deslauriers <email address hidden>   Mon, 31 Mar 2014 10:23:57 -0400

Available diffs

diff from 1.1.7-4build1 (in Ubuntu) to 1.1.7-4ubuntu0.12.10.1 (1.4 KiB)

1.1.7+2.0.0-1.1ubuntu1

Deleted in trusty-release on 2013-12-04 (Reason: NBS)

Superseded in trusty-release on 2013-11-29

Deleted in trusty-proposed on 2013-12-04 (Reason: moved to release)

python-imaging (1.1.7+2.0.0-1.1ubuntu1) trusty; urgency=low

  * Merge with Debian unstable, remaining changes:
    - Add PngImagePlugin.py to PILcompat directory.
    - Add autopkgtest.
  * Provide transitional packages for all old packages to their new
    python-policy-compliant names.

Available diffs

diff from 1.1.7+2.0.0-1ubuntu2 to 1.1.7+2.0.0-1.1ubuntu1 (4.2 KiB)

1.1.7+2.0.0-1ubuntu2

Superseded in trusty-release on 2013-11-22

Deleted in trusty-proposed on 2013-11-23 (Reason: moved to release)

python-imaging (1.1.7+2.0.0-1ubuntu2) trusty; urgency=low

  * Enable autopkgtest (LP: #1248743)
 -- Jean-Baptiste Lallement <email address hidden>   Wed, 06 Nov 2013 23:03:19 +0100

Available diffs

diff from 1.1.7+2.0.0-1ubuntu1 to 1.1.7+2.0.0-1ubuntu2 (758 bytes)

1.1.7+2.0.0-1ubuntu0.1

Obsolete in raring-updates on 2015-04-24

Deleted in raring-proposed on 2015-04-27 (Reason: moved to -updates)

python-imaging (1.1.7+2.0.0-1ubuntu0.1) raring-proposed; urgency=low

  * Add PngImagePlugin.py to PILcompat directory.  (LP: #1173704)
 -- Barry Warsaw <email address hidden>   Wed, 22 May 2013 15:07:03 -0400

Available diffs

diff from 1.1.7+2.0.0-1 (in Debian) to 1.1.7+2.0.0-1ubuntu0.1 (691 bytes)

1.1.7+2.0.0-1ubuntu1

Superseded in trusty-release on 2013-11-07

Obsolete in saucy-release on 2015-04-24

Deleted in saucy-proposed on 2015-04-28 (Reason: moved to release)

python-imaging (1.1.7+2.0.0-1ubuntu1) saucy; urgency=low

  * Add PngImagePlugin.py to PILcompat directory.  (LP: #1173704)
 -- Barry Warsaw <email address hidden>   Wed, 22 May 2013 14:35:06 -0400

Available diffs

diff from 1.1.7+2.0.0-1 (in Debian) to 1.1.7+2.0.0-1ubuntu1 (684 bytes)

1.1.7+2.0.0-1

Superseded in saucy-release on 2013-05-22

Obsolete in raring-release on 2015-04-24

Deleted in raring-proposed on 2015-04-27 (Reason: moved to release)

python-imaging (1.1.7+2.0.0-1) experimental; urgency=low


  * Pillow 2.0.0 release.

 -- Matthias Klose <email address hidden>  Wed, 20 Mar 2013 16:44:01 -0700

Available diffs

diff from 1.1.7+1.7.8-1ubuntu2 (in Ubuntu) to 1.1.7+2.0.0-1 (596.7 KiB)

1.1.7+1.7.8-1ubuntu2

Superseded in raring-release on 2013-03-21

Deleted in raring-proposed on 2013-03-23 (Reason: moved to release)

python-imaging (1.1.7+1.7.8-1ubuntu2) raring; urgency=low

  * Add python-imaging-compat modules to get back the old top-level module
    names (i.e. not subpackages within PIL) for Python 2 only. (Barry
    Warsaw). LP: #1112496.
  * python-imaging: Depend on python-imaging-compat for now.
 -- Matthias Klose <email address hidden>   Sun, 10 Feb 2013 16:31:33 +0100

Available diffs

diff from 1.1.7+1.7.8-1ubuntu1 to 1.1.7+1.7.8-1ubuntu2 (2.9 KiB)

1.1.7+1.7.8-1ubuntu1

Superseded in raring-release on 2013-02-10

Deleted in raring-proposed on 2013-02-11 (Reason: moved to release)

python-imaging (1.1.7+1.7.8-1ubuntu1) raring; urgency=low

  * Rewrite build dependencies to allow cross builds.

Available diffs

diff from 1.1.7-4build1 to 1.1.7+1.7.8-1ubuntu1 (405.8 KiB)

1.1.7-4build1

Superseded in raring-release on 2013-01-31

Obsolete in quantal-release on 2015-04-24

python-imaging (1.1.7-4build1) quantal; urgency=low

  * Rebuild for new armel compiler default of ARMv5t.
 -- Colin Watson <email address hidden>   Mon, 08 Oct 2012 21:55:02 +0100

Available diffs

diff from 1.1.7-4 (in Debian) to 1.1.7-4build1 (338 bytes)

1.1.7-4

Superseded in quantal-release on 2012-10-08

Published in precise-release on 2011-10-21

python-imaging (1.1.7-4) unstable; urgency=low
  * Add multiarch search directories as given by dpkg-architecture.    This re-enables support for: tkinter, jpeg, zlib, freetype2, and    littlecms (Marc Tardif, Barry Warsaw). LP: #806661.    Closes: #632962, #632180.  * Build using libjpeg8. -- Matthias Klose <email address hidden>  Sat, 09 Jul 2011 11:56:15 +0200

Available diffs

diff from 1.1.7-3 to 1.1.7-4 (1.0 KiB)

1.1.7-3ubuntu1

Superseded in precise-release on 2011-10-21

Obsolete in oneiric-release on 2015-04-24

python-imaging (1.1.7-3ubuntu1) oneiric; urgency=low

  * debian/patches/01_multiarch_support.patch
    - Add multiarch search directories as given by dpkg-architecture.
      This re-enables support for: tkinter, jpeg, zlib, freetype2, and
      littlecms.  Problem found and patch inspired by Marc Tardif (cr3).
      (LP: #806661)
 -- Barry Warsaw <email address hidden>   Thu, 07 Jul 2011 08:08:10 -0400

Available diffs

diff from 1.1.7-3 (in Debian) to 1.1.7-3ubuntu1 (2.5 KiB)
diff from 1.1.7-3 to 1.1.7-3ubuntu1 (2.5 KiB)

1.1.7-3

Superseded in oneiric-release on 2011-07-07

python-imaging (1.1.7-3) unstable; urgency=low

  * Fix buffer overflow (taken from Fedora).
  * Fix "split after open" bug. Closes: #561965.
  * Remove obsolete conflicts/replaces.
 -- Matthias Klose <email address hidden>   Wed,  29 Jun 2011 07:24:07 +0000

Available diffs

diff from 1.1.7-2build2 to 1.1.7-3 (1.6 KiB)

1.1.7-2build2

Superseded in oneiric-release on 2011-06-29

Obsolete in natty-release on 2013-06-04

python-imaging (1.1.7-2build2) natty; urgency=low

  * No-change rebuild to prefer python2.7.
 -- Martin Pitt <email address hidden>   Wed, 22 Dec 2010 09:40:57 +0100

Available diffs

diff from 1.1.7-2build1 to 1.1.7-2build2 (300 bytes)

1.1.7-2build1

Superseded in natty-release on 2010-12-22

python-imaging (1.1.7-2build1) natty; urgency=low

  * Rebuild to add support for python 2.7.
 -- Matthias Klose <email address hidden>   Fri, 03 Dec 2010 00:10:58 +0000

Available diffs

diff from 1.1.7-2 to 1.1.7-2build1 (318 bytes)

1.1.7-1ubuntu0.1

Superseded in lucid-updates on 2014-04-15

Deleted in lucid-proposed on 2014-04-16 (Reason: moved to -updates)

python-imaging (1.1.7-1ubuntu0.1) lucid-proposed; urgency=low

  * Build-depend on liblcms1-dev. (LP: #622388)
 -- <email address hidden> (Olivier Berten (selapa.net))   Sat, 25 Sep 2010 19:54:32 +0200

Available diffs

diff from 1.1.7-1 to 1.1.7-1ubuntu0.1 (632 bytes)

1.1.7-2

Superseded in natty-release on 2010-12-03

Obsolete in maverick-release on 2013-03-05

python-imaging (1.1.7-2) unstable; urgency=low

  * Build-depend on liblcms1-dev. Closes: #583620.
  * Build using dh_python2 instead of dh_pycentral.
 -- Matthias Klose <email address hidden>   Tue,  21 Sep 2010 16:04:04 +0000

Available diffs

diff from 1.1.7-1 to 1.1.7-2 (817 bytes)

1.1.7-1

Superseded in maverick-release on 2010-09-21

Obsolete in lucid-release on 2016-10-26

python-imaging (1.1.7-1) unstable; urgency=low

  * New upstream version.

Available diffs

diff from 1.1.6-3ubuntu1 to 1.1.7-1 (81.0 KiB)

1.1.6-3ubuntu1

Superseded in lucid-release on 2010-01-20

Obsolete in karmic-release on 2013-03-04

Obsolete in jaunty-release on 2013-02-28

python-imaging (1.1.6-3ubuntu1) jaunty; urgency=low

  * Build-depend on tk8.5-dev.
  * Build for python2.6.

 -- Matthias Klose <email address hidden>   Sat, 21 Feb 2009 19:21:14 +0000

Available diffs

diff from 1.1.6-3 to 1.1.6-3ubuntu1 (1.6 KiB)

1.1.6-3

Superseded in jaunty-release on 2009-02-21

Obsolete in intrepid-release on 2013-02-20

python-imaging (1.1.6-3) unstable; urgency=low

  * Do not build-depend on python-numarray, it's deprecated. Closes: #478466.
  * Merge from Ubuntu:
    - In __array_interface__ add support for 16bit TIF images (Luke
      Campagnola). LP: #198892.
    - Search for available image viewers. LP: #67755. Closes: #321658.

Available diffs

diff from 1.1.6-1ubuntu5 to 1.1.6-3 (1.6 KiB)

1.1.6-1ubuntu5

Superseded in intrepid-release on 2008-06-24

Obsolete in hardy-release on 2015-04-24

python-imaging (1.1.6-1ubuntu5) hardy; urgency=low

  * In __array_interface__ add support for 16bit TIF images (Luke
    Campagnola). LP: #198892.

 -- Matthias Klose <email address hidden>   Wed, 09 Apr 2008 20:44:17 +0200

1.1.6-1ubuntu4

Superseded in hardy-release on 2008-04-09

python-imaging (1.1.6-1ubuntu4) hardy; urgency=low

  * Search for available image viewers. LP: #67755.

 -- Matthias Klose <email address hidden>   Wed, 09 Apr 2008 16:29:57 +0000

1.1.6-1ubuntu3

Superseded in hardy-release on 2008-04-09

python-imaging (1.1.6-1ubuntu3) hardy; urgency=low

  * Rebuild with recent python-central.
  * Set Ubuntu maintainer address.

 -- Matthias Klose <email address hidden>   Mon, 10 Mar 2008 12:46:51 +0000

1.1.6-1ubuntu2

Superseded in hardy-release on 2008-03-10

python-imaging (1.1.6-1ubuntu2) hardy; urgency=low

  * Build-depend on python-tk-dbg.

 -- Matthias Klose <email address hidden>   Tue, 22 Jan 2008 12:11:48 +0000

1.1.6-1ubuntu1

Superseded in hardy-release on 2008-01-22

python-imaging (1.1.6-1ubuntu1) hardy; urgency=low

  * Don't build the Sane module with suppport for python-numarray.

 -- Matthias Klose <email address hidden>   Mon, 21 Jan 2008 19:56:07 +0100

1.1.6-1

Superseded in hardy-release on 2008-01-21

Obsolete in gutsy-release on 2011-09-16

python-imaging (1.1.6-1) unstable; urgency=low

  * New upstream version.
  * Merge from Ubuntu:
    - Build python-debug packages.
    - Add build dependency on python-numarray-dbg.
    - Sane/_sane.c: Initialize variable. Ubuntu #88059.

 -- Matthias Klose <email address hidden>   Tue,  29 May 2007 13:27:55 +0100

1.1.6-0ubuntu3

Superseded in gutsy-release on 2007-05-29

Obsolete in feisty-release on 2009-08-20

python-imaging (1.1.6-0ubuntu3) feisty; urgency=low

  * Sane/_sane.c: Initialize variable. Ubuntu #88059.

 -- Matthias Klose <email address hidden>   Wed,  4 Apr 2007 08:11:53 +0200

1.1.5-10ubuntu1

Obsolete in edgy-updates on 2008-06-19

python-imaging (1.1.5-10ubuntu1) edgy-updates; urgency=low

  * No-change upload to propogate from -proposed (LP: #75021)
    - testing done by Michael Vogt

1.1.6-0ubuntu2

Superseded in feisty-release on 2007-04-04

python-imaging (1.1.6-0ubuntu2) feisty; urgency=low

  * Build python-debug packages.
  * Add build dependency on python-numarray-dbg.
  * Set Ubuntu maintainer address.

 -- Matthias Klose <email address hidden>   Sat, 17 Feb 2007 03:07:23 +0100

1.1.5-10ubuntu1~prop1

Deleted in edgy-proposed on 2008-01-28 (Reason: moved to -updates)

python-imaging (1.1.5-10ubuntu1~prop1) edgy-proposed; urgency=low

  * SRU: backport of missing ${shlibs:Depends} fix from 1.1.5-11
    (Closes: Malone #75021)

 -- Jordan Mantha <email address hidden>   Wed, 13 Dec 2006 16:23:08 -0800

1.1.6-0ubuntu1

Superseded in feisty-release on 2007-02-17

python-imaging (1.1.6-0ubuntu1) feisty; urgency=low

  * New upstream version.

 -- Matthias Klose <email address hidden>   Tue, 12 Dec 2006 16:51:57 +0100

1.1.5-11

Superseded in feisty-release on 2006-12-12

python-imaging (1.1.5-11) unstable; urgency=low

  * python-imaging-sane: Depend on python-numarray. Closes: #382190.
  * Add dependencies on ${shlibs:Depends}, lost in -6. Closes: #378596.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Wed,  08 Nov 2006 17:18:42 +0000

1.1.5-10build1

Superseded in feisty-release on 2006-11-08

Obsolete in edgy-release on 2008-06-19

python-imaging (1.1.5-10build1) edgy; urgency=low

  * Rebuild to add support for python2.5.

 -- Matthias Klose <email address hidden>   Fri,  8 Sep 2006 13:33:44 +0000

1.1.5-10

Superseded in edgy-release on 2006-09-08

python-imaging (1.1.5-10) unstable; urgency=low

  * pilfont.py: Add interpreter name. Closes: #350146.

 -- Scott James Remnant <email address hidden>   Mon,  10 Jul 2006 12:58:04 +0100

1.1.5-9

Superseded in edgy-release on 2006-07-10

python-imaging (1.1.5-9) unstable; urgency=low

  * Call dh_python before dh_pycentral.

1.1.5-4ubuntu1

Superseded in edgy-release on 2006-07-04

Obsolete in dapper-release on 2011-09-06

python-imaging (1.1.5-4ubuntu1) dapper; urgency=low

  * Drop python2.3 packages.

 -- Matthias Klose <email address hidden>   Tue, 14 Feb 2006 15:17:28 +0000

1.1.5-4

Superseded in dapper-release on 2006-02-14

Superseded in dapper-release on 2006-02-03

Obsolete in breezy-release on 2008-03-25

python-imaging (1.1.5-4) unstable; urgency=low


  * Change section to python.
  * Remove binaries from python2.4-imaging package (closes: #316917).
  * Acknowledge NMU (1.1.4-3.1). Closes: #303897.

 -- Matthias Klose <email address hidden>  Tue, 12 Jul 2005 18:13:33 +0000

1.1.4-3ubuntu2

Obsolete in hoary-release on 2008-03-19

python-imaging (1.1.4-3ubuntu2) hoary; urgency=low


  * Don't build python2.1, python2.2 packages.

 -- Matthias Klose <email address hidden>  Thu, 13 Jan 2005 07:35:44 +0100

1.1.4-3

Obsolete in warty-release on 2008-01-09

python-imaging (1.1.4-3) unstable; urgency=low


  * New maintainer.
    - ACKing NMUs.
    - No longer use dpatch -- they were introduced by the first NMU;
      I tend to use a real source management system. ;-)
  * Reworded a few Description: tags to shut up Lintian.

 -- Matthias Urlichs <email address hidden>  Mon,  5 Jan 2004 19:00:21 +0100

Ubuntu
python-imaging package

Change log for python-imaging package in Ubuntu

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Ubuntupython-imaging package

Change log for python-imaging package in Ubuntu

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Ubuntu
python-imaging package