Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/python-imaging@1.1.7-2%2Bdeb6u2
purl pkg:deb/debian/python-imaging@1.1.7-2%2Bdeb6u2
Next non-vulnerable version 1.1.7-4+deb7u2
Latest non-vulnerable version 1.1.7-4+deb7u2
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-vz9s-jqpb-2ybf
Aliases:
CVE-2014-3589
GHSA-cfmr-38g9-f2h7
PYSEC-2014-10
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
1.1.7-4+deb7u2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-15T12:52:32.128795+00:00 Debian Oval Importer Affected by VCID-vz9s-jqpb-2ybf https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 38.4.0
2026-04-11T12:41:05.560451+00:00 Debian Oval Importer Affected by VCID-vz9s-jqpb-2ybf https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 38.3.0
2026-04-03T21:50:55.160937+00:00 Debian Oval Importer Affected by VCID-vz9s-jqpb-2ybf https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 38.1.0
2026-04-02T12:57:10.392106+00:00 Debian Oval Importer Affected by VCID-vz9s-jqpb-2ybf https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 38.0.0