Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added ImageFont.MAX_STRING_LENGTH #7244

Merged
merged 2 commits into from
Jun 30, 2023

Conversation

radarhere
Copy link
Member

No description provided.

@radarhere radarhere force-pushed the imagefont_max_string_length branch from 8fb13ac to 1fe1bb4 Compare June 30, 2023 13:34
Tests/test_imagefont.py Outdated Show resolved Hide resolved
src/PIL/ImageFont.py Outdated Show resolved Hide resolved
Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>
@radarhere radarhere merged commit e37b250 into python-pillow:main Jun 30, 2023
@radarhere radarhere deleted the imagefont_max_string_length branch July 1, 2023 05:20
@hugovk
Copy link
Member

hugovk commented Nov 3, 2023

Noting this was assigned CVE-2023-44271.

https://nvd.nist.gov/vuln/detail/CVE-2023-44271

#7520

@charlesoconor
Copy link

Would it be possible to release earlier versions with this cherry-picked on? Since it's a CVE.

@hugovk
Copy link
Member

hugovk commented Jan 5, 2024

No, we only support the latest version, please upgrade or patch.

This is a Python-only change (no C changes) so will be easier to patch if you can't upgrade.

And there have been more security fixes since, such as in this week's release. We do recommend upgrading.

https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html#security

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants