opendefensecloud / solution-arsenal / 39584061575
79%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 100
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 79.424% (-0.07%) from 79.498%
39584061575

push

github

web-flow 
chore(deps): update dependency pillow to v13 [security] (#887)

> [!NOTE]
> This PR body was truncated due to platform limits.

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [pillow](https://redirect.github.com/python-pillow/Pillow)
([changelog](https://redirect.github.com/python-pillow/Pillow/releases))
| `==12.3.0` → `==13.0.0` |
![age](https://developer.mend.io/api/mc/badges/age/pypi/pillow/13.0.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/pillow/12.3.0/13.0.0?slim=true)
|

---

### Pillow tiled-TIFF decoder reads past tile buffer in copy4
(Unpack.c:1290)
[CVE-2026-112395](https://nvd.nist.gov/vuln/detail/CVE-2026-112395) /
[GHSA-462x-pgg6-55fp](https://redirect.github.com/advisories/GHSA-462x-pgg6-55fp)

<details>
<summary>More information</summary>

#### Details
##### Summary

Pillow's libImaging `_decodeTile` decoder, used to decode tiled TIFF
images, allocates a per-tile buffer using `realloc(state->buffer,
TIFFTileSize(tiff))`. After each `TIFFReadTile` it then iterates
`tile_y` from 0 up to `current_tile_length` and calls the configured row
unpacker (here `copy4`) with the source pointer `state->buffer + tile_y
* row_byte_size`. When libtiff returns a `tile_bytes_size` smaller than
the worst-case `row_byte_size * tile_length`, the inner stride-and-copy
loop walks past the realloc'd region and `copy4` performs a 1024-byte
`memcpy` that reads up to `(tile_length-1) * row_byte_size +
row_byte_size` bytes from a buffer sized only to `tile_bytes_size`. The
supplied PoC TIFF triggers a 1024-byte over-read exactly 0 bytes past a
196608-byte allocation. An attacker who can convince a Pillow-using
application to decode a crafted TIFF can trigger a process crash (DoS)
and may cause adjacent heap memory to be copied into the decoded pixel
buffer.

##### Details
... (continued)

5381 of 6775 relevant lines covered (79.42%)

33.58 hits per line

Coverage Regressions

Lines Coverage ∆ File
2
71.88
-3.13% pkg/controller/registrybinding_controller.go
2
86.64
-0.43% pkg/controller/rendertask_controller.go
2
77.99
-0.19% pkg/controller/target_controller.go
2
90.32
1.61% pkg/controller/targetreport_controller.go
Jobs
ID Job ID Ran Files Coverage
1 39584061575.1 100
79.42
GitHub Action Run
Source Files on build 39584061575