starred/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2026-01-12 05:20:31 +01:00
Code Issues 273 Packages Projects Releases 10 Wiki Activity

Security issue found in Pillow prior to 6.2.0 #2955

New Issue
Closed
opened 2025-12-29 18:23:59 +01:00 by adam · 2 comments
adam commented 2025-12-29 18:23:59 +01:00
Owner
Copy Link

Originally created by @dgarros on GitHub (Oct 14, 2019).

Originally assigned to: @dgarros on GitHub.

Netbox Version: 2.6.6

Proposed Changes

Update Pillow version in the requirements.txt file from 6.0.0 to 6.2.0

Justification

A new CVE just got reporter regarding Pillow, it's affecting all version prior to 6.2.0 and currently netbox requires 6.0.0
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16865

the change was initially proposed in #3597 but it got closed

Originally created by @dgarros on GitHub (Oct 14, 2019). Originally assigned to: @dgarros on GitHub. Netbox Version: 2.6.6 ### Proposed Changes Update Pillow version in the requirements.txt file from 6.0.0 to 6.2.0 ### Justification A new CVE just got reporter regarding Pillow, it's affecting all version prior to 6.2.0 and currently netbox requires 6.0.0 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16865 > the change was initially proposed in #3597 but it got closed
adam closed this issue 2025-12-29 18:23:59 +01:00
adam commented 2025-12-29 18:24:00 +01:00
Author
Owner
Copy Link

@jeremystretch commented on GitHub (Oct 15, 2019):

@dgarros Please note the current version of NetBox affected in the issue.

@jeremystretch commented on GitHub (Oct 15, 2019): @dgarros Please note the current version of NetBox affected in the issue.
adam commented 2025-12-29 18:24:00 +01:00
Author
Owner
Copy Link

@dgarros commented on GitHub (Oct 15, 2019):

@jeremystretch Done, I've updated my initial message

@dgarros commented on GitHub (Oct 15, 2019): @jeremystretch Done, I've updated my initial message
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
beta
breaking change
complexity: high
complexity: low
complexity: medium
needs milestone
netbox
pending closure
plugin candidate
pull-request
Mirrored from GitHub Pull Request
 severity: high
severity: low
severity: medium
status: accepted
status: backlog
status: blocked
status: duplicate
status: needs owner
status: needs triage
status: revisions needed
status: under review
topic: GraphQL
topic: Internationalization
topic: OpenAPI
topic: UI/UX
topic: cabling
topic: event rules
topic: htmx navigation
topic: industrialization
topic: migrations
topic: plugins
topic: scripts
topic: templating
topic: testing
type: bug
type: deprecation
type: documentation
type: feature
type: housekeeping
type: translation
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#2955
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?