Debian Linux Security Advisory 3009-1 - Andrew Drake discovered that missing input sanitising in the icns decoder of the Python Imaging Library could result in denial of service if a malformed image is processed.
e43894f4abd1d3c313b7872270168b4c04b61d3f2bc1d935f7e2d7b89f1395f0