Lucene search

K
almalinuxAlmaLinuxALSA-2020:3185
HistoryJul 28, 2020 - 1:17 p.m.

Important: python-pillow security update

2020-07-2813:17:06
errata.almalinux.org
17

0.012 Low

EPSS

Percentile

85.6%

The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.

Security Fix(es):

  • python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2 (CVE-2020-11538)

  • python-pillow: out-of-bounds read in ImagingFliDecode when loading FLI images (CVE-2020-5313)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8x86_64python3-pillow< 5.1.1-12.el8_2python3-pillow-5.1.1-12.el8_2.x86_64.rpm