Red Hat Security AdvisoryRHSA-2020:3185
python-pillow security update
Released 2020-07-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) python-pillow-5.1.1-12.el8_2, python3-pillow-5.1.1-12.el8_2
Fixes 2 records
Priority MEDIUM 40
In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.02514 · Published 2020-06-25 · Fixed in 7.1.0 CWE-125
Priority LOW 36
libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.02752 · Published 2020-01-03 · Partial fix · 6.2.2 CWE-125
