Red Hat Security Advisory

RHSA-2020:3302

python-pillow security update

Released 2020-08-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v. 8.0) python-pillow-5.1.1-11.el8_0, python3-pillow-5.1.1-11.el8_0

Fixes 1 record

TI-2020-09257 CVE-2020-11538 · GHSA-43fq-w8qq-v88h

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads…

MEDIUM 40

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02514 Published 2020-06-25 Fixed in 7.1.0 CWE-125