Red Hat Security AdvisoryRHSA-2024:4227
python-pillow security update
Released 2024-07-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) python-pillow-5.1.1-21.el8_10, python3-pillow-5.1.1-21.el8_10
- Red Hat Enterprise Linux CRB (v. 8) python3-pillow-5.1.1-21.el8_10, python3-pillow-devel-5.1.1-21.el8_10, python3-pillow-doc-5.1.1-21.el8_10 +1
Fixes 1 record
Priority LOW 34
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.
CVSS 3.1MEDIUM 6.7· Local · Low privileges · User interaction · EPSS 0.00997 · Published 2024-04-03 · Partial fix · 10.3.0 CWE-680
