ALT-PU-2021-1389-1
Package python3-module-Pillow updated to version 8.1.0-alt1 for branch sisyphus in task 266616.
Closed vulnerabilities
BDU:2021-05179
Уязвимость библиотеки обработки изображений в Python Pillow, связанная с чтением за допустимыми границами буфера данных, позволяющая нарушителю получить доступ к конфиденциальным данным, а также вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2020-35653
In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.
- [debian-lts-announce] 20210722 [SECURITY] [DLA 2716-1] pillow security update
- [debian-lts-announce] 20210722 [SECURITY] [DLA 2716-1] pillow security update
- FEDORA-2021-a8ddc1ce70
- FEDORA-2021-a8ddc1ce70
- FEDORA-2021-880aa7bd27
- FEDORA-2021-880aa7bd27
- https://pillow.readthedocs.io/en/stable/releasenotes/index.html
- https://pillow.readthedocs.io/en/stable/releasenotes/index.html
Modified: 2024-11-21
CVE-2020-35654
In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.
- FEDORA-2021-a8ddc1ce70
- FEDORA-2021-a8ddc1ce70
- FEDORA-2021-880aa7bd27
- FEDORA-2021-880aa7bd27
- FEDORA-2021-15845d3abe
- FEDORA-2021-15845d3abe
- FEDORA-2021-0ece308612
- FEDORA-2021-0ece308612
- https://pillow.readthedocs.io/en/stable/releasenotes/index.html
- https://pillow.readthedocs.io/en/stable/releasenotes/index.html
Modified: 2024-11-21
CVE-2020-35655
In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.