Subject: | |
From: | |
Reply To: | |
Date: | Wed, 23 Feb 2022 14:26:35 -0000 |
Content-Type: | text/plain |
Parts/Attachments: |
|
|
Synopsis: Important: python-pillow security update
Advisory ID: SLSA-2022:0609-1
Issue Date: 2022-02-23
CVE Numbers: CVE-2022-22816
CVE-2022-22817
--
Security Fix(es):
* python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary
expressions (CVE-2022-22817)
* python-pillow: buffer over-read during initialization of ImagePath.Path
in path_getbbox() in path.c (CVE-2022-22816)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
--
SL7
x86_64
python-pillow-2.0.0-23.gitd1c6db8.el7_9.x86_64.rpm
python-pillow-debuginfo-2.0.0-23.gitd1c6db8.el7_9.x86_64.rpm
python-pillow-2.0.0-23.gitd1c6db8.el7_9.i686.rpm
python-pillow-debuginfo-2.0.0-23.gitd1c6db8.el7_9.i686.rpm
python-pillow-devel-2.0.0-23.gitd1c6db8.el7_9.i686.rpm
python-pillow-devel-2.0.0-23.gitd1c6db8.el7_9.x86_64.rpm
python-pillow-doc-2.0.0-23.gitd1c6db8.el7_9.x86_64.rpm
python-pillow-qt-2.0.0-23.gitd1c6db8.el7_9.x86_64.rpm
python-pillow-sane-2.0.0-23.gitd1c6db8.el7_9.x86_64.rpm
python-pillow-tk-2.0.0-23.gitd1c6db8.el7_9.x86_64.rpm
- Scientific Linux Development Team
|
|
|