Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 508
Alerts This Week
Warning Icon 1 508

Debian DSA-3499-1 Moderate: Pillow DoS from Malformed Images

debian
Calendar Grey February 28, 2016
Scroller Debian
Various weaknesses exist in the Pillow library, enabling denial of service (DoS) and the execution of malicious code via improperly structured image files.
Multiple security vulnerabilities have been found in Pillow, a Python imaging library, which may result in denial of service or the execution of arbitrary code if a malformed FLI, ...
Topics%20covered

Topics Covered

security advisory denial of service debian arbitrary code execution pillow

Summary

Multiple security vulnerabilities have been found in Pillow, a Python
imaging library, which may result in denial of service or the execution
of arbitrary code if a malformed FLI, PCD or Tiff files is processed.

For the oldstable distribution (wheezy), this problem has been fixed
in version 1.1.7-4+deb7u2 of the python-imaging source package.

For the stable distribution (jessie), this problem has been fixed in
version 2.6.1-2+deb8u2.

For the testing distribution (stretch), this problem has been fixed
in version 3.1.1-1.

For the unstable distribution (sid), this problem has been fixed in
version 3.1.1-1.

We recommend that you upgrade your pillow packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Package: pillow
CVE ID: CVE-2016-0740 CVE-2016-0775 CVE-2016-2533

Topics%20covered

Topics Covered

security advisory denial of service debian arbitrary code execution pillow

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.