Debian 8: DLA-2057-1 Moderate: Pillow Denial-Of-Service & Buffer Overflow
debian lts
January 6, 2020
It was discovered that there were three vulnerabilities in Pillow, an imaging library for the Python programming language: * CVE-2019-19911: Prevent a denial-of-service vulnerabili...
Topics Covered
Summary
* CVE-2020-5312: PCX "P mode" buffer overflow.
* CVE-2020-5313: FLI buffer overflow.
For Debian 8 "Jessie", these issues have been fixed in pillow version
2.6.1-2+deb8u4.
We recommend that you upgrade your pillow packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
Regards,
- --
,'`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-
PREVIOUS
NEXT
Package: pillow
Version: 2.6.1-2+deb8u4
Debian Bug: #948224
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!