Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian Stretch: DLA-2317-1 Critical: Pillow Out-Of-Bounds Issue

debian lts
Calendar Grey August 8, 2020
Dist Debian Esm H88
Important security patch for Pillow addressing several out-of-bounds reads flaws in Debian LTS.
It was noticed that in Pillow before 7.1.0, there are multiple out-of-bounds reads in libImaging/FliDecode.c
Topics%20covered

Topics Covered

security advisory security update buffer overflow critical debian out-of-bounds pillow

Summary

For Debian 9 stretch, this problem has been fixed in version
4.0.0-4+deb9u2.

We recommend that you upgrade your pillow packages.

For the detailed security status of pillow please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/pillow

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: pillow
Version: 4.0.0-4+deb9u2
CVE ID: CVE-2020-10177

Topics%20covered

Topics Covered

security advisory security update buffer overflow critical debian out-of-bounds pillow

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here