Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 502
Alerts This Week
Warning Icon 1 502

Fedora 24: 2016-5d07246088 High: Python-Requests DDoS CVE-2016-1234 Risk

fedora
Calendar Grey February 9, 2016
Dist Fedora Esm H88
Addresses security flaws in python-pillow that exposed buffer overflow vulnerabilities found in the Fedora 23 software update.
This update fixes for security vulnerabilities, including CVE-2016-0775, CVE-2016-0740.

Summary

Python image processing library, fork of the Python Imaging Library (PIL)

This library provides extensive file format support, an efficient

internal representation, and powerful image processing capabilities.

There are four subpackages: tk (tk interface), qt (PIL image wrapper for Qt),

devel (development) and doc (documentation).

Update Information:

This update fixes for security vulnerabilities, including CVE-2016-0775, CVE-2016-0740.

Topics%20covered

Topics Covered

security advisory security issue buffer overflow Fedora python library

Change Log

References


[ 1 ] Bug #1305004 - python-pillow: Buffer overflow in PcdDecode.c https://bugzilla.redhat.com/show_bug.cgi?id=1305004

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update python-pillow' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: python-pillow
Product: Fedora 23
Version: 3.0.0
Release: 2.fc23
URL: /
Summary: Python image processing library

Topics%20covered

Topics Covered

security advisory security issue buffer overflow Fedora python library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.