Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 456
Alerts This Week
Warning Icon 1 456

Ubuntu 12.04 LTS USN-3229-1: Python Imaging Library Critical DoS

ubuntu
Calendar Grey March 13, 2017
Dist Ubuntu Esm H88
Ubuntu 12.04 LTS updates address pivotal vulnerabilities in the Python Imaging Library to prevent potential denial of service threats. Discover further details.
Several security issues were fixed in the Python Imaging Library.

Summary

Several security issues were fixed in the Python Imaging Library.

Software Description:

- python-imaging: Python Imaging Library

Details:

It was discovered that the Python Imaging Library incorrectly handled

certain compressed text chunks in PNG images. A remote attacker could

possibly use this issue to cause the Python Imaging Library to crash,

resulting in a denial of service. (CVE-2014-9601)

Cris Neckar discovered that the Python Imaging Library incorrectly handled

certain malformed images. A remote attacker could use this issue to cause

the Python Imaging Library to crash, resulting in a denial of service, or

possibly obtain sensitive information. (CVE-2016-9189)

Cris Neckar discovered that the Python Imaging Library incorrectly handled

certain malformed images. A remote attacker could use this issue to cause

the Python Imaging Library to crash, resulting in a denial of service, or

possibly execute arbitrary code. (CVE-2016-9190)

Topics%20covered

Topics Covered

security advisory denial of service security issue update instructions ubuntu python-imaging

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  python-imaging                  1.1.7-4ubuntu0.12.04.3

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3229-1

CVE-2014-9601, CVE-2016-9189, CVE-2016-9190

Severity
critical
Lowest
Low
Medium
High
Critical

March 13, 2017

Topics%20covered

Topics Covered

security advisory denial of service security issue update instructions ubuntu python-imaging

Package Information

https://launchpad.net/ubuntu/+source/python-imaging/1.1.7-4ubuntu0.12.04.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.