Stay Secure with the Latest Linux Advisories

security advisorydenial of servicebuffer overflow

Ubuntu 24.04 LTS USN-6744-3 Critical: Pillow Buffer Overflow Issue

Pillow could be made to crash or run programs as an administrator if it opened a specially crafted file.. ========================================================================== Ubuntu Security Notice USN-6744-3 April 29, 2024 pillow vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS Summary: Pillow could be made to crash or run programs as an administrator if it opened a specially crafted file. Software Description: - pillow: Python Imaging Library Details: USN-6744-1 fixed a vulnerability in Pillow. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: Hugo van Kemenade discovered that Pillow was not properly performing bounds checks when processing an ICC file, which could lead to a buffer overflow. If a user or automated system were tricked into processing a specially crafted ICC file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS python3-pil 10.2.0-1ubuntu1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6744-3 https://ubuntu.com/security/notices/USN-6744-1 CVE-2024-28219 Package Information: https://launchpad.net/ubuntu/+source/pillow/10.2.0-1ubuntu1 . A security flaw in Pillow for Ubuntu 24.04 LTS may lead to system crashes or allow unauthorized access for admin privileges with specially crafted files.. Pillow Update, Ubuntu Security, Buffer Overflow Risk, Python Imaging, Denial of Service. . Severity: Critical. LinuxSecurity.com Team

Apr 29, 2024 •Critical Ubuntu