Most recent entries from all

ALSA-2021:4149 — Moderate: python-pillow security update

Affected: AlmaLinux:8: python3-pillow

The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.

Security Fix(es):

* python-pillow: Out-of-bounds read in J2K image reader (CVE-2021-25287)

* python-pillow: Out-of-bounds read in J2K image reader (CVE-2021-25288)

* python-pillow: Negative-offset memcpy in TIFF image reader (CVE-2021-25290)

* python-pillow: Regular expression DoS in PDF format parser (CVE-2021-25292)

* python-pillow: Out-of-bounds read in SGI RLE image reader (CVE-2021-25293)

* python-pillow: Excessive memory allocation in BLP image reader (CVE-2021-27921)

* python-pillow: Excessive memory allocation in ICNS image reader (CVE-2021-27922)

* python-pillow: Excessive memory allocation in ICO image reader (CVE-2021-27923)

* python-pillow: Excessive memory allocation in PSD image reader (CVE-2021-28675)

* python-pillow: Infinite loop in FLI image reader (CVE-2021-28676)

* python-pillow: Excessive CPU use in EPS image reader (CVE-2021-28677)

* python-pillow: Excessive looping in BLP image reader (CVE-2021-28678)

* python-pillow: Buffer overflow in image convert function (CVE-2021-34552)

* python-pillow: Buffer over-read in PCX image reader (CVE-2020-35653)

* python-pillow: Buffer over-read in SGI RLE image reader (CVE-2020-35655)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related informati…

bdu:2021-05313

BIT-pillow-2021-28677

Affected: Bitnami: pillow

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

BREW-pillow-CVE-2021-28677

Affected: Homebrew: pillow

cnvd-2021-54031

EUVD-2026-26058

fkie_cve-2021-28677

GHSA-q5hq-fp76-qmrc — Uncontrolled Resource Consumption in Pillow

Affected: PyPI: pillow

gsd-2021-28677

PYSEC-2021-93

Affected: PyPI: pillow

RHSA-2021:4149 — Red Hat Security Advisory: python-pillow security update

python-pillow: Buffer over-read in PCX image reader python-pillow: Buffer over-read in SGI RLE image reader python-pillow: Out-of-bounds read in J2K image reader python-pillow: Out-of-bounds read in J2K image reader python-pillow: Negative-offset memcpy in TIFF image reader python-pillow: Regular expression DoS in PDF format parser python-pillow: Out-of-bounds read in SGI RLE image reader python-pillow: Excessive memory allocation in BLP image reader python-pillow: Excessive memory allocation in ICNS image reader python-pillow: Excessive memory allocation in ICO image reader python-pillow: Excessive memory allocation in PSD image reader python-pillow: Infinite loop in FLI image reader python-pillow: Excessive CPU use in EPS image reader python-pillow: Excessive looping in BLP image reader python-pillow: Buffer overflow in image convert function

SUSE-SU-2021:1938-1 — Security update for python-Pillow

Security update for python-Pillow

UBUNTU-CVE-2021-28677

Affected: Ubuntu:Pro:14.04:LTS: pillow, Ubuntu:Pro:16.04:LTS: pillow, Ubuntu:18.04:LTS: pillow, Ubuntu:20.04:LTS: pillow, Ubuntu:Pro:20.04:LTS: pillow-python2

WID-SEC-W-2022-1835 — Red Hat Enterprise Linux (python-pillow): Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in python-pillow ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen.