Summary
The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.
Security Fix(es):
* python-pillow: buffer overflow in _imagingcms.c (CVE-2024-28219)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | python3-pillow | 5.1.1-21.el8_10 |
| AlmaLinux · 8 | python3-pillow-devel | 5.1.1-21.el8_10 |
| AlmaLinux · 8 | python3-pillow-doc | 5.1.1-21.el8_10 |
| AlmaLinux · 8 | python3-pillow-tk | 5.1.1-21.el8_10 |
Vulnerabilities 1
-
Medium 6.7
Pillow buffer overflow vulnerability
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.