Medium DLA-2317-1 1 CVE

pillow - security update

Published Aug 8, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	pillow	4.0.0-4+deb9u2

Vulnerabilities 1

Medium 5.5

CVE-2020-10177

Out-of-bounds reads in Pillow

Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.

pillow pillow pillow pillow-python2 Debian Ubuntu PyPI

Jun 25, 2020