Skip to content
OpenAdvisories
Medium ELSA-2024-3005 1 CVE

Moderate: python-pillow security update (Oracle Linux 8)

Published May 23, 2024 · Updated May 23, 2024

Ecosystem: Oracle Linux

Summary

[5.1.1-20]
- Security fix for CVE-2023-50447
Resolves: RHEL-22240

[5.1.1-19]
- Security fix for CVE-2023-44271
Resolves: RHEL-15460

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 8 python3-pillow 0:5.1.1-20.el8
Oracle Linux · 8 python3-pillow-devel 0:5.1.1-20.el8
Oracle Linux · 8 python3-pillow-doc 0:5.1.1-20.el8
Oracle Linux · 8 python3-pillow-tk 0:5.1.1-20.el8

Vulnerabilities 1

  • High 7.5
    CVE-2023-44271

    Pillow Denial of Service vulnerability

    An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textleng…

    pillow pillow pillow pillow-python2 Debian Ubuntu PyPI