Medium ELSA-2024-4227 1 CVE

Moderate: python-pillow security update (Oracle Linux 8)

Published Jul 2, 2024 · Updated Jul 2, 2024

Ecosystem: Oracle Linux

Summary

[5.1.1-21]
- Security fix for CVE-2024-28219
Resolves: RHEL-31071

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 8	python3-pillow	0:5.1.1-21.el8_10
Oracle Linux · 8	python3-pillow-devel	0:5.1.1-21.el8_10
Oracle Linux · 8	python3-pillow-doc	0:5.1.1-21.el8_10
Oracle Linux · 8	python3-pillow-tk	0:5.1.1-21.el8_10

Vulnerabilities 1

Medium 6.7

CVE-2024-28219

Pillow buffer overflow vulnerability

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.

kubeflow-pipelines-visualization-server pillow pillow pillow Debian Ubuntu Alpine Wolfi PyPI

Apr 3, 2024