Red Hat Security Advisory: python-pillow security update

Fixed packages 6

Vulnerabilities 15

• Critical 9.8
  CVE-2021-34552

  Buffer Overflow in Pillow

  Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Jul 13, 2021
• Critical 9.1
  CVE-2021-25287

  Out-of-bounds Read in Pillow

  An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_graya_la.

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Jun 2, 2021
• Critical 9.1
  CVE-2021-25288

  Pillow Out-of-bounds Read vulnerability

  An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_gray_i.

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Jun 2, 2021
• High 7.5
  CVE-2021-25290

  Out-of-bounds Write in Pillow

  An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size.

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Mar 19, 2021
• High 7.5
  CVE-2021-25293

  Out of bounds read in Pillow

  An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c.

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Mar 19, 2021
• High 7.5
  CVE-2021-27921

  Pillow Denial of Service by Uncontrolled Resource Consumption

  Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large.

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Mar 3, 2021
• High 7.5
  CVE-2021-27922

  Pillow Uncontrolled Resource Consumption

  Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large.

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Mar 3, 2021
• High 7.5
  CVE-2021-27923

  Pillow Denial of Service by Uncontrolled Resource Consumption

  Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container, and thus an attempted memory allocation can be very large.

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Mar 3, 2021
• High 7.5
  CVE-2021-28676

  Potential infinite loop in Pillow

  An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load.

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Jun 2, 2021
• High 7.5
  CVE-2021-28677

  Uncontrolled Resource Consumption in Pillow

  An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a li…

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Jun 2, 2021
• High 7.1
  CVE-2020-35653

  Pillow Out-of-bounds Read

  In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Jan 12, 2021
• Medium 6.5
  CVE-2021-25292

  Regular Expression Denial of Service (ReDoS) in Pillow

  An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Mar 19, 2021
• Medium 5.5
  CVE-2021-28675

  Pillow denial of service

  An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data block. This could lead to a DoS on Image.open prior to Image.load.

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Jun 2, 2021
• Medium 5.5
  CVE-2021-28678

  Insufficient Verification of Data Authenticity in Pillow

  An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Jun 2, 2021
• Medium 5.4
  CVE-2020-35655

  Pillow Out-of-bounds Read

  In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Jan 12, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1915420
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1915432
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1934685
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1934699
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1934705
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1935384
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1935396
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1935401
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1958226
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1958231
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1958240
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1958252
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1958257
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1958263
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1982378
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4149.json
• report
  https://access.redhat.com/security/cve/CVE-2020-35653
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-35653
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-35653
• article
  https://pillow.readthedocs.io/en/stable/releasenotes/8.1.0.html#security
• report
  https://access.redhat.com/security/cve/CVE-2020-35655
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-35655
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-35655
• report
  https://access.redhat.com/security/cve/CVE-2021-25287
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-25287
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-25287
• report
  https://access.redhat.com/security/cve/CVE-2021-25288
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-25288
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-25288
• report
  https://access.redhat.com/security/cve/CVE-2021-25290
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-25290
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-25290
• report
  https://access.redhat.com/security/cve/CVE-2021-25292
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-25292
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-25292
• report
  https://access.redhat.com/security/cve/CVE-2021-25293
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-25293