Red Hat Enterprise Linux: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Critical 9.8
  CVE-2022-22817

  Arbitrary expression injection in Pillow

  PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. A lambda expression could also be used.

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Jan 7, 2022
• Medium 6.5
  CVE-2022-22816

  Out-of-bounds Read in Pillow

  path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.

  pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  Jan 7, 2022

Revision history

1. 2025-01-15 #7

   Neue Updates von openSUSE aufgenommen

2. 2022-04-27 #6

   Neue Updates von Amazon aufgenommen

3. 2022-04-24 #5

   Neue Updates von Amazon aufgenommen

4. 2022-02-27 #4

   Neue Updates von CentOS und AVAYA aufgenommen

5. 2022-02-24 #3

   Neue Updates von Red Hat aufgenommen

6. 2022-02-23 #2

   Neue Updates von Oracle Linux aufgenommen

7. 2022-02-22 #1

   Initiale Fassung

References

• RedHat Security Advisory vom 2022-02-22
  https://access.redhat.com/errata/RHSA-2022:0609
• RedHat Security Advisory vom 2022-02-22
  https://access.redhat.com/errata/RHSA-2022:0643
• Oracle Linux Security Advisory vom 2022-02-22
  https://linux.oracle.com/errata/ELSA-2022-0643.html
• Oracle Linux Security Advisory ELSA-2022-0609 vom 2022-02-23
  http://linux.oracle.com/errata/ELSA-2022-0609.html
• Red Hat Security Advisory RHSA-2022:0669 vom 2022-02-24
  https://access.redhat.com/errata/RHSA-2022:0669
• Red Hat Security Advisory RHSA-2022:0665 vom 2022-02-24
  https://access.redhat.com/errata/RHSA-2022:0665
• Red Hat Security Advisory RHSA-2022:0667 vom 2022-02-24
  https://access.redhat.com/errata/RHSA-2022:0667
• CentOS Security Advisory CESA-2022:0609 vom 2022-02-25
  https://lists.centos.org/pipermail/centos-announce/2022-February/073572.html
• AVAYA Security Advisory ASA-2022-024 vom 2022-02-24
  https://downloads.avaya.com/css/P8/documents/101080628
• Amazon Linux Security Advisory ALAS-2022-045 vom 2022-04-22
  https://alas.aws.amazon.com/AL2022/ALAS-2022-045.html
• Amazon Linux Security Advisory ALAS2-2022-1786 vom 2022-04-27
  https://alas.aws.amazon.com/AL2/ALAS-2022-1786.html
• openSUSE Security Update OPENSUSE-SU-2025:14645-1 vom 2025-01-15
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/44PI4DZ7YJFTM3VMZXVNEBF2OQQVHGKN/