Description
Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | pillow | 7.2.0-1 | — |
| Debian 13 | pillow | 7.2.0-1 | — |
| Debian 12 | pillow | 7.2.0-1 | — |
| Debian 9 | pillow | 4.0.0-4+deb9u2 | DLA-2317-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | pillow | 7.0.0-4ubuntu0.1 | USN-4430-2 |
| Ubuntu 18.04 LTS | pillow | 5.1.0-1ubuntu0.3 | USN-4430-1 |
| Ubuntu 16.04 LTS | pillow | 3.1.2-0ubuntu1.4 | USN-4430-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | pillow-python2 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | pillow | 2.3.0-1ubuntu3.4+esm2 | USN-4697-2 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud Crowbar 9 | crowbar-core | 6.0+git.1594619891.b75a61d0d-3.25.5 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | crowbar-openstack | 6.0+git.1591795073.49cb6400e-3.25.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | grafana | 6.2.5-3.12.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | kibana | 4.6.3-4.3.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-barbican | 7.0.1~dev24-3.9.5 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-ceilometer | 11.1.1~dev7-3.16.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-cinder | 13.0.10~dev12-3.22.4 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-dashboard | 14.1.1~dev6-3.15.5 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-designate | 7.0.2~dev2-3.19.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-heat-templates | 0.0.0+git.1582270132.8a20477-3.6.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-ironic | 11.1.5~dev6-3.19.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-keystone | 14.2.1~dev4-3.22.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-magnum | 7.2.1~dev1-3.13.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-manila | 7.4.2~dev31-4.24.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-monasca-agent | 2.8.2~dev5-3.9.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron | 13.0.8~dev68-3.25.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron-vsphere | 2.0.1~dev167-3.3.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-nova | 18.3.1~dev38-3.25.4 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-octavia | 3.2.3~dev7-3.25.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-octavia-amphora-image | 0.1.4-7.12.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-resource-agents | 1.0+git.1569436425.8b9c49f-5.3.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-Django1 | 1.11.29-3.15.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-Pillow | 5.2.0-3.3.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-heatclient | 1.16.3-3.3.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-neutron-tempest-plugin +1 | 0.2.0-3.3.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-os-brick | 2.5.10-3.12.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-oslo.messaging | 8.1.4-3.6.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-pyroute2 | 0.5.2-4.3.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-urllib3 | 1.23-3.12.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-waitress | 1.4.3-3.3.1 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | release-notes-suse-openstack-cloud | 9.20200610-3.21.4 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | rubygem-activeresource | 4.0.0-4.3.1 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | rubygem-json-1_7 | 1.7.7-4.3.1 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 9 | rubygem-puma | 2.16.0-4.9.1 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud Crowbar 8 | ansible | 2.9.14-3.15.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-core | 5.0+git.1600432272.b3ad722f0-3.44.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-openstack | 5.0+git.1599037158.5c4d07480-4.43.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-deployment +3 | 8.20201007-1.29.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | grafana | 6.7.4-4.12.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-cinder | 11.2.3~dev29-3.28.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-neutron | 11.0.9~dev69-3.37.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-nova | 16.1.9~dev76-3.39.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-Django | 1.11.29-3.19.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-Pillow | 4.2.1-3.9.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-keystoneclient | 3.13.1-3.3.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-keystonemiddleware | 4.17.1-5.3.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-kombu | 4.1.0-3.7.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-straight-plugin | 1.5.0-1.3.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-urllib3 | 1.22-5.12.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | release-notes-suse-openstack-cloud | 8.20200922-3.23.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | rubygem-crowbar-client | 3.9.3-1.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud Crowbar 8 | storm | 1.2.3-3.6.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 9 | ansible1 | 1.9.6-9.7.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | ardana-ansible | 9.0+git.1591138508.e269bdb-3.22.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | ardana-cobbler | 9.0+git.1588181228.bae3b1f-3.13.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | ardana-glance | 9.0+git.1593631708.9354a78-3.13.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | ardana-input-model | 9.0+git.1589740948.c24fc0b-3.19.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | ardana-logging | 9.0+git.1591193994.d93b668-3.13.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | ardana-manila | 9.0+git.1594158642.b5905e4-3.12.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | ardana-monasca | 9.0+git.1589385256.7fbfaaf-3.19.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | ardana-mq | 9.0+git.1593618110.cbd1a37-3.16.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | ardana-neutron | 9.0+git.1590756257.e09d54f-3.22.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | ardana-octavia | 9.0+git.1590079609.a2ae6ab-3.19.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | ardana-tempest | 9.0+git.1593033709.9495bb2-3.16.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | grafana | 6.2.5-3.12.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | kibana | 4.6.3-4.3.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-barbican | 7.0.1~dev24-3.9.5 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-ceilometer | 11.1.1~dev7-3.16.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-cinder | 13.0.10~dev12-3.22.4 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-dashboard | 14.1.1~dev6-3.15.5 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-designate | 7.0.2~dev2-3.19.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-heat-templates | 0.0.0+git.1582270132.8a20477-3.6.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-ironic | 11.1.5~dev6-3.19.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-keystone | 14.2.1~dev4-3.22.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-magnum | 7.2.1~dev1-3.13.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-manila | 7.4.2~dev31-4.24.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-monasca-agent | 2.8.2~dev5-3.9.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-neutron | 13.0.8~dev68-3.25.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-neutron-vsphere | 2.0.1~dev167-3.3.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-nova | 18.3.1~dev38-3.25.4 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-octavia | 3.2.3~dev7-3.25.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-octavia-amphora-image | 0.1.4-7.12.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | openstack-resource-agents | 1.0+git.1569436425.8b9c49f-5.3.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | python-Django1 | 1.11.29-3.15.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | python-Pillow | 5.2.0-3.3.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | python-ardana-packager | 0.0.3-9.3.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | python-heatclient | 1.16.3-3.3.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | python-neutron-tempest-plugin +1 | 0.2.0-3.3.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | python-os-brick | 2.5.10-3.12.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | python-oslo.messaging | 8.1.4-3.6.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | python-pyroute2 | 0.5.2-4.3.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | python-urllib3 | 1.23-3.12.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | python-waitress | 1.4.3-3.3.1 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | release-notes-suse-openstack-cloud | 9.20200610-3.21.4 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-barbican | 7.0.1~dev24-3.19.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-cinder | 13.0.10~dev12-3.19.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-designate | 7.0.2~dev2-3.19.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-glance | 17.0.1~dev30-3.17.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-heat | 11.0.3~dev35-3.19.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-horizon | 14.1.1~dev6-4.18.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-ironic | 11.1.5~dev6-4.15.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-keystone | 14.2.1~dev4-3.19.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-magnum | 7.2.1~dev1-4.19.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-manila | 7.4.2~dev31-3.21.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca | 2.7.1~dev10-3.17.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca-ceilometer | 1.8.2~dev3-3.19.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-neutron | 13.0.8~dev68-6.19.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-nova | 18.3.1~dev38-3.19.3 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-octavia | 3.2.3~dev7-4.19.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-sahara | 9.0.2~dev15-3.19.2 | SUSE-RU-2020:2161-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-swift | 2.19.2~dev48-2.14.2 | SUSE-RU-2020:2161-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud 8 | ansible | 2.9.14-3.15.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | ardana-ansible | 8.0+git.1596735237.54109b1-3.77.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | ardana-cinder | 8.0+git.1596129856.263f430-3.43.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | ardana-glance | 8.0+git.1593631779.76fa9b7-3.24.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | ardana-mq | 8.0+git.1593618123.678c32b-3.26.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | ardana-nova | 8.0+git.1601298847.dd01585-3.42.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | ardana-osconfig | 8.0+git.1595885113.93abcbc-3.49.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-user +8 | 8.20201007-1.29.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | grafana | 6.7.4-4.12.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | openstack-cinder | 11.2.3~dev29-3.28.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | openstack-neutron | 11.0.9~dev69-3.37.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | openstack-nova | 16.1.9~dev76-3.39.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-Django | 1.11.29-3.19.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-Flask-Cors | 3.0.3-3.3.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-Pillow | 4.2.1-3.9.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-ardana-packager | 0.0.3-7.7.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-keystoneclient | 3.13.1-3.3.2 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-keystonemiddleware | 4.17.1-5.3.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-kombu | 4.1.0-3.7.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-straight-plugin | 1.5.0-1.3.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | python-urllib3 | 1.22-5.12.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | release-notes-suse-openstack-cloud | 8.20200922-3.23.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | storm | 1.2.3-3.6.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-aodh | 5.1.1~dev7-12.28.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-barbican | 5.0.2~dev3-12.29.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.26.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-cinder | 11.2.3~dev29-14.30.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-designate | 5.0.3~dev7-12.27.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.24.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-glance | 15.0.3~dev3-12.27.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-heat | 9.0.8~dev22-12.29.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-horizon | 12.0.5~dev3-14.32.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-ironic | 9.1.8~dev8-12.29.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-keystone | 12.0.4~dev11-11.30.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.28.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-manila | 5.1.1~dev5-12.33.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca | 2.2.2~dev1-11.24.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.24.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-murano | 4.0.2~dev2-12.24.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-neutron | 11.0.9~dev69-13.32.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-nova | 16.1.9~dev76-11.30.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-octavia | 1.0.6~dev3-12.29.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-sahara | 7.0.5~dev4-11.28.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.21.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-trove | 8.0.2~dev2-11.28.1 | SUSE-SU-2020:3309-1 |
| SUSE OpenStack Cloud 7 | ansible | 2.2.3.0-17.2 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | crowbar-core | 4.0+git.1600767499.0615a418f-9.69.3 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | crowbar-openstack | 4.0+git.1599037255.25b759234-9.74.4 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | grafana | 6.7.4-1.17.1 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | grafana-natel-discrete-panel | 0.0.9-1.6.5 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-aodh | 3.0.5~dev2-2.11.2 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-aodh-doc | 3.0.5~dev2-2.11.1 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-barbican | 3.0.1~dev9-2.12.4 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-barbican-doc | 3.0.1~dev9-2.12.2 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-cinder +1 | 9.1.5~dev6-4.28.1 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-gnocchi | 3.0.7~dev1-2.8.2 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-heat | 7.0.7~dev10-5.17.3 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-heat-doc | 7.0.7~dev10-5.17.2 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-ironic +1 | 6.2.5~dev3-2.8.2 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-magnum | 3.3.2~dev7-14.14.4 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-magnum-doc | 3.3.2~dev7-14.14.2 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-manila | 3.0.1~dev30-4.17.2 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-manila-doc | 3.0.1~dev30-4.17.1 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-monasca-agent | 1.10.1~dev4-13.3 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-murano | 3.0.1~dev21-7.5.3 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-murano-doc | 3.0.1~dev21-7.5.1 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-neutron | 9.4.2~dev21-7.43.2 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-neutron-doc | 9.4.2~dev21-7.43.1 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-neutron-vpnaas +1 | 9.0.1~dev8-5.8.2 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-nova | 14.0.11~dev13-4.45.3 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-nova-doc | 14.0.11~dev13-4.45.2 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-sahara | 5.0.2~dev3-14.3 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | openstack-sahara-doc | 5.0.2~dev3-14.1 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | python-Pillow | 2.8.1-4.17.2 | SUSE-SU-2020:2911-1 |
| SUSE OpenStack Cloud 7 | rubygem-crowbar-client | 3.9.3-7.23.1 | SUSE-SU-2020:2911-1 |
| SUSE HPE Helion OpenStack 8 | ansible | 2.9.14-3.15.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | ardana-ansible | 8.0+git.1596735237.54109b1-3.77.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | ardana-cinder | 8.0+git.1596129856.263f430-3.43.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | ardana-glance | 8.0+git.1593631779.76fa9b7-3.24.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | ardana-mq | 8.0+git.1593618123.678c32b-3.26.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | ardana-nova | 8.0+git.1601298847.dd01585-3.42.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | ardana-osconfig | 8.0+git.1595885113.93abcbc-3.49.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-user +5 | 8.20201007-1.29.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | grafana | 6.7.4-4.12.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | openstack-cinder | 11.2.3~dev29-3.28.2 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | openstack-neutron | 11.0.9~dev69-3.37.2 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | openstack-nova | 16.1.9~dev76-3.39.2 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | python-Django | 1.11.29-3.19.2 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | python-Flask-Cors | 3.0.3-3.3.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | python-Pillow | 4.2.1-3.9.2 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | python-ardana-packager | 0.0.3-7.7.2 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | python-keystoneclient | 3.13.1-3.3.2 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | python-keystonemiddleware | 4.17.1-5.3.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | python-kombu | 4.1.0-3.7.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | python-urllib3 | 1.22-5.12.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | release-notes-hpe-helion-openstack | 8.20200922-3.23.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | storm | 1.2.3-3.6.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-aodh | 5.1.1~dev7-12.28.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-barbican | 5.0.2~dev3-12.29.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.26.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-cinder | 11.2.3~dev29-14.30.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-designate | 5.0.3~dev7-12.27.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.24.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-glance | 15.0.3~dev3-12.27.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-heat | 9.0.8~dev22-12.29.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-horizon-hpe | 12.0.5~dev3-14.32.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ironic | 9.1.8~dev8-12.29.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-keystone | 12.0.4~dev11-11.30.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.28.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-manila | 5.1.1~dev5-12.33.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca | 2.2.2~dev1-11.24.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.24.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-murano | 4.0.2~dev2-12.24.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-neutron | 11.0.9~dev69-13.32.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-nova | 16.1.9~dev76-11.30.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-octavia | 1.0.6~dev3-12.29.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-sahara | 7.0.5~dev4-11.28.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.21.1 | SUSE-SU-2020:3309-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-trove | 8.0.2~dev2-11.28.1 | SUSE-SU-2020:3309-1 |
| SUSE Enterprise Storage 5 | python-Pillow | 2.8.1-3.9.1 | SUSE-SU-2020:2057-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | python-pillow +4 | 2.0.0-23.gitd1c6db8.amzn2.0.13 | ALAS2-2024-2648 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | pillow | < 7.1.0 | 7.1.0 | GHSA-cqhg-xjhh-p8hf |
Advisories 9
- USN-4430-1 pillow vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-4697-2 pillow vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-4430-2 pillow vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- DLA-2317-1 pillow - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2020:2057-1 Security update for python-Pillow SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:2911-1 Security update for ansible, crowbar-core, crowbar-openstack, grafana, grafana-natel-discrete-panel, openstack-aodh, openstack-barbican, openstack-cinder, openstack-gnocchi, openstack-heat, openstack-ironic, openstack-magnum, openstack-manila, openstack-monasca-agent, openstack-murano, openstack-neutron, openstack-neutron-vpnaas, openstack-nova, openstack-sahara, python-Pillow, rubygem-crowbar-client SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:3309-1 Security update for ansible, ardana-ansible, ardana-cinder, ardana-glance, ardana-mq, ardana-nova, ardana-osconfig, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, grafana-natel-discrete-panel, openstack-cinder, openstack-monasca-installer, openstack-neutron, openstack-nova, python-Django, python-Flask-Cors, python-Pillow, python-ardana-packager, python-keystoneclient, python-keystonemiddleware, python-kombu, python-straight-plugin, python-urllib3, release-notes-sus SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2020:2161-1 Security update for ansible1, ardana-ansible, ardana-cobbler, ardana-glance, ardana-input-model, ardana-logging, ardana-manila, ardana-monasca, ardana-mq, ardana-neutron, ardana-octavia, ardana-tempest, crowbar-core, crowbar-openstack, grafana, kibana, openstack-barbican, openstack-ceilometer, openstack-cinder, openstack-dashboard, openstack-designate, openstack-heat-templates, openstack-ironic, openstack-keystone, openstack-magnum, openstack-manila, openstack-monasca-agent, openstack-neutron, o SUSE / openSUSE Security Updates · Feb 4, 2026
- ALAS2-2024-2648 Moderate: python-pillow security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 2, 2024
References
- https://github.com/python-pillow/Pillow/commits/master/src/libImaging
- https://github.com/python-pillow/Pillow/pull/4538
- https://pillow.readthedocs.io/en/stable/releasenotes/7.1.0.html
- https://github.com/python-pillow/Pillow/pull/4503
- FEDORA-2020-c52106e48a vendor-advisory
- FEDORA-2020-d0737711b6 vendor-advisory
- USN-4430-1 vendor-advisory
- USN-4430-2 vendor-advisory
- [debian-lts-announce] 20200808 [SECURITY] [DLA 2317-1] pillow security update mailing-list