CVE-2020-5311 — Buffer Copy without Checking Size of Input in Pillow

Description

libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	pillow	7.0.0-1	—
Debian 13	pillow	7.0.0-1	—
Debian 12	pillow	7.0.0-1	—

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 18.04 LTS	pillow	5.1.0-1ubuntu0.2	USN-4272-1
Ubuntu 16.04 LTS	pillow	3.1.2-0ubuntu1.3	USN-4272-1

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro 14.04 LTS	pillow	2.3.0-1ubuntu3.4+esm1	USN-4272-1

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 8	python-pillow +1	5.1.1-10.el8_1	RHSA-2020:0580

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
RHEL 8.0 E4S	python-pillow +1	5.1.1-10.el8_0	RHSA-2020:0566

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SUSE OpenStack Cloud Crowbar 9	crowbar-core	6.0+git.1594619891.b75a61d0d-3.25.5	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	crowbar-openstack	6.0+git.1591795073.49cb6400e-3.25.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	grafana	6.2.5-3.12.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	kibana	4.6.3-4.3.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-barbican	7.0.1~dev24-3.9.5	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-ceilometer	11.1.1~dev7-3.16.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-cinder	13.0.10~dev12-3.22.4	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-dashboard	14.1.1~dev6-3.15.5	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-designate	7.0.2~dev2-3.19.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-heat-templates	0.0.0+git.1582270132.8a20477-3.6.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-ironic	11.1.5~dev6-3.19.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-keystone	14.2.1~dev4-3.22.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-magnum	7.2.1~dev1-3.13.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-manila	7.4.2~dev31-4.24.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-monasca-agent	2.8.2~dev5-3.9.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-neutron	13.0.8~dev68-3.25.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-neutron-vsphere	2.0.1~dev167-3.3.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-nova	18.3.1~dev38-3.25.4	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-octavia	3.2.3~dev7-3.25.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-octavia-amphora-image	0.1.4-7.12.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	openstack-resource-agents	1.0+git.1569436425.8b9c49f-5.3.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	python-Django1	1.11.29-3.15.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	python-Pillow	5.2.0-3.3.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	python-heatclient	1.16.3-3.3.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	python-neutron-tempest-plugin +1	0.2.0-3.3.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	python-os-brick	2.5.10-3.12.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	python-oslo.messaging	8.1.4-3.6.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	python-pyroute2	0.5.2-4.3.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	python-urllib3	1.23-3.12.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	python-waitress	1.4.3-3.3.1	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	release-notes-suse-openstack-cloud	9.20200610-3.21.4	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	rubygem-activeresource	4.0.0-4.3.1	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	rubygem-json-1_7	1.7.7-4.3.1	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud Crowbar 9	rubygem-puma	2.16.0-4.9.1	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	ansible1	1.9.6-9.7.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	ardana-ansible	9.0+git.1591138508.e269bdb-3.22.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	ardana-cobbler	9.0+git.1588181228.bae3b1f-3.13.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	ardana-glance	9.0+git.1593631708.9354a78-3.13.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	ardana-input-model	9.0+git.1589740948.c24fc0b-3.19.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	ardana-logging	9.0+git.1591193994.d93b668-3.13.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	ardana-manila	9.0+git.1594158642.b5905e4-3.12.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	ardana-monasca	9.0+git.1589385256.7fbfaaf-3.19.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	ardana-mq	9.0+git.1593618110.cbd1a37-3.16.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	ardana-neutron	9.0+git.1590756257.e09d54f-3.22.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	ardana-octavia	9.0+git.1590079609.a2ae6ab-3.19.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	ardana-tempest	9.0+git.1593033709.9495bb2-3.16.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	grafana	6.2.5-3.12.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	kibana	4.6.3-4.3.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-barbican	7.0.1~dev24-3.9.5	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-ceilometer	11.1.1~dev7-3.16.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-cinder	13.0.10~dev12-3.22.4	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-dashboard	14.1.1~dev6-3.15.5	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-designate	7.0.2~dev2-3.19.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-heat-templates	0.0.0+git.1582270132.8a20477-3.6.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-ironic	11.1.5~dev6-3.19.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-keystone	14.2.1~dev4-3.22.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-magnum	7.2.1~dev1-3.13.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-manila	7.4.2~dev31-4.24.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-monasca-agent	2.8.2~dev5-3.9.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-neutron	13.0.8~dev68-3.25.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-neutron-vsphere	2.0.1~dev167-3.3.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-nova	18.3.1~dev38-3.25.4	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-octavia	3.2.3~dev7-3.25.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-octavia-amphora-image	0.1.4-7.12.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	openstack-resource-agents	1.0+git.1569436425.8b9c49f-5.3.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	python-Django1	1.11.29-3.15.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	python-Pillow	5.2.0-3.3.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	python-ardana-packager	0.0.3-9.3.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	python-heatclient	1.16.3-3.3.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	python-neutron-tempest-plugin +1	0.2.0-3.3.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	python-os-brick	2.5.10-3.12.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	python-oslo.messaging	8.1.4-3.6.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	python-pyroute2	0.5.2-4.3.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	python-urllib3	1.23-3.12.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	python-waitress	1.4.3-3.3.1	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	release-notes-suse-openstack-cloud	9.20200610-3.21.4	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-barbican	7.0.1~dev24-3.19.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-cinder	13.0.10~dev12-3.19.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-designate	7.0.2~dev2-3.19.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-glance	17.0.1~dev30-3.17.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-heat	11.0.3~dev35-3.19.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-horizon	14.1.1~dev6-4.18.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-ironic	11.1.5~dev6-4.15.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-keystone	14.2.1~dev4-3.19.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-magnum	7.2.1~dev1-4.19.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-manila	7.4.2~dev31-3.21.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-monasca	2.7.1~dev10-3.17.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-monasca-ceilometer	1.8.2~dev3-3.19.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-neutron	13.0.8~dev68-6.19.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-nova	18.3.1~dev38-3.19.3	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-octavia	3.2.3~dev7-4.19.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-sahara	9.0.2~dev15-3.19.2	SUSE-RU-2020:2161-1
SUSE OpenStack Cloud 9	venv-openstack-swift	2.19.2~dev48-2.14.2	SUSE-RU-2020:2161-1

Alpine

Security tracker ↗

Release	Package	Fixed in	Advisory
Alpine v3.24	py3-pillow	6.2.2-r0	—
Alpine v3.23	py3-pillow	6.2.2-r0	—
Alpine v3.22	py3-pillow	6.2.2-r0	—
Alpine v3.21	py3-pillow	6.2.2-r0	—
Alpine v3.20	py3-pillow	6.2.2-r0	—

Show 8 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Alpine v3.19	py3-pillow	6.2.2-r0	—
Alpine v3.18	py3-pillow	6.2.2-r0	—
Alpine v3.17	py3-pillow	6.2.2-r0	—
Alpine v3.16	py3-pillow	6.2.2-r0	—
Alpine v3.15	py3-pillow	6.2.2-r0	—
Alpine v3.14	py3-pillow	6.2.2-r0	—
Alpine v3.13	py3-pillow	6.2.2-r0	—
Alpine v3.12	py3-pillow	6.2.2-r0	—

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 8	python3-pillow	5.1.1-10.el8_1	ELSA-2020-0580

Affected packages

Ecosystem	Package	Affected	Fixed	Record
PyPI	pillow	< 6.2.2	6.2.2	GHSA-r7rm-8j6h-r933

Advisories 5

USN-4272-1 pillow vulnerabilities Ubuntu Security Notices (USN) · Jun 29, 2026
RHSA-2020:0580 Red Hat Security Advisory: python-pillow security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
RHSA-2020:0566 Red Hat Security Advisory: python-pillow security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
SUSE-RU-2020:2161-1 Security update for ansible1, ardana-ansible, ardana-cobbler, ardana-glance, ardana-input-model, ardana-logging, ardana-manila, ardana-monasca, ardana-mq, ardana-neutron, ardana-octavia, ardana-tempest, crowbar-core, crowbar-openstack, grafana, kibana, openstack-barbican, openstack-ceilometer, openstack-cinder, openstack-dashboard, openstack-designate, openstack-heat-templates, openstack-ironic, openstack-keystone, openstack-magnum, openstack-manila, openstack-monasca-agent, openstack-neutron, o SUSE / openSUSE Security Updates · Feb 4, 2026
ELSA-2020-0580 Important: python-pillow security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Feb 25, 2020

References

https://pillow.readthedocs.io/en/stable/releasenotes/6.2.2.html
https://github.com/python-pillow/Pillow/commit/a79b65c47c7dc6fe623aadf09aa6192fc54548f3
FEDORA-2020-df444e464e vendor-advisory
USN-4272-1 vendor-advisory
RHSA-2020:0566 vendor-advisory
FEDORA-2020-5cdbb19cca vendor-advisory
DSA-4631 vendor-advisory
RHSA-2020:0580 vendor-advisory