ALT-PU-2015-2857

Высокий

ALT-PU-2015-2857: package python-module-Pillow update to version 2.7.0-alt1

Источник

errata.altlinux.org

Дата публикации

02.01.2015

Дата обновления

02.01.2015

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades python-module-Pillow to version 2.7.0-alt1.

Устраненные уязвимости3

CVE-2014-3589

Средний 5

Дата публикации: 25.08.2014

CWE-20

PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.

CVSS 2.0

Средний 5

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Ссылки

CVE-2014-3589 https://nvd.nist.gov/vuln/detail/CVE-2014-3589

Ссылки4

ALT-PU-2015-2857 https://errata.altlinux.org/ALT-PU-2015-2857

GHSA-cfmr-38g9-f2h7

https://github.com/advisories/GHSA-cfmr-38g9-f2h7

GHSA-h5rf-vgqx-wjv2

https://github.com/advisories/GHSA-h5rf-vgqx-wjv2

GHSA-j6f7-g425-4gmx

https://github.com/advisories/GHSA-j6f7-g425-4gmx

Связанные уязвимости

CVE-2014-3589

ubuntu

около 12 лет назад

PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.

CVE-2014-3589

redhat

около 12 лет назад

PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.

CVE-2014-3589

nvd

около 12 лет назад

PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.

CVE-2014-3589

debian

около 12 лет назад

PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow befo ...

GHSA-cfmr-38g9-f2h7

CVSS3: 7.5

github

больше 4 лет назад

Pillow denial of service via Crafted Block Size