ALT-PU-2021-1491: package python3-module-Pillow update to version 8.1.1-alt1
Описание
This update upgrades python3-module-Pillow to version 8.1.1-alt1.
Устраненные уязвимости11
Ссылки9
GHSA-3wvg-mj6g-m9cv
https://github.com/advisories/GHSA-3wvg-mj6g-m9cvGHSA-57h3-9rgr-c24m
https://github.com/advisories/GHSA-57h3-9rgr-c24mGHSA-8xjq-8fcg-g5hw
https://github.com/advisories/GHSA-8xjq-8fcg-g5hwGHSA-95q3-8gr9-gm8w
https://github.com/advisories/GHSA-95q3-8gr9-gm8wGHSA-9hx2-hgq2-2g4f
https://github.com/advisories/GHSA-9hx2-hgq2-2g4fGHSA-f4w8-cv6p-x6r5
https://github.com/advisories/GHSA-f4w8-cv6p-x6r5GHSA-mvg9-xffr-p774
https://github.com/advisories/GHSA-mvg9-xffr-p774GHSA-p43w-g3c5-g5mq
https://github.com/advisories/GHSA-p43w-g3c5-g5mqСвязанные уязвимости
Security update for python-CairoSVG, python-Pillow
An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654.
An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654.