Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2025-13082

Высокий

ALT-PU-2025-13082: package python3-module-Pillow update to version 11.3.0-alt2

Источник
errata.altlinux.org
Дата публикации
29.10.2025
Дата обновления
04.02.2026
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades python3-module-Pillow to version 11.3.0-alt2.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 1 года назад

Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save untrusted data as a compressed DDS image. This issue has been patched in version 11.3.0.

CVSS3: 7.1
redhat
больше 1 года назад

Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save untrusted data as a compressed DDS image. This issue has been patched in version 11.3.0.

CVSS3: 5.5
nvd
больше 1 года назад

Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save untrusted data as a compressed DDS image. This issue has been patched in version 11.3.0.

CVSS3: 5.5
debian
больше 1 года назад

Pillow is a Python imaging library. In versions 11.2.0 to before 11.3. ...

CVSS3: 7.1
github
больше 1 года назад

Pillow vulnerability can cause write buffer overflow on BCn encoding