ELSA-2020-0580

Опубликовано: 25 фев. 2020

Источник: oracle-oval

Платформа: Oracle Linux 8

Описание

ELSA-2020-0580: python-pillow security update (IMPORTANT)

[5.1.1-10]

Bump and rebuild for gating to deliver CVE fixes Resolves: rhbz#1789535

[5.1.1-9]

Fix for CVE-2020-5311 - out-of-bounds write in expandrow Resolves: rhbz#1789535

[5.1.1-8]

Combined fixes for CVE-2020-5312 and CVE-2019-16865 Resolves: rhbz#1789533 Resolves: rhbz#1774066

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

python3-pillow

5.1.1-10.el8_1

Oracle Linux x86_64

python3-pillow

5.1.1-10.el8_1

Связанные CVE

CVE-2020-5312

CVE-2019-16865

CVE-2020-5311

Ссылки на источники

Связанные уязвимости

ELSA-2020-0578

oracle-oval

почти 6 лет назад

ELSA-2020-0578: python-pillow security update (IMPORTANT)

CVE-2020-5312

CVSS3: 9.8

ubuntu

около 6 лет назад

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.

CVE-2020-5312

CVSS3: 9.8

redhat

около 6 лет назад

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.

CVE-2020-5312

CVSS3: 9.8

nvd

около 6 лет назад

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.

CVE-2020-5312

CVSS3: 9.8

debian

около 6 лет назад

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer ...