Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2024-0345

Опубликовано: 23 янв. 2024
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2024-0345: python-pillow security update (MODERATE)

[2.0.0-24gitd1c6db8]

  • Security fix for CVE-2023-44271 Resolves: RHEL-15459

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

python-pillow

2.0.0-24.gitd1c6db8.el7_9

python-pillow-devel

2.0.0-24.gitd1c6db8.el7_9

python-pillow-doc

2.0.0-24.gitd1c6db8.el7_9

python-pillow-qt

2.0.0-24.gitd1c6db8.el7_9

python-pillow-sane

2.0.0-24.gitd1c6db8.el7_9

python-pillow-tk

2.0.0-24.gitd1c6db8.el7_9

Oracle Linux x86_64

python-pillow

2.0.0-24.gitd1c6db8.el7_9

python-pillow-devel

2.0.0-24.gitd1c6db8.el7_9

python-pillow-doc

2.0.0-24.gitd1c6db8.el7_9

python-pillow-qt

2.0.0-24.gitd1c6db8.el7_9

python-pillow-sane

2.0.0-24.gitd1c6db8.el7_9

python-pillow-tk

2.0.0-24.gitd1c6db8.el7_9

Связанные CVE

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 1 года назад

An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument.

CVSS3: 7.5
redhat
почти 2 года назад

An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument.

CVSS3: 7.5
nvd
больше 1 года назад

An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument.

CVSS3: 7.5
debian
больше 1 года назад

An issue was discovered in Pillow before 10.0.0. It is a Denial of Ser ...

suse-cvrf
больше 1 года назад

Security update for python-Pillow