Important: python-pillow security update

ELSA-2020-3185: python-pillow security update (IMPORTANT)

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311.

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311.

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311.

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out- ...

libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.

libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.

libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.

libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overfl ...

Out-of-bounds read in Pillow

Out-of-bounds Read in Pillow

ELSA-2020-3887: python-pillow security update (MODERATE)

Уязвимость функции из libImaging/FliDecode.c библиотеки для работы с изображениями Pillow, связанная с чтением за допустимыми границами буфера данных, позволяющая нарушителю получить доступ к конфиденциальной информации или вызвать отказ в обслуживании