RLSA-2024:3005
Moderate: python-pillow security update
Topic
An update is available for python-pillow.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
Description
The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.
Security Fix(es):
* python-pillow: uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument (CVE-2023-44271)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.
Rocky Linux 8
SRPMs
- python-pillow-0:5.1.1-20.el8.src.rpm
RPMs
- python3-pillow-0:5.1.1-20.el8.aarch64.rpm
- python3-pillow-0:5.1.1-20.el8.i686.rpm
- python3-pillow-0:5.1.1-20.el8.x86_64.rpm
- python3-pillow-debuginfo-0:5.1.1-20.el8.aarch64.rpm
- python3-pillow-debuginfo-0:5.1.1-20.el8.i686.rpm
- python3-pillow-debuginfo-0:5.1.1-20.el8.x86_64.rpm
- python3-pillow-devel-0:5.1.1-20.el8.aarch64.rpm
- python3-pillow-devel-0:5.1.1-20.el8.i686.rpm
- python3-pillow-devel-0:5.1.1-20.el8.x86_64.rpm
- python3-pillow-doc-0:5.1.1-20.el8.noarch.rpm
- python3-pillow-tk-0:5.1.1-20.el8.aarch64.rpm
- python3-pillow-tk-0:5.1.1-20.el8.x86_64.rpm
- python3-pillow-tk-debuginfo-0:5.1.1-20.el8.aarch64.rpm
- python3-pillow-tk-debuginfo-0:5.1.1-20.el8.x86_64.rpm
- python-pillow-debuginfo-0:5.1.1-20.el8.aarch64.rpm
- python-pillow-debuginfo-0:5.1.1-20.el8.i686.rpm
- python-pillow-debuginfo-0:5.1.1-20.el8.x86_64.rpm
- python-pillow-debugsource-0:5.1.1-20.el8.aarch64.rpm
- python-pillow-debugsource-0:5.1.1-20.el8.i686.rpm
- python-pillow-debugsource-0:5.1.1-20.el8.x86_64.rpm
Issued: 6/14/2024
Type: Security
Severity: Moderate
Affected Product
- Rocky Linux 8
Fixes
References
- No references