RHSA-2020:0566: Important: python-pillow security update
The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.<br>Security Fix(es):<br><li> python-pillow: out-of-bounds write in expandrow in libImaging/SgiRleDecode.c (CVE-2020-5311)</li> <li> python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c (CVE-2020-5312)</li> <li> python-pillow: reading specially crafted image files leads to allocation of large amounts of memory and denial of service (CVE-2019-16865)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:0566?
The severity of RHSA-2020:0566 is moderate due to the out-of-bounds write vulnerability in python-pillow.
How do I fix RHSA-2020:0566?
To fix RHSA-2020:0566, update the python-pillow packages to version 5.1.1-10.el8_0 or later.
What platforms are affected by RHSA-2020:0566?
RHSA-2020:0566 affects Red Hat Enterprise Linux 8 with specific versions of python-pillow and related packages.
What does RHSA-2020:0566 address?
RHSA-2020:0566 addresses an out-of-bounds write vulnerability in the expandrow function in the libImage processing library.
Is there a workaround for RHSA-2020:0566?
There is no official workaround for RHSA-2020:0566, so applying the recommended update is essential.