RHSA-2020:0578: Important: python-pillow security update
The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.<br>Security Fix(es):<br><li> python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c (CVE-2020-5312)</li> <li> python-pillow: reading specially crafted image files leads to allocation of large amounts of memory and denial of service (CVE-2019-16865)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:0578?
The severity of RHSA-2020:0578 is classified as important.
How do I fix RHSA-2020:0578?
To fix RHSA-2020:0578, update the python-pillow package to version 2.0.0-20.gitd1c6db8.el7_7.
Which software does RHSA-2020:0578 affect?
RHSA-2020:0578 affects the python-pillow packages including its documentation and development versions.
What vulnerabilities does RHSA-2020:0578 address?
RHSA-2020:0578 addresses vulnerabilities related to improper memory operations in the python-pillow library.
Is there a risk if I do not update for RHSA-2020:0578?
Not updating for RHSA-2020:0578 may leave systems vulnerable to exploitation due to memory-related issues.