RHSA-2020:3299: Important: python-pillow security update
The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.<br>Security Fix(es):<br><li> python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2 (CVE-2020-11538)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:3299?
The severity of RHSA-2020:3299 is classified as moderate, addressing out-of-bounds reads and writes in the python-pillow library.
How do I fix RHSA-2020:3299?
To fix RHSA-2020:3299, you need to update your python-pillow packages to version 5.1.1-11.el8_1 or later.
Which packages are affected by RHSA-2020:3299?
RHSA-2020:3299 affects the python-pillow, python3-pillow, and their respective debuginfo and debugsource packages.
What potential impact does RHSA-2020:3299 have?
The out-of-bounds vulnerabilities in RHSA-2020:3299 could lead to application crashes or arbitrary code execution.
Is RHSA-2020:3299 related to Python image processing?
Yes, RHSA-2020:3299 pertains to vulnerabilities found in the python-pillow package, which is used for image processing in Python.