RHSA-2020:3302: Important: python-pillow security update
The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.Security Fix(es): python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2 (CVE-2020-11538) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:3302?
The severity of RHSA-2020:3302 is classified as important.
What does the RHSA-2020:3302 vulnerability affect?
RHSA-2020:3302 affects the python-pillow packages and their dependencies in Red Hat systems.
How do I fix RHSA-2020:3302?
To fix RHSA-2020:3302, update the affected python-pillow packages to version 5.1.1-11.el8_0.
What type of vulnerabilities does RHSA-2020:3302 address?
RHSA-2020:3302 addresses out-of-bounds reads and writes in the parsing of image files.
Who is affected by the issues in RHSA-2020:3302?
Users and applications employing the vulnerable versions of the python-pillow package are affected by RHSA-2020:3302.