RHSA-2024:0345: Moderate: python-pillow security update
Moderate: python-pillow security update
Other sources
The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.Security Fix(es): python-pillow: uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument (CVE-2023-44271) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:0345?
The severity of RHSA-2024:0345 is classified as Moderate.
How do I fix RHSA-2024:0345?
To fix RHSA-2024:0345, update the affected python-pillow packages to version 2.0.0-24.gitd1c6db8.el7_9.
Which systems are affected by RHSA-2024:0345?
RHSA-2024:0345 affects Red Hat Enterprise Linux for Power, little endian systems using python-pillow.
What types of vulnerabilities does RHSA-2024:0345 address?
RHSA-2024:0345 addresses security vulnerabilities found in the python-pillow image processing library.
Are other packages affected besides python-pillow in RHSA-2024:0345?
Yes, related packages such as python-pillow-debuginfo, python-pillow-devel, python-pillow-doc, and others are also affected.