PT-2019-20130 · Python Imaging Library · Pillow

Publicado 2019-10-04 · Atualizado 2019-10-04

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 6.2.0

Description An issue was discovered in the library when reading specially crafted invalid image files. This can cause the library to either allocate very large amounts of memory or take an extremely long period of time to process the image.

Recommendations For versions prior to 6.2.0, update to version 6.2.0 or later to resolve the issue.

Identificadores relacionados

PYSEC-2019-40

Produtos afetados

Pillow

Referências · 12

• https://access.redhat.com/errata/RHSA-2020:0578 · Nota
• https://usn.ubuntu.com/4272-1 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/LYDXD7EE4YAEVSTNIFZKNVPRVJX5ZOG3 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2020:0681 · Nota
• https://access.redhat.com/errata/RHSA-2020:0683 · Nota
• https://debian.org/security/2020/dsa-4631 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/EMJBUZQGQ2Q7HXYCQVRLU7OXNC7CAWWU · Aviso do Fabricante
• https://pillow.readthedocs.io/en/latest/releasenotes/6.2.0.html · Nota
• https://access.redhat.com/errata/RHSA-2020:0580 · Nota
• https://osv.dev/vulnerability/PYSEC-2019-40 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2020:0566 · Nota
• https://access.redhat.com/errata/RHSA-2020:0694 · Nota