[ALSA-2022:0643] Important: python-pillow security update
Type:
security
Severity:
important
Release date:
2022-02-23
Description:
The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fix(es): * python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions (CVE-2022-22817) * python-pillow: buffer over-read during initialization of ImagePath.Path in path_getbbox() in path.c (CVE-2022-22816) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 python3-pillow-tk-5.1.1-18.el8_5.aarch64.rpm 1d6a2627dcccb3628b027f7b5abc0d7b8920f705d9fd5ae5f9fd1c000a3246b1
aarch64 python3-pillow-5.1.1-18.el8_5.aarch64.rpm 9412c36401f155e24a2ed98ce2a799a859b2fa687db657ecfb742bdd12c2221c
aarch64 python3-pillow-devel-5.1.1-18.el8_5.aarch64.rpm fca3f1ed8832dc1865388f1847a18190d36c5ac8326b7f9c0cc46a122b88cfb3
i686 python3-pillow-devel-5.1.1-18.el8_5.i686.rpm 2adb3d2df8b01316fe2e238ee660ec21eeefe5f0f5367a29d5b07cdf58a84577
i686 python3-pillow-5.1.1-18.el8_5.i686.rpm 94c7028905416c8b496c79a3661ef6a5e2d34e0816f0d8dcd8c4ec1782afd4cf
noarch python3-pillow-doc-5.1.1-18.el8_5.noarch.rpm 77fcdc9fd93c5f375179289519ef43064b05c10f2143c390fd08af864328395b
ppc64le python3-pillow-5.1.1-18.el8_5.ppc64le.rpm 276f2bba933852a829a7e91f695748a45e2ad5bf96febc76f4b1e2a33b98aaa7
ppc64le python3-pillow-devel-5.1.1-18.el8_5.ppc64le.rpm b40f3d3038d5aebb8d4ba9ce53cd50024a10d832d68ebc072ff07a7dd70e29db
ppc64le python3-pillow-tk-5.1.1-18.el8_5.ppc64le.rpm fd7dfa2911394c835cc3c01f5e516d59e4ffc8bf3a1416bb2b052079326a7657
x86_64 python3-pillow-tk-5.1.1-18.el8_5.x86_64.rpm 233441ce841bb155e018796a576fcec001cc071aa3e071bceceae2d6f182c713
x86_64 python3-pillow-5.1.1-18.el8_5.x86_64.rpm 309aa9dd847a8b2692283aa8423f03e48f7f6ed129273b3bb96c70bbc589c951
x86_64 python3-pillow-devel-5.1.1-18.el8_5.x86_64.rpm 5dc75f22099237bab4b886a214faaa312c599d5df035985244992fd3d5ac6a70
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.