RHSA-2022:0643
Advisory lineage Upstream: 3 Downstream: 0
Published: 14 Sept 2024, 01:25
Last modified:21 Mar 2026, 10:30
Vulnerability Summary
Overall Risk (default)
high
70/100 CVSS Score
9.8 CRITICAL
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
14 Sept 2024, 01:25
Published
Vulnerability first disclosed
21 Mar 2026, 10:30
Last Modified
Vulnerability information updated
Description
Red Hat Security Advisory: python-pillow security update
CVSS Metrics
- v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Systems
- redhat•python-pillow
< 0:5.1.1-18.el8_5 | < 0:5.1.1-18.el8_5
- redhat•python-pillow-debuginfo
< 0:5.1.1-18.el8_5 | < 0:5.1.1-18.el8_5
- redhat•python-pillow-debugsource
< 0:5.1.1-18.el8_5 | < 0:5.1.1-18.el8_5
- redhat•python3-pillow
< 0:5.1.1-18.el8_5 | < 0:5.1.1-18.el8_5
- redhat•python3-pillow-debuginfo
< 0:5.1.1-18.el8_5 | < 0:5.1.1-18.el8_5
- redhat•python3-pillow-devel
< 0:5.1.1-18.el8_5 | < 0:5.1.1-18.el8_5
- redhat•python3-pillow-doc
< 0:5.1.1-18.el8_5 | < 0:5.1.1-18.el8_5
- redhat•python3-pillow-tk
< 0:5.1.1-18.el8_5 | < 0:5.1.1-18.el8_5
- redhat•python3-pillow-tk-debuginfo
< 0:5.1.1-18.el8_5 | < 0:5.1.1-18.el8_5
References (16)
- https://access.redhat.com/errata/RHSA-2022:0643
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2042522
- https://bugzilla.redhat.com/show_bug.cgi?id=2042527
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0643.json
- https://access.redhat.com/security/cve/CVE-2022-22815
- https://bugzilla.redhat.com/show_bug.cgi?id=2042511
- https://www.cve.org/CVERecord?id=CVE-2022-22815
- https://nvd.nist.gov/vuln/detail/CVE-2022-22815
- https://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#fixed-imagepath-path-array-handling
- https://access.redhat.com/security/cve/CVE-2022-22816
- https://www.cve.org/CVERecord?id=CVE-2022-22816
- https://nvd.nist.gov/vuln/detail/CVE-2022-22816
- https://access.redhat.com/security/cve/CVE-2022-22817
- https://www.cve.org/CVERecord?id=CVE-2022-22817
- https://nvd.nist.gov/vuln/detail/CVE-2022-22817