SUSE-SU-2024:1673-2: python-Pillow&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2024:1673-2 is a vulnerability in python-Pillow&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 13-06-2024
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for python-Pillow This update for python-Pillow fixes the following issues: - Fixed ImagePath.Path array handling (bsc#1194552, CVE-2022-22815, bsc#1194551, CVE-2022-22816) - Use snprintf instead of sprintf (bsc#1188574, CVE-2021-34552) - Fix Memory DOS in Icns, Ico and Blp Image Plugins. (bsc#1183110, CVE-2021-27921, bsc#1183108, CVE-2021-27922, bsc#1183107, CVE-2021-27923) - Fix OOB read in SgiRleDecode.c (bsc#1183102, CVE-2021-25293) - Use more specific regex chars to prevent ReDoS (bsc#1183101, CVE-2021-25292) - Fix negative size read in TiffDecode.c (bsc#1183105, CVE-2021-25290) - Raise ValueError if color specifier is too long (bsc#1190229, CVE-2021-23437) - Incorrect error code checking in TiffDecode.c (bsc#1183103, CVE-2021-25289) - OOB Write in TiffDecode.c (bsc#1180833, CVE-2020-35654)

No weakness data has been published for this record.