Lucene search
Gentoo FoundationMGASA-2022-0166HistoryMay 12, 2022 - 1:24 p.m.
Updated python-pillow packages fix security vulnerability
2022-05-1213:24:45
Gentoo Foundation
advisories.mageia.org
34
0.003 Low
EPSS
Percentile
68.6%
path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. (CVE-2022-22815) path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path. (CVE-2022-22816) PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions (CVE-2022-22817) Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled. (CVE-2022-24303)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | python-pillow | < 9.1.0-1 | python-pillow-9.1.0-1.mga8 |
References
bugs.mageia.org/show_bug.cgi?id=29887
lists.fedoraproject.org/archives/list/[email protected]/thread/CK3IGXU77EQTXZAYI2PTIAI4XLFS7AFP/
lists.fedoraproject.org/archives/list/[email protected]/thread/JR2LTB6KTUEU7YVPJ5MHA2GHOIL2JQQE/
ubuntu.com/security/notices/USN-5227-1
www.debian.org/security/2022/dsa-5053
Related
nessus
nessus
EulerOS Virtualization 2.10.0 : python-pillow (EulerOS-SA-2022-2037)
2022-07-14 00:00:00
EulerOS Virtualization 2.10.1 : python-pillow (EulerOS-SA-2022-2065)
2022-07-14 00:00:00
EulerOS Virtualization 3.0.2.6 : python-pillow (EulerOS-SA-2023-1075)
2023-01-06 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2022-2065)
2022-07-14 00:00:00
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2022-2037)
2022-07-14 00:00:00
Mageia: Security Advisory (MGASA-2022-0166)
2022-05-19 00:00:00
rocky
rocky
python-pillow security update
2022-02-22 17:25:31
fedora
fedora
[SECURITY] Fedora 34 Update: mingw-python-pillow-8.1.2-5.fc34
2022-02-04 01:23:01
[SECURITY] Fedora 35 Update: python-pillow-8.3.2-2.fc35
2022-02-04 01:23:32
[SECURITY] Fedora 34 Update: python-pillow-8.1.2-6.fc34
2022-02-04 01:23:01
osv
osv
Important: python-pillow security update
2022-02-22 17:25:31
Important: python-pillow security update
2022-02-22 17:25:31
pillow vulnerability
2022-10-24 12:56:27
redos
redos
ROS-20220128-02
2022-01-28 00:00:00
debian
debian
[SECURITY] [DSA 5053-1] pillow security update
2022-01-21 19:25:46
amazon
amazon
Important: python-pillow
2022-04-25 22:58:00
Important: python-pillow
2022-04-25 22:58:00
Important: python-pillow
2024-02-01 19:57:00
redhat
redhat
(RHSA-2022:0643) Important: python-pillow security update
2022-02-22 17:25:31
(RHSA-2022:0667) Important: python-pillow security update
2022-02-24 09:24:19
(RHSA-2022:0669) Important: python-pillow security update
2022-02-24 09:24:23
almalinux
almalinux
Important: python-pillow security update
2022-02-22 17:25:31
centos
centos
python security update
2022-02-25 15:38:05
oraclelinux
oraclelinux
python-pillow security update
2022-02-23 00:00:00
python-pillow security update
2022-02-23 00:00:00
ubuntu
ubuntu
Pillow vulnerability
2022-10-24 00:00:00
Pillow vulnerabilities
2022-01-17 00:00:00
Pillow vulnerabilities
2022-12-14 00:00:00
f5
f5
K23413369 : Python-Pillow vulnerabilities CVE-2022-22816, CVE-2022-22817
2022-05-06 00:00:00
K000138866 : Python Pillow vulnerability CVE-2023-50447
2024-03-09 00:00:00
gentoo
gentoo
Pillow: Multiple Vulnerabilities
2022-11-22 00:00:00
prion
prion
Code injection
2022-03-28 02:15:00
Design/Logic Flaw
2022-01-10 14:12:00
Design/Logic Flaw
2022-01-10 14:12:00
cvelist
cvelist
veracode
veracode
Denial Of Service (DoS)
2022-02-28 15:19:12
Information Dislcosure
2022-01-11 08:52:21
Out Of Bound Reads
2022-01-11 13:16:07
github
github
Path traversal in Pillow
2022-03-11 23:10:32
Improper Initialization in Pillow
2022-01-12 20:07:43
Out-of-bounds Read in Pillow
2022-01-12 20:07:41
ubuntucve
ubuntucve
debiancve
debiancve
cve
cve
redhatcve
redhatcve
alpinelinux
alpinelinux
cnvd
cnvd
Pillow out-of-bounds read vulnerability (CNVD-2022-05433)
2022-01-14 00:00:00
Pillow input validation error vulnerability
2022-01-14 00:00:00
mageia
mageia
Updated python-pillow packages fix a security vulnerability
2024-01-30 23:57:03