Missing security update for python-pillow-2.0.0-14.gitd1c6db8.fc1
Reporter | Title | Published | Views | Family All 61 |
---|---|---|---|---|
![]() | [SECURITY] [DSA 3009-1] python-imaging security update | 21 Aug 201418:09 | – | debian |
![]() | [DLA 41-1] python-imaging security update | 24 Aug 201416:38 | – | debian |
![]() | Pillow denial of service via Crafted Block Size | 14 May 202202:05 | – | github |
![]() | Debian Security Advisory DSA 3009-1 (python-imaging - security update) | 21 Aug 201400:00 | – | openvas |
![]() | Debian: Security Advisory (DSA-3009-1) | 20 Aug 201400:00 | – | openvas |
![]() | Debian: Security Advisory (DLA-41-1) | 8 Mar 202300:00 | – | openvas |
![]() | Mageia: Security Advisory (MGASA-2014-0343) | 28 Jan 202200:00 | – | openvas |
![]() | Fedora Update for python-pillow FEDORA-2014-9536 | 27 Aug 201400:00 | – | openvas |
![]() | Fedora Update for python-pillow FEDORA-2014-9540 | 27 Aug 201400:00 | – | openvas |
![]() | Ubuntu: Security Advisory (USN-3080-1) | 26 Oct 201800:00 | – | openvas |
Source | Link |
---|---|
nessus | www.nessus.org/u |
cve | www.cve.mitre.org/cgi-bin/cvename.cgi |
bugzilla | www.bugzilla.redhat.com/show_bug.cgi |
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory 2014-9536.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(77395);
script_version("1.5");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");
script_cve_id("CVE-2014-3589");
script_bugtraq_id(69352);
script_xref(name:"FEDORA", value:"2014-9536");
script_name(english:"Fedora 19 : python-pillow-2.0.0-14.gitd1c6db8.fc19 (2014-9536)");
script_summary(english:"Checks rpm output for the updated package.");
script_set_attribute(
attribute:"synopsis",
value:"The remote Fedora host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
"Security fix for CVE-2014-3589
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.redhat.com/show_bug.cgi?id=1130711"
);
# https://lists.fedoraproject.org/pipermail/package-announce/2014-August/137018.html
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?440bd8b9"
);
script_set_attribute(
attribute:"solution",
value:"Update the affected python-pillow package."
);
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:python-pillow");
script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:19");
script_set_attribute(attribute:"patch_publication_date", value:"2014/08/19");
script_set_attribute(attribute:"plugin_publication_date", value:"2014/08/27");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2014-2021 Tenable Network Security, Inc.");
script_family(english:"Fedora Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^19([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 19.x", "Fedora " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
flag = 0;
if (rpm_check(release:"FC19", reference:"python-pillow-2.0.0-14.gitd1c6db8.fc19")) flag++;
if (flag)
{
if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
else security_warning(0);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "python-pillow");
}
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo