Lucene search
OracleLinuxELSA-2020-0580HistoryFeb 25, 2020 - 12:00 a.m.
python-pillow security update
2020-02-2500:00:00
linux.oracle.com
61
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
[5.1.1-10]
- Bump and rebuild for gating to deliver CVE fixes
Resolves: rhbz#1789535
[5.1.1-9] - Fix for CVE-2020-5311 - out-of-bounds write in expandrow
Resolves: rhbz#1789535
[5.1.1-8] - Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 8 | src | python-pillow | < 5.1.1-10.el8_1 | python-pillow-5.1.1-10.el8_1.src.rpm |
| oracle linux | 8 | aarch64 | python3-pillow | < 5.1.1-10.el8_1 | python3-pillow-5.1.1-10.el8_1.aarch64.rpm |
| oracle linux | 8 | src | python-pillow | < 5.1.1-10.el8_1 | python-pillow-5.1.1-10.el8_1.src.rpm |
| oracle linux | 8 | x86_64 | python3-pillow | < 5.1.1-10.el8_1 | python3-pillow-5.1.1-10.el8_1.x86_64.rpm |
Related
nessus
nessus
RHEL 8 : python-pillow (RHSA-2020:0580)
2020-02-25 00:00:00
CentOS 8 : python-pillow (CESA-2020:0580)
2021-02-01 00:00:00
Oracle Linux 8 : python-pillow (ELSA-2020-0580)
2020-02-26 00:00:00
redhat
redhat
(RHSA-2020:0566) Important: python-pillow security update
2020-02-20 21:57:19
(RHSA-2020:0580) Important: python-pillow security update
2020-02-24 12:25:31
(RHSA-2020:0578) Important: python-pillow security update
2020-02-24 12:10:47
oraclelinux
oraclelinux
python-imaging security update
2020-03-19 00:00:00
python-pillow security update
2020-02-25 00:00:00
python-pillow security update
2020-10-06 00:00:00
amazon
amazon
Important: python-pillow
2020-04-20 20:47:00
fedora
fedora
[SECURITY] Fedora 30 Update: python-pillow-5.4.1-4.fc30
2020-02-22 01:16:45
[SECURITY] Fedora 31 Update: python-pillow-6.2.2-1.fc31
2020-01-31 02:02:49
[SECURITY] Fedora 30 Update: python-pillow-5.4.1-3.fc30
2019-12-05 01:12:52
openvas
openvas
CentOS: Security Advisory for python-pillow (CESA-2020:0578)
2020-02-27 00:00:00
Fedora: Security Advisory for python-pillow (FEDORA-2020-df444e464e)
2020-01-31 00:00:00
Mageia: Security Advisory (MGASA-2020-0088)
2022-01-28 00:00:00
centos
centos
python security update
2020-02-26 17:13:51
python security update
2020-03-25 19:22:40
debian
debian
[SECURITY] [DSA 4631-1] pillow security update
2020-02-21 20:22:04
[SECURITY] [DLA 2057-1] pillow security update
2020-01-06 16:51:36
ubuntu
ubuntu
Pillow vulnerabilities
2020-02-06 00:00:00
mageia
mageia
Updated python-pillow packages fix security vulnerabilities
2020-02-18 17:05:53
prion
prion
Buffer overflow
2020-01-03 01:15:00
Code injection
2019-10-04 22:15:00
Buffer overflow
2020-01-03 01:15:00
debiancve
debiancve
cve
cve
ubuntucve
ubuntucve
veracode
veracode
Denial Of Service (DoS)
2020-01-06 03:50:25
Denial Of Service (DoS)
2019-10-07 02:59:57
Denial Of Service (DoS)
2020-01-06 01:17:05
osv
osv
alpinelinux
alpinelinux
CVE-2020-5311
2020-01-03 01:15:00
CVE-2020-5312
2020-01-03 01:15:00
redhatcve
redhatcve
freebsd
freebsd
Pillow -- Multiple vulnerabilities
2019-12-19 00:00:00
Pillow -- Allocation of resources without limits or throttling
2019-09-24 00:00:00
ibm
ibm
github
github
DOS attack in Pillow when processing specially crafted image files
2019-10-22 14:40:42
Buffer Copy without Checking Size of Input in Pillow
2022-05-24 17:05:33
PCX P mode buffer overflow in Pillow
2021-11-03 18:05:04
cnvd
cnvd
Pillow has an unspecified vulnerability
2019-11-20 00:00:00
f5
f5
K16213320 : Python Pillow vulnerabilities CVE-2020-5312 and CVE-2020-5313
2021-04-28 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1957
2021-07-02 18:03:40
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related for ELSA-2020-0580