ROS-20220128-02

A vulnerability in the Python Pillow image library is related to buffer re-reading during the
ImagePath.Path initialization in the path_getbbox() function in path.c. Exploitation of the vulnerability could allow
an attacker acting remotely to pass a specially crafted file to a vulnerable library and read the
the contents of memory on the system

The vulnerability in the Python Pillow image library is related to an input validation error in the processing of
directory traversal sequences in path_getbbox() in path.c. Exploitation of the vulnerability could
allow an attacker acting remotely to send a specially crafted HTTP request and read
arbitrary files on the system

A vulnerability in the Python Pillow image library is related to the misuse of the function
PIL.ImageMath.eval() for arbitrary expressions. Exploitation of the vulnerability could allow an attacker,
acting remotely, to pass a specially crafted file to the library and execute arbitrary code on the
system