ROOT-APP-PYPI-CVE-2021-25293 CVE-2021-25293 in pillow - Patched by Root

Root has patched CVE-2021-25293 in the pillow package for Root:PyPI. Multiple fixed versions available...

TencentOS Server 4: python-pillow (TSSA-2024:0923)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0923 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2021-25293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c. CVE-2021-25293 Note that Nessus relies on the presence of the...

SUSE SLES15 Security Update : python-Pillow (SUSE-SU-2024:1673-2)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1673-2 advisory. - Fixed ImagePath.Path array handling bsc1194552, CVE-2022-22815, bsc1194551, CVE-2022-22816 - Use snprintf instead of sprintf bsc1188574,...

openSUSE Security Advisory (SUSE-SU-2024:1673-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2023 : python3-pillow, python3-pillow-devel, python3-pillow-tk (ALAS2023-2023-146)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-146 advisory. An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size. CVE-2021-25290 An issue was discovered in Pillow before 8.1.1. In...

Important: python-pillow

Issue Overview: An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size. CVE-2021-25290 An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries...

SUSE CVE-2021-25293

An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c...

RLSA-2021:4149 Moderate: python-pillow security update

The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fixes: python-pillow: Out-of-bounds read in J2K image reader CVE-2021-25287 python-pillow:...

python-pillow security update

An update is available for python-pillow. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The python-pillow packages contain a Python image processing library th...

Moderate: python-pillow security update

The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fixes: python-pillow: Out-of-bounds read in J2K image reader CVE-2021-25287 python-pillow:...

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-2540)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-2564)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2xh-leet (0.1.2), 9gag-scraper (>=0.0.6, <=0.0.7) +994 more potentially affected by CVE-2021-25293 via pillow (>=4.3.0, <=8.1.0)

pillow PYPI version =4.3.0, =0.0.6, =1.0.2, =2.0.0a0, =0.1.0a7, =0.1.1, =2.0.0a0, =0.4.0, =0.1.7, =0.1.1, =0.57.1b6141, =0.61.8b52 and more Source cves: CVE-2021-25293 Source advisory: OSV:GHSA-P43W-G3C5-G5MQ...

abracadabra (0.0.6), agilecode-test-tools (>=0.4.0, <=0.5.0) +144 more potentially affected by CVE-2021-25293 via pillow (>=8.0.0, <=8.1.0)

pillow PYPI version =8.0.0, =0.4.0, =0.1.1, =0.1.0, =1.0.0, =0.0.1a1.dev5, =0.10.0, =0.10.0, =0.1.0, =0.1.0, =0.2.2 - arcor2-execution 0.11.0 - arcor2-execution-data 0.10.0 and more Source cves: CVE-2021-25293 Source advisory: OSV:PYSEC-2021-39...

ayabinterface (0.0.8), hjun (0.2.2) +3 more potentially affected by CVE-2021-25293 via pillow (3.2.0)

pillow PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - ayabinterface 0.0.8 - hjun 0.2.2 - kniteditor =0.0.8, =0.1.17, =0.1.19 - thumpy 0.3.2 Source cves: CVE-2021-25293 Source advisory: OSV:PYSEC-2021-39...

dcicsnovault (>=2.0.0b0, <=2.0.0b11), shot-detector (0.0.4.dev41) +2 more potentially affected by CVE-2021-25293 via pillow (3.3.0)

pillow PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - dcicsnovault =2.0.0b0, =0.2.3, =0.0.1, =0.1.0 Source cves: CVE-2021-25293 Source advisory: OSV:PYSEC-2021-39...

chromewhip (>=0.2.2, <=0.2.16), cloud-volume (>=0.6.12, <=0.8.1) +11 more potentially affected by CVE-2021-25293 via pillow (4.2.1)

pillow PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - chromewhip =0.2.2, =0.6.12, =4.4.1, =0.0.1a0, =0.9.0, =0.6.19a0, =0.3.5, =0.0.3, =11.0.0, =11.2.0 Source cves: CVE-2021-25293 Source advisory:...

stoqdrivers (2.0.1) potentially affected by CVE-2021-25293 via pillow (3.1.2)

pillow PYPI version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - stoqdrivers 2.0.1 Source cves: CVE-2021-25293 Source advisory: OSV:PYSEC-2021-39...

django-oscar (>=1.1.0, <=1.1.1), django-oscar-telegram-bot (>=0.1.0, <=0.5.0) +2 more potentially affected by CVE-2021-25293 via pillow (2.7.0)

pillow PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-oscar =1.1.0, =0.1.0, =0.1.0, =0.1.1, =0.2.1 Source cves: CVE-2021-25293 Source advisory: OSV:PYSEC-2021-39...