Astra Linux - vulnerability in pillow

An issue was found in Pillow prior to version 8.2.0. For BLP data, BlpImagePlugin failed to properly verify that reads after jumping to file offsets returned valid data. This could result in a denial-of-service condition, where the decoder is repeatedly executed on empty data...