Synopsis: Important: python-pillow security update
Advisory ID: SLSA-2022:0609-1
Issue Date: 2022-02-23
CVE Numbers: CVE-2022-22816
CVE-2022-22817
—
Security Fix(es):
* python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary
expressions (CVE-2022-22817)
* python-pillow: buffer over-read during initialization of ImagePath.Path
in path_getbbox() in path.c (CVE-2022-22816)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
—
SL7
x86_64
python-pillow-2.0.0-23.gitd1c6db8.el7_9.x86_64.rpm
python-pillow-debuginfo-2.0.0-23.gitd1c6db8.el7_9.x86_64.rpm
python-pillow-2.0.0-23.gitd1c6db8.el7_9.i686.rpm
python-pillow-debuginfo-2.0.0-23.gitd1c6db8.el7_9.i686.rpm
python-pillow-devel-2.0.0-23.gitd1c6db8.el7_9.i686.rpm
python-pillow-devel-2.0.0-23.gitd1c6db8.el7_9.x86_64.rpm
python-pillow-doc-2.0.0-23.gitd1c6db8.el7_9.x86_64.rpm
python-pillow-qt-2.0.0-23.gitd1c6db8.el7_9.x86_64.rpm
python-pillow-sane-2.0.0-23.gitd1c6db8.el7_9.x86_64.rpm
python-pillow-tk-2.0.0-23.gitd1c6db8.el7_9.x86_64.rpm
– Scientific Linux Development Team
