ALSA-2022:0643

Source

https://errata.almalinux.org/8/ALSA-2022-0643.html

Import Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2022:0643.json

Related

• CVE-2022-22816
• CVE-2022-22817

Published

2022-02-22T17:25:31Z

Modified

2022-02-23T13:26:35Z

Details

The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.

Security Fix(es):

• python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions (CVE-2022-22817)

• python-pillow: buffer over-read during initialization of ImagePath.Path in path_getbbox() in path.c (CVE-2022-22816)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

• https://errata.almalinux.org/8/ALSA-2022-0643.html
• https://vulners.com/cve/CVE-2022-22815
• https://vulners.com/cve/CVE-2022-22816
• https://vulners.com/cve/CVE-2022-22817