The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.
{ "binaries": [ { "binary_version": "5.1.0-1ubuntu0.7", "binary_name": "python-pil" }, { "binary_version": "5.1.0-1ubuntu0.7", "binary_name": "python-pil.imagetk" }, { "binary_version": "5.1.0-1ubuntu0.7", "binary_name": "python3-pil" }, { "binary_version": "5.1.0-1ubuntu0.7", "binary_name": "python3-pil.imagetk" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "2.3.0-1ubuntu3.4+esm3", "binary_name": "python-imaging" }, { "binary_version": "2.3.0-1ubuntu3.4+esm3", "binary_name": "python-imaging-compat" }, { "binary_version": "2.3.0-1ubuntu3.4+esm3", "binary_name": "python-imaging-sane" }, { "binary_version": "2.3.0-1ubuntu3.4+esm3", "binary_name": "python-imaging-tk" }, { "binary_version": "2.3.0-1ubuntu3.4+esm3", "binary_name": "python-pil" }, { "binary_version": "2.3.0-1ubuntu3.4+esm3", "binary_name": "python-pil.imagetk" }, { "binary_version": "2.3.0-1ubuntu3.4+esm3", "binary_name": "python-sane" }, { "binary_version": "2.3.0-1ubuntu3.4+esm3", "binary_name": "python3-imaging" }, { "binary_version": "2.3.0-1ubuntu3.4+esm3", "binary_name": "python3-imaging-sane" }, { "binary_version": "2.3.0-1ubuntu3.4+esm3", "binary_name": "python3-imaging-tk" }, { "binary_version": "2.3.0-1ubuntu3.4+esm3", "binary_name": "python3-pil" }, { "binary_version": "2.3.0-1ubuntu3.4+esm3", "binary_name": "python3-pil.imagetk" }, { "binary_version": "2.3.0-1ubuntu3.4+esm3", "binary_name": "python3-sane" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_version": "3.1.2-0ubuntu1.6+esm1", "binary_name": "python-imaging" }, { "binary_version": "3.1.2-0ubuntu1.6+esm1", "binary_name": "python-pil" }, { "binary_version": "3.1.2-0ubuntu1.6+esm1", "binary_name": "python-pil.imagetk" }, { "binary_version": "3.1.2-0ubuntu1.6+esm1", "binary_name": "python3-pil" }, { "binary_version": "3.1.2-0ubuntu1.6+esm1", "binary_name": "python3-pil.imagetk" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }