USN-4430-1 fixed vulnerabilities in Pillow. This update provides the corresponding updates for Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that Pillow incorrectly handled certain image files. If a user or automated system were tricked into opening a specially-crafted image file, a remote attacker could possibly cause Pillow to crash, resulting in a denial of service.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "python-pil-doc", "binary_version": "7.0.0-4ubuntu0.1" }, { "binary_name": "python3-pil", "binary_version": "7.0.0-4ubuntu0.1" }, { "binary_name": "python3-pil-dbg", "binary_version": "7.0.0-4ubuntu0.1" }, { "binary_name": "python3-pil.imagetk", "binary_version": "7.0.0-4ubuntu0.1" }, { "binary_name": "python3-pil.imagetk-dbg", "binary_version": "7.0.0-4ubuntu0.1" } ] }