ID de Prueba:	1.3.6.1.4.1.25623.1.0.856135
Categoría:	openSUSE Local Security Checks
Título:	openSUSE Security Advisory (SUSE-SU-2024:1607-1)
Resumen:	The remote host is missing an update for the 'python-Pillow' package(s) announced via the SUSE-SU-2024:1607-1 advisory.
Descripción:	Summary: The remote host is missing an update for the 'python-Pillow' package(s) announced via the SUSE-SU-2024:1607-1 advisory. Vulnerability Insight: This update for python-Pillow fixes the following issues: - CVE-2021-25287: out-of-bounds read in J2kDecode in j2ku_graya_la (bsc#1185805) - CVE-2021-25288: out-of-bounds read in J2kDecode in j2ku_gray_i (bsc#1185803) - CVE-2021-28675: DoS in PsdImagePlugin (bsc#1185804) - CVE-2021-28676: infinite loop in FliDecode.c can lead to DoS (bsc#1185786) - CVE-2021-28677: DoS in the open phase via a malicious EPS file (bsc#1185785) - CVE-2021-28678: improper check in BlpImagePlugin can lead to DoS (bsc#1185784) Affected Software/OS: 'python-Pillow' package(s) on openSUSE Leap 15.5. Solution: Please install the updated package(s). CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2021-25287 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQHA5HAIBOYI3R6HDWCLAGFTIQP767FL/ https://security.gentoo.org/glsa/202107-33 https://github.com/python-pillow/Pillow/pull/5377#issuecomment-833821470 https://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-25287-cve-2021-25288-fix-oob-read-in-jpeg2kdecode Common Vulnerability Exposure (CVE) ID: CVE-2021-25288 Common Vulnerability Exposure (CVE) ID: CVE-2021-28675 https://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-28675-fix-dos-in-psdimageplugin Common Vulnerability Exposure (CVE) ID: CVE-2021-28676 https://github.com/python-pillow/Pillow/commit/bb6c11fb889e6c11b0ee122b828132ee763b5856 https://github.com/python-pillow/Pillow/pull/5377 https://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-28676-fix-fli-dos https://lists.debian.org/debian-lts-announce/2021/07/msg00018.html Common Vulnerability Exposure (CVE) ID: CVE-2021-28677 https://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-28677-fix-eps-dos-on-open Common Vulnerability Exposure (CVE) ID: CVE-2021-28678 https://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-28678-fix-blp-dos
Copyright	Copyright (C) 2024 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.