Vulnerability   
Search   
    Search 187964 CVE descriptions
and 85075 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.883206
Category:CentOS Local Security Checks
Title:CentOS: Security Advisory for python-imaging (CESA-2020:0898)
Summary:The remote host is missing an update for the 'python-imaging'; package(s) announced via the CESA-2020:0898 advisory.
Description:Summary:
The remote host is missing an update for the 'python-imaging'
package(s) announced via the CESA-2020:0898 advisory.

Vulnerability Insight:
The Python Imaging Library (PIL) adds image processing capabilities to your
Python interpreter. This library provides extensive file format support, an
efficient internal representation, and powerful image processing
capabilities.

Security Fix(es):

* python-pillow: improperly restricted operations on memory buffer in
libImaging/PcxDecode.c (CVE-2020-5312)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Affected Software/OS:
'python-imaging' package(s) on CentOS 6.

Solution:
Please install the updated package(s).

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2020-5312
Debian Security Information: DSA-4631 (Google Search)
https://www.debian.org/security/2020/dsa-4631
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3DUMIBUYGJRAVJCTFUWBRLVQKOUTVX5P/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MMU3WT2X64GS5WHDPKKC2WZA7UIIQ3A/
https://github.com/python-pillow/Pillow/commit/93b22b846e0269ee9594ff71a72bec02d2bea8fd
https://pillow.readthedocs.io/en/stable/releasenotes/6.2.2.html
RedHat Security Advisories: RHSA-2020:0566
https://access.redhat.com/errata/RHSA-2020:0566
RedHat Security Advisories: RHSA-2020:0578
https://access.redhat.com/errata/RHSA-2020:0578
RedHat Security Advisories: RHSA-2020:0580
https://access.redhat.com/errata/RHSA-2020:0580
RedHat Security Advisories: RHSA-2020:0681
https://access.redhat.com/errata/RHSA-2020:0681
RedHat Security Advisories: RHSA-2020:0683
https://access.redhat.com/errata/RHSA-2020:0683
RedHat Security Advisories: RHSA-2020:0694
https://access.redhat.com/errata/RHSA-2020:0694
https://usn.ubuntu.com/4272-1/
CopyrightCopyright (C) 2020 Greenbone Networks GmbH

This is only one of 85075 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2020 E-Soft Inc. All rights reserved.