ALSA-2022:0643

ALSA-2022:0643 · Important: python-pillow security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fix(es): * python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions (CVE-2022-22817) * python-pillow: buffer over-read during initialization of ImagePath.Path in path_getbbox() in path.c (CVE-2022-22816) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fix available

Published

2022-02-22T17:25:31Z

Updated

2026-10-29T11:12:07.121670360Z

Stack: system

Check your server →