--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-87fd65eed3
2020-01-30 23:43:00.777242
--------------------------------------------------------------------------------
Name : python3-pillow
Product : Fedora EPEL 7
Version : 6.2.2
Release : 1.el7
URL :
http://python-pillow.github.io/
Summary : Python image processing library
Description :
Python image processing library, fork of the Python Imaging Library (PIL)
This library provides extensive file format support, an efficient
internal representation, and powerful image processing capabilities.
There are four subpackages: tk (tk interface), qt (PIL image wrapper for Qt),
devel (development) and doc (documentation).
--------------------------------------------------------------------------------
Update Information:
Update to 6.2.2 - See
https://pillow.readthedocs.io/en/stable/releasenotes/6.2.2.html
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 11 2020 Orion Poplawski <orion(a)nwra.com> - 6.2.2-1
- Update to 6.2.2 (Resolves CVE-2020-5313, CVE-2020-5312, CVE-2020-5311, CVE-2020-5310,
bz#1789542)
* Tue May 14 2019 Orion Poplawski <orion(a)nwra.com> - 6.0.0-2
- Require python3-qt5 instead of python3-Qt4
* Wed May 8 2019 Orion Poplawski <orion(a)nwra.com> - 6.0.0-1
- Adapt for python3 for EPEL7
* Tue Apr 2 2019 Sandro Mani <manisandro(a)gmail.com> - 6.0.0-1
- Update to 6.0.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1789532 - CVE-2020-5313 python-pillow: Buffer overflow in
libImaging/FliDecode.c
https://bugzilla.redhat.com/show_bug.cgi?id=1789532
[ 2 ] Bug #1789540 - CVE-2019-19911 python-pillow: Out of memory issue in
FpxImagePlugin.py
https://bugzilla.redhat.com/show_bug.cgi?id=1789540
[ 3 ] Bug #1789538 - CVE-2020-5310 python-pillow: Integer overflow in
libImaging/TiffDecode.c
https://bugzilla.redhat.com/show_bug.cgi?id=1789538
[ 4 ] Bug #1789533 - CVE-2020-5312 python-pillow: Buffer overflow in
libImaging/PcxDecode.c
https://bugzilla.redhat.com/show_bug.cgi?id=1789533
[ 5 ] Bug #1789535 - CVE-2020-5311 python-pillow: Buffer overflow in
libImaging/SgiRleDecode.c
https://bugzilla.redhat.com/show_bug.cgi?id=1789535
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python3-pillow' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------