You are here
Home > Preporuke > Sigurnosni nedostaci programskog paketa python-pillow

Sigurnosni nedostaci programskog paketa python-pillow

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2016-4b06195979
2016-02-09 16:33:27.876837
——————————————————————————–

Name : python-pillow
Product : Fedora 23
Version : 3.0.0
Release : 2.fc23
URL : http://python-pillow.github.io/
Summary : Python image processing library
Description :
Python image processing library, fork of the Python Imaging Library (PIL)

This library provides extensive file format support, an efficient
internal representation, and powerful image processing capabilities.

There are four subpackages: tk (tk interface), qt (PIL image wrapper for Qt),
devel (development) and doc (documentation).

——————————————————————————–
Update Information:

This update fixes for security vulnerabilities, including CVE-2016-0775,
CVE-2016-0740.
——————————————————————————–
References:

[ 1 ] Bug #1305004 – python-pillow: Buffer overflow in PcdDecode.c
https://bugzilla.redhat.com/show_bug.cgi?id=1305004
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update python-pillow’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

AutorMarko Stanec
Cert idNCERT-REF-2016-02-0005-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostatak programskog paketa python-django

Otkriven je sigurnosni nedostatak u programskom paketu python-django za operacijski sustav Red Hat. Otkriveni nedostatak potencijalnim napadačima omogućuje otkrivanje osjetljivih...

Close