A vulnerability has been discovered in Pillow, which may lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-python/pillow | * | < 10.3.0 | >= 10.3.0 |
The friendly PIL fork.
A vulnerability has been discovered in Pillow. Please review the CVE identifier referenced below for details.
Please review the referenced CVE identifier for details.
There is no known workaround at this time.
All Pillow users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/pillow-10.3.0"
Multiple vulnerabilities have been discovered in Pillow, the worst of which can lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-python/pillow | * | < 10.2.0 | >= 10.2.0 |
The friendly PIL fork.
Multiple vulnerabilities have been discovered in Pillow. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Pillow users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/pillow-10.2.0"
Multiple vulnerabilities have been found in Pillow, the worst of which could result in arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-python/pillow | * | < 9.3.0 | >= 9.3.0 |
The friendly PIL fork.
Multiple vulnerabilities have been discovered in Pillow. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Pillow users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/pillow-9.3.0"
Multiple vulnerabilities have been found in Pillow, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-python/pillow | * | < 8.2.0 | >= 8.2.0 |
Python Imaging Library (fork)
Multiple vulnerabilities have been discovered in Pillow. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Pillow users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/pillow-8.2.0"
Multiple vulnerabilities have been found in Pillow, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-python/pillow | * | < 8.1.0 | >= 8.1.0 |
Python Imaging Library (fork)
Multiple vulnerabilities have been discovered in Pillow. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Pillow users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/pillow-8.1.0"
Multiple vulnerabilities have been found in Pillow, the worst of which may allow execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-python/pillow | * | < 3.4.2 | >= 3.4.2 |
The friendly PIL fork.
Multiple vulnerabilities have been discovered in Pillow. Please review the CVE identifiers referenced below for details.
A local attacker could perform symlink attacks to overwrite arbitrary files with the privileges of the user running the application, or obtain sensitive information.
A remote attackers could execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.
There is no known workaround at this time.
All Pillow users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/pillow-3.4.2"