CVE-2024-28219
Publication date 3 April 2024
Last updated 24 July 2024
Ubuntu priority
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.
Status
Package | Ubuntu Release | Status |
---|---|---|
pillow | 24.04 LTS noble |
Fixed 10.2.0-1ubuntu1
|
22.04 LTS jammy |
Fixed 9.0.1-1ubuntu0.3
|
|
20.04 LTS focal |
Fixed 7.0.0-4ubuntu0.9
|
|
18.04 LTS bionic |
Fixed 5.1.0-1ubuntu0.8+esm1
|
|
16.04 LTS xenial |
Fixed 3.1.2-0ubuntu1.6+esm2
|
|
14.04 LTS trusty |
Fixed 2.3.0-1ubuntu3.4+esm4
|
|
pillow-python2 | 24.04 LTS noble | Not in release |
22.04 LTS jammy | Not in release | |
20.04 LTS focal |
Fixed 6.2.1-3ubuntu0.1~esm2
|
Get expanded security coverage with Ubuntu Pro
Reduce your average CVE exposure time from 98 days to 1 day with expanded CVE patching, ten-years security maintenance and optional support for the full stack of open-source applications. Free for personal use.
Get Ubuntu ProReferences
Related Ubuntu Security Notices (USN)
- USN-6744-1
- Pillow vulnerability
- 22 April 2024
- USN-6744-2
- Pillow vulnerability
- 22 April 2024
- USN-6744-3
- Pillow vulnerability
- 29 April 2024