Your submission was sent successfully! Close

USN-3229-1: Python Imaging Library vulnerabilities

13 March 2017

Several security issues were fixed in the Python Imaging Library.

Releases

Packages

Details

It was discovered that the Python Imaging Library incorrectly handled
certain compressed text chunks in PNG images. A remote attacker could
possibly use this issue to cause the Python Imaging Library to crash,
resulting in a denial of service. (CVE-2014-9601)

Cris Neckar discovered that the Python Imaging Library incorrectly handled
certain malformed images. A remote attacker could use this issue to cause
the Python Imaging Library to crash, resulting in a denial of service, or
possibly obtain sensitive information. (CVE-2016-9189)

Cris Neckar discovered that the Python Imaging Library incorrectly handled
certain malformed images. A remote attacker could use this issue to cause
the Python Imaging Library to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2016-9190)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 12.04

In general, a standard system update will make all the necessary changes.

Related notices

  • USN-3090-1: python-imaging-tk, python-pil-doc, python3-imaging, python3-imaging-sane, python3-pil.imagetk, python-sane, python-pil.imagetk, python-imaging, python-imaging-compat, python-pil, pillow, python-imaging-sane, python3-pil, python3-imaging-tk, python-imaging-doc, python3-sane
  • USN-3230-1: python-imaging-tk, python-pil-doc, python3-imaging, python3-imaging-sane, python3-pil.imagetk, python-sane, python-pil.imagetk, python-imaging, python-imaging-compat, python-pil, pillow, python-imaging-sane, python3-pil, python3-imaging-tk, python-imaging-doc, python3-sane
  • USN-3090-2: python-imaging-tk, python-pil-doc, python3-imaging, python3-imaging-sane, python3-pil.imagetk, python-sane, python-pil.imagetk, python-imaging, python-imaging-compat, python-pil, pillow, python-imaging-sane, python3-pil, python3-imaging-tk, python-imaging-doc, python3-sane