USN-4963-1: Pillow vulnerabilities
19 May 2021
Pillow could be made to crash or hang if it opened a specially crafted file.
- pillow - Python Imaging Library
It was discovered that Pillow incorrectly handled certain image files. If a
user or automated system were tricked into opening a specially-crafted
file, a remote attacker could cause Pillow to crash or hand, resulting in a
denial of service.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.