Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "python-imaging", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-imaging-compat", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-imaging-dbg", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-imaging-doc", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-imaging-sane", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-imaging-sane-dbg", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-imaging-tk", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-imaging-tk-dbg", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-pil", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-pil-dbg", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-pil-dbgsym", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-pil-doc", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-pil.imagetk", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-pil.imagetk-dbg", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-pil.imagetk-dbgsym", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-sane", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-sane-dbg", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python-sane-dbgsym", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python3-imaging", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python3-imaging-dbg", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python3-imaging-sane", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python3-imaging-sane-dbg", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python3-imaging-tk", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python3-imaging-tk-dbg", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python3-pil", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python3-pil-dbg", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python3-pil-dbgsym", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python3-pil.imagetk", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python3-pil.imagetk-dbg", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python3-pil.imagetk-dbgsym", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python3-sane", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python3-sane-dbg", "binary_version": "2.3.0-1ubuntu3.4+esm3" }, { "binary_name": "python3-sane-dbgsym", "binary_version": "2.3.0-1ubuntu3.4+esm3" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "python-imaging", "binary_version": "3.1.2-0ubuntu1.6+esm1" }, { "binary_name": "python-pil", "binary_version": "3.1.2-0ubuntu1.6+esm1" }, { "binary_name": "python-pil-dbg", "binary_version": "3.1.2-0ubuntu1.6+esm1" }, { "binary_name": "python-pil-doc", "binary_version": "3.1.2-0ubuntu1.6+esm1" }, { "binary_name": "python-pil.imagetk", "binary_version": "3.1.2-0ubuntu1.6+esm1" }, { "binary_name": "python-pil.imagetk-dbg", "binary_version": "3.1.2-0ubuntu1.6+esm1" }, { "binary_name": "python3-pil", "binary_version": "3.1.2-0ubuntu1.6+esm1" }, { "binary_name": "python3-pil-dbg", "binary_version": "3.1.2-0ubuntu1.6+esm1" }, { "binary_name": "python3-pil.imagetk", "binary_version": "3.1.2-0ubuntu1.6+esm1" }, { "binary_name": "python3-pil.imagetk-dbg", "binary_version": "3.1.2-0ubuntu1.6+esm1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "python-pil", "binary_version": "5.1.0-1ubuntu0.7" }, { "binary_name": "python-pil-dbg", "binary_version": "5.1.0-1ubuntu0.7" }, { "binary_name": "python-pil-doc", "binary_version": "5.1.0-1ubuntu0.7" }, { "binary_name": "python-pil.imagetk", "binary_version": "5.1.0-1ubuntu0.7" }, { "binary_name": "python-pil.imagetk-dbg", "binary_version": "5.1.0-1ubuntu0.7" }, { "binary_name": "python3-pil", "binary_version": "5.1.0-1ubuntu0.7" }, { "binary_name": "python3-pil-dbg", "binary_version": "5.1.0-1ubuntu0.7" }, { "binary_name": "python3-pil.imagetk", "binary_version": "5.1.0-1ubuntu0.7" }, { "binary_name": "python3-pil.imagetk-dbg", "binary_version": "5.1.0-1ubuntu0.7" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "python-pil-doc", "binary_version": "7.0.0-4ubuntu0.5" }, { "binary_name": "python3-pil", "binary_version": "7.0.0-4ubuntu0.5" }, { "binary_name": "python3-pil-dbg", "binary_version": "7.0.0-4ubuntu0.5" }, { "binary_name": "python3-pil.imagetk", "binary_version": "7.0.0-4ubuntu0.5" }, { "binary_name": "python3-pil.imagetk-dbg", "binary_version": "7.0.0-4ubuntu0.5" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "python-pil-doc", "binary_version": "8.1.2+dfsg-0.3" }, { "binary_name": "python3-pil", "binary_version": "8.1.2+dfsg-0.3" }, { "binary_name": "python3-pil-dbg", "binary_version": "8.1.2+dfsg-0.3" }, { "binary_name": "python3-pil.imagetk", "binary_version": "8.1.2+dfsg-0.3" }, { "binary_name": "python3-pil.imagetk-dbg", "binary_version": "8.1.2+dfsg-0.3" } ] }