USN-3230-1: Pillow vulnerabilities

Ubuntu Security Notice USN-3230-1

13th March, 2017

pillow vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 16.10



• Ubuntu 16.04 LTS



• Ubuntu 14.04 LTS

Summary

Several security issues were fixed in Pillow.

Software description

• pillow
  - Python Imaging Library
  
  

Details

It was discovered that Pillow incorrectly handled certain compressed text
chunks in PNG images. A remote attacker could possibly use this issue to
cause Pillow to crash, resulting in a denial of service. This issue only
affected Ubuntu 14.04 LTS. ()

Cris Neckar discovered that Pillow incorrectly handled certain malformed
images. A remote attacker could use this issue to cause Pillow to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(



















.

In general, a standard system update will make all the necessary changes.

References

,

CVE-2016-9190