python-imaging vulnerabilities and fixes

Recent CVEs affecting python-imaging, with upgrade or downgrade steps. 1 tracked.

Also searched as: python imaging.

python-imaging has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2014-08-25. Highest priority: CVE-2014-3589 (score 45/100).

• CVE-2014-3589 MEDIUM 5.0 MITIGATE UPGRADE PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows r

FAQ

How do I fix python-imaging vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is python-imaging being exploited right now?

None of the tracked python-imaging CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which python-imaging CVE should I patch first?

CVE-2014-3589 currently ranks highest (45/100): PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows r.

← Back to latest CVEs