Wind River Support Network

HomeDefectsLIN1021-1416

Fixed

LIN1021-1416 : Security Advisory - python3-pillow - CVE-2021-23437

Created: Sep 2, 2021 Updated: Dec 9, 2021

Resolved Date: Dec 9, 2021

Found In Version: 10.21.20.1

Fix Version: 10.21.20.7

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.

https://nvd.nist.gov/vuln/detail/CVE-2021-23437

CVEs

CVE-2021-23437