Debian/pillow: critical 9.1

An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_graya_la.

Action: Upgrade pillow to 8.1.2+dfsg-0.2 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2021-25287
• https://security-tracker.debian.org/tracker/CVE-2021-25287

published 2021-06-02T16:15:08.603Z · modified 2026-10-23T18:02:52.089107046Z · JSON