CLSA-2026-1792164435 Fix CVE(s): CVE-2026-54058, CVE-2026-59199

SECURITY UPDATE: heap out-of-bounds write via paste box coordinates near the signed 32-bit integer limits ELSCVE-233283 - debian/patches/CVE-2026-59199.patch: compute the paste box dimensions as int64t in ImagingPaste and ImagingFill2 in src/libImaging/Paste.c. Adds a regression test in...

ROS-20260831-73-0010

The vulnerability of the PyImagingMapBuffer function in the src/map.c component of the Pillow image processing library is related to the issue of the operation exceeding the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause servi...