RHEL 8 : python-pillow (RHSA-2026:54528)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:54528 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

Important: Red Hat Security Advisory: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scori...

Alibaba Cloud Linux 3 : 0239: python-pillow (ALINUX3-SA-2026:0239)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0239 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-54058: Pillow is a Python imaging...

TencentOS Server 3: python-pillow (TSSA-2026:0813)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0813 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

OESA-2026-3185 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. Prior to 12.3.0, whe...

CVE-2026-59197 vulnerabilities

Vulnerabilities for packages: mlflow, superset, open-webui...

Oracle Linux 8 : python-pillow (ELSA-2026-48021)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-48021 advisory. 5.1.1-23 - Security fix for CVE-2026-54058, CVE-2026-59197 Resolves: RHEL-211857, RHEL-211848 Tenable has extracted the preceding description block...

SUSE SLED15 / SLES15 Security Update : python-Pillow (SUSE-SU-2026:3268-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3268-1 advisory. - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on mmap path bsc1271419. -...

CVE-2026-59197 vulnerabilities

Vulnerabilities for packages: open-webui, superset-fips, lmcache-cuda-12.8, text-generation-inference, openstack-horizon-2026.1, openstack-horizon-2025.2, mlflow, openstack-horizon-2026.1-fips, openstack-horizon-2025.2-fips, label-studio, tritonserver-backend-vllm-cuda-13.0, superset,...

CVE-2026-59197

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:21+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr 2026-07-21 12:31:41+00:00| seen| https://gist.github.com/alon710/a3a7380a4e0465c6c32d9063bd8033a6 2026-07-22...

Linux Distros Unpatched Vulnerability : CVE-2026-59197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd...

SUSE CVE-2026-59197

Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter calls image.expandsize // 2, size // 2 before rank-filter size validation and...

CVE-2026-59197 Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter calls image.expandsize // 2, size // 2 before rank-filter size validation and...