Security update for python-Pillow (important)

openSUSE security update: security update for python-pillow ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21296-1 Rating: important References: bsc1270404 bsc1270409 bsc1270410 bsc1270411 bsc1270412 Cross-References: CVE-2026-42311 CVE-2026-54059...

Amazon Linux 2 : python-pillow, --advisory ALAS2-2026-3312 (ALAS-2026-3312)

The version of python-pillow installed on the remote host is prior to 2.0.0-23.gitd1c6db8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3312 advisory. Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an...

Amazon Linux 2023 : python3-pillow, python3-pillow-devel, python3-pillow-tk (ALAS2023-2026-1712)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1712 advisory. Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an...

OESA-2026-2428 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. From version 10.3.0 ...

CVE-2026-42311

Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has been patched in version 12.2.0...

CVE-2026-42311

Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has been patched in version 12.2.0...

11x-wagtail-blog (>=0.0.0, <=0.2.0), 2dify (1.0.1) +5426 more potentially affected by CVE-2026-42311 via pillow (>=10.3.0, <=12.1.1)

pillow PYPI version =10.3.0, =0.0.0, =2.12.0, =0.1.0, =0.1.3, =0.0.1, =1.0.0, =0.3.2, =0.1.0, =0.1.3, =0.2.0a0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-42311 Source advisory: OSV:GHSA-PWV6-VV43-88GR...

11x-wagtail-blog (>=0.0.0, <=0.2.0), 2dify (1.0.1) +5426 more potentially affected by CVE-2026-25990 +1 more via pillow (>=10.3.0, <=12.1.1)

pillow PYPI version =10.3.0, =0.0.0, =2.12.0, =0.1.0, =0.1.3, =0.0.1, =1.0.0, =0.3.2, =0.1.0, =0.1.3, =0.2.0a0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-25990, CVE-2026-42311 Source advisory: SNYK:PYTHON-PILLOW-16419303...