[SECURITY] Fedora 43 Update: python-pillow-11.3.0-14.fc43

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

Amazon Linux 2 : python-pillow (ALAS-2026-4107)

The version of python-pillow installed on the remote host is prior to 2.0.0-23.gitd1c6db8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4107 advisory. A flaw was found in Pillow. When saving an image in the TIFF format, Pillow incorrectly forwards unknown metadata...

Fedora 43 : python-pillow (2026-bae971fad8)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bae971fad8 advisory. - Security fix for CVE-2026-112900 - Security fix for CVE-2026-112403 - Security fix for CVE-2026-112393 - Security fix for CVE-2026-112892 Tenable...

Important: python-pillow

Issue Overview: A flaw was found in Pillow. When parsing GIF images with numerous comment blocks, the library repeatedly copies data in an inefficient manner. A remote attacker can exploit this vulnerability by submitting a specially crafted GIF image to an application that processes images using...

Important: python-pillow

Issue Overview: A flaw was found in Pillow. When saving an image in the TIFF format, Pillow incorrectly forwards unknown metadata tags to the underlying image processing library. A remote attacker could exploit this flaw by providing a specially crafted image containing malicious metadata to an...

SUSE SLED15 / SLES15 Security Update : python-Pillow (SUSE-SU-2026:5194-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5194-1 advisory. - CVE-2026-96636: decompression-bomb protection bypass via multi-frame seek in MPO and DCX bsc1286802. -...

Security update for python-Pillow

This update for python-Pillow fixes the following issues: CVE-2026-96636: decompression-bomb protection bypass via multi-frame seek in MPO and DCX bsc1286802. CVE-2026-96637: decompression bomb check bypass in SpiderImagePlugin.seek leads to unbounded allocation DoS bsc1286801. CVE-2026-96638: BM...

SUSE-SU-2026:5194-1 Security update for python-Pillow

This update for python-Pillow fixes the following issues: - CVE-2026-96636: decompression-bomb protection bypass via multi-frame seek in MPO and DCX bsc1286802. - CVE-2026-96637: decompression bomb check bypass in SpiderImagePlugin.seek leads to unbounded allocation DoS bsc1286801. -...

Critical: Red Hat Security Advisory: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scorin...

Critical: Red Hat Security Advisory: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Critical. A Common...

Critical: Red Hat Security Advisory: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Critical. A Common...

RHEL 8 : python-pillow (RHSA-2026:98109)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:98109 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

RHEL 8 : python-pillow (RHSA-2026:98111)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:98111 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

RHEL 8 : python-pillow (RHSA-2026:98120)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:98120 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

TencentOS Server 3: python-pillow (TSSA-2026:1430)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1430 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 3: python-pillow (TSSA-2026:1434)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1434 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Security update for python-Pillow (critical)

openSUSE security update: security update for python-pillow ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22246-1 Rating: critical References: bsc1286256 bsc1286273 bsc1286287 bsc1286311 bsc1286312 bsc1286313 bsc1286314 bsc1286325 bsc1286368...

Amazon Linux 2 : python-pillow (ALAS-2026-4075)

The version of python-pillow installed on the remote host is prior to 2.0.0-23.gitd1c6db8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4075 advisory. Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid...

Important: python-pillow

Issue Overview: Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage;...

EulerOS Virtualization 2.15.0 : python-pillow (EulerOS-SA-2026-4722)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount,...