Lucene search
+L

834 matches found

OSV
OSV
•added 2026/04/22 9:48 p.m.•10 views

SUSE-SU-2026:21382-1 Security update for python-Pillow

This update for python-Pillow fixes the following issue: - CVE-2026-40192: Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks bsc1262184...

8.7CVSS5.3AI score0.00868EPSS
SaveExploits0References3
OSV
OSV
•added 2026/04/22 9:45 p.m.•14 views

OPENSUSE-SU-2026:20617-1 Security update for python-Pillow

This update for python-Pillow fixes the following issue: - CVE-2026-40192: Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks bsc1262184...

8.7CVSS5.3AI score0.00868EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/04/20 12:00 a.m.•9 views

Fedora 43 : python-pillow (2026-5ab72c7957)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5ab72c7957 advisory. Fix CVE-2026-40192. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

8.7CVSS5.8AI score0.00868EPSS
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux
•added 2026/04/19 12:00 a.m.•15 views

python311-Pillow-12.2.0-2.1 on GA media (moderate)

python311-Pillow-12.2.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10575-1 Rating: moderate Cross-References: CVE-2026-40192 CVSS scores: CVE-2026-40192 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-40192 SUSE : 8.7...

8.7CVSS5.8AI score0.00868EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2026/04/14 3:06 p.m.•17 views

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Write in Python Pillow [CVE-2026-25990]

Summary IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Write in Python Pillow, due to an issue that allows this condition to be triggered through the loading of a specially crafted PSD image CVE-2026-25990. Python Pillow is used in our speech service runtimes. This...

8.6CVSS6.6AI score0.00448EPSS
SaveExploits1Affected Software1
OpenVAS
OpenVAS
•added 2026/04/13 12:00 a.m.•20 views

SUSE: Security Advisory (SUSE-SU-2026:20992-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS6.8AI score0.00448EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/04/05 12:00 a.m.•28 views

openSUSE 16 Security Update : python-Pillow (openSUSE-SU-2026:20458-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20458-1 advisory. - CVE-2026-25990: Fixed an out-of-bounds write when opening a specially crafted PSD image. bsc1258125 Tenable has extracted the preceding description...

8.6CVSS6.8AI score0.00448EPSS
SaveExploits1References3
OSV
OSV
•added 2026/04/01 2:58 p.m.•12 views

SUSE-SU-2026:20992-1 Security update for python-Pillow

This update for python-Pillow fixes the following issues: - CVE-2026-25990: Fixed an out-of-bounds write when opening a specially crafted PSD image. bsc1258125...

8.6CVSS6.8AI score0.00448EPSS
SaveExploits1References3
OSV
OSV
•added 2026/04/01 2:57 p.m.•11 views

OPENSUSE-SU-2026:20458-1 Security update for python-Pillow

This update for python-Pillow fixes the following issues: - CVE-2026-25990: Fixed an out-of-bounds write when opening a specially crafted PSD image. bsc1258125...

8.6CVSS6.8AI score0.00448EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/03/06 12:00 a.m.•14 views

Amazon Linux 2 : python-pillow, --advisory ALAS2-2026-3180 (ALAS-2026-3180)

The version of python-pillow installed on the remote host is prior to 2.0.0-23.gitd1c6db8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3180 advisory. Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, n out-of-bounds write may be triggered when...

8.6CVSS6.8AI score0.00448EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/03/05 12:00 a.m.•13 views

Fedora 42 : python-pillow (2026-0d673fa503)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0d673fa503 advisory. Backport fix for CVE-2026-25990. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

8.6CVSS6.9AI score0.00448EPSS
SaveExploits1References2
OSV
OSV
•added 2026/03/04 12:00 a.m.•9 views

OPENSUSE-SU-2026:10285-1 python311-pillow-heif-1.3.0-1.1 on GA media

These are all security issues fixed in the python311-pillow-heif-1.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

9.1CVSS5.8AI score0.00712EPSS
SaveExploits1References1
Fedora
Fedora
•added 2026/03/03 1:28 a.m.•17 views

[SECURITY] Fedora 42 Update: python-pillow-11.1.0-3.fc42

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

8.6CVSS6.8AI score0.00448EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2026/03/03 12:00 a.m.•14 views

Fedora: Security Advisory (FEDORA-2026-0d673fa503)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS6.8AI score0.00448EPSS
SaveExploits1References4
OSV
OSV
•added 2026/02/28 11:10 a.m.•8 views

OESA-2026-1480 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. %package -n python3-pillow Summary: Python 3 image processing library Provides: python3-imaging = -...

7.5CVSS6.8AI score0.00448EPSS
SaveExploits1References2
OSV
OSV
•added 2026/02/28 11:10 a.m.•7 views

OESA-2026-1478 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. %package -n python3-pillow Summary: Python 3 image processing library Provides: python3-imaging = -...

7.5CVSS6.8AI score0.00448EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/02/18 12:00 a.m.•10 views

Fedora 43 : python-pillow (2026-9f517a7495)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9f517a7495 advisory. Backport fix for CVE-2026-25990. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

8.6CVSS6.9AI score0.00448EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2026/02/18 12:00 a.m.•9 views

Fedora: Security Advisory (FEDORA-2026-9f517a7495)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS6.8AI score0.00448EPSS
SaveExploits1References4
OSV
OSV
•added 2026/02/13 12:00 a.m.•9 views

OPENSUSE-SU-2026:10198-1 python311-Pillow-12.1.1-1.1 on GA media

These are all security issues fixed in the python311-Pillow-12.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

8.6CVSS6.8AI score0.00448EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2026/01/20 12:00 a.m.•10 views

MiracleLinux 8 : python-pillow-5.1.1-20.el8 (AXSA:2024-8290:04)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8290:04 advisory. python-pillow: uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument CVE-2023-44271 Tenable has extract...

7.5CVSS5.5AI score0.01131EPSS
SaveExploits0References2
Rows per page
Query Builder