ROOT-APP-PYPI-CVE-2026-59198 CVE-2026-59198 in pillow - Patched by Root

Root has patched CVE-2026-59198 in the pillow package for Root:PyPI. Multiple fixed versions available...

CVE-2026-59198

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:19+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-fj7v-r99m-22gq 2026-07-21 11:31:12+00:00| seen| https://gist.github.com/alon710/48f3deb1ca1eafb4018fbe6276da18c1...

SUSE CVE-2026-59198

Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with TGA RLE compression, allowing adjacent process heap bytes to be copied into the generated TGA file. This issue is fixed in version 12.3.0...