[ALSA-2026:48021] Important: python-pillow security update
Type:
security
Severity:
important
Release date:
2026-07-31
Description:
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * Pillow: Pillow: Native heap out-of-bounds write (CVE-2026-59197) * Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image (CVE-2026-54058) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 python3-pillow-devel-5.1.1-23.el8_10.aarch64.rpm 1377c125c3b1ffb882c70201f507cce955b8a4664d7b48702e13be1621b4af17
aarch64 python3-pillow-tk-5.1.1-23.el8_10.aarch64.rpm 1cec74c5d86f5ec59033d4067278af87d8a873d97bccec8a99a6b75fe7b2296f
aarch64 python3-pillow-5.1.1-23.el8_10.aarch64.rpm d5f10e00c936841aad1660ef6ed5fbb5fe9bc89f90fabde307c8ecdc2441bf36
i686 python3-pillow-devel-5.1.1-23.el8_10.i686.rpm cb4c3f3e71b55922287c33726dffed36358af3622a43b37669ba29e1ef4a1256
i686 python3-pillow-5.1.1-23.el8_10.i686.rpm e4e5e2ced96d4ca7afe6af61e1b9dcdacedcbb5230304c690fec7f0bad0ded5b
noarch python3-pillow-doc-5.1.1-23.el8_10.noarch.rpm d0b303dc4b133115fd5ddc322f03982ab90ee53c89710cbdc9f17833150d6068
ppc64le python3-pillow-5.1.1-23.el8_10.ppc64le.rpm 499424930f984cbe4fd140b29281df0491104d08aac5b5e6eebf77572ab49340
ppc64le python3-pillow-tk-5.1.1-23.el8_10.ppc64le.rpm a98485d906fd61cf5282c55379a309eb346ce08dd4a044587ae48d14fbe11557
ppc64le python3-pillow-devel-5.1.1-23.el8_10.ppc64le.rpm dfa9bce3dae8c430d71cbbfe96d4184367b0ff3b011c43f50ea9a18c73d43c1e
s390x python3-pillow-devel-5.1.1-23.el8_10.s390x.rpm 2992fd3d7a9ea1bb02657f04698eea3c00bc9b9c001a6dbcd6fddbbae350cd5a
s390x python3-pillow-5.1.1-23.el8_10.s390x.rpm 588d4d7c589eae96e121e33131796c3d33cc567f928dcb080779a868fe33bceb
s390x python3-pillow-tk-5.1.1-23.el8_10.s390x.rpm 615ae04b8a543a01257afb657cffa60496d01bf2b0a1c0714d48b76e24ed6959
x86_64 python3-pillow-devel-5.1.1-23.el8_10.x86_64.rpm 3f7a559e99660fe3709da9b77bf3100d716cce04d63d751c27824a70197f5b19
x86_64 python3-pillow-5.1.1-23.el8_10.x86_64.rpm bcb7dbc537e9e3e2704161b82d9cbf529d56af64aea559d094cd33ede88babdc
x86_64 python3-pillow-tk-5.1.1-23.el8_10.x86_64.rpm bfc27aed168fa4285a040c762912be0800bbb43a377e525b052dcd9da311fd48
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.