[ALSA-2026:93077] Critical: python-pillow security update
Type:
security
Severity:
critical
Release date:
2026-10-30
Description:
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * pillow: Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO (CVE-2026-112393) * pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution (CVE-2026-112398) * pillow: Pillow: Argument Injection in Ghostscript call, potentially leading into RCE (CVE-2026-112900) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 python3-pillow-devel-5.1.1-36.el8_10.aarch64.rpm 16099fb92854f176e370569983a82f4d1770c918bbf0698d2edc8e1f13c55e16
aarch64 python3-pillow-tk-5.1.1-36.el8_10.aarch64.rpm 190208abc0c73ffc6f2c1c3be7633781310446545d0897d838f183cb97aacd52
aarch64 python3-pillow-5.1.1-36.el8_10.aarch64.rpm c474837332d868254091ab88dee1e29a372ce320fcbed0bc9973c5552250b882
i686 python3-pillow-devel-5.1.1-36.el8_10.i686.rpm e8b93715529c96bfefeaaa3b2b595ffc8b9a5d60d31852a0a1689fe3d5e457da
i686 python3-pillow-5.1.1-36.el8_10.i686.rpm f0acbb1792ade9abbc011bed5c5574ecaf3a203b15b6da7360165c112f05014d
noarch python3-pillow-doc-5.1.1-36.el8_10.noarch.rpm b9ce0c4c4de7feb80eb162c19b4a0c8f27621aa01d2236ee1598798cf148fea3
ppc64le python3-pillow-5.1.1-36.el8_10.ppc64le.rpm 221f3d922c8faa44011bb3eee588299969a9c9dbf83fd44bd919f155e39fe180
ppc64le python3-pillow-tk-5.1.1-36.el8_10.ppc64le.rpm 346dbdabff0e56972719cd04e94cfd88fd0e898c7e2c28b0d046dea79386a684
ppc64le python3-pillow-devel-5.1.1-36.el8_10.ppc64le.rpm 5233f76fe444705b2402304f5fe03e7d539551ad75e81d1a1ed55b999bf6d7b3
s390x python3-pillow-tk-5.1.1-36.el8_10.s390x.rpm 1b3b6eadfc939e08154cbbd059ed44d7043c9c5de390af56532cdc83ff5d6df4
s390x python3-pillow-5.1.1-36.el8_10.s390x.rpm 3522d365fc600f723b216c20c07c2b1ac3549c91cab2126fba7aeed6ecc130d1
s390x python3-pillow-devel-5.1.1-36.el8_10.s390x.rpm a701ce6638fe34b2178ae1b07a3c5cc10ec8419c5d68726023f4f77fc1316271
x86_64 python3-pillow-devel-5.1.1-36.el8_10.x86_64.rpm 06ee72c6c7f48a6cdde21b5cc2fb5b12e01991df9bbc67805846daecd718f401
x86_64 python3-pillow-tk-5.1.1-36.el8_10.x86_64.rpm 945bb9ab495005c780b9aceda0b0f2b374641da26867989ed6325e353b49d91a
x86_64 python3-pillow-5.1.1-36.el8_10.x86_64.rpm a6906810426c9df176ae5e7acdf526c7b925cdef9ce647f11b06045ba330d636
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.