Summary
[5.1.1-23]
- Security fix for CVE-2026-54058, CVE-2026-59197
Resolves: RHEL-211857, RHEL-211848
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python3-pillow | 0:5.1.1-23.el8_10 |
| Oracle Linux · 8 | python3-pillow-devel | 0:5.1.1-23.el8_10 |
| Oracle Linux · 8 | python3-pillow-doc | 0:5.1.1-23.el8_10 |
| Oracle Linux · 8 | python3-pillow-tk | 0:5.1.1-23.el8_10 |
Vulnerabilities 2
-
High 8.3
Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel a…
-
High 8.2
Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`
Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before …