Skip to content
OpenAdvisories
High RHSA-2026:54528 2 CVEs

Red Hat Security Advisory: python-pillow security update

Published Aug 14, 2026 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream python-pillow 0:5.1.1-20.el8_6.1
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream python-pillow-debuginfo 0:5.1.1-20.el8_6.1
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream python-pillow-debugsource 0:5.1.1-20.el8_6.1
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream python3-pillow 0:5.1.1-20.el8_6.1
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream python3-pillow-debuginfo 0:5.1.1-20.el8_6.1
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream python3-pillow-tk-debuginfo 0:5.1.1-20.el8_6.1
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::appstream python-pillow 0:5.1.1-20.el8_6.1
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::appstream python-pillow-debuginfo 0:5.1.1-20.el8_6.1
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::appstream python-pillow-debugsource 0:5.1.1-20.el8_6.1
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::appstream python3-pillow 0:5.1.1-20.el8_6.1
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::appstream python3-pillow-debuginfo 0:5.1.1-20.el8_6.1
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::appstream python3-pillow-tk-debuginfo 0:5.1.1-20.el8_6.1

Vulnerabilities 2

  • High 8.3
    CVE-2026-54058

    Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

    Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel a…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • High 8.2
    CVE-2026-59197

    Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

    Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before …

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2500043
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2500057
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54528.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-54058
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-54058
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-54058
  • article
    https://github.com/python-pillow/Pillow/commit/6a8de891fb00968e5ea79bfa84368ed90b3cfc1d
  • article
    https://github.com/python-pillow/Pillow/pull/9719
  • article
    https://github.com/python-pillow/Pillow/releases/tag/12.3.0
  • article
    https://github.com/python-pillow/Pillow/security/advisories/GHSA-62p4-gmf7-7g93
  • report
    https://access.redhat.com/security/cve/CVE-2026-59197
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-59197
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-59197
  • article
    https://github.com/python-pillow/Pillow/commit/cce3bdb867c77a3420261ed1bfdb6b0787ec8fc1
  • article
    https://github.com/python-pillow/Pillow/pull/9695
  • article
    https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr