Skip to content
OpenAdvisories
Critical RHSA-2026:93077 3 CVEs

Red Hat Security Advisory: python-pillow security update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pillow 0:5.1.1-36.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pillow-debuginfo 0:5.1.1-36.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pillow-debugsource 0:5.1.1-36.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-pillow 0:5.1.1-36.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-pillow-debuginfo 0:5.1.1-36.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-pillow-tk-debuginfo 0:5.1.1-36.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb python-pillow-debuginfo 0:5.1.1-36.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb python-pillow-debugsource 0:5.1.1-36.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb python3-pillow 0:5.1.1-36.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb python3-pillow-debuginfo 0:5.1.1-36.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb python3-pillow-devel 0:5.1.1-36.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb python3-pillow-doc 0:5.1.1-36.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb python3-pillow-tk 0:5.1.1-36.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb python3-pillow-tk-debuginfo 0:5.1.1-36.el8_10

Vulnerabilities 3

  • Critical 9.2
    CVE-2026-112393

    Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

    Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving compressed TIFF data through libtiff to a target without a usable fileno(), such as BytesIO. The callback si…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • Critical 9.2
    CVE-2026-112398 Public exploit

    Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

    Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decoding selects raw mode LA with two bytes per pixel, while an unrecognized JPEG mode c…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • Critical 9.2
    CVE-2026-112900 Public exploit

    Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

    Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe abso…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2555846
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2555867
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2555889
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_93077.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-112393
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-112393
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-112393
  • article
    https://github.com/python-pillow/Pillow/commit/11582e5ffbdceb973d5ee593f3105af5a9852b40
  • article
    https://github.com/python-pillow/Pillow/releases/tag/13.0.0
  • article
    https://github.com/python-pillow/Pillow/security/advisories/GHSA-332p-7hrc-92wf
  • report
    https://access.redhat.com/security/cve/CVE-2026-112398
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-112398
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-112398
  • article
    https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75
  • article
    https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h
  • report
    https://access.redhat.com/security/cve/CVE-2026-112900
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-112900
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-112900
  • article
    https://github.com/python-pillow/Pillow/commit/a2c363141da31a265dd536c945677db4b64f3ec9
  • article
    https://github.com/python-pillow/Pillow/security/advisories/GHSA-w889-685w-c8fh