Skip to content
OpenAdvisories
High WID-SEC-2026-4285 5 CVEs

Red Hat Enterprise Linux (perl-yaml, pillow): Mehrere Schwachstellen

Published Nov 1, 2026 · Updated Nov 12, 2026 · Revision 9 · de

Vendor: amazon Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: openSUSE Product: Rocky Linux Product: Satellite Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Dateien zu manipulieren, beliebigen Code auszuführen, Informationen offenzulegen und Denial-of-Service-Angriffe zu starten.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 5

  • Critical 9.2
    CVE-2026-112393

    Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

    Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving compressed TIFF data through libtiff to a target without a usable fileno(), such as BytesIO. The callback si…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • Critical 9.2
    CVE-2026-112398 Public exploit

    Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

    Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decoding selects raw mode LA with two bytes per pixel, while an unrecognized JPEG mode c…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • Critical 9.2
    CVE-2026-112900 Public exploit

    Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

    Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe abso…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • Critical 9.1
    CVE-2017-20285

    YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes

    YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of …

    libyaml-perl libyaml-perl Debian Ubuntu
  • High 7.3
    CVE-2019-25777

    YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution

    YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/glob document names a package and a symbol, and supplies the value assigned to it. Nothing restricts t…

    libyaml-perl libyaml-perl Debian Ubuntu

Revision history

  1. #9

    Neue Updates von SUSE aufgenommen

  2. #8

    Neue Updates von SUSE aufgenommen

  3. #7

    Neue Updates von openSUSE aufgenommen

  4. #6

    Neue Updates von Red Hat und Amazon aufgenommen

  5. #5

    Neue Updates von openSUSE aufgenommen

  6. #4

    Neue Updates von Red Hat und Oracle Linux aufgenommen

  7. #3

    Neue Updates von Red Hat aufgenommen

  8. #2

    Neue Updates von Oracle Linux und SUSE aufgenommen

  9. #1

    Initiale Fassung

References