ELSA-2026-92639

ELSA-2026-92639 - python-pillow security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-30

Description

[5.1.1-33]
- CVE-2026-112892 python-pillow: pillow: Denial of Service via unbounded
memory expansion in MSP image decoder
Resolves: RHEL-290437

[5.1.1-32]
- CVE-2026-96640 python-pillow: pillow: Denial of Service via duplicate
page references in PDF files
Resolves: RHEL-289281

[5.1.1-31]
- CVE-2026-112406 python-pillow: pillow: Denial of Service via infinite loop
during PDF page rewriting
Resolves: RHEL-287839

[5.1.1-30]
- CVE-2026-112402 python-pillow: pillow: Denial of service via double free
during image transformation
Resolves: RHEL-287157

[5.1.1-29]
- CVE-2026-112894 python-pillow: pillow: Denial of Service via crafted
multi-frame image conversion
Resolves: RHEL-287147

[5.1.1-28]
- CVE-2026-112895 python-pillow: pillow: Denial of service via crafted PDF
during append operations
Resolves: RHEL-287152

[5.1.1-27]
- CVE-2026-112392 python-pillow: pillow: Denial of Service via zero-size
images in rank filters
Resolves: RHEL-287128

[5.1.1-26]
- Security fix for CVE-2026-112397
Resolves: RHEL-287137

[5.1.1-25]
- CVE-2026-112391 python-pillow: Pillow: Denial of Service via unbounded recursion in PDF parser
Resolves: RHEL-287109

[5.1.1-24]
- CVE-2026-112405 python-pillow: Pillow: Denial of Service via null pointer dereference in Image.merge()
Resolves: RHEL-287123

Related CVEs

CVE-2026-112391

CVE-2026-112392

CVE-2026-112397

CVE-2026-112402

CVE-2026-112405

CVE-2026-112406

CVE-2026-112892

CVE-2026-112894

CVE-2026-112895

CVE-2026-96640

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	python-pillow-5.1.1-33.el8_10.src.rpm	1e5561d7efcd24a58ad176df741c23bab48c24521b555dd147981d9fd44b24ff	-	ol8_aarch64_appstream
	python-pillow-5.1.1-33.el8_10.src.rpm	1e5561d7efcd24a58ad176df741c23bab48c24521b555dd147981d9fd44b24ff	-	ol8_aarch64_codeready_builder
	python3-pillow-5.1.1-33.el8_10.aarch64.rpm	c89569839b14ac8d86d7634fa635f476e7dcc0ead5203e3f0dd96065c4e4c4fe	-	ol8_aarch64_appstream
	python3-pillow-devel-5.1.1-33.el8_10.aarch64.rpm	3ae384b5228c5f7ce80a6f3caf778ca898394488d7a6967c18085f7b16a36bd2	-	ol8_aarch64_codeready_builder
	python3-pillow-doc-5.1.1-33.el8_10.noarch.rpm	15e17f8dedeb36b7faf536729b731c575322e9d3719dd9bf853d0b5aac5004f9	-	ol8_aarch64_codeready_builder
	python3-pillow-tk-5.1.1-33.el8_10.aarch64.rpm	7d8effe1245e4fdf6624c4275b4a584573e4e7c1420af1e62988da5e6b66402f	-	ol8_aarch64_codeready_builder
Oracle Linux 8 (x86_64)	python-pillow-5.1.1-33.el8_10.src.rpm	1e5561d7efcd24a58ad176df741c23bab48c24521b555dd147981d9fd44b24ff	-	ol8_x86_64_appstream
	python-pillow-5.1.1-33.el8_10.src.rpm	1e5561d7efcd24a58ad176df741c23bab48c24521b555dd147981d9fd44b24ff	-	ol8_x86_64_codeready_builder
	python3-pillow-5.1.1-33.el8_10.i686.rpm	8d27c9b31b8361a623a877e433e22517279028259f72fc4bf761d9fe45040083	-	ol8_x86_64_codeready_builder
	python3-pillow-5.1.1-33.el8_10.x86_64.rpm	25a2a3089cfe76c366f6de9a7f4da43ead2cdd376088ca92a0f16c5e16a1c216	-	ol8_x86_64_appstream
	python3-pillow-devel-5.1.1-33.el8_10.i686.rpm	65c7e2f23553898348af020dbc17437a1ea741608424773240edd11bf01a9277	-	ol8_x86_64_codeready_builder
	python3-pillow-devel-5.1.1-33.el8_10.x86_64.rpm	17349ef73f19a13671c88dd7223d5bebe51ebf197062c6b38396de9226a62c73	-	ol8_x86_64_codeready_builder
	python3-pillow-doc-5.1.1-33.el8_10.noarch.rpm	15e17f8dedeb36b7faf536729b731c575322e9d3719dd9bf853d0b5aac5004f9	-	ol8_x86_64_codeready_builder
	python3-pillow-tk-5.1.1-33.el8_10.x86_64.rpm	887f1930a5f9866a794f0ae94d3d2685bd069228245562e83e6a4f4a68244cc9	-	ol8_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team