Red Hat Security Advisory

RHSA-2026:93077

python-pillow security update

Released 2026-10-30 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) python-pillow-5.1.1-36.el8_10, python3-pillow-5.1.1-36.el8_10
Red Hat Enterprise Linux CRB (v. 8) python3-pillow-5.1.1-36.el8_10, python3-pillow-devel-5.1.1-36.el8_10, python3-pillow-doc-5.1.1-36.el8_10 +1

TI-2026-76598 CVE-2026-112398 · GHSA-5x8w-8jj5-q52h

HIGH 75

Pillow is a Python imaging library.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00696 Published 2026-10-19 Partial fix · 13.0.0 CWE-122

TI-2026-76593 CVE-2026-112393 · GHSA-332p-7hrc-92wf

HIGH 75

Pillow is a Python imaging library.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.01019 Published 2026-10-19 Partial fix · 13.0.0 CWE-122

TI-2026-76630 CVE-2026-112900 · GHSA-w889-685w-c8fh

MEDIUM 50

Pillow is a Python imaging library.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.01303 Published 2026-10-19 Partial fix · 13.0.0 CWE-78