Red Hat Product Errata RHSA-2026:92639 - Security Advisory
Issued:
2026-10-29
Updated:
2026-10-29

RHSA-2026:92639 - Security Advisory

Synopsis

Important: python-pillow security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for python-pillow is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • pillow: Pillow: Denial of Service via unbounded recursion in PDF parser (CVE-2026-112391)
  • pillow: pillow: Denial of service via double free during image transformation (CVE-2026-112402)
  • pillow: pillow: Denial of Service via zero-size images in rank filters (CVE-2026-112392)
  • pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images (CVE-2026-112397)
  • pillow: Pillow: Denial of Service via null pointer dereference in Image.merge() (CVE-2026-112405)
  • pillow: pillow: Denial of Service via crafted multi-frame image conversion (CVE-2026-112894)
  • pillow: pillow: Denial of service via crafted PDF during append operations (CVE-2026-112895)
  • pillow: pillow: Denial of Service via infinite loop during PDF page rewriting (CVE-2026-112406)
  • pillow: pillow: Denial of Service via duplicate page references in PDF files (CVE-2026-96640)
  • pillow: pillow: Denial of Service via unbounded memory expansion in MSP image decoder (CVE-2026-112892)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x

Fixes

  • BZ - 2555851 - CVE-2026-112391 pillow: Pillow: Denial of Service via unbounded recursion in PDF parser
  • BZ - 2555859 - CVE-2026-112402 pillow: pillow: Denial of service via double free during image transformation
  • BZ - 2555866 - CVE-2026-112392 pillow: pillow: Denial of Service via zero-size images in rank filters
  • BZ - 2555868 - CVE-2026-112397 pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images
  • BZ - 2555873 - CVE-2026-112405 pillow: Pillow: Denial of Service via null pointer dereference in Image.merge()
  • BZ - 2555875 - CVE-2026-112894 pillow: pillow: Denial of Service via crafted multi-frame image conversion
  • BZ - 2555879 - CVE-2026-112895 pillow: pillow: Denial of service via crafted PDF during append operations
  • BZ - 2556322 - CVE-2026-112406 pillow: pillow: Denial of Service via infinite loop during PDF page rewriting
  • BZ - 2558576 - CVE-2026-96640 pillow: pillow: Denial of Service via duplicate page references in PDF files
  • BZ - 2559393 - CVE-2026-112892 pillow: pillow: Denial of Service via unbounded memory expansion in MSP image decoder

Red Hat Enterprise Linux for x86_64 8

SRPM
python-pillow-5.1.1-33.el8_10.src.rpm SHA-256: 9b91dde336c842f536c64f76bdd0d9af8f1d1c1098b18cfab0b13216f7a94d83
x86_64
python-pillow-debuginfo-5.1.1-33.el8_10.x86_64.rpm SHA-256: bd84637f313347cd06a1b93775b135f38f8624b969dd20f34db2272802729e6d
python-pillow-debugsource-5.1.1-33.el8_10.x86_64.rpm SHA-256: b90133671449b9fa5001a6a15156991c06147cbb051a0695c0fd865b1738e976
python3-pillow-5.1.1-33.el8_10.x86_64.rpm SHA-256: 0df4636407fcc20cd8fd1f1e3fbbd84396eaeff41bd590fe8a233ba61f43c22a
python3-pillow-debuginfo-5.1.1-33.el8_10.x86_64.rpm SHA-256: 6d202c86d43e62765addba9f6db2103952a5d3667f1d7d9e69dddf1a2855ea17
python3-pillow-tk-debuginfo-5.1.1-33.el8_10.x86_64.rpm SHA-256: 2272b0d5bfd225999151a7878453eced846571ff75b74a6082825527433a43fb

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
python-pillow-5.1.1-33.el8_10.src.rpm SHA-256: 9b91dde336c842f536c64f76bdd0d9af8f1d1c1098b18cfab0b13216f7a94d83
s390x
python-pillow-debuginfo-5.1.1-33.el8_10.s390x.rpm SHA-256: ebcb3956472f5b8379074d056ead5319dba3d9da0cccf9c0372646ce4f928115
python-pillow-debugsource-5.1.1-33.el8_10.s390x.rpm SHA-256: e2cba54cbe81b8d63686d2e97b16c6561df0e1e3b99faca6d84721f7666160bf
python3-pillow-5.1.1-33.el8_10.s390x.rpm SHA-256: 4d54dc6a6e4cc9862da1cfc3f1ce5b5275f0379afbfd10f0a504632cde0fccb0
python3-pillow-debuginfo-5.1.1-33.el8_10.s390x.rpm SHA-256: 6f43086ce4414e21c080a9252aed1e3be69ff800132cdfcea8a548405e004ebe
python3-pillow-tk-debuginfo-5.1.1-33.el8_10.s390x.rpm SHA-256: 73622ff0f1052a30bfad383d435b08ac5e8083aa78a843557ddf922257bd62de

Red Hat Enterprise Linux for Power, little endian 8

SRPM
python-pillow-5.1.1-33.el8_10.src.rpm SHA-256: 9b91dde336c842f536c64f76bdd0d9af8f1d1c1098b18cfab0b13216f7a94d83
ppc64le
python-pillow-debuginfo-5.1.1-33.el8_10.ppc64le.rpm SHA-256: 0471e1902616665d069e885b97dda5927c5dc6d74d798446c1f571300943c9b4
python-pillow-debugsource-5.1.1-33.el8_10.ppc64le.rpm SHA-256: 156fb53917a3212a851c25a873bd8668ee702ce940182dbb2c1cacbaa65627a6
python3-pillow-5.1.1-33.el8_10.ppc64le.rpm SHA-256: 659f2846cf9b719f493600effcf2bf4454ce1141b57debb6be195dfb8e147375
python3-pillow-debuginfo-5.1.1-33.el8_10.ppc64le.rpm SHA-256: a4a80565c6ed55f6399f07a5777a7b55e002e3712b99f380545140e9bb14e44a
python3-pillow-tk-debuginfo-5.1.1-33.el8_10.ppc64le.rpm SHA-256: 5fec980eae6800cc5ec4d53abf350bfa80b84a588eb2290a2d894a724ac3a3b2

Red Hat Enterprise Linux for ARM 64 8

SRPM
python-pillow-5.1.1-33.el8_10.src.rpm SHA-256: 9b91dde336c842f536c64f76bdd0d9af8f1d1c1098b18cfab0b13216f7a94d83
aarch64
python-pillow-debuginfo-5.1.1-33.el8_10.aarch64.rpm SHA-256: 39fd414d887281b7d356031d31c7c552af4290d0d0f3ab12df5eeb0b2ed3c0ac
python-pillow-debugsource-5.1.1-33.el8_10.aarch64.rpm SHA-256: 4ea6d8fb81a74d676f99a2b87d13579983bc57dbc0ff41a56055284cc49b98b4
python3-pillow-5.1.1-33.el8_10.aarch64.rpm SHA-256: 1bf4e6e6b4c1d54ed003ac4f697ec5f4c847513f2b9fa04b7b1b78a8c6f99bd9
python3-pillow-debuginfo-5.1.1-33.el8_10.aarch64.rpm SHA-256: 8fa4810d6ff71f4339902798ae5d186c45d84af94bab3d2a965e582acd675cf3
python3-pillow-tk-debuginfo-5.1.1-33.el8_10.aarch64.rpm SHA-256: 0effc218f7a4b04af4d18959ea0134d16c8ff43c6dca78bf8066a909cb741917

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
python-pillow-debuginfo-5.1.1-33.el8_10.i686.rpm SHA-256: c3c17e96a632e43de95996355fca5d41d6553d91156c01dadda2bfc3da114297
python-pillow-debuginfo-5.1.1-33.el8_10.x86_64.rpm SHA-256: bd84637f313347cd06a1b93775b135f38f8624b969dd20f34db2272802729e6d
python-pillow-debugsource-5.1.1-33.el8_10.i686.rpm SHA-256: 2401dcfdaa8725f18aaddcd839fa752c0c4728139d795f85e6068a709a6721fe
python-pillow-debugsource-5.1.1-33.el8_10.x86_64.rpm SHA-256: b90133671449b9fa5001a6a15156991c06147cbb051a0695c0fd865b1738e976
python3-pillow-5.1.1-33.el8_10.i686.rpm SHA-256: 4914cd55a15706589123eebdd6b5b58ed06c7896844b662b0c3f45ba6341c9fd
python3-pillow-debuginfo-5.1.1-33.el8_10.i686.rpm SHA-256: bcf5631e3dd3a3fe1836d570ef5872bc5bc653be15dba72c0ee405fe2747c0b2
python3-pillow-debuginfo-5.1.1-33.el8_10.x86_64.rpm SHA-256: 6d202c86d43e62765addba9f6db2103952a5d3667f1d7d9e69dddf1a2855ea17
python3-pillow-devel-5.1.1-33.el8_10.i686.rpm SHA-256: 054bffcbef1421fb5e85498620ee3640c32559190f84990a12a068ff8579ce88
python3-pillow-devel-5.1.1-33.el8_10.x86_64.rpm SHA-256: 3a4522c75d65ffe84b75a6c2f8eb6f91efbae3ced5d257c83d0571ced9852150
python3-pillow-doc-5.1.1-33.el8_10.noarch.rpm SHA-256: 03ca4d4e8cc0ed71ccd599ad737010ec44f24091d9db18e94da48118da03fabc
python3-pillow-tk-5.1.1-33.el8_10.x86_64.rpm SHA-256: 790b66824f2f7a8d80ef4f37d81e78c85aa5c0b0d5f05f0dbd15d27153664fac
python3-pillow-tk-debuginfo-5.1.1-33.el8_10.i686.rpm SHA-256: 806ae95a35174162a91a8d893b5705a158f7e7f65eafe4963bbed3846a6433cc
python3-pillow-tk-debuginfo-5.1.1-33.el8_10.x86_64.rpm SHA-256: 2272b0d5bfd225999151a7878453eced846571ff75b74a6082825527433a43fb

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
python-pillow-debuginfo-5.1.1-33.el8_10.ppc64le.rpm SHA-256: 0471e1902616665d069e885b97dda5927c5dc6d74d798446c1f571300943c9b4
python-pillow-debugsource-5.1.1-33.el8_10.ppc64le.rpm SHA-256: 156fb53917a3212a851c25a873bd8668ee702ce940182dbb2c1cacbaa65627a6
python3-pillow-debuginfo-5.1.1-33.el8_10.ppc64le.rpm SHA-256: a4a80565c6ed55f6399f07a5777a7b55e002e3712b99f380545140e9bb14e44a
python3-pillow-devel-5.1.1-33.el8_10.ppc64le.rpm SHA-256: 4d050fec7ddb6e2b45e89573dd82fe27d385b13eabb17f2252cebb63ef3d1ccb
python3-pillow-doc-5.1.1-33.el8_10.noarch.rpm SHA-256: 03ca4d4e8cc0ed71ccd599ad737010ec44f24091d9db18e94da48118da03fabc
python3-pillow-tk-5.1.1-33.el8_10.ppc64le.rpm SHA-256: 1ac7bbafd515a0c8afa0134417ca4c21bcc80d72cff9a5e5e59ede46737c9b5d
python3-pillow-tk-debuginfo-5.1.1-33.el8_10.ppc64le.rpm SHA-256: 5fec980eae6800cc5ec4d53abf350bfa80b84a588eb2290a2d894a724ac3a3b2

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
python-pillow-debuginfo-5.1.1-33.el8_10.aarch64.rpm SHA-256: 39fd414d887281b7d356031d31c7c552af4290d0d0f3ab12df5eeb0b2ed3c0ac
python-pillow-debugsource-5.1.1-33.el8_10.aarch64.rpm SHA-256: 4ea6d8fb81a74d676f99a2b87d13579983bc57dbc0ff41a56055284cc49b98b4
python3-pillow-debuginfo-5.1.1-33.el8_10.aarch64.rpm SHA-256: 8fa4810d6ff71f4339902798ae5d186c45d84af94bab3d2a965e582acd675cf3
python3-pillow-devel-5.1.1-33.el8_10.aarch64.rpm SHA-256: 84f3713f0051b12820e5b11850867c3bf38f5b887e5318118ac8807069d971ef
python3-pillow-doc-5.1.1-33.el8_10.noarch.rpm SHA-256: 03ca4d4e8cc0ed71ccd599ad737010ec44f24091d9db18e94da48118da03fabc
python3-pillow-tk-5.1.1-33.el8_10.aarch64.rpm SHA-256: 334798b03ba235771dd13c0a9c93fc1a2ecaf5c8a3684d452d84ea05ba551258
python3-pillow-tk-debuginfo-5.1.1-33.el8_10.aarch64.rpm SHA-256: 0effc218f7a4b04af4d18959ea0134d16c8ff43c6dca78bf8066a909cb741917

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
python-pillow-debuginfo-5.1.1-33.el8_10.s390x.rpm SHA-256: ebcb3956472f5b8379074d056ead5319dba3d9da0cccf9c0372646ce4f928115
python-pillow-debugsource-5.1.1-33.el8_10.s390x.rpm SHA-256: e2cba54cbe81b8d63686d2e97b16c6561df0e1e3b99faca6d84721f7666160bf
python3-pillow-debuginfo-5.1.1-33.el8_10.s390x.rpm SHA-256: 6f43086ce4414e21c080a9252aed1e3be69ff800132cdfcea8a548405e004ebe
python3-pillow-devel-5.1.1-33.el8_10.s390x.rpm SHA-256: 707058fd6d197fbaeb2c588d6f243f71e723da0933732e552439c4f0848dfce1
python3-pillow-doc-5.1.1-33.el8_10.noarch.rpm SHA-256: 03ca4d4e8cc0ed71ccd599ad737010ec44f24091d9db18e94da48118da03fabc
python3-pillow-tk-5.1.1-33.el8_10.s390x.rpm SHA-256: 62cffa9b7fb65c3cd7a631d836b4d384766c4df18da520779e520ed7efb80c2b
python3-pillow-tk-debuginfo-5.1.1-33.el8_10.s390x.rpm SHA-256: 73622ff0f1052a30bfad383d435b08ac5e8083aa78a843557ddf922257bd62de

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10

SRPM
python-pillow-5.1.1-33.el8_10.src.rpm SHA-256: 9b91dde336c842f536c64f76bdd0d9af8f1d1c1098b18cfab0b13216f7a94d83
x86_64
python-pillow-debuginfo-5.1.1-33.el8_10.x86_64.rpm SHA-256: bd84637f313347cd06a1b93775b135f38f8624b969dd20f34db2272802729e6d
python-pillow-debugsource-5.1.1-33.el8_10.x86_64.rpm SHA-256: b90133671449b9fa5001a6a15156991c06147cbb051a0695c0fd865b1738e976
python3-pillow-5.1.1-33.el8_10.x86_64.rpm SHA-256: 0df4636407fcc20cd8fd1f1e3fbbd84396eaeff41bd590fe8a233ba61f43c22a
python3-pillow-debuginfo-5.1.1-33.el8_10.x86_64.rpm SHA-256: 6d202c86d43e62765addba9f6db2103952a5d3667f1d7d9e69dddf1a2855ea17
python3-pillow-tk-debuginfo-5.1.1-33.el8_10.x86_64.rpm SHA-256: 2272b0d5bfd225999151a7878453eced846571ff75b74a6082825527433a43fb

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10

SRPM
python-pillow-5.1.1-33.el8_10.src.rpm SHA-256: 9b91dde336c842f536c64f76bdd0d9af8f1d1c1098b18cfab0b13216f7a94d83
aarch64
python-pillow-debuginfo-5.1.1-33.el8_10.aarch64.rpm SHA-256: 39fd414d887281b7d356031d31c7c552af4290d0d0f3ab12df5eeb0b2ed3c0ac
python-pillow-debugsource-5.1.1-33.el8_10.aarch64.rpm SHA-256: 4ea6d8fb81a74d676f99a2b87d13579983bc57dbc0ff41a56055284cc49b98b4
python3-pillow-5.1.1-33.el8_10.aarch64.rpm SHA-256: 1bf4e6e6b4c1d54ed003ac4f697ec5f4c847513f2b9fa04b7b1b78a8c6f99bd9
python3-pillow-debuginfo-5.1.1-33.el8_10.aarch64.rpm SHA-256: 8fa4810d6ff71f4339902798ae5d186c45d84af94bab3d2a965e582acd675cf3
python3-pillow-tk-debuginfo-5.1.1-33.el8_10.aarch64.rpm SHA-256: 0effc218f7a4b04af4d18959ea0134d16c8ff43c6dca78bf8066a909cb741917

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10

SRPM
python-pillow-5.1.1-33.el8_10.src.rpm SHA-256: 9b91dde336c842f536c64f76bdd0d9af8f1d1c1098b18cfab0b13216f7a94d83
ppc64le
python-pillow-debuginfo-5.1.1-33.el8_10.ppc64le.rpm SHA-256: 0471e1902616665d069e885b97dda5927c5dc6d74d798446c1f571300943c9b4
python-pillow-debugsource-5.1.1-33.el8_10.ppc64le.rpm SHA-256: 156fb53917a3212a851c25a873bd8668ee702ce940182dbb2c1cacbaa65627a6
python3-pillow-5.1.1-33.el8_10.ppc64le.rpm SHA-256: 659f2846cf9b719f493600effcf2bf4454ce1141b57debb6be195dfb8e147375
python3-pillow-debuginfo-5.1.1-33.el8_10.ppc64le.rpm SHA-256: a4a80565c6ed55f6399f07a5777a7b55e002e3712b99f380545140e9bb14e44a
python3-pillow-tk-debuginfo-5.1.1-33.el8_10.ppc64le.rpm SHA-256: 5fec980eae6800cc5ec4d53abf350bfa80b84a588eb2290a2d894a724ac3a3b2

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10

SRPM
python-pillow-5.1.1-33.el8_10.src.rpm SHA-256: 9b91dde336c842f536c64f76bdd0d9af8f1d1c1098b18cfab0b13216f7a94d83
s390x
python-pillow-debuginfo-5.1.1-33.el8_10.s390x.rpm SHA-256: ebcb3956472f5b8379074d056ead5319dba3d9da0cccf9c0372646ce4f928115
python-pillow-debugsource-5.1.1-33.el8_10.s390x.rpm SHA-256: e2cba54cbe81b8d63686d2e97b16c6561df0e1e3b99faca6d84721f7666160bf
python3-pillow-5.1.1-33.el8_10.s390x.rpm SHA-256: 4d54dc6a6e4cc9862da1cfc3f1ce5b5275f0379afbfd10f0a504632cde0fccb0
python3-pillow-debuginfo-5.1.1-33.el8_10.s390x.rpm SHA-256: 6f43086ce4414e21c080a9252aed1e3be69ff800132cdfcea8a548405e004ebe
python3-pillow-tk-debuginfo-5.1.1-33.el8_10.s390x.rpm SHA-256: 73622ff0f1052a30bfad383d435b08ac5e8083aa78a843557ddf922257bd62de

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.