Red Hat Product Errata RHSA-2026:93077 - Security Advisory
Issued:
2026-10-30
Updated:
2026-10-30

RHSA-2026:93077 - Security Advisory

Synopsis

Critical: python-pillow security update

Type/Severity

Security Advisory: Critical

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for python-pillow is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • pillow: Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO (CVE-2026-112393)
  • pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution (CVE-2026-112398)
  • pillow: Pillow: Argument Injection in Ghostscript call, potentially leading into RCE (CVE-2026-112900)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x

Fixes

  • BZ - 2555846 - CVE-2026-112393 pillow: Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO
  • BZ - 2555867 - CVE-2026-112398 pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
  • BZ - 2555889 - CVE-2026-112900 pillow: Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

Red Hat Enterprise Linux for x86_64 8

SRPM
python-pillow-5.1.1-36.el8_10.src.rpm SHA-256: 64b3764632ffd258628289f6455fc0868942e628cd232cffb044c40784489452
x86_64
python-pillow-debuginfo-5.1.1-36.el8_10.x86_64.rpm SHA-256: fd5168e19b23ffc50a8e6d6eafac770ef6b5f74890045952ef4e43d7c7c63ed0
python-pillow-debugsource-5.1.1-36.el8_10.x86_64.rpm SHA-256: fb5b48e2940d796591885c39cf3ffda4a24e4655ca57fbcca8c9d1660ce18711
python3-pillow-5.1.1-36.el8_10.x86_64.rpm SHA-256: 650c9cf44c1f20022f412548719bd8888534bc7006a95359fa9308e2d6cb57bd
python3-pillow-debuginfo-5.1.1-36.el8_10.x86_64.rpm SHA-256: 02fed1c66d15a0d07aba61a2188081834d91342e765bf7ab2582b51c28166d61
python3-pillow-tk-debuginfo-5.1.1-36.el8_10.x86_64.rpm SHA-256: 7cfe5c585e7862197095315c9bce35b158528186522eaba3a2cee34ad4b41271

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
python-pillow-5.1.1-36.el8_10.src.rpm SHA-256: 64b3764632ffd258628289f6455fc0868942e628cd232cffb044c40784489452
s390x
python-pillow-debuginfo-5.1.1-36.el8_10.s390x.rpm SHA-256: 6758c2801d282b787d06167c02e8f9c2009fedbd018e438bc451eb123ac0392c
python-pillow-debugsource-5.1.1-36.el8_10.s390x.rpm SHA-256: d05e414e6c2b95ce7a8b4cb519648f8cd33a9a2bdc55e6671e78b89d1f1a5d69
python3-pillow-5.1.1-36.el8_10.s390x.rpm SHA-256: 30923b0f2258e30e0cbd9bb058206ed55858bafcd1996c01fca86d8c58ad1709
python3-pillow-debuginfo-5.1.1-36.el8_10.s390x.rpm SHA-256: 9247a0bf8e1d0c1ed477019c53aa32767abf8dbab705d529888656be253d2725
python3-pillow-tk-debuginfo-5.1.1-36.el8_10.s390x.rpm SHA-256: c7a88a8cefb7bf7fe81f9da669eb2ce3e87b165d18b78f443ff73789fe72404a

Red Hat Enterprise Linux for Power, little endian 8

SRPM
python-pillow-5.1.1-36.el8_10.src.rpm SHA-256: 64b3764632ffd258628289f6455fc0868942e628cd232cffb044c40784489452
ppc64le
python-pillow-debuginfo-5.1.1-36.el8_10.ppc64le.rpm SHA-256: c1b195d05433e576764368673d5c2a07f9d500c467e45b2569285332b2177787
python-pillow-debugsource-5.1.1-36.el8_10.ppc64le.rpm SHA-256: eedad498d957bc4210219533b075c199c0fe9040c4f5a9678e37abe460e6d45d
python3-pillow-5.1.1-36.el8_10.ppc64le.rpm SHA-256: bea6986fcffb6d65aad15febe0facb6f1c246bf423e0715f9d096384b18a4d27
python3-pillow-debuginfo-5.1.1-36.el8_10.ppc64le.rpm SHA-256: ee13d8141217f5799489aadffd1b35a1b912c31d8911307776d9f80e9497a372
python3-pillow-tk-debuginfo-5.1.1-36.el8_10.ppc64le.rpm SHA-256: 0ac53a215a32314141ce2db2dd26cb269d6ff2a3d507e4ad850061f1a07e831b

Red Hat Enterprise Linux for ARM 64 8

SRPM
python-pillow-5.1.1-36.el8_10.src.rpm SHA-256: 64b3764632ffd258628289f6455fc0868942e628cd232cffb044c40784489452
aarch64
python-pillow-debuginfo-5.1.1-36.el8_10.aarch64.rpm SHA-256: 63fc05e1d3bc0720fa43af0990cf3c584cdc0bc5d1932770068e8979fc9a2dd0
python-pillow-debugsource-5.1.1-36.el8_10.aarch64.rpm SHA-256: 60c2cd93a2c47a631e4f002b18ca3601edfa7f02aec5049d472e0836e92cedc8
python3-pillow-5.1.1-36.el8_10.aarch64.rpm SHA-256: baa32193414c31209aba28023065966f33af46340a7994786dbd9e310fc1f372
python3-pillow-debuginfo-5.1.1-36.el8_10.aarch64.rpm SHA-256: 128a3fbb11c0fde5ab848a42705a9e365c139e56821b5cdbfc04e09689fb481d
python3-pillow-tk-debuginfo-5.1.1-36.el8_10.aarch64.rpm SHA-256: b6bda95e5f3e54fbced8c1b611bb29a8a5c8bedd87d2eea95382c33e510cfcf2

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
python-pillow-debuginfo-5.1.1-36.el8_10.i686.rpm SHA-256: 8211111db90d3efc7bd6b5edce431cbf58b857964430d675324d78b2bb605290
python-pillow-debuginfo-5.1.1-36.el8_10.x86_64.rpm SHA-256: fd5168e19b23ffc50a8e6d6eafac770ef6b5f74890045952ef4e43d7c7c63ed0
python-pillow-debugsource-5.1.1-36.el8_10.i686.rpm SHA-256: 24ae297e18dc37cd0a7e262b29ef3df03fa7d2157cd1e0b248c9e8c79464c187
python-pillow-debugsource-5.1.1-36.el8_10.x86_64.rpm SHA-256: fb5b48e2940d796591885c39cf3ffda4a24e4655ca57fbcca8c9d1660ce18711
python3-pillow-5.1.1-36.el8_10.i686.rpm SHA-256: 051460acbe6beab7596e51ea9eaf5178563867a252acf93c657e9c8fe4c21a0e
python3-pillow-debuginfo-5.1.1-36.el8_10.i686.rpm SHA-256: d9c1d1b384cfc7a6e5a379a49b40de6c0389ed16183f19776b64a506600adb6b
python3-pillow-debuginfo-5.1.1-36.el8_10.x86_64.rpm SHA-256: 02fed1c66d15a0d07aba61a2188081834d91342e765bf7ab2582b51c28166d61
python3-pillow-devel-5.1.1-36.el8_10.i686.rpm SHA-256: c769cefe0de6e188c8c7d542d8ddd1299bf5ac24917d339ae0db6fa8e6af1451
python3-pillow-devel-5.1.1-36.el8_10.x86_64.rpm SHA-256: e3a186985b68a39269f249eae8b5f8525b4ead6c1693a4f577ab8ff6568fa850
python3-pillow-doc-5.1.1-36.el8_10.noarch.rpm SHA-256: 4c4e9219330a38093d9d3e31bf539f104cee7877dc3ca1aaa69677381fdc5222
python3-pillow-tk-5.1.1-36.el8_10.x86_64.rpm SHA-256: 45df459e520a0969abde35a5411011e322bfa43ce5903e3351edc6b8eddb1f67
python3-pillow-tk-debuginfo-5.1.1-36.el8_10.i686.rpm SHA-256: c45811a2be34aef05a02580ea46069514457367d0339c3432d87a2350263d61a
python3-pillow-tk-debuginfo-5.1.1-36.el8_10.x86_64.rpm SHA-256: 7cfe5c585e7862197095315c9bce35b158528186522eaba3a2cee34ad4b41271

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
python-pillow-debuginfo-5.1.1-36.el8_10.ppc64le.rpm SHA-256: c1b195d05433e576764368673d5c2a07f9d500c467e45b2569285332b2177787
python-pillow-debugsource-5.1.1-36.el8_10.ppc64le.rpm SHA-256: eedad498d957bc4210219533b075c199c0fe9040c4f5a9678e37abe460e6d45d
python3-pillow-debuginfo-5.1.1-36.el8_10.ppc64le.rpm SHA-256: ee13d8141217f5799489aadffd1b35a1b912c31d8911307776d9f80e9497a372
python3-pillow-devel-5.1.1-36.el8_10.ppc64le.rpm SHA-256: 35d3c3139770c91c157fe25f2d6453b5d7dba7154e52d5051a30878e1825630d
python3-pillow-doc-5.1.1-36.el8_10.noarch.rpm SHA-256: 4c4e9219330a38093d9d3e31bf539f104cee7877dc3ca1aaa69677381fdc5222
python3-pillow-tk-5.1.1-36.el8_10.ppc64le.rpm SHA-256: f0cfcdf93bac17c93f3caefb408088450f58132f8f8bf8e63b2adaef08ea8545
python3-pillow-tk-debuginfo-5.1.1-36.el8_10.ppc64le.rpm SHA-256: 0ac53a215a32314141ce2db2dd26cb269d6ff2a3d507e4ad850061f1a07e831b

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
python-pillow-debuginfo-5.1.1-36.el8_10.aarch64.rpm SHA-256: 63fc05e1d3bc0720fa43af0990cf3c584cdc0bc5d1932770068e8979fc9a2dd0
python-pillow-debugsource-5.1.1-36.el8_10.aarch64.rpm SHA-256: 60c2cd93a2c47a631e4f002b18ca3601edfa7f02aec5049d472e0836e92cedc8
python3-pillow-debuginfo-5.1.1-36.el8_10.aarch64.rpm SHA-256: 128a3fbb11c0fde5ab848a42705a9e365c139e56821b5cdbfc04e09689fb481d
python3-pillow-devel-5.1.1-36.el8_10.aarch64.rpm SHA-256: 1d33872675f774e550766b6bc6d40ebf6880db5ceb372dea3c602c6cc4506b59
python3-pillow-doc-5.1.1-36.el8_10.noarch.rpm SHA-256: 4c4e9219330a38093d9d3e31bf539f104cee7877dc3ca1aaa69677381fdc5222
python3-pillow-tk-5.1.1-36.el8_10.aarch64.rpm SHA-256: 24a7a5da05625ab89e45def4f3e9ea947cbf56c323e1490dfdb0eed34d9e74fb
python3-pillow-tk-debuginfo-5.1.1-36.el8_10.aarch64.rpm SHA-256: b6bda95e5f3e54fbced8c1b611bb29a8a5c8bedd87d2eea95382c33e510cfcf2

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
python-pillow-debuginfo-5.1.1-36.el8_10.s390x.rpm SHA-256: 6758c2801d282b787d06167c02e8f9c2009fedbd018e438bc451eb123ac0392c
python-pillow-debugsource-5.1.1-36.el8_10.s390x.rpm SHA-256: d05e414e6c2b95ce7a8b4cb519648f8cd33a9a2bdc55e6671e78b89d1f1a5d69
python3-pillow-debuginfo-5.1.1-36.el8_10.s390x.rpm SHA-256: 9247a0bf8e1d0c1ed477019c53aa32767abf8dbab705d529888656be253d2725
python3-pillow-devel-5.1.1-36.el8_10.s390x.rpm SHA-256: 0a675b564e01671d9aa88dc630f3c2efc7e2b5029b0ce429a74ace5775096df9
python3-pillow-doc-5.1.1-36.el8_10.noarch.rpm SHA-256: 4c4e9219330a38093d9d3e31bf539f104cee7877dc3ca1aaa69677381fdc5222
python3-pillow-tk-5.1.1-36.el8_10.s390x.rpm SHA-256: fc11359c8a5253c478f477c832949272152e674bd6dd7c68846792ce85ba52df
python3-pillow-tk-debuginfo-5.1.1-36.el8_10.s390x.rpm SHA-256: c7a88a8cefb7bf7fe81f9da669eb2ce3e87b165d18b78f443ff73789fe72404a

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10

SRPM
python-pillow-5.1.1-36.el8_10.src.rpm SHA-256: 64b3764632ffd258628289f6455fc0868942e628cd232cffb044c40784489452
x86_64
python-pillow-debuginfo-5.1.1-36.el8_10.x86_64.rpm SHA-256: fd5168e19b23ffc50a8e6d6eafac770ef6b5f74890045952ef4e43d7c7c63ed0
python-pillow-debugsource-5.1.1-36.el8_10.x86_64.rpm SHA-256: fb5b48e2940d796591885c39cf3ffda4a24e4655ca57fbcca8c9d1660ce18711
python3-pillow-5.1.1-36.el8_10.x86_64.rpm SHA-256: 650c9cf44c1f20022f412548719bd8888534bc7006a95359fa9308e2d6cb57bd
python3-pillow-debuginfo-5.1.1-36.el8_10.x86_64.rpm SHA-256: 02fed1c66d15a0d07aba61a2188081834d91342e765bf7ab2582b51c28166d61
python3-pillow-tk-debuginfo-5.1.1-36.el8_10.x86_64.rpm SHA-256: 7cfe5c585e7862197095315c9bce35b158528186522eaba3a2cee34ad4b41271

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10

SRPM
python-pillow-5.1.1-36.el8_10.src.rpm SHA-256: 64b3764632ffd258628289f6455fc0868942e628cd232cffb044c40784489452
aarch64
python-pillow-debuginfo-5.1.1-36.el8_10.aarch64.rpm SHA-256: 63fc05e1d3bc0720fa43af0990cf3c584cdc0bc5d1932770068e8979fc9a2dd0
python-pillow-debugsource-5.1.1-36.el8_10.aarch64.rpm SHA-256: 60c2cd93a2c47a631e4f002b18ca3601edfa7f02aec5049d472e0836e92cedc8
python3-pillow-5.1.1-36.el8_10.aarch64.rpm SHA-256: baa32193414c31209aba28023065966f33af46340a7994786dbd9e310fc1f372
python3-pillow-debuginfo-5.1.1-36.el8_10.aarch64.rpm SHA-256: 128a3fbb11c0fde5ab848a42705a9e365c139e56821b5cdbfc04e09689fb481d
python3-pillow-tk-debuginfo-5.1.1-36.el8_10.aarch64.rpm SHA-256: b6bda95e5f3e54fbced8c1b611bb29a8a5c8bedd87d2eea95382c33e510cfcf2

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10

SRPM
python-pillow-5.1.1-36.el8_10.src.rpm SHA-256: 64b3764632ffd258628289f6455fc0868942e628cd232cffb044c40784489452
ppc64le
python-pillow-debuginfo-5.1.1-36.el8_10.ppc64le.rpm SHA-256: c1b195d05433e576764368673d5c2a07f9d500c467e45b2569285332b2177787
python-pillow-debugsource-5.1.1-36.el8_10.ppc64le.rpm SHA-256: eedad498d957bc4210219533b075c199c0fe9040c4f5a9678e37abe460e6d45d
python3-pillow-5.1.1-36.el8_10.ppc64le.rpm SHA-256: bea6986fcffb6d65aad15febe0facb6f1c246bf423e0715f9d096384b18a4d27
python3-pillow-debuginfo-5.1.1-36.el8_10.ppc64le.rpm SHA-256: ee13d8141217f5799489aadffd1b35a1b912c31d8911307776d9f80e9497a372
python3-pillow-tk-debuginfo-5.1.1-36.el8_10.ppc64le.rpm SHA-256: 0ac53a215a32314141ce2db2dd26cb269d6ff2a3d507e4ad850061f1a07e831b

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10

SRPM
python-pillow-5.1.1-36.el8_10.src.rpm SHA-256: 64b3764632ffd258628289f6455fc0868942e628cd232cffb044c40784489452
s390x
python-pillow-debuginfo-5.1.1-36.el8_10.s390x.rpm SHA-256: 6758c2801d282b787d06167c02e8f9c2009fedbd018e438bc451eb123ac0392c
python-pillow-debugsource-5.1.1-36.el8_10.s390x.rpm SHA-256: d05e414e6c2b95ce7a8b4cb519648f8cd33a9a2bdc55e6671e78b89d1f1a5d69
python3-pillow-5.1.1-36.el8_10.s390x.rpm SHA-256: 30923b0f2258e30e0cbd9bb058206ed55858bafcd1996c01fca86d8c58ad1709
python3-pillow-debuginfo-5.1.1-36.el8_10.s390x.rpm SHA-256: 9247a0bf8e1d0c1ed477019c53aa32767abf8dbab705d529888656be253d2725
python3-pillow-tk-debuginfo-5.1.1-36.el8_10.s390x.rpm SHA-256: c7a88a8cefb7bf7fe81f9da669eb2ce3e87b165d18b78f443ff73789fe72404a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.