High 2026-07-31

Python-Pillow Security Update — AlmaLinux 8 (ALSA-2026:48021)

AlmaLinux 8

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * Pillow: …

Security Fix(es):

* Pillow: …

Type:

security

Severity:

important

Release date:

2026-07-31

Description:

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  
Security Fix(es):  
  * Pillow: Pillow: Native heap out-of-bounds write (CVE-2026-59197)

  * Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image (CVE-2026-54058)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture	Package	Checksum
aarch64	python3-pillow-devel-5.1.1-23.el8_10.aarch64.rpm	1377c125c3b1ffb882c70201f507cce955b8a4664d7b48702e13be1621b4af17
aarch64	python3-pillow-tk-5.1.1-23.el8_10.aarch64.rpm	1cec74c5d86f5ec59033d4067278af87d8a873d97bccec8a99a6b75fe7b2296f
aarch64	python3-pillow-5.1.1-23.el8_10.aarch64.rpm	d5f10e00c936841aad1660ef6ed5fbb5fe9bc89f90fabde307c8ecdc2441bf36
i686	python3-pillow-devel-5.1.1-23.el8_10.i686.rpm	cb4c3f3e71b55922287c33726dffed36358af3622a43b37669ba29e1ef4a1256
i686	python3-pillow-5.1.1-23.el8_10.i686.rpm	e4e5e2ced96d4ca7afe6af61e1b9dcdacedcbb5230304c690fec7f0bad0ded5b
noarch	python3-pillow-doc-5.1.1-23.el8_10.noarch.rpm	d0b303dc4b133115fd5ddc322f03982ab90ee53c89710cbdc9f17833150d6068
ppc64le	python3-pillow-5.1.1-23.el8_10.ppc64le.rpm	499424930f984cbe4fd140b29281df0491104d08aac5b5e6eebf77572ab49340
ppc64le	python3-pillow-tk-5.1.1-23.el8_10.ppc64le.rpm	a98485d906fd61cf5282c55379a309eb346ce08dd4a044587ae48d14fbe11557
ppc64le	python3-pillow-devel-5.1.1-23.el8_10.ppc64le.rpm	dfa9bce3dae8c430d71cbbfe96d4184367b0ff3b011c43f50ea9a18c73d43c1e
s390x	python3-pillow-devel-5.1.1-23.el8_10.s390x.rpm	2992fd3d7a9ea1bb02657f04698eea3c00bc9b9c001a6dbcd6fddbbae350cd5a
s390x	python3-pillow-5.1.1-23.el8_10.s390x.rpm	588d4d7c589eae96e121e33131796c3d33cc567f928dcb080779a868fe33bceb
s390x	python3-pillow-tk-5.1.1-23.el8_10.s390x.rpm	615ae04b8a543a01257afb657cffa60496d01bf2b0a1c0714d48b76e24ed6959
x86_64	python3-pillow-devel-5.1.1-23.el8_10.x86_64.rpm	3f7a559e99660fe3709da9b77bf3100d716cce04d63d751c27824a70197f5b19
x86_64	python3-pillow-5.1.1-23.el8_10.x86_64.rpm	bcb7dbc537e9e3e2704161b82d9cbf529d56af64aea559d094cd33ede88babdc
x86_64	python3-pillow-tk-5.1.1-23.el8_10.x86_64.rpm	bfc27aed168fa4285a040c762912be0800bbb43a377e525b052dcd9da311fd48

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

How to Apply the Fix

Update the affected packages on your server to the patched release, then restart the relevant services.

sudo dnf update

More Information

Security Advisories

Neueste Advisories

EasyApache 4 25.77

2026-08-13

USN-8628-1: libgit2 vulnerabilities

2026-08-12

WordPress 7.0.4 Release

2026-08-12

Check your system for vulnerabilities

Wählen Sie Ihr Produkt und Betriebssystem, um die passenden Fix-Befehle zu sehen.

Check Your System