MGASA-2026-0463

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2026-0463.html
Import Source
https://advisories.mageia.org/MGASA-2026-0463.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2026-0463
Upstream
CVE (11)
Published
2026-10-01T00:08:51Z
Modified
2026-10-01T00:28:53Z
Summary
Updated python-pillow packages fix security vulnerabilities
Details

Prevent decompression bomb when parsing PDF WindowsViewer.get_command injection EPS image infinite loop JPEG2000 image memory usage McIdas out-of-bounds (OOB) read Out-of-bounds (OOB) read when saving 1 mode TGA images Out-of-bounds (OOB) write from large RankFilter sizes Out-of-bounds (OOB) write from Image.paste() Out-of-bounds (OOB) write in ImageCmsTransform Prevent FontFile decompression bomb Prevent GD decompression bomb

References
Credits

Affected packages

Mageia:10 / python-pillow

Package

Name
python-pillow
Purl
pkg:rpm/mageia/python-pillow?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
12.3.0-1.mga10

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0463.json"