Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6357-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
June 21, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : pillow
CVE ID : CVE-2026-42308 CVE-2026-42310 CVE-2026-42311
Multiple security vulnerabilities have been discovered in Pillow, a
Python imaging library, which could result in denial of service or the
execution of arbitrary code if malformed files are processed.
For the stable distribution (trixie), these problems have been fixed in
version 11.1.0-5+deb13u3.
We recommend that you upgrade your pillow packages.
For the detailed security status of pillow please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/pillow
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmo4FLAACgkQEMKTtsN8
TjZ7Jw/9Eu/VnLgQZHbHHSLNo+KvxbrM8+TjrkxQLTpUGakpIkdvJ5B5KuAO+oZS
Zk9kwxe/jHBqOqnTSbzvHavY84jibWhKrY1/VzBwuYafvKEE+rBmwoqyRSNI16Fc
3ayFY2tdkY/LQDVclqvzI3uR68Wi8EWY8hx+hrIqVjXHBvKYl8wlLZxrkCUXhTI5
EeYUgUJBVrzLq3eqZwwLjjNGThnNr8FiXlYVmeyca8Ed/cacmkbJX0/3XMv69/fi
kPBeZhV0T+dF13eqNhXbssdI65eqcTpAX4EdzyUMohh7MHp7eOYE7rinM1c1hkRT
gPZWsPJbvFcQ3ZiTj6wSy+/B7hCWaV3FOBUFOnJpK+M86Gmx3iFBcY88FHPATEew
MWHI9GLd8DEXxUiCwXrjRkOiO0pruaO9yy4lLqVPEzJ61bVLIE+O5SWvl3btir2/
KCCz3Gv44f7P1RQ9jlxbkfnpdE72+dQodAlaY6CC9mmrcHRG4yV+QKiu+V9ZxbBL
E5DPzF/8Zew2aQKWAUDNY1cLDwjsIyTOWRAVgYTLXv/MGl9MAwKF2bs7szpRGkYA
gLVcWd+oxyX9oISLdQwtCI9HW6FXE4WEkVeTXuaZjXME1RH48Y4THfQQ9bNyx0yJ
dNHa1PSIshnZHZkBfJu3UNM/GAwFDVOs6KTskef9kG74Xl1ed/g=
=Owdt
-----END PGP SIGNATURE-----
| Date | Sujet | # | Auteur | |
| 21 Jun 26 |  [SECURITY] [DSA 6357-1] pillow security update | 1 | Moritz Muehlenhoff |
Les messages affichés proviennent d'usenet.