[Git][security-tracker-team/security-tracker][master] Add new pillow issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9170fe13 by Salvatore Bonaccorso at 2026-10-20T10:43:04+02:00
Add new pillow issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -175,15 +175,25 @@ CVE-2026-113380 (In the RingRTC library before 2.72.0 for Signal, a peer that sa
 CVE-2026-112991 (The html_to_markdown expansion module in MISP Modules contains a serve ...)
 	TODO: check
 CVE-2026-112901 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM head ...)
-	TODO: check
+	- pillow <unfixed>
+	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-xgh8-jp6q-p5x8
+	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/2852a3e3d568997ddec745fc800991f138878f4b (13.0.0)
 CVE-2026-112900 (Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is ...)
-	TODO: check
+	- pillow <unfixed>
+	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-w889-685w-c8fh
+	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/a2c363141da31a265dd536c945677db4b64f3ec9 (13.0.0)
 CVE-2026-112898 (Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow ca ...)
-	TODO: check
+	- pillow <unfixed>
+	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-rfgq-q3w2-pmv2
+	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/13943c8f857b22f073d30f0ef9b725a0d255f1a4 (13.0.0)
 CVE-2026-112897 (Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow ca ...)
-	TODO: check
+	- pillow <unfixed>
+	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-q45j-58j2-45rg
+	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce (13.0.0)
 CVE-2026-112896 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF enc ...)
-	TODO: check
+	- pillow <unfixed>
+	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-pchr-8j38-3x4p
+	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/d03dc3c587a9b0bdc9e4304d70d59a635a87b742 (13.0.0)
 CVE-2026-112895 (Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow ca ...)
 	TODO: check
 CVE-2026-112894 (Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow ta ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9170fe13499b06135ce9cd199dc2c5548762871e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9170fe13499b06135ce9cd199dc2c5548762871e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261020/70a916c5/attachment.htm>