[Git][security-tracker-team/security-tracker][master] Add more pillow issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d6ffac61 by Salvatore Bonaccorso at 2026-10-20T12:35:38+02:00
Add more pillow issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -275,25 +275,45 @@ CVE-2026-112400 (Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pi
 	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-65qm-jvmh-6pqg
 	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/6faed707cfb760a4cbd726ddc8406f576cf35bf7 (13.0.0)
 CVE-2026-112399 (Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow ca ...)
-	TODO: check
+	- pillow <unfixed>
+	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-5xm2-6676-qcp9
+	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/f1acfc54c53502948d0d14121872061df931db48 (13.0.0)
 CVE-2026-112398 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix ...)
-	TODO: check
+	- pillow <unfixed>
+	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h
+	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75 (13.0.0)
 CVE-2026-112397 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMor ...)
-	TODO: check
+	- pillow <unfixed>
+	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-58r4-6rv3-gfh8
+	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/18f7c0dfee93063c51db6ed0ca8c4da2999dcb64 (13.0.0)
 CVE-2026-112396 (Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow h ...)
-	TODO: check
+	- pillow <unfixed>
+	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-4rr5-89j8-mwwm
+	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/dc95da20207827a062cfbf551ee9f6031465a8bb (13.0.0)
 CVE-2026-112395 (Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's  ...)
-	TODO: check
+	- pillow <unfixed>
+	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-462x-pgg6-55fp
+	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/76869efdbbf2ad7dccd7536520fb61b7a00ab61e (13.0.0)
 CVE-2026-112394 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and ...)
-	TODO: check
+	- pillow <unfixed>
+	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-4558-3h8r-v8xp
+	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/392ee6f0d19a4adb766a63e9a99f3c28193b8d31 (13.0.0)
 CVE-2026-112393 (Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow ha ...)
-	TODO: check
+	- pillow <unfixed>
+	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-332p-7hrc-92wf
+	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/11582e5ffbdceb973d5ee593f3105af5a9852b40 (13.0.0)
 CVE-2026-112392 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-bas ...)
-	TODO: check
+	- pillow <unfixed>
+	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-27h8-gf7j-v5hc
+	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/443e3130a8c11594fd0e296afad497e11e678961 (13.0.0)
 CVE-2026-112391 (Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's  ...)
-	TODO: check
+	- pillow <unfixed>
+	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-254f-3936-288h
+	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/94cb11c44ff7345414da17ebfea1598a529ad9cd (13.0.0)
 CVE-2026-112390 (Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow ca ...)
-	TODO: check
+	- pillow <unfixed>
+	NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9
+	NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218 (13.0.0)
 CVE-2026-112373 (A security vulnerability has been detected in H3C Magic NX15 NX15V100R ...)
 	TODO: check
 CVE-2026-112372 (A weakness has been identified in H3C Magic NX15 V100R017. This affect ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6ffac619b509eafdd040b60b5fa8f7d15f909b9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6ffac619b509eafdd040b60b5fa8f7d15f909b9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261020/52c71bf8/attachment.htm>