[Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for pillow issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Oct 20 19:35:54 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
8f4c2776 by Salvatore Bonaccorso at 2026-10-20T20:35:13+02:00
Track fixed version via unstable for pillow issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -191,44 +191,44 @@ CVE-2026-113380 (In the RingRTC library before 2.72.0 for Signal, a peer that sa
CVE-2026-112991 (The html_to_markdown expansion module in MISP Modules contains a serve ...)
NOT-FOR-US: html_to_markdown expansion module in MISP Modules
CVE-2026-112901 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM head ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-xgh8-jp6q-p5x8
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/2852a3e3d568997ddec745fc800991f138878f4b (13.0.0)
CVE-2026-112900 (Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-w889-685w-c8fh
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/a2c363141da31a265dd536c945677db4b64f3ec9 (13.0.0)
CVE-2026-112898 (Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow ca ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-rfgq-q3w2-pmv2
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/13943c8f857b22f073d30f0ef9b725a0d255f1a4 (13.0.0)
CVE-2026-112897 (Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow ca ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-q45j-58j2-45rg
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce (13.0.0)
CVE-2026-112896 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF enc ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-pchr-8j38-3x4p
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/d03dc3c587a9b0bdc9e4304d70d59a635a87b742 (13.0.0)
CVE-2026-112895 (Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow ca ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-p4wg-p73j-c528
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/e2ae7eacad6de68c37eb28b633a97bebacf2c5bf (13.0.0)
NOTE: CVE exists because of an incomplete fix for CVE-2026-42310.
CVE-2026-112894 (Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow ta ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-jg86-v3jv-hrpm
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/f6a852555f1a1bdff7781abf25f1a3b8bd6ce6cb (13.0.0)
CVE-2026-112893 (Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow c ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-j4m9-6w36-pw47
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/a7416de7f3a43128179d2cf68df3240ea8dafe13 (13.0.0)
CVE-2026-112892 (Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-gg2r-wvfm-q9rx
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/5dcb630b9798efd91929cb873d677aeee6ed0bb3 (13.0.0)
CVE-2026-112891 (Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow pe ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-fc9g-5qg7-mf45
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/68a3fe957d8a4d552e8c69d96066d749f0614c7e (13.0.0)
CVE-2026-112782 (Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a res ...)
@@ -262,72 +262,72 @@ CVE-2026-112769 (Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does
CVE-2026-112768 (Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates c ...)
NOT-FOR-US: Parse Server
CVE-2026-112406 (Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow ca ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-f2g6-542v-9j58
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/b3ebf20c694f2f12537a629c30229a1d5a53f777 (13.0.0)
CVE-2026-112405 (Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
[trixie] - pillow <not-affected> (Vulnerable code not prsent)
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-cp9v-662q-vvx9
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/b6ee66e8b2c2c0932bdf65f963268d9f2927ef86 (13.0.0)
CVE-2026-112404 (Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-c6hw-5grf-ff96
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce (13.0.0)
CVE-2026-112403 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG dec ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-8g5g-8vmr-9782
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75 (13.0.0)
CVE-2026-112402 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-7mwm-ghpf-9vrm
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/aafa6c75f7cdabb9f409a8aac7c780bea31d08d9 (13.0.0)
CVE-2026-112401 (Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow pe ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-74r2-7ff9-mjj2
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/68a3fe957d8a4d552e8c69d96066d749f0614c7e (13.0.0)
CVE-2026-112400 (Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow ca ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-65qm-jvmh-6pqg
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/6faed707cfb760a4cbd726ddc8406f576cf35bf7 (13.0.0)
CVE-2026-112399 (Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow ca ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-5xm2-6676-qcp9
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/f1acfc54c53502948d0d14121872061df931db48 (13.0.0)
CVE-2026-112398 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75 (13.0.0)
CVE-2026-112397 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMor ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-58r4-6rv3-gfh8
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/18f7c0dfee93063c51db6ed0ca8c4da2999dcb64 (13.0.0)
CVE-2026-112396 (Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow h ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-4rr5-89j8-mwwm
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/dc95da20207827a062cfbf551ee9f6031465a8bb (13.0.0)
CVE-2026-112395 (Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-462x-pgg6-55fp
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/76869efdbbf2ad7dccd7536520fb61b7a00ab61e (13.0.0)
CVE-2026-112394 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-4558-3h8r-v8xp
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/392ee6f0d19a4adb766a63e9a99f3c28193b8d31 (13.0.0)
CVE-2026-112393 (Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow ha ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-332p-7hrc-92wf
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/11582e5ffbdceb973d5ee593f3105af5a9852b40 (13.0.0)
CVE-2026-112392 (Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-bas ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-27h8-gf7j-v5hc
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/443e3130a8c11594fd0e296afad497e11e678961 (13.0.0)
CVE-2026-112391 (Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-254f-3936-288h
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/94cb11c44ff7345414da17ebfea1598a529ad9cd (13.0.0)
CVE-2026-112390 (Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow ca ...)
- - pillow <unfixed>
+ - pillow 13.0.0-1
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9
NOTE: Fixed by: https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218 (13.0.0)
CVE-2026-112373 (A security vulnerability has been detected in H3C Magic NX15 NX15V100R ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f4c277676828603470139a8f9912929345e164e
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f4c277676828603470139a8f9912929345e164e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261020/5ff41ade/attachment.htm>
More information about the debian-security-tracker-commits
mailing list