CLSA-2026-1792164435
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1792164435.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1792164435
- Upstream
CVE (2)
- Published
- 2026-10-16T15:27:27Z
- Modified
- 2026-10-26T09:32:04Z
- Summary
- Fix CVE(s): CVE-2026-54058, CVE-2026-59199
- Details
-
- SECURITY UPDATE: heap out-of-bounds write via paste box coordinates
near the signed 32-bit integer limits (ELSCVE-233283)
- debian/patches/CVE-2026-59199.patch: compute the paste box dimensions as int64_t in ImagingPaste() and ImagingFill2() in src/libImaging/Paste.c. Adds a regression test in Tests/test_image_paste.py.
- CVE-2026-59199
- SECURITY UPDATE: out-of-bounds read when memory-mapping McIdas AREA
images with an undersized row stride (ELSCVE-233312)
- debian/patches/CVE-2026-54058.patch: raise the row stride to at least one full row of pixels in PyImaging_MapBuffer() in src/map.c. Adds a regression test in Tests/test_file_mcidas.py.
- CVE-2026-54058
- SECURITY UPDATE: heap out-of-bounds write via paste box coordinates
near the signed 32-bit integer limits (ELSCVE-233283)
- References
Affected packages
TuxCare:Ubuntu:18.04 / python-pil
Package
- Name
- python-pil
- Purl
- pkg:deb/tuxcare/python-pil?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / python-pil-doc
Package
- Name
- python-pil-doc
- Purl
- pkg:deb/tuxcare/python-pil-doc?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / python-pil.imagetk
Package
- Name
- python-pil.imagetk
- Purl
- pkg:deb/tuxcare/python-pil.imagetk?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / python3-pil
Package
- Name
- python3-pil
- Purl
- pkg:deb/tuxcare/python3-pil?distro=ubuntu-18.04