SUSE-SU-2026:21861-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-202621861-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:21861-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:21861-1
- Upstream
- Related
- Published
- 2026-05-28T16:03:47Z
- Modified
- 2026-06-02T18:24:30Z
- Summary
- Security update for python-Pillow
- Details
-
This update for python-Pillow fixes the following issues
- CVE-2026-42308: integer overflow in font processing can lead to denial of service (bsc#1265359).
- CVE-2026-42309: heap buffer overflow when processing nested list coordinates (bsc#1265153).
- CVE-2026-42310: infinite loop and resource exhaustion when processing specially crafted PDFs (bsc#1265154).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-202621861-1/
- https://bugzilla.suse.com/1265153
- https://bugzilla.suse.com/1265154
- https://bugzilla.suse.com/1265359
- https://www.suse.com/security/cve/CVE-2026-42308
- https://www.suse.com/security/cve/CVE-2026-42309
- https://www.suse.com/security/cve/CVE-2026-42310