Alerts This Week
Warning Icon 1 612
Alerts This Week
Warning Icon 1 612

Mageia Python-Pillow Critical Integer Overflow DoS 2026-0219

mageia
Calendar Grey June 18, 2026
Dist Mageia Esm H88
Critical security update for Mageia affecting python-pillow due to integer overflow and DoS vulnerabilities. Update now.
Security update

Summary

Description: Integer overflow when processing fonts. (CVE-2026-42308) PDF Parsing Trailer Infinite Loop (DoS). (CVE-2026-42310)

References

- https://bugs.mageia.org/show_bug.cgi?id=35657

- https://ubuntu.com/security/notices/USN-8399-1

- https://github.com/python-pillow/Pillow/security/advisories/GHSA-r73j-pqj5-w3x7

- https://github.com/python-pillow/Pillow/security/advisories/GHSA-wjx4-4jcj-g98j

- https://www.cve.org/CVERecord?id=CVE-2026-42308

- https://www.cve.org/CVERecord?id=CVE-2026-42310

Topics%20covered

Topics Covered

security advisory critical DoS integer overflow Mageia python-pillow

Resolution

SRPMS

- 9/core/python-pillow-9.2.0-3.3.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 18 Jun 2026
URL: https://advisories.mageia.org/MGASA-2026-0219.html
Type: security
CVE: CVE-2026-42308, CVE-2026-42310

Topics%20covered

Topics Covered

security advisory critical DoS integer overflow Mageia python-pillow

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here