Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

openSUSE Python-Pillow Important Denial of Service Issues Vuln 2026-2234-1

opensuse
Calendar Grey June 4, 2026
Dist Opensuse Esm H88
# Security update for python-Pillow Announcement ID: SUSE-SU-2026:2234-1 Release Date: 2026-06-03T10
An update that solves two vulnerabilities can now be installed.

Description

This update for python-Pillow fixes the following issues

* CVE-2026-42308: integer overflow in font processing can lead to denial of

service (bsc#1265359).

* CVE-2026-42310: infinite loop and resource exhaustion when processing

specially crafted PDFs (bsc#1265154).

Topics%20covered

Topics Covered

security advisory denial of service important OpenSUSE python-pillow

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.4

zypper in -t patch SUSE-2026-2234=1

* Python 3 Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-2234=1

* SUSE Linux Enterprise Server 15 SP5 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2234=1

* SUSE Linux Enterprise Server 15 SP6 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2234=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2234=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP4

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2234=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP5

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2234=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

zypper in -t patch...

Read the Full Advisory

Package List

* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586)

* python-Pillow-debuginfo-9.5.0-150400.5.20.1

* python311-Pillow-tk-9.5.0-150400.5.20.1

* python-Pillow-debugsource-9.5.0-150400.5.20.1

* python311-Pillow-9.5.0-150400.5.20.1

* python311-Pillow-debuginfo-9.5.0-150400.5.20.1

* python311-Pillow-tk-debuginfo-9.5.0-150400.5.20.1

* Python 3 Module 15-SP7 (aarch64 ppc64le s390x x86_64)

* python-Pillow-debuginfo-9.5.0-150400.5.20.1

* python311-Pillow-tk-9.5.0-150400.5.20.1

* python-Pillow-debugsource-9.5.0-150400.5.20.1

* python311-Pillow-9.5.0-150400.5.20.1

* python311-Pillow-debuginfo-9.5.0-150400.5.20.1

* python311-Pillow-tk-debuginfo-9.5.0-150400.5.20.1

* SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)

* python-Pillow-debuginfo-9.5.0-150400.5.20.1

* python311-Pillow-tk-9.5.0-150400.5.20.1

* python-Pillow-debugsource-9.5.0-150400.5.20.1

* python311-Pillow-9.5.0-150400.5.20.1

* python311-Pillow-debuginfo-9.5.0-150400.5.20.1

* python311-Pillow-tk-debuginfo-9.5.0-150400.5.20.1

*...

Read the Full Advisory

References

* bsc#1265154

* bsc#1265359

## References:

* https://www.suse.com/security/cve/CVE-2026-42308.html

* https://www.suse.com/security/cve/CVE-2026-42310.html

* https://bugzilla.suse.com/show_bug.cgi?id=1265154

* https://bugzilla.suse.com/show_bug.cgi?id=1265359

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:2234-1
Release Date: 2026-06-03T10:59:44Z
Affected Products: * openSUSE Leap 15.4 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7

Topics%20covered

Topics Covered

security advisory denial of service important OpenSUSE python-pillow

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here