Catalogue CVE

CVE-2023-44271

pillow affected and fixed versions

A flaw was found in Pillow. A denial of service issue uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for TrueType in ImageFont when text length in an ImageDraw instance operates on a long text argument. python-pillow: uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument This security vulnerability is categorized as having a moderate impact because it only results in increased memory consumption when exceptionally long strings are utilized as text input. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Gravité: High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published: Jun 30, 2023, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 1.35% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiantrixie-security	pillow	`11.1.0-5+deb13u3`	Fixed	[CVE-2023-44271]
Debiantrixie	pillow	`10.0.0-1`	FixedDistribution-reported fixed boundary	[CVE-2023-44271]
Debiantrixie	pillow	`11.1.0-5+deb13u4`	Fixed	[CVE-2023-44271]
Debiansid	pillow	`10.0.0-1`	FixedDistribution-reported fixed boundary	[CVE-2023-44271]
Debiansid	pillow	`13.0.0-1`	Fixed	[CVE-2023-44271]
Debianforky	pillow	`10.0.0-1`	FixedDistribution-reported fixed boundary	[CVE-2023-44271]
Debianforky	pillow	`12.3.0-1`	Fixed	[CVE-2023-44271]
Debianbookworm-security	pillow	`9.4.0-1.1+deb12u1`	Fixed	[CVE-2023-44271]
Debianbookworm	pillow	`9.4.0-1.1+deb12u1`	FixedDistribution-reported fixed boundary	[CVE-2023-44271]

Showing 9 fix observations. All 59 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
PyPIRelease not reported	pillow	`10.0.0`	UnknownSource applicability is not established	Provider not reported
PyPIRelease not reported	pillow	`1fe1bb49c452b0318cad12ea9d97c3bef188e9a7`	UnknownSource applicability is not established	Provider not reported
Debianbookworm	pillow	`9.4.0-1.1+deb12u1`	FixedDistribution-reported fixed boundary	[CVE-2023-44271]
Debianbookworm-security	pillow	`9.4.0-1.1+deb12u1`	Fixed	[CVE-2023-44271]
Debianforky	pillow	`10.0.0-1`	FixedDistribution-reported fixed boundary	[CVE-2023-44271]
Debianforky	pillow	`12.3.0-1`	Fixed	[CVE-2023-44271]
Debiansid	pillow	`10.0.0-1`	FixedDistribution-reported fixed boundary	[CVE-2023-44271]
Debiansid	pillow	`13.0.0-1`	Fixed	[CVE-2023-44271]
Debiantrixie	pillow	`10.0.0-1`	FixedDistribution-reported fixed boundary	[CVE-2023-44271]
Debiantrixie	pillow	`11.1.0-5+deb13u4`	Fixed	[CVE-2023-44271]
Debiantrixie-security	pillow	`11.1.0-5+deb13u3`	Fixed	[CVE-2023-44271]
Opensuseleap 15.4	python-Pillow	`7.2.0-150300.3.3.1`	UnknownSource applicability is not established	[SUSE-SU-2023:4465-1]Feb 4, 2026, 3:18:37 AM UTC
Opensuseleap 15.4	python-Pillow	`9.5.0-150400.5.6.1`	UnknownSource applicability is not established	[SUSE-SU-2023:4528-1]Feb 4, 2026, 3:17:17 AM UTC
Opensuseleap 15.5	python-Pillow	`7.2.0-150300.3.3.1`	UnknownSource applicability is not established	[SUSE-SU-2023:4465-1]Feb 4, 2026, 3:18:37 AM UTC
Opensuseleap 15.5	python-Pillow	`9.5.0-150400.5.6.1`	UnknownSource applicability is not established	[SUSE-SU-2023:4528-1]Feb 4, 2026, 3:17:17 AM UTC
Opensusetumbleweed	python-Pillow	`10.0.1-2.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:13439-1]Feb 4, 2026, 3:55:54 AM UTC
Susehpe helion openstack 8	python-Pillow	`4.2.1-3.23.2`	UnknownSource applicability is not established	[SUSE-SU-2023:4631-1]Feb 4, 2026, 2:38:11 AM UTC
Suselinux enterprise module for python 3 15 sp4	python-Pillow	`9.5.0-150400.5.6.1`	UnknownSource applicability is not established	[SUSE-SU-2023:4528-1]Feb 4, 2026, 3:17:17 AM UTC
Suselinux enterprise module for python 3 15 sp5	python-Pillow	`9.5.0-150400.5.6.1`	UnknownSource applicability is not established	[SUSE-SU-2023:4528-1]Feb 4, 2026, 3:17:17 AM UTC
Suseopenstack cloud 8	python-Pillow	`4.2.1-3.23.2`	UnknownSource applicability is not established	[SUSE-SU-2023:4631-1]Feb 4, 2026, 2:38:11 AM UTC
Suseopenstack cloud 9	python-Pillow	`5.2.0-3.20.1`	UnknownSource applicability is not established	[SUSE-SU-2023:4630-1]Feb 4, 2026, 4:17:48 AM UTC
Suseopenstack cloud crowbar 8	python-Pillow	`4.2.1-3.23.2`	UnknownSource applicability is not established	[SUSE-SU-2023:4631-1]Feb 4, 2026, 2:38:11 AM UTC
Suseopenstack cloud crowbar 9	python-Pillow	`5.2.0-3.20.1`	UnknownSource applicability is not established	[SUSE-SU-2023:4630-1]Feb 4, 2026, 4:17:48 AM UTC
Ubuntu20.04	pillow	`6.1.0-1`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu20.04	pillow	`6.1.0-1build1`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu20.04	pillow	`6.2.1-2`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu20.04	pillow	`7.0.0-4`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu20.04	pillow	`7.0.0-4build1`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu20.04	pillow	`7.0.0-4ubuntu0.1`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu20.04	pillow	`7.0.0-4ubuntu0.2`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu20.04	pillow	`7.0.0-4ubuntu0.3`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu20.04	pillow	`7.0.0-4ubuntu0.4`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu20.04	pillow	`7.0.0-4ubuntu0.5`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu20.04	pillow	`7.0.0-4ubuntu0.6`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu20.04	pillow	`7.0.0-4ubuntu0.7`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu20.04	pillow	`7.0.0-4ubuntu0.8`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu22.04	pillow	`8.1.2+dfsg-0.3`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu22.04	pillow	`9.0.0-1`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu22.04	pillow	`9.0.1-1`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu22.04	pillow	`9.0.1-1build1`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu22.04	pillow	`9.0.1-1ubuntu0.1`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntu22.04	pillow	`9.0.1-1ubuntu0.2`	UnknownSource applicability is not established	[USN-6618-1]Apr 27, 2026, 5:04:11 PM UTC[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow	`4.1.1-3build2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow	`4.3.0-2ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow	`5.0.0-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow	`5.1.0-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow	`5.1.0-1ubuntu0.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow	`5.1.0-1ubuntu0.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow	`5.1.0-1ubuntu0.4`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow	`5.1.0-1ubuntu0.5`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow	`5.1.0-1ubuntu0.6`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow	`5.1.0-1ubuntu0.7`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow	`5.1.0-1ubuntu0.8`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow	`5.1.0-1ubuntu0.8+esm1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow	`5.1.0-1ubuntu0.8+esm2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow-python2	`6.2.1-3`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow-python2	`6.2.1-3ubuntu0.1~esm1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow-python2	`6.2.1-3ubuntu0.1~esm2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC
Ubuntupro	pillow-python2	`6.2.1-3~build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-44271]Apr 2, 2026, 7:29:14 PM UTC

Original provider fields

{
  "package_releases": [
    {
      "name": "pillow",
      "status": "fixed",
      "release": "sid",
      "version": "13.0.0-1"
    },
    {
      "name": "pillow",
      "status": "fixed",
      "release": "forky",
      "version": "12.3.0-1"
    },
    {
      "name": "pillow",
      "status": "fixed",
      "release": "trixie",
      "version": "11.1.0-5+deb13u4"
    },
    {
      "name": "pillow",
      "status": "fixed",
      "release": "trixie-security",
      "version": "11.1.0-5+deb13u3"
    },
    {
      "name": "pillow",
      "status": "fixed",
      "release": "bookworm",
      "version": "9.4.0-1.1+deb12u1"
    },
    {
      "name": "pillow",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "9.4.0-1.1+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "pillow",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "10.0.0-1"
    },
    {
      "bug": null,
      "name": "pillow",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "10.0.0-1"
    },
    {
      "bug": null,
      "name": "pillow",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "10.0.0-1"
    },
    {
      "bug": null,
      "name": "pillow",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "9.4.0-1.1+deb12u1"
    }
  ],
  "distribution_packages": [
    {
      "name": "pillow",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.0.0"
            }
          ]
        }
      ],
      "ecosystem": "PyPI",
      "fixed_version": "10.0.0",
      "applicability_unknown": true
    },
    {
      "name": "pillow",
      "ranges": [
        {
          "repo": "https://github.com/python-pillow/Pillow",
          "type": "GIT",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1fe1bb49c452b0318cad12ea9d97c3bef188e9a7"
            }
          ]
        },
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.0.0"
            }
          ]
        }
      ],
      "ecosystem": "PyPI",
      "fixed_version": "10.0.0",
      "applicability_unknown": true
    },
    {
      "name": "pillow",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-4ubuntu0.8"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "6.1.0-1",
        "6.1.0-1build1",
        "6.2.1-2",
        "7.0.0-4",
        "7.0.0-4build1",
        "7.0.0-4ubuntu0.1",
        "7.0.0-4ubuntu0.2",
        "7.0.0-4ubuntu0.3",
        "7.0.0-4ubuntu0.4",
        "7.0.0-4ubuntu0.5",
        "7.0.0-4ubuntu0.6",
        "7.0.0-4ubuntu0.7"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-6618-1",
      "fixed_version": "7.0.0-4ubuntu0.8",
      "provider_source": "pypi",
      "provider_record_id": "USN-6618-1",
      "provider_updated_at": "2026-04-27T17:04:11.638426Z",
      "applicability_unknown": true
    },
    {
      "name": "pillow",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.0.1-1ubuntu0.2"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "8.1.2+dfsg-0.3",
        "9.0.0-1",
        "9.0.1-1",
        "9.0.1-1build1",
        "9.0.1-1ubuntu0.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-6618-1",
      "fixed_version": "9.0.1-1ubuntu0.2",
      "provider_source": "pypi",
      "provider_record_id": "USN-6618-1",
      "provider_updated_at": "2026-04-27T17:04:11.638426Z",
      "applicability_unknown": true
    },
    {
      "name": "pillow",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.1.0-1ubuntu0.8+esm2"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "4.1.1-3build2",
        "4.3.0-2ubuntu1",
        "5.0.0-1",
        "5.1.0-1",
        "5.1.0-1ubuntu0.2",
        "5.1.0-1ubuntu0.3",
        "5.1.0-1ubuntu0.4",
        "5.1.0-1ubuntu0.5",
        "5.1.0-1ubuntu0.6",
        "5.1.0-1ubuntu0.7",
        "5.1.0-1ubuntu0.8",
        "5.1.0-1ubuntu0.8+esm1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-44271",
      "fixed_version": "5.1.0-1ubuntu0.8+esm2",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-44271",
      "provider_updated_at": "2026-04-02T19:29:14.262225749Z",
      "applicability_unknown": true
    },
    {
      "name": "pillow",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-4ubuntu0.8"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "6.1.0-1",
        "6.1.0-1build1",
        "6.2.1-2",
        "7.0.0-4",
        "7.0.0-4build1",
        "7.0.0-4ubuntu0.1",
        "7.0.0-4ubuntu0.2",
        "7.0.0-4ubuntu0.3",
        "7.0.0-4ubuntu0.4",
        "7.0.0-4ubuntu0.5",
        "7.0.0-4ubuntu0.6",
        "7.0.0-4ubuntu0.7"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-44271",
      "fixed_version": "7.0.0-4ubuntu0.8",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-44271",
      "provider_updated_at": "2026-04-02T19:29:14.262225749Z",
      "applicability_unknown": true
    },
    {
      "name": "pillow-python2",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "6.2.1-3~build1",
        "6.2.1-3",
        "6.2.1-3ubuntu0.1~esm1",
        "6.2.1-3ubuntu0.1~esm2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-44271",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-44271",
      "provider_updated_at": "2026-04-02T19:29:14.262225749Z",
      "applicability_unknown": true
    },
    {
      "name": "pillow",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.0.1-1ubuntu0.2"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "8.1.2+dfsg-0.3",
        "9.0.0-1",
        "9.0.1-1",
        "9.0.1-1build1",
        "9.0.1-1ubuntu0.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-44271",
      "fixed_version": "9.0.1-1ubuntu0.2",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-44271",
      "provider_updated_at": "2026-04-02T19:29:14.262225749Z",
      "applicability_unknown": true
    },
    {
      "name": "python-Pillow",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.2.0-3.20.1"
            }
          ]
        }
      ],
      "release": "openstack cloud 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:4630-1",
      "fixed_version": "5.2.0-3.20.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:4630-1",
      "provider_updated_at": "2026-02-04T04:17:48.998150Z",
      "applicability_unknown": true
    },
    {
      "name": "python-Pillow",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.2.0-3.20.1"
            }
          ]
        }
      ],
      "release": "openstack cloud crowbar 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:4630-1",
      "fixed_version": "5.2.0-3.20.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:4630-1",
      "provider_updated_at": "2026-02-04T04:17:48.998150Z",
      "applicability_unknown": true
    },
    {
      "name": "python-Pillow",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.0.1-2.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:13439-1",
      "fixed_version": "10.0.1-2.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:13439-1",
      "provider_updated_at": "2026-02-04T03:55:54.330408Z",
      "applicability_unknown": true
    },
    {
      "name": "python-Pillow",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.2.0-150300.3.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:4465-1",
      "fixed_version": "7.2.0-150300.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:4465-1",
      "provider_updated_at": "2026-02-04T03:18:37.431489Z",
      "applicability_unknown": true
    },
    {
      "name": "python-Pillow",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.2.0-150300.3.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:4465-1",
      "fixed_version": "7.2.0-150300.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:4465-1",
      "provider_updated_at": "2026-02-04T03:18:37.431489Z",
      "applicability_unknown": true
    },
    {
      "name": "python-Pillow",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.5.0-150400.5.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for python 3 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:4528-1",
      "fixed_version": "9.5.0-150400.5.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:4528-1",
      "provider_updated_at": "2026-02-04T03:17:17.427867Z",
      "applicability_unknown": true
    },
    {
      "name": "python-Pillow",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.5.0-150400.5.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for python 3 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:4528-1",
      "fixed_version": "9.5.0-150400.5.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:4528-1",
      "provider_updated_at": "2026-02-04T03:17:17.427867Z",
      "applicability_unknown": true
    },
    {
      "name": "python-Pillow",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.5.0-150400.5.6.1"
            }
          ]
        }
      ],
      "release": "leap 15.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:4528-1",
      "fixed_version": "9.5.0-150400.5.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:4528-1",
      "provider_updated_at": "2026-02-04T03:17:17.427867Z",
      "applicability_unknown": true
    },
    {
      "name": "python-Pillow",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.5.0-150400.5.6.1"
            }
          ]
        }
      ],
      "release": "leap 15.5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:4528-1",
      "fixed_version": "9.5.0-150400.5.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:4528-1",
      "provider_updated_at": "2026-02-04T03:17:17.427867Z",
      "applicability_unknown": true
    },
    {
      "name": "python-Pillow",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.2.1-3.23.2"
            }
          ]
        }
      ],
      "release": "hpe helion openstack 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:4631-1",
      "fixed_version": "4.2.1-3.23.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:4631-1",
      "provider_updated_at": "2026-02-04T02:38:11.477273Z",
      "applicability_unknown": true
    },
    {
      "name": "python-Pillow",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.2.1-3.23.2"
            }
          ]
        }
      ],
      "release": "openstack cloud 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:4631-1",
      "fixed_version": "4.2.1-3.23.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:4631-1",
      "provider_updated_at": "2026-02-04T02:38:11.477273Z",
      "applicability_unknown": true
    },
    {
      "name": "python-Pillow",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.2.1-3.23.2"
            }
          ]
        }
      ],
      "release": "openstack cloud crowbar 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:4631-1",
      "fixed_version": "4.2.1-3.23.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:4631-1",
      "provider_updated_at": "2026-02-04T02:38:11.477273Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

L’association des paquets est en cours.

[Debian 12 (Bookworm)]

[python3-pil]Inconnu
Paquet source: [pillow]
Détails (4)
- 9.4.0-1.1+deb12u1 · amd64 · bookworm
  Corrigée · Corrigée: 9.4.0-1.1+deb12u1
  dsa · pillow · debian · bookworm; dsa · pillow · debian · 12
- 9.4.0-1.1+deb12u1 · arm64 · bookworm
  Corrigée · Corrigée: 9.4.0-1.1+deb12u1
  dsa · pillow · debian · bookworm; dsa · pillow · debian · 12
- 9.4.0-1.1+deb12u1 · amd64 · bookworm-security
  Corrigée · Corrigée: 9.4.0-1.1+deb12u1
  dsa · pillow · debian · bookworm; dsa · pillow · debian · 12
- 9.4.0-1.1+deb12u1 · arm64 · bookworm-security
  Corrigée · Corrigée: 9.4.0-1.1+deb12u1
  dsa · pillow · debian · bookworm; dsa · pillow · debian · 12
[python3-pil.imagetk]Inconnu
Paquet source: [pillow]
Détails (4)
- 9.4.0-1.1+deb12u1 · amd64 · bookworm
  Corrigée · Corrigée: 9.4.0-1.1+deb12u1
  dsa · pillow · debian · bookworm; dsa · pillow · debian · 12
- 9.4.0-1.1+deb12u1 · arm64 · bookworm
  Corrigée · Corrigée: 9.4.0-1.1+deb12u1
  dsa · pillow · debian · bookworm; dsa · pillow · debian · 12
- 9.4.0-1.1+deb12u1 · amd64 · bookworm-security
  Corrigée · Corrigée: 9.4.0-1.1+deb12u1
  dsa · pillow · debian · bookworm; dsa · pillow · debian · 12
- 9.4.0-1.1+deb12u1 · arm64 · bookworm-security
  Corrigée · Corrigée: 9.4.0-1.1+deb12u1
  dsa · pillow · debian · bookworm; dsa · pillow · debian · 12
[python-pil-doc]Inconnu
Paquet source: [pillow]
Détails (4)
- 9.4.0-1.1+deb12u1 · all · bookworm
  Corrigée · Corrigée: 9.4.0-1.1+deb12u1
  dsa · pillow · debian · bookworm; dsa · pillow · debian · 12
- 9.4.0-1.1+deb12u1 · all · bookworm
  Corrigée · Corrigée: 9.4.0-1.1+deb12u1
  dsa · pillow · debian · bookworm; dsa · pillow · debian · 12
- 9.4.0-1.1+deb12u1 · all · bookworm-security
  Corrigée · Corrigée: 9.4.0-1.1+deb12u1
  dsa · pillow · debian · bookworm; dsa · pillow · debian · 12
- 9.4.0-1.1+deb12u1 · all · bookworm-security
  Corrigée · Corrigée: 9.4.0-1.1+deb12u1
  dsa · pillow · debian · bookworm; dsa · pillow · debian · 12

[Debian 13 (Trixie)]

[python3-pil]Inconnu
Paquet source: [pillow]
Détails (4)
- 11.1.0-5+deb13u4 · amd64 · trixie
  Corrigée · Corrigée: 10.0.0-1
  dsa · pillow · debian · 13
- 11.1.0-5+deb13u4 · arm64 · trixie
  Corrigée · Corrigée: 10.0.0-1
  dsa · pillow · debian · 13
- 11.1.0-5+deb13u3 · amd64 · trixie-security
  Corrigée · Corrigée: 10.0.0-1
  dsa · pillow · debian · 13
- 11.1.0-5+deb13u3 · arm64 · trixie-security
  Corrigée · Corrigée: 10.0.0-1
  dsa · pillow · debian · 13
[python3-pil.imagetk]Inconnu
Paquet source: [pillow]
Détails (4)
- 11.1.0-5+deb13u4 · amd64 · trixie
  Corrigée · Corrigée: 10.0.0-1
  dsa · pillow · debian · 13
- 11.1.0-5+deb13u4 · arm64 · trixie
  Corrigée · Corrigée: 10.0.0-1
  dsa · pillow · debian · 13
- 11.1.0-5+deb13u3 · amd64 · trixie-security
  Corrigée · Corrigée: 10.0.0-1
  dsa · pillow · debian · 13
- 11.1.0-5+deb13u3 · arm64 · trixie-security
  Corrigée · Corrigée: 10.0.0-1
  dsa · pillow · debian · 13
[python-pil-doc]Inconnu
Paquet source: [pillow]
Détails (4)
- 11.1.0-5+deb13u4 · all · trixie
  Corrigée · Corrigée: 10.0.0-1
  dsa · pillow · debian · 13
- 11.1.0-5+deb13u4 · all · trixie
  Corrigée · Corrigée: 10.0.0-1
  dsa · pillow · debian · 13
- 11.1.0-5+deb13u3 · all · trixie-security
  Corrigée · Corrigée: 10.0.0-1
  dsa · pillow · debian · 13
- 11.1.0-5+deb13u3 · all · trixie-security
  Corrigée · Corrigée: 10.0.0-1
  dsa · pillow · debian · 13

[openSUSE Tumbleweed]

[python313-Pillow]Inconnu
Paquet source: [python-Pillow]
Détails (1)
- 12.3.0-2.2 · x86_64 · tumbleweed
  Inconnu · Corrigée: 10.0.1-2.1
  Version impact unknown
  dsa · python-Pillow · opensuse · tumbleweed
[python313-Pillow-tk]Inconnu
Paquet source: [python-Pillow]
Détails (1)
- 12.3.0-2.2 · x86_64 · tumbleweed
  Inconnu · Corrigée: 10.0.1-2.1
  Version impact unknown
  dsa · python-Pillow · opensuse · tumbleweed
[python314-Pillow]Inconnu
Paquet source: [python-Pillow]
Détails (1)
- 12.3.0-2.2 · x86_64 · tumbleweed
  Inconnu · Corrigée: 10.0.1-2.1
  Version impact unknown
  dsa · python-Pillow · opensuse · tumbleweed
[python314-Pillow-tk]Inconnu
Paquet source: [python-Pillow]
Détails (1)
- 12.3.0-2.2 · x86_64 · tumbleweed
  Inconnu · Corrigée: 10.0.1-2.1
  Version impact unknown
  dsa · python-Pillow · opensuse · tumbleweed

Observé: Oct 28, 2026, 5:45:08 PM UTC

Références

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]