Packages / Debian 13 (Trixie) / python / python3-pil

Package: python3-pil (11.1.0-5+deb13u4)

Python Imaging Library (Python3)

Other Packages Related to python3-pil:

  • dep: [python3] (<< 3.14)

    interactive high-level object-oriented language (default python3 version)

  • dep: [python3] (>= 3.13~)

    interactive high-level object-oriented language (default python3 version)

  • dep: [python3] [any]

    interactive high-level object-oriented language (default python3 version)

  • dep: [media-types]

    List of standard media types and their usual file extension

  • dep: [python3-pil.imagetk]

    Python Imaging Library - Módulo ImageTk (Python3)

  • dep: [libc6] (>= 2.14)

    GNU C Library: Shared libraries

  • dep: [libfreetype6] (>= 2.10.1)

    Motor de fuentes FreeType 2, archivos de biblioteca compartida

  • dep: [libimagequant0] (>= 2.11.10)

    palette quantization library

  • dep: [libjpeg62-turbo] (>= 1.3.1)

    libjpeg-turbo JPEG runtime library

  • dep: [liblcms2-2] (>= 2.7)

    Little CMS 2 biblioteca de gestión del color

  • dep: [libopenjp2-7] (>= 2.4.0)

    Biblioteca de compresión/descompresión de imágenes JPEG 2000

  • dep: [libraqm0] (>= 0.7.0)

    Library for complex text layout

  • dep: [libtiff6] (>= 4.0.3)

    biblioteca Tag Image File Format (TIFF)

  • dep: [libwebp7] (>= 1.5.0)

    Lossy compression of digital photographic images (shared library)

  • dep: [libwebpdemux2] (>= 1.5.0)

    Lossy compression of digital photographic images (libwebpdemux library)

  • dep: [libwebpmux3] (>= 1.5.0)

    Lossy compression of digital photographic images (libwebpmux library)

  • dep: [libxcb1]

    X C Binding

  • dep: [zlib1g] (>= 1:1.1.4)

    compression library - runtime

  • rec: [python3-olefile]

    Módulo de Python para leer/escribir archivos MS OLE2

Download python3-pil

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64501 KiB1.8 MiBlist of filesDownload
arm64484 KiB2.0 MiBlist of filesDownload

Rutas de archivos del paquete (127)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/include/python3.13/Imaging.h
  • /usr/include/python3.13/ImagingUtils.h
  • /usr/include/python3.13/ImDib.h
  • /usr/include/python3.13/ImPlatform.h
  • /usr/lib/python3/dist-packages/PIL/BdfFontFile.py
  • /usr/lib/python3/dist-packages/PIL/_binary.py
  • /usr/lib/python3/dist-packages/PIL/BlpImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/BmpImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/BufrStubImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/ContainerIO.py
  • /usr/lib/python3/dist-packages/PIL/CurImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/DcxImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/DdsImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/_deprecate.py
  • /usr/lib/python3/dist-packages/PIL/EpsImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/ExifTags.py
  • /usr/lib/python3/dist-packages/PIL/features.py
  • /usr/lib/python3/dist-packages/PIL/FitsImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/FliImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/FontFile.py
  • /usr/lib/python3/dist-packages/PIL/FpxImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/FtexImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/GbrImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/GdImageFile.py
  • /usr/lib/python3/dist-packages/PIL/GifImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/GimpGradientFile.py
  • /usr/lib/python3/dist-packages/PIL/GimpPaletteFile.py
  • /usr/lib/python3/dist-packages/PIL/GribStubImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/Hdf5StubImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/IcnsImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/IcoImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/ImageChops.py
  • /usr/lib/python3/dist-packages/PIL/ImageCms.py
  • /usr/lib/python3/dist-packages/PIL/ImageColor.py
  • /usr/lib/python3/dist-packages/PIL/ImageDraw2.py
  • /usr/lib/python3/dist-packages/PIL/ImageDraw.py
  • /usr/lib/python3/dist-packages/PIL/ImageEnhance.py
  • /usr/lib/python3/dist-packages/PIL/ImageFile.py
  • /usr/lib/python3/dist-packages/PIL/ImageFilter.py
  • /usr/lib/python3/dist-packages/PIL/ImageFont.py
  • /usr/lib/python3/dist-packages/PIL/ImageGrab.py
  • /usr/lib/python3/dist-packages/PIL/ImageMath.py
  • /usr/lib/python3/dist-packages/PIL/ImageMode.py
  • /usr/lib/python3/dist-packages/PIL/ImageMorph.py
  • /usr/lib/python3/dist-packages/PIL/ImageOps.py
  • /usr/lib/python3/dist-packages/PIL/ImagePalette.py
  • /usr/lib/python3/dist-packages/PIL/ImagePath.py
  • /usr/lib/python3/dist-packages/PIL/Image.py
  • /usr/lib/python3/dist-packages/PIL/ImageQt.py
  • /usr/lib/python3/dist-packages/PIL/ImageSequence.py
  • /usr/lib/python3/dist-packages/PIL/ImageShow.py
  • /usr/lib/python3/dist-packages/PIL/ImageStat.py
  • /usr/lib/python3/dist-packages/PIL/ImageTransform.py
  • /usr/lib/python3/dist-packages/PIL/ImageWin.py
  • /usr/lib/python3/dist-packages/PIL/_imagingcms.cpython-313-aarch64-linux-gnu.so
  • /usr/lib/python3/dist-packages/PIL/_imagingcms.cpython-313-x86_64-linux-gnu.so
  • /usr/lib/python3/dist-packages/PIL/_imagingcms.pyi
  • /usr/lib/python3/dist-packages/PIL/_imaging.cpython-313-aarch64-linux-gnu.so
  • /usr/lib/python3/dist-packages/PIL/_imaging.cpython-313-x86_64-linux-gnu.so
  • /usr/lib/python3/dist-packages/PIL/_imagingft.cpython-313-aarch64-linux-gnu.so
  • /usr/lib/python3/dist-packages/PIL/_imagingft.cpython-313-x86_64-linux-gnu.so
  • /usr/lib/python3/dist-packages/PIL/_imagingft.pyi
  • /usr/lib/python3/dist-packages/PIL/_imagingmath.cpython-313-aarch64-linux-gnu.so
  • /usr/lib/python3/dist-packages/PIL/_imagingmath.cpython-313-x86_64-linux-gnu.so
  • /usr/lib/python3/dist-packages/PIL/_imagingmath.pyi
  • /usr/lib/python3/dist-packages/PIL/_imagingmorph.cpython-313-aarch64-linux-gnu.so
  • /usr/lib/python3/dist-packages/PIL/_imagingmorph.cpython-313-x86_64-linux-gnu.so
  • /usr/lib/python3/dist-packages/PIL/_imagingmorph.pyi
  • /usr/lib/python3/dist-packages/PIL/_imaging.pyi
  • /usr/lib/python3/dist-packages/PIL/_imagingtk.pyi
  • /usr/lib/python3/dist-packages/PIL/ImImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/ImtImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/__init__.py
  • /usr/lib/python3/dist-packages/PIL/IptcImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/Jpeg2KImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/JpegImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/JpegPresets.py
  • /usr/lib/python3/dist-packages/pillow-11.1.0.egg-info/dependency_links.txt
  • /usr/lib/python3/dist-packages/pillow-11.1.0.egg-info/PKG-INFO
  • /usr/lib/python3/dist-packages/pillow-11.1.0.egg-info/requires.txt
  • /usr/lib/python3/dist-packages/pillow-11.1.0.egg-info/top_level.txt
  • /usr/lib/python3/dist-packages/pillow-11.1.0.egg-info/zip-safe
  • /usr/lib/python3/dist-packages/PIL/__main__.py
  • /usr/lib/python3/dist-packages/PIL/McIdasImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/MicImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/MpegImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/MpoImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/MspImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/PaletteFile.py
  • /usr/lib/python3/dist-packages/PIL/PalmImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/PcdImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/PcfFontFile.py
  • /usr/lib/python3/dist-packages/PIL/PcxImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/PdfImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/PdfParser.py
  • /usr/lib/python3/dist-packages/PIL/PixarImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/PngImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/PpmImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/PsdImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/PSDraw.py
  • /usr/lib/python3/dist-packages/PIL/py.typed
  • /usr/lib/python3/dist-packages/PIL/QoiImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/report.py
  • /usr/lib/python3/dist-packages/PIL/SgiImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/SpiderImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/SunImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/TarIO.py
  • /usr/lib/python3/dist-packages/PIL/TgaImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/TiffImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/TiffTags.py
  • /usr/lib/python3/dist-packages/PIL/_tkinter_finder.py
  • /usr/lib/python3/dist-packages/PIL/_typing.py
  • /usr/lib/python3/dist-packages/PIL/_util.py
  • /usr/lib/python3/dist-packages/PIL/_version.py
  • /usr/lib/python3/dist-packages/PIL/WalImageFile.py
  • /usr/lib/python3/dist-packages/PIL/_webp.cpython-313-aarch64-linux-gnu.so
  • /usr/lib/python3/dist-packages/PIL/_webp.cpython-313-x86_64-linux-gnu.so
  • /usr/lib/python3/dist-packages/PIL/WebPImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/_webp.pyi
  • /usr/lib/python3/dist-packages/PIL/WmfImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/XbmImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/XpmImagePlugin.py
  • /usr/lib/python3/dist-packages/PIL/XVThumbImagePlugin.py
  • /usr/share/doc/python3-pil/changelog.Debian.gz
  • /usr/share/doc/python3-pil/changelog.gz
  • /usr/share/doc/python3-pil/copyright
  • /usr/share/doc/python3-pil/README.md.gz

Field source: Debian 13 (Trixie) main amd64

Usar este paquete

OpenFactory puede arrancar este sistema operativo en una máquina virtual del navegador, o iniciar una construcción que incluye el nombre nativo del paquete de este registro.

Versiones, suites y repositorios

Cada fila es metadato del índice de paquetes para una versión, arquitectura, suite y repositorio. Nombres, URL y tamaños vienen de la fuente; un enlace es un punto de descarga que puede cambiar, no una redistribución de OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
11.1.0-5+deb13u4trixie / mainamd64Debian 13 · main · amd64501 KiB1.8 MiBpool/main/p/pillow/python3-pil_11.1.0-5+deb13u4_amd64.deb
11.1.0-5+deb13u4trixie / mainarm64Debian 13 · main · arm64484 KiB2.0 MiBpool/main/p/pillow/python3-pil_11.1.0-5+deb13u4_arm64.deb

Field source: Debian 13 (Trixie) main amd64

Vulnerabilidades conocidas

La asociación de paquetes está en curso.

CVEGravedadImpacto por versión
[CVE-2026-96639]

Published:

pillow: CVE-2026-96639

Critical(9.8)Afectada
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Afectada

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 13

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Afectada

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 13

[CVE-2026-96638]

Published:

pillow: CVE-2026-96638

Medium(6.5)Afectada
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Afectada

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 13

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Afectada

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 13

[CVE-2026-112398]

Published:

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decoding selects raw mode LA

Critical(9.2)Afectada
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Afectada

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 13

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Afectada

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 13

[CVE-2026-112403]

Published:

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's

Critical(9.2)Afectada
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Afectada

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 13

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Afectada

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 13

[CVE-2026-112900]

Published:

Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled i

Critical(9.8)Afectada
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Afectada

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 13

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Afectada

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 13

[CVE-2026-112898]

Published:

Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize() uses an empty palette. ImagingPaletteCacheUpdate() leaves a local cach

Medium(6.9)Afectada
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Afectada

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 13

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Afectada

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 13

[CVE-2026-112893]

Published:

Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FT_Load_Glyph fails, cleanup may call FT_Don

High(8.2)Afectada
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Afectada

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 13

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Afectada

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 13

[CVE-2026-112404]

Published:

Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In _decodeTile and the RGBA unpacker path, when Pill

High(8.8)Afectada
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Afectada

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 13

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Afectada

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 13

[CVE-2026-112399]

Published:

Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. A crafted APNG with a

High(8.7)Afectada
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Afectada

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 13

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Afectada

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 13

[CVE-2026-112395]

Published:

Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In _decodeTile, libtiff can return a tile allocat

Medium(6.5)Afectada
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Afectada

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 13

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Afectada

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 13

[CVE-2026-114501]

Published:

pillow: CVE-2026-114501

Medium(6.3)Desconocido
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

[CVE-2026-96636]

Published:

pillow: CVE-2026-96636

Medium(6.5)Desconocido
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

[CVE-2026-96640]

Published:

pillow: CVE-2026-96640

High(8.2)Desconocido
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

[CVE-2026-96637]

Published:

pillow: CVE-2026-96637

High(7.1)Desconocido
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

[CVE-2026-96778]

Published:

pillow: CVE-2026-96778

High(8.1)Desconocido
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

[CVE-2026-96643]

Published:

pillow: CVE-2026-96643

High(7.5)Desconocido
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

[CVE-2026-96644]

Published:

pillow: CVE-2026-96644

High(7.1)Desconocido
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm

[CVE-2026-96641]

Published:

pillow: CVE-2026-96641

Medium(6.5)Desconocido
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

[CVE-2026-96642]

Published:

pillow: CVE-2026-96642

High(7.1)Desconocido
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Desconocido

    Version impact unknown

    dsa · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

[CVE-2026-112901]

Published:

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile._open, when an application calls Image.open() on

Medium(6.9)Desconocido
Detalles (2)
  • 11.1.0-5+deb13u4 · amd64 · trixie

    Desconocido

    Version impact unknown

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

  • 11.1.0-5+deb13u4 · arm64 · trixie

    Desconocido

    Version impact unknown

    nvd · pillow · debian · bookworm; pypi · pillow · debian · 12; pypi · pillow · debian · 13; pypi · pillow · debian · 14

[Más resultados]

Última sincronización:

[Catálogo de CVE]

Sumas de comprobación

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

11.1.0-5+deb13u4 / amd64Observado Sep 1, 2026sha256 df0b2a77d6e4…c9b02870Resumen de la fuente

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumen de la fuente (sha256): df0b2a77d6e4486a656dfadc89ab9d0a8a77bc4cc7242b26fba7217dc9b02870

Verificar descarga

printf '%s %s\n' 'df0b2a77d6e4486a656dfadc89ab9d0a8a77bc4cc7242b26fba7217dc9b02870' 'python3-pil_11.1.0-5+deb13u4_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

11.1.0-5+deb13u4 / arm64Observado Sep 1, 2026sha256 ad294f2932ce…472fd788Resumen de la fuente

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumen de la fuente (sha256): ad294f2932ceb9115eece925337b19a6beae3164be9ebb7a4d80057c472fd788

Verificar descarga

printf '%s %s\n' 'ad294f2932ceb9115eece925337b19a6beae3164be9ebb7a4d80057c472fd788' 'python3-pil_11.1.0-5+deb13u4_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

Fuentes

  • Authoritative source; repository metadata signature verified

    Prueba de firma

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Prueba de firma

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Prueba de firma

    trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Observed SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Result
    match verified
  • Debian SecurityOct 29, 2026

    Authoritative source; repository metadata signature verified

    Prueba de firma

    trixie-security-main-amd64:00b130f61091f3df9d3654225afb2cf21447e3fdecdbead0f367f0e6348d4b1d

    Repository-signature verification record
    Signed-object SHA-256
    83418b3b53f7e635f6f7b43f15bb1fc89e3b5fd62df5d8db73c7160923d0ffcd
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 29, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    00b130f61091f3df9d3654225afb2cf21447e3fdecdbead0f367f0e6348d4b1d
    Observed SHA-256
    00b130f61091f3df9d3654225afb2cf21447e3fdecdbead0f367f0e6348d4b1d
    Result
    match verified