Hoch 8.7Linux-Server
CVE-2026-112894
Red Hat Enterprise Linux (pillow and aspell): Mehrere Schwachstellen
Amazon Linux 2, Red Hat Enterprise Linux, Fedora Linux, Red Hat Satellite, RESF Rocky Linux, SUSE Linux, SUSE openSUSE…
Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames with save_all enabled. PdfParser.next_object_id() repeatedly rebuilds and scans all previously reserved identifiers for every object. An attacker can supply a multi-frame image, including a small APNG with a large declared frame count, to an application that converts it to a multipage PDF. This can consume excessive CPU and deny…
20. Okt 2026
Original bei Ubuntu öffnen