Vulnerability · 1 source · latest 6h

Ubuntu notice USN-8999-1 fixes multiple Pillow image library vulnerabilities

VULNERABILITYUbunturedteam/daily · 1 source

Severity: Medium
Sources: 1

What happened

Ubuntu notice USN-8999-1 covers nine Pillow vulnerabilities, mostly denial of service caused by malformed McIdas AREA, font, GD, PDF, EPS and JPEG2000 files, and decompression bomb checks that were missing or incomplete. CVE-2026-54058 could also expose sensitive information, while CVE-2026-59197 and CVE-2026-59205 could possibly lead to crashes or arbitrary code execution. The notice says CVE-2026-59203 only affected Ubuntu 26.04 LTS.

For IT people · Written by AI from 1 source · Wrong?

What to do

Apply the Pillow updates in Ubuntu security notice USN-8999-1.
Check whether systems or applications process untrusted images, fonts, EPS or PDF files with Pillow, as these are the affected formats.

Written by AI from the sources, checked against them

Read the full story at the source