Red Hat Product Errata RHSA-2026:54417 - Security Advisory Issued: 2026-08-12 Updated: 2026-08-12 RHSA-2026:54417 - Security Advisory Overview Updated Packages Synopsis Important: python-pillow security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for python-pillow is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): Pillow: Pillow: Native heap out-of-bounds write (CVE-2026-59197) Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image (CVE-2026-54058) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2500043 - CVE-2026-59197 Pillow: Pillow: Native heap out-of-bounds write BZ - 2500057 - CVE-2026-54058 Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image CVEs CVE-2026-54058 CVE-2026-59197 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 SRPM python-pillow-5.1.1-20.el8_8.1.src.rpm SHA-256: 667b5fdae456b64e9ed9ee6608469713c303795cea80a61d67b7a2fcce422553 x86_64 python-pillow-debuginfo-5.1.1-20.el8_8.1.x86_64.rpm SHA-256: e2d7ec71ea6358f128f9b0962d1feaebd4ba9838cc52a2480474cbb2538e4e5d python-pillow-debugsource-5.1.1-20.el8_8.1.x86_64.rpm SHA-256: 1f6f5afdbf07bd0d7d24792a02736f075e12448c3eafca635e2d040b8beb778e python3-pillow-5.1.1-20.el8_8.1.x86_64.rpm SHA-256: 447c0446b1e47ca62ecc024006a7e17475ababc959eaa24734eb5ddc5bbe3ff4 python3-pillow-debuginfo-5.1.1-20.el8_8.1.x86_64.rpm SHA-256: c07fb36f1b62ca2aec2d402bb46f73e4d9d8daf2d106daae6a24b0f03c2740e5 python3-pillow-tk-debuginfo-5.1.1-20.el8_8.1.x86_64.rpm SHA-256: b9e23565c8ac43ca065faf05aa328c5d6b790acf59c99f983842aa31fc97cb6c Red Hat Enterprise Linux Server - TUS 8.8 SRPM python-pillow-5.1.1-20.el8_8.1.src.rpm SHA-256: 667b5fdae456b64e9ed9ee6608469713c303795cea80a61d67b7a2fcce422553 x86_64 python-pillow-debuginfo-5.1.1-20.el8_8.1.x86_64.rpm SHA-256: e2d7ec71ea6358f128f9b0962d1feaebd4ba9838cc52a2480474cbb2538e4e5d python-pillow-debugsource-5.1.1-20.el8_8.1.x86_64.rpm SHA-256: 1f6f5afdbf07bd0d7d24792a02736f075e12448c3eafca635e2d040b8beb778e python3-pillow-5.1.1-20.el8_8.1.x86_64.rpm SHA-256: 447c0446b1e47ca62ecc024006a7e17475ababc959eaa24734eb5ddc5bbe3ff4 python3-pillow-debuginfo-5.1.1-20.el8_8.1.x86_64.rpm SHA-256: c07fb36f1b62ca2aec2d402bb46f73e4d9d8daf2d106daae6a24b0f03c2740e5 python3-pillow-tk-debuginfo-5.1.1-20.el8_8.1.x86_64.rpm SHA-256: b9e23565c8ac43ca065faf05aa328c5d6b790acf59c99f983842aa31fc97cb6c Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM python-pillow-5.1.1-20.el8_8.1.src.rpm SHA-256: 667b5fdae456b64e9ed9ee6608469713c303795cea80a61d67b7a2fcce422553 ppc64le python-pillow-debuginfo-5.1.1-20.el8_8.1.ppc64le.rpm SHA-256: 7de46e2e34eb013b229ca604be825ea63eb39a8d3498c39882fa6b013d277001 python-pillow-debugsource-5.1.1-20.el8_8.1.ppc64le.rpm SHA-256: c0d422164d583a763e0d6e8c8dfec7dc79190cad004e208d10e1be70512fd702 python3-pillow-5.1.1-20.el8_8.1.ppc64le.rpm SHA-256: 48cff1a0d39ed298b62b9084cd4b489952914df23bbdf9289bedf4696f05d52a python3-pillow-debuginfo-5.1.1-20.el8_8.1.ppc64le.rpm SHA-256: 7c487ae804605a3c92af8f52e33d92a72b911922274b6015be404c6755453fa1 python3-pillow-tk-debuginfo-5.1.1-20.el8_8.1.ppc64le.rpm SHA-256: 6fb15d5d66afd248d4bf3abd3baf9d1c974f58ccf38d600732106c10dff4dee5 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 SRPM python-pillow-5.1.1-20.el8_8.1.src.rpm SHA-256: 667b5fdae456b64e9ed9ee6608469713c303795cea80a61d67b7a2fcce422553 x86_64 python-pillow-debuginfo-5.1.1-20.el8_8.1.x86_64.rpm SHA-256: e2d7ec71ea6358f128f9b0962d1feaebd4ba9838cc52a2480474cbb2538e4e5d python-pillow-debugsource-5.1.1-20.el8_8.1.x86_64.rpm SHA-256: 1f6f5afdbf07bd0d7d24792a02736f075e12448c3eafca635e2d040b8beb778e python3-pillow-5.1.1-20.el8_8.1.x86_64.rpm SHA-256: 447c0446b1e47ca62ecc024006a7e17475ababc959eaa24734eb5ddc5bbe3ff4 python3-pillow-debuginfo-5.1.1-20.el8_8.1.x86_64.rpm SHA-256: c07fb36f1b62ca2aec2d402bb46f73e4d9d8daf2d106daae6a24b0f03c2740e5 python3-pillow-tk-debuginfo-5.1.1-20.el8_8.1.x86_64.rpm SHA-256: b9e23565c8ac43ca065faf05aa328c5d6b790acf59c99f983842aa31fc97cb6c The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .