CLSA-2026-1793270155: TuxCare security update for pillow (2 CVEs)
Published Oct 29, 2026
·Updated
TuxCare rebuilt pillow to address 2 CVEs. Fixed in 8.4.0.post12+tuxcare.
Affected Software
1 affected componentFixes available
tuxcare/pillow>=8.4.0<8.4.0.post12+tuxcare
8.4.0.post12+tuxcare
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/pillowto a version that resolves this vulnerability.Fixed in 8.4.0.post12+tuxcare - Upgrade
Upgrade
pillowto a version that resolves this vulnerability.Fixed in 8.4.0.post12+tuxcare
Event History
Oct 29, 2026
Advisory Published
via OSV·10:35 AM
Data Sourced
via OSV·10:35 AM
DescriptionAffected Software
Frequently Asked Questions
1
Which package build contains the fixes?
The fixes are included in pillow version 8.4.0.post12+tuxcare.
2
How many CVEs does this update address?
This update addresses two CVEs in the TuxCare rebuild of pillow.