mbox series

[meta-python,wrynose,0/9] python3-pillow: Security fixes

Message ID 20261016062323.251925-1-yurade@cisco.com
Headers show
Series python3-pillow: Security fixes | expand

Message

Yogita Urade Oct. 16, 2026, 6:23 a.m. UTC 
Backport fixes for eight upstream security-fix patches covering ten
CVEs to python3-pillow 12.2.0 in Wrynose.

One upstream commit fixes CVE-2026-54059, CVE-2026-54060 and CVE-2026-55379.

The series also marks CVE-2026-55798 as not applicable because it affects
Pillow’s Windows viewer command handling, which is not used by the Linux target.

The series updates the recipe to apply the fixes. The patches retain upstream
references. 

Yogita Urade (9):
  python3-pillow: Fix CVE-2026-54059 CVE-2026-54060 CVE-2026-55379
  python3-pillow: Fix CVE-2026-55380
  python3-pillow: Fix CVE-2026-59197
  python3-pillow: Fix CVE-2026-59198
  python3-pillow: Fix CVE-2026-59199
  python3-pillow: Fix CVE-2026-59200
  python3-pillow: Fix CVE-2026-59203
  python3-pillow: Fix CVE-2026-59205
  python3-pillow: CVE_STATUS for CVE-2026-55798

 ...-54059_CVE-2026-54060_CVE-2026-55379.patch | 168 ++++++++++++++++++
 .../python3-pillow/CVE-2026-55380.patch       |  62 +++++++
 .../python3-pillow/CVE-2026-59197.patch       |  74 ++++++++
 .../python3-pillow/CVE-2026-59198.patch       |  57 ++++++
 .../python3-pillow/CVE-2026-59199.patch       |  84 +++++++++
 .../python3-pillow/CVE-2026-59200.patch       |  82 +++++++++
 .../python3-pillow/CVE-2026-59203.patch       |  45 +++++
 .../python3-pillow/CVE-2026-59205.patch       |  66 +++++++
 .../python/python3-pillow_12.2.0.bb           |   9 +
 9 files changed, 647 insertions(+)
 create mode 100644 meta-python/recipes-devtools/python/python3-pillow/CVE-2026-54059_CVE-2026-54060_CVE-2026-55379.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-pillow/CVE-2026-55380.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-pillow/CVE-2026-59197.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-pillow/CVE-2026-59198.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-pillow/CVE-2026-59199.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-pillow/CVE-2026-59200.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-pillow/CVE-2026-59203.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-pillow/CVE-2026-59205.patch