Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

Vulnerability IntelligenceopenSUSE-SU-2026:11261-1

openSUSE-SU-2026:11261-1

CRITICAL9.8

python313-Pillow-12.3.0-1.1 on GA media

Published Jul 12, 2026

Modified 2 months ago

Fix available

Details

Description of the patch:

These are all security issues fixed in the python313-Pillow-12.3.0-1.1 package on the GA media of openSUSE Tumbleweed.

Affected Packages

python313-Pillow

openSUSE Tumbleweed

Fixed in:

12.3.0-1.1

python313-Pillow-tk

openSUSE Tumbleweed

Fixed in:

12.3.0-1.1

python314-Pillow

openSUSE Tumbleweed

Fixed in:

12.3.0-1.1

python314-Pillow-tk

openSUSE Tumbleweed

Fixed in:

12.3.0-1.1

References

https://www.suse.com/security/cve/CVE-2014-3589/

https://www.suse.com/security/cve/CVE-2014-3598/

https://www.suse.com/security/cve/CVE-2016-0740/

https://www.suse.com/security/cve/CVE-2016-0775/

https://www.suse.com/security/cve/CVE-2016-3076/

https://www.suse.com/security/cve/CVE-2020-15999/

https://www.suse.com/security/cve/CVE-2020-35653/

https://www.suse.com/security/cve/CVE-2020-35654/

https://www.suse.com/security/cve/CVE-2020-35655/

https://www.suse.com/security/cve/CVE-2021-23437/

https://www.suse.com/security/cve/CVE-2021-25289/

https://www.suse.com/security/cve/CVE-2021-25290/

https://www.suse.com/security/cve/CVE-2021-25291/

https://www.suse.com/security/cve/CVE-2021-25292/

https://www.suse.com/security/cve/CVE-2021-25293/

https://www.suse.com/security/cve/CVE-2021-27921/

https://www.suse.com/security/cve/CVE-2021-34552/

https://www.suse.com/security/cve/CVE-2023-44271/

https://www.suse.com/security/cve/CVE-2023-50447/

https://www.suse.com/security/cve/CVE-2024-28219/

https://www.suse.com/security/cve/CVE-2026-42311/

https://www.suse.com/security/cve/CVE-2026-4775/

https://www.suse.com/security/cve/CVE-2026-54059/

https://www.suse.com/security/cve/CVE-2026-55379/

https://www.suse.com/support/security/rating/

CVSS Analysis

CVSS v3.1

9.8

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Upstream

CVE-2014-3589 CVE-2014-3598 CVE-2016-0740 CVE-2016-0775 CVE-2016-3076 CVE-2020-15999 CVE-2020-35653 CVE-2020-35654 CVE-2020-35655 CVE-2021-23437 CVE-2021-25289 CVE-2021-25290 CVE-2021-25291 CVE-2021-25292 CVE-2021-25293 CVE-2021-27921 CVE-2021-34552 CVE-2023-44271 CVE-2023-50447 CVE-2024-28219 CVE-2026-42311 CVE-2026-4775 CVE-2026-54059 CVE-2026-55379

Ecosystems

openSUSE Tumbleweed

Timeline

PublishedJul 12, 2026

ModifiedJul 12, 2026

openSUSE-SU-2026:11261-1 | Mondoo Vulnerability Intelligence