High [CVE-2026-55380] Denial of Service via crafted GD 2.x image file
This high-severity Red Hat Linux advisory covers CVE-2026-55380 affecting Red Hat Enterprise Linux 8.
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
Denial of Service via crafted GD 2.x image file. Red Hat rates this important (CVSS 7.5).
Weakness: CWE-1285. Red Hat lists fixing advisory RHSA-2026:39127 with package python-pillow-0:5.1.1-22.el8_10.
Affected product named by the advisory: Red Hat Enterprise Linux 8.
- < 12.3.0
Official advisory · high-confidence parse· fetched 1 month ago·verify at source
- python-pillow-0:5.1.1-22.el8_10
- RHSA-2026:39127
Official advisory · high-confidence parse· fetched 1 month ago·verify at source
Mitigation checklist
- Avoid processing untrusted GD 2.x image files with PIL.GdImageFile.open(). Use Image.open() instead, which includes decompression bomb protections for supported formats. If GdImageFile must be used, validate the image dimensions before calling load(). Restricting accepted image formats at the application boundary to only those explicitly needed can reduce exposure.
Official advisory · high-confidence parse· fetched 1 month ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.