Debian/pillow: medium 5.9

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.

Action: Upgrade pillow to 9.4.0-1.1+deb12u1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2024-28219
• https://security-tracker.debian.org/tracker/CVE-2024-28219

published 2024-04-03T03:15:09.710Z · modified 2026-09-15T09:03:02.151514107Z · JSON