Alpine/py3-pillow: medium 5.9

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.

Action: Upgrade py3-pillow to 10.3.0-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2024-28219#Alpine:v3.22/py3-pillow
• https://security.alpinelinux.org/vuln/CVE-2024-28219

published 2024-04-03T03:15:09.710Z · modified 2026-11-03T06:32:06.934421884Z · JSON