Medium DLA-3786-1 1 CVE

pillow - security update

Published Apr 10, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	pillow	5.4.1-2+deb10u6

Vulnerabilities 1

Medium 6.7

CVE-2024-28219

Pillow buffer overflow vulnerability

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.

kubeflow-pipelines-visualization-server pillow pillow pillow Debian Ubuntu Alpine Wolfi PyPI

Apr 3, 2024