A python-imaging security update has been released for Debian 6 as part of the long term support

Package : python-imaging
Version : 1.1.7-2+deb6u1
CVE ID : CVE-2014-3589

Andrew Drake discovered that missing input sanitising in the icns decoder
of the Python Imaging Library could result in denial of service if a
malformed image is processed.