This update for python-Pillow fixes the following issues

- CVE-2026-54059: crafted PCF font data can cause excessive memory allocation (bsc#1270409).
- CVE-2026-54060: a font can trigger excessive allocation during conversion or saving (bsc#1270410).
- CVE-2026-55379: bypass of decompression bomb protection, allowing excessive memory allocation (bsc#1270411).
- CVE-2026-55380: crafted .gd file can trigger excessive C-heap allocation when loaded (bsc#1270412).