diff --git a/CHANGELOG.md b/CHANGELOG.md
index b595bf8566..c46a53effb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,10 @@ Versioned according to [Semantic Versioning](http://semver.org/).
 
 ## Unreleased
 
+Changed:
+
+  * Depend on pillow >= 5.3.0 to mitigate https://github.com/python-pillow/Pillow/issues/2926
+
 ## [0.11.0] - 2018-11-21
 
 Changed:
diff --git a/requirements.txt b/requirements.txt
index 389c2462b4..ef5af37328 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -3,7 +3,7 @@ bagit_profile >= 1.2.0
 click >=7<8
 requests
 lxml
-Pillow
+Pillow >= 5.3.0
 numpy
 opencv-python
 Flask
diff --git a/setup.py b/setup.py
index c35295a592..ce9622dc9a 100644
--- a/setup.py
+++ b/setup.py
@@ -19,7 +19,7 @@
     include_package_data=True,
     install_requires=[
         'Flask',
-        'Pillow',
+        'Pillow >= 5.3.0',
         'bagit >= 1.7.0',
         'bagit_profile >= 1.2.0',
         'click',