aboutsummaryrefslogtreecommitdiffstats
path: root/meta-python
diff options
context:
space:
mode:
authorTrevor Gamblin <trevor.gamblin@windriver.com>2021-09-08 12:53:43 -0400
committerKhem Raj <raj.khem@gmail.com>2021-09-10 06:55:20 -0700
commit4b9bceea4cbb39a3b0564f394b357d6b36887ae1 (patch)
tree292052509d7b15c2d20dc79cab0d16e1eb901bcb /meta-python
parentfc46c809529f4b5d83ade972c91d388b302b6f48 (diff)
downloadmeta-openembedded-4b9bceea4cbb39a3b0564f394b357d6b36887ae1.tar.gz
meta-openembedded-4b9bceea4cbb39a3b0564f394b357d6b36887ae1.tar.bz2
meta-openembedded-4b9bceea4cbb39a3b0564f394b357d6b36887ae1.zip
python3-pillow: upgrade 8.3.1 -> 8.3.2
From the release notes: - CVE-2021-23437: Avoid a potential ReDoS (regular expression denial of service) in ImageColor’s getrgb() by raising ValueError if the color specifier is too long. Present since Pillow 5.2.0. - Fix 6-byte out-of-bounds (OOB) read. The previous bounds check in FliDecode.c incorrectly calculated the required read buffer size when copying a chunk, potentially reading six extra bytes off the end of the allocated buffer from the heap. Present since Pillow 7.1.0. This bug was found by Google’s OSS-Fuzz CIFuzz runs. - Pillow now includes binary wheels for Python 3.10. - Ensure TIFF RowsPerStrip is multiple of 8 for JPEG compression (#5588). - Updates for ImagePalette channel order (#5599). - Hide FriBiDi shim symbols to avoid conflict with real FriBiDi library (#5651). Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Diffstat (limited to 'meta-python')
-rw-r--r--meta-python/recipes-devtools/python/python3-pillow_8.3.2.bb (renamed from meta-python/recipes-devtools/python/python3-pillow_8.3.1.bb)2
1 files changed, 1 insertions, 1 deletions
diff --git a/meta-python/recipes-devtools/python/python3-pillow_8.3.1.bb b/meta-python/recipes-devtools/python/python3-pillow_8.3.2.bb
index d0a17cb1a..68b80a739 100644
--- a/meta-python/recipes-devtools/python/python3-pillow_8.3.1.bb
+++ b/meta-python/recipes-devtools/python/python3-pillow_8.3.2.bb
@@ -9,7 +9,7 @@ SRC_URI = "git://github.com/python-pillow/Pillow.git;branch=8.3.x \
file://0001-support-cross-compiling.patch \
file://0001-explicitly-set-compile-options.patch \
"
-SRCREV ?= "92933b86574b9c80764bf52c357ed29e1ef53382"
+SRCREV ?= "8013f130a5077b238a4346b73e149432b180a8ea"
inherit setuptools3