From 88813d34dd665cf90403716b88db2f0e0ec78d76 Mon Sep 17 00:00:00 2001 From: Joe Slater Date: Thu, 22 Jul 2021 09:39:38 -0700 Subject: python3-pillow: fix CVE-2021-34552 Pull fix from version 8.3.1 back to 8.2.0. Signed-off-by: Joe Slater --- meta-python/recipes-devtools/python/python3-pillow_8.2.0.bb | 2 ++ 1 file changed, 2 insertions(+) (limited to 'meta-python/recipes-devtools/python/python3-pillow_8.2.0.bb') diff --git a/meta-python/recipes-devtools/python/python3-pillow_8.2.0.bb b/meta-python/recipes-devtools/python/python3-pillow_8.2.0.bb index 3241230d13..40745bb763 100644 --- a/meta-python/recipes-devtools/python/python3-pillow_8.2.0.bb +++ b/meta-python/recipes-devtools/python/python3-pillow_8.2.0.bb @@ -8,6 +8,8 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=0337b116233da4616ae9fdb130bf6f1a" SRC_URI = "git://github.com/python-pillow/Pillow.git;branch=8.2.x \ file://0001-support-cross-compiling.patch \ file://0001-explicitly-set-compile-options.patch \ + file://0001-Limit-sprintf-modes-to-10-characters.patch \ + file://0001-Use-snprintf-instead-of-sprintf.patch \ " SRCREV ?= "e0e353c0ef7516979a9aedce3792596649ce4433" -- cgit 1.2.3-korg