mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-04-20 11:38:34 +00:00
python3-pillow: upgrade 8.3.1 -> 8.3.2
From the release notes: - CVE-2021-23437: Avoid a potential ReDoS (regular expression denial of service) in ImageColor’s getrgb() by raising ValueError if the color specifier is too long. Present since Pillow 5.2.0. - Fix 6-byte out-of-bounds (OOB) read. The previous bounds check in FliDecode.c incorrectly calculated the required read buffer size when copying a chunk, potentially reading six extra bytes off the end of the allocated buffer from the heap. Present since Pillow 7.1.0. This bug was found by Google’s OSS-Fuzz CIFuzz runs. - Pillow now includes binary wheels for Python 3.10. - Ensure TIFF RowsPerStrip is multiple of 8 for JPEG compression (#5588). - Updates for ImagePalette channel order (#5599). - Hide FriBiDi shim symbols to avoid conflict with real FriBiDi library (#5651). Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
This commit is contained in:
37
meta-python/recipes-devtools/python/python3-pillow_8.3.2.bb
Normal file
37
meta-python/recipes-devtools/python/python3-pillow_8.3.2.bb
Normal file
@@ -0,0 +1,37 @@
|
||||
SUMMARY = "Python Imaging Library (Fork). Pillow is the friendly PIL fork by Alex \
|
||||
Clark and Contributors. PIL is the Python Imaging Library by Fredrik Lundh and \
|
||||
Contributors."
|
||||
HOMEPAGE = "https://pillow.readthedocs.io"
|
||||
LICENSE = "MIT"
|
||||
LIC_FILES_CHKSUM = "file://LICENSE;md5=0337b116233da4616ae9fdb130bf6f1a"
|
||||
|
||||
SRC_URI = "git://github.com/python-pillow/Pillow.git;branch=8.3.x \
|
||||
file://0001-support-cross-compiling.patch \
|
||||
file://0001-explicitly-set-compile-options.patch \
|
||||
"
|
||||
SRCREV ?= "8013f130a5077b238a4346b73e149432b180a8ea"
|
||||
|
||||
inherit setuptools3
|
||||
|
||||
DEPENDS += " \
|
||||
zlib \
|
||||
jpeg \
|
||||
tiff \
|
||||
freetype \
|
||||
lcms \
|
||||
openjpeg \
|
||||
"
|
||||
|
||||
RDEPENDS:${PN} += " \
|
||||
${PYTHON_PN}-misc \
|
||||
${PYTHON_PN}-logging \
|
||||
${PYTHON_PN}-numbers \
|
||||
"
|
||||
|
||||
CVE_PRODUCT = "pillow"
|
||||
|
||||
S = "${WORKDIR}/git"
|
||||
|
||||
RPROVIDES:${PN} += "python3-imaging"
|
||||
|
||||
BBCLASSEXTEND = "native"
|
||||
Reference in New Issue
Block a user