Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update py-pillow to version 9.0.0 #7545

Merged
merged 1 commit into from Jan 14, 2022
Merged

Update py-pillow to version 9.0.0 #7545

merged 1 commit into from Jan 14, 2022

Commits on Jan 14, 2022

  1. Update py-pillow to version 9.0.0 

    To fix potential security vulnerabilities
- CVE-2022-22817 : PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. 
- CVE-2022-22815: path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.
- CVE-2022-22816: path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.
    @smuzaffar
    smuzaffar committed Jan 14, 2022
    Configuration menu
    Copy the full SHA
    4abb569 View commit details
    Browse the repository at this point in the history