- Fixes issue #3843 - Fix vulnerability with Pillow dependency

GeoNode · Jul 12, 2018 · f6bcae5 · f6bcae5
1 parent 0129b33
commit f6bcae5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/requirements.txt b/requirements.txt
@@ -5,7 +5,7 @@
 # # Apps with official Ubuntu 16.04 packages
 
 # native dependencies
-Pillow<=3.3.1 # python-imaging (3.1.2) - python-pillow (3.3.1 in our ppa)
+Pillow>3.3.1,<=3.3.2 # python-imaging (3.1.2) - python-pillow (3.3.1 in our ppa)
 lxml==3.6.2 # python-lxml (3.6.2 in our ppa) FIXME # <=3.8.0 throws pkg_resources.ContextualVersionConflict: (lxml 3.8.0 (/usr/local/lib/python2.7/site-packages), Requirement.parse('lxml==3.6.2'), set(['pycsw']))
 psycopg2<=2.7.3.1 # python-psycopg2 (2.7.3.1 in our ppa)
 Django==1.11.11 # python-django (1.8.19 in our ppa) FIXME