From eadcdb97d43d083b8b614e203c19bda5469678c8 Mon Sep 17 00:00:00 2001 From: Shubham Kulkarni Date: Fri, 3 Feb 2023 16:42:09 +0530 Subject: python3-pillow: Security fix for CVE-2022-45198 Fix for CVE-2022-45198: Improper Handling of Highly Compressed GIF Data Backport from https://github.com/python-pillow/Pillow/commit/884437f8a2b953a0abd2a3b130a87fcfb438092e Signed-off-by: Shubham Kulkarni Signed-off-by: Armin Kuster --- meta-python/recipes-devtools/python/python3-pillow_6.2.1.bb | 1 + 1 file changed, 1 insertion(+) (limited to 'meta-python/recipes-devtools/python/python3-pillow_6.2.1.bb') diff --git a/meta-python/recipes-devtools/python/python3-pillow_6.2.1.bb b/meta-python/recipes-devtools/python/python3-pillow_6.2.1.bb index 80b7e941ae..35330cac6d 100644 --- a/meta-python/recipes-devtools/python/python3-pillow_6.2.1.bb +++ b/meta-python/recipes-devtools/python/python3-pillow_6.2.1.bb @@ -8,6 +8,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=55c0f320370091249c1755c0d2b48e89" SRC_URI = "git://github.com/python-pillow/Pillow.git;branch=6.2.x;protocol=https \ file://0001-support-cross-compiling.patch \ file://0001-explicitly-set-compile-options.patch \ + file://0001-CVE-2022-45198.patch \ " SRCREV ?= "6e0f07bbe38def22d36ee176b2efd9ea74b453a6" -- cgit v1.2.3-54-g00ecf