From 406a405af2ae67015db74aa01e203135f7410cef Mon Sep 17 00:00:00 2001 From: Trevor Gamblin Date: Wed, 6 Oct 2021 13:39:06 -0400 Subject: python3-pillow: Fix CVE-2021-23437 Backport an upstream fix since an uprev would include potentially-breaking functionality changes. Signed-off-by: Trevor Gamblin Signed-off-by: Armin Kuster --- meta-python/recipes-devtools/python/python3-pillow_8.2.0.bb | 1 + 1 file changed, 1 insertion(+) (limited to 'meta-python/recipes-devtools/python/python3-pillow_8.2.0.bb') diff --git a/meta-python/recipes-devtools/python/python3-pillow_8.2.0.bb b/meta-python/recipes-devtools/python/python3-pillow_8.2.0.bb index 40745bb763..8b3a2996f4 100644 --- a/meta-python/recipes-devtools/python/python3-pillow_8.2.0.bb +++ b/meta-python/recipes-devtools/python/python3-pillow_8.2.0.bb @@ -10,6 +10,7 @@ SRC_URI = "git://github.com/python-pillow/Pillow.git;branch=8.2.x \ file://0001-explicitly-set-compile-options.patch \ file://0001-Limit-sprintf-modes-to-10-characters.patch \ file://0001-Use-snprintf-instead-of-sprintf.patch \ + file://0001-Raise-ValueError-if-color-specifier-is-too-long.patch \ " SRCREV ?= "e0e353c0ef7516979a9aedce3792596649ce4433" -- cgit v1.2.3-54-g00ecf