Angelo Compagnucci 8c602fcfd2 package/python-pillow: security bump to version 9.0.1 ...

Fixes the following security issues:

- CVE-2022-24303: In show_file, use os.remove to remove temporary images

- CVE-2022-22817: Restrict builtins within lambdas for ImageMath.eval

Signed-off-by: Angelo Compagnucci <angelo@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 07b070be39)
[Peter: mention security fixes]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2022-03-19 20:09:08 +01:00

2.6 KiB

Raw Blame History

View Raw