Bump pillow from 6.2.0 to 8.1.1#10
Closed
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4)
Bumps [pillow](https://github.com/python-pillow/Pillow) from 6.2.0 to 8.1.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/python-pillow/Pillow/releases">pillow's releases</a>.</em></p> <blockquote> <h2>8.1.1</h2> <p><a href="https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html">https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html</a></p> <h2>8.1.0</h2> <p><a href="https://pillow.readthedocs.io/en/stable/releasenotes/8.1.0.html">https://pillow.readthedocs.io/en/stable/releasenotes/8.1.0.html</a></p> <h2>Changes</h2> <ul> <li>Fix TIFF OOB Write error <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5175">#5175</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Fix for Buffer Read Overrun in PCX Decoding <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5174">#5174</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Fix for SGI Decode buffer overrun <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5173">#5173</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Fix OOB Read when saving GIF of xsize=1 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5149">#5149</a> [<a href="https://github.com/wiredfool"><code>@wiredfool</code></a>]</li> <li>Add support for PySide6 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5161">#5161</a> [<a href="https://github.com/hugovk"><code>@hugovk</code></a>]</li> <li>Moved QApplication into one test <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5167">#5167</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Use disposal settings from previous frame in APNG <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5126">#5126</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Revert "skip wheels on 3.10-dev due to wheel#354" <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5163">#5163</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Better _binary module use <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5156">#5156</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Added exception explaining that <em>repr_png</em> saves to PNG <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5139">#5139</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Use previous disposal method in GIF load_end <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5125">#5125</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Do not catch a ValueError only to raise another <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5090">#5090</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Allow putpalette to accept 1024 integers to include alpha values <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5089">#5089</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Fix OOB Read when writing TIFF with custom Metadata <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5148">#5148</a> [<a href="https://github.com/wiredfool"><code>@wiredfool</code></a>]</li> <li>Removed unused variable <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5140">#5140</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Fix dereferencing of potential null pointers <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5111">#5111</a> [<a href="https://github.com/cgohlke"><code>@cgohlke</code></a>]</li> <li>Fixed warnings assigning to "unsigned char *" from "char *" <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5127">#5127</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Add append_images support for ICO <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/4568">#4568</a> [<a href="https://github.com/ziplantil"><code>@ziplantil</code></a>]</li> <li>Fixed comparison warnings <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5122">#5122</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Block TIFFTAG_SUBIFD <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5120">#5120</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Fix dereferencing potential null pointer <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5108">#5108</a> [<a href="https://github.com/cgohlke"><code>@cgohlke</code></a>]</li> <li>Replaced PyErr_NoMemory with ImagingError_MemoryError <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5113">#5113</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Remove duplicate code <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5109">#5109</a> [<a href="https://github.com/cgohlke"><code>@cgohlke</code></a>]</li> <li>Moved warning to end of execution <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/4965">#4965</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Removed unused fromstring and tostring C methods <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5026">#5026</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>init() if one of the formats is unrecognised <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5037">#5037</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> </ul> <h2>Dependencies</h2> <ul> <li>Updated libtiff to 4.2.0 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5153">#5153</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Updated openjpeg to 2.4.0 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5151">#5151</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Updated harfbuzz to 2.7.4 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5138">#5138</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Updated harfbuzz to 2.7.3 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5128">#5128</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Updated libraqm to 0.7.1 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5070">#5070</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Updated libimagequant to 2.13.1 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5065">#5065</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Update FriBiDi to 1.0.10 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5064">#5064</a> [<a href="https://github.com/nulano"><code>@nulano</code></a>]</li> <li>Updated libraqm to 0.7.1 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5063">#5063</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Updated libjpeg-turbo to 2.0.6 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5044">#5044</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> </ul> <h2>Deprecations</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python-pillow/Pillow/blob/master/CHANGES.rst">pillow's changelog</a>.</em></p> <blockquote> <h2>8.1.1 (2021-03-01)</h2> <ul> <li> <p>Use more specific regex chars to prevent ReDoS. CVE-2021-25292 [hugovk]</p> </li> <li> <p>Fix OOB Read in TiffDecode.c, and check the tile validity before reading. CVE-2021-25291 [wiredfool]</p> </li> <li> <p>Fix negative size read in TiffDecode.c. CVE-2021-25290 [wiredfool]</p> </li> <li> <p>Fix OOB read in SgiRleDecode.c. CVE-2021-25293 [wiredfool]</p> </li> <li> <p>Incorrect error code checking in TiffDecode.c. CVE-2021-25289 [wiredfool]</p> </li> <li> <p>PyModule_AddObject fix for Python 3.10 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5194">#5194</a> [radarhere]</p> </li> </ul> <h2>8.1.0 (2021-01-02)</h2> <ul> <li> <p>Fix TIFF OOB Write error. CVE-2020-35654 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5175">#5175</a> [wiredfool]</p> </li> <li> <p>Fix for Read Overflow in PCX Decoding. CVE-2020-35653 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5174">#5174</a> [wiredfool, radarhere]</p> </li> <li> <p>Fix for SGI Decode buffer overrun. CVE-2020-35655 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5173">#5173</a> [wiredfool, radarhere]</p> </li> <li> <p>Fix OOB Read when saving GIF of xsize=1 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5149">#5149</a> [wiredfool]</p> </li> <li> <p>Makefile updates <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5159">#5159</a> [wiredfool, radarhere]</p> </li> <li> <p>Add support for PySide6 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5161">#5161</a> [hugovk]</p> </li> <li> <p>Use disposal settings from previous frame in APNG <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5126">#5126</a> [radarhere]</p> </li> <li> <p>Added exception explaining that <em>repr_png</em> saves to PNG <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5139">#5139</a> [radarhere]</p> </li> <li> <p>Use previous disposal method in GIF load_end <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5125">#5125</a> [radarhere]</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python-pillow/Pillow/commit/741d8744a54bedbc49f16922c61a06fcb3681f53"><code>741d874</code></a> 8.1.1 version bump</li> <li><a href="https://github.com/python-pillow/Pillow/commit/179cd1c8f94aabc47e9e522e01683ea9aadbd3a5"><code>179cd1c</code></a> Added 8.1.1 release notes to index</li> <li><a href="https://github.com/python-pillow/Pillow/commit/7d296653da045e18b379c991797f933e054a7476"><code>7d29665</code></a> Update CHANGES.rst [ci skip]</li> <li><a href="https://github.com/python-pillow/Pillow/commit/d25036fca7c8658b698492088361453bb20073e2"><code>d25036f</code></a> Credits</li> <li><a href="https://github.com/python-pillow/Pillow/commit/973a4c333ab6d603e82f6eb2aa6f39d1cfcecccb"><code>973a4c3</code></a> Release notes for 8.1.1</li> <li><a href="https://github.com/python-pillow/Pillow/commit/521dab94c7ab72b037bd9a83e9663401e0fd2cee"><code>521dab9</code></a> Use more specific regex chars to prevent ReDoS</li> <li><a href="https://github.com/python-pillow/Pillow/commit/8b8076bdcb3815be0ef0d279651d8d1342b8ea61"><code>8b8076b</code></a> Fix for CVE-2021-25291</li> <li><a href="https://github.com/python-pillow/Pillow/commit/e25be1e33dc526bfd1094bc778a54d8e29bf66c9"><code>e25be1e</code></a> Fix negative size read in TiffDecode.c</li> <li><a href="https://github.com/python-pillow/Pillow/commit/f891baa604636cd2506a9360d170bc2cf4963cc5"><code>f891baa</code></a> Fix OOB read in SgiRleDecode.c</li> <li><a href="https://github.com/python-pillow/Pillow/commit/cbfdde7b1f2295059a20a539ee9960f0bec7b299"><code>cbfdde7</code></a> Incorrect error code checking in TiffDecode.c</li> <li>Additional commits viewable in <a href="https://github.com/python-pillow/Pillow/compare/6.2.0...8.1.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/svandegar/hashchain-demo/network/alerts). </details>
AI Analysis
This issue appears to be discussing a feature request or bug report related to the repository. Based on the content, it seems to be resolved. The issue was opened by dependabot[bot] and has received 1 comments.
Add a comment
Comment form would go here