Skip to contentSkip to conversation

package/python-pillow: bump to version 9.0.1

PATCH Applied Angelo Compagnucci 4 participants 4 messages Feb 22, 2022 – Mar 19, 2022

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 package/python-pillow: bump to version 9.0.1

---
 package/python-pillow/python-pillow.hash | 4 ++--
 package/python-pillow/python-pillow.mk   | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)
package/python-pillow/python-pillow.hash +2 -2
index f3ca8e6014..88a5d7cada 100644
@@ -1,6 +1,6 @@
 # md5, sha256 from https://pypi.org/pypi/pillow/json
-md5  c5af6e413d2fe9247cf16ce25c816b14  Pillow-9.0.0.tar.gz
-sha256  ee6e2963e92762923956fe5d3479b1fdc3b76c83f290aad131a2f98c3df0593e  Pillow-9.0.0.tar.gz
+md5  8deffccb4f402df154fd2fd504d8487c  Pillow-9.0.1.tar.gz
+sha256  6c8bc8238a7dfdaf7a75f5ec5a663f4173f8c367e5a39f87e720495e1eed75fa  Pillow-9.0.1.tar.gz
 
 # Locally computed sha256 checksums
 sha256  a6554cb737ba6c9b47d3301f78de03b4ed0d3f08d6cf9400714f3d4c894f6943  LICENSE
package/python-pillow/python-pillow.mk +2 -2
index 2f2e817882..901876e0ee 100644
@@ -4,8 +4,8 @@
 #
 ################################################################################
 
-PYTHON_PILLOW_VERSION = 9.0.0
-PYTHON_PILLOW_SITE = https://files.pythonhosted.org/packages/b0/43/3e286c93b9fa20e233d53532cc419b5aad8a468d91065dbef4c846058834
+PYTHON_PILLOW_VERSION = 9.0.1
+PYTHON_PILLOW_SITE = https://files.pythonhosted.org/packages/03/a3/f61a9a7ff7969cdef2a6e0383a346eb327495d20d25a2de5a088dbb543a6
 PYTHON_PILLOW_SOURCE = Pillow-$(PYTHON_PILLOW_VERSION).tar.gz
 PYTHON_PILLOW_LICENSE = HPND
 PYTHON_PILLOW_LICENSE_FILES = LICENSE
Signature · 6 lines
2.25.1

_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot
#1 lore raw
Quoted 1 line · Angelo Compagnucci

 Applied to master, thanks.

 Regards,
 Arnout

Quoted 23 lines
---
  package/python-pillow/python-pillow.hash | 4 ++--
  package/python-pillow/python-pillow.mk   | 4 ++--
  2 files changed, 4 insertions(+), 4 deletions(-)
package/python-pillow/python-pillow.hash +2 -2
index f3ca8e6014..88a5d7cada 100644
@@ -1,6 +1,6 @@
  # md5, sha256 from https://pypi.org/pypi/pillow/json
-md5  c5af6e413d2fe9247cf16ce25c816b14  Pillow-9.0.0.tar.gz
-sha256  ee6e2963e92762923956fe5d3479b1fdc3b76c83f290aad131a2f98c3df0593e  Pillow-9.0.0.tar.gz
+md5  8deffccb4f402df154fd2fd504d8487c  Pillow-9.0.1.tar.gz
+sha256  6c8bc8238a7dfdaf7a75f5ec5a663f4173f8c367e5a39f87e720495e1eed75fa  Pillow-9.0.1.tar.gz
 
  # Locally computed sha256 checksums
  sha256  a6554cb737ba6c9b47d3301f78de03b4ed0d3f08d6cf9400714f3d4c894f6943  LICENSE
package/python-pillow/python-pillow.mk +0 -0
index 2f2e817882..901876e0ee 100644

package/python-pillow/python-pillow.mk line 11

Quoted 10 lines
package/python-pillow/python-pillow.mk +2 -2
@@ -4,8 +4,8 @@
  #
  ################################################################################
 
-PYTHON_PILLOW_VERSION = 9.0.0
-PYTHON_PILLOW_SITE = https://files.pythonhosted.org/packages/b0/43/3e286c93b9fa20e233d53532cc419b5aad8a468d91065dbef4c846058834
+PYTHON_PILLOW_VERSION = 9.0.1
+PYTHON_PILLOW_SITE = https://files.pythonhosted.org/packages/03/a3/f61a9a7ff7969cdef2a6e0383a346eb327495d20d25a2de5a088dbb543a6
  PYTHON_PILLOW_SOURCE = Pillow-$(PYTHON_PILLOW_VERSION).tar.gz
  PYTHON_PILLOW_LICENSE = HPND
  PYTHON_PILLOW_LICENSE_FILES = LICENSE

_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot

#2 lore raw
In reply to Angelo Compagnucci
Quoted 3 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Angelo" == Angelo Compagnucci <[email protected]> writes:

Looking at the changelog, 9.0.1 seems to be a security fix release fixing two CVEs:

https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst

Please mark such version bumps as security related so I don't miss them.

Committed with that fixed to 2022.02.x, thanks.

Signature · 5 lines
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot
#3 lore raw
Quoted 5 lines · Peter Korsgaard
Quoted 4 lines
Quoted 2 lines
Quoted 2 lines
Quoted 2 lines
Quoted 2 lines

"Angelo" == Angelo Compagnucci <[email protected]> writes:

Quoted 8 lines

Looking at the changelog, 9.0.1 seems to be a security fix release fixing two CVEs:

https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst

Please mark such version bumps as security related so I don't miss them.

Committed with that fixed to 2022.02.x, thanks.

FYI there might be a regression, 9.0.1 is broken on master at least, this should fix it:
https://patchwork.ozlabs.org/project/buildroot/patch/[email protected]/

Quoted 7 lines

--
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot

_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot