Skip to content

Commit da10838

Browse files
committed
Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL. https://nvd.nist.gov/vuln/detail/CVE-2022-45199
1 parent e356f4b commit da10838

File tree

4 files changed

+5
-4
lines changed

4 files changed

+5
-4
lines changed

Diff for: .gitignore

+1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
/venv
22
/images
33
/converted
4+
/.idea
45

56
# Byte-compiled / optimized / DLL files
67
__pycache__/

Diff for: raw_image_converter/__init__.py

+1-1
Original file line numberDiff line numberDiff line change
@@ -5,4 +5,4 @@
55
"""
66

77
# Version of the package
8-
__version__ = "1.0.2"
8+
__version__ = "1.0.3"

Diff for: requirements.txt

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
11
imageio==2.16.2
2-
Pillow==9.2.0
2+
Pillow==9.3.0
33
rawpy==0.17.1
44
numpy==1.22.3

Diff for: setup.py

+2-2
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@
1010
# This call to setup() does all the work
1111
setup(
1212
name="raw-image-converter",
13-
version="1.0.2",
13+
version="1.0.3",
1414
description="Batch conversions of raw images",
1515
long_description=README,
1616
long_description_content_type="text/markdown",
@@ -27,7 +27,7 @@
2727
keywords='cli, converter, raw, images',
2828
packages=["raw_image_converter"],
2929
install_requires=["numpy==1.22.3", "rawpy==0.17.1",
30-
"imageio==2.16.2", "Pillow==9.2.0"],
30+
"imageio==2.16.2", "Pillow==9.3.0"],
3131
entry_points={
3232
"console_scripts": [
3333
"raw_image_converter=raw_image_converter.__main__:main",

0 commit comments

Comments
 (0)