CVS commit: pkgsrc/graphics/py-Pillow

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Jan 13 11:01:56 UTC 2020

Modified Files:
        pkgsrc/graphics/py-Pillow: Makefile distinfo

Log Message:
py-Pillow: updated to 6.2.2

6.2.2:
- This is the last Pillow release to support Python 2.7
- Overflow checks for realloc for tiff decoding. CVE TBD
- Catch SGI buffer overrun. CVE TBD
- Catch PCX P mode buffer overrun. CVE TBD
- Catch FLI buffer overrun. CVE TBD
- Raise an error for an invalid number of bands in FPX image. CVE-2019-19911


To generate a diff of this commit:
cvs rdiff -u -r1.47 -r1.48 pkgsrc/graphics/py-Pillow/Makefile
cvs rdiff -u -r1.41 -r1.42 pkgsrc/graphics/py-Pillow/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/graphics/py-Pillow/Makefile
diff -u pkgsrc/graphics/py-Pillow/Makefile:1.47 pkgsrc/graphics/py-Pillow/Makefile:1.48
--- pkgsrc/graphics/py-Pillow/Makefile:1.47     Tue Oct 22 18:45:02 2019
+++ pkgsrc/graphics/py-Pillow/Makefile  Mon Jan 13 11:01:55 2020
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.47 2019/10/22 18:45:02 adam Exp $
+# $NetBSD: Makefile,v 1.48 2020/01/13 11:01:55 adam Exp $
 
-DISTNAME=      Pillow-6.2.1
+DISTNAME=      Pillow-6.2.2
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    graphics python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=P/Pillow/}

Index: pkgsrc/graphics/py-Pillow/distinfo
diff -u pkgsrc/graphics/py-Pillow/distinfo:1.41 pkgsrc/graphics/py-Pillow/distinfo:1.42
--- pkgsrc/graphics/py-Pillow/distinfo:1.41     Wed Nov 20 23:34:36 2019
+++ pkgsrc/graphics/py-Pillow/distinfo  Mon Jan 13 11:01:55 2020
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.41 2019/11/20 23:34:36 minskim Exp $
+$NetBSD: distinfo,v 1.42 2020/01/13 11:01:55 adam Exp $
 
-SHA1 (Pillow-6.2.1.tar.gz) = efb43a7be73f13cd300fa30f3f21634cfa3d6056
-RMD160 (Pillow-6.2.1.tar.gz) = b6a0743f45072e5000f4d985dc1274d32bb7a40b
-SHA512 (Pillow-6.2.1.tar.gz) = 757bfdab2ba418195e96e696d2d111de3b38b6bafe4f6f94012f024f59c9bc8542fdab54f643eaf7b2867a9214db806e72eecbdd636bfceb55b47d3164f643ec
-Size (Pillow-6.2.1.tar.gz) = 37673162 bytes
+SHA1 (Pillow-6.2.2.tar.gz) = ed3cbafdb982cd55ca8bb726a3a76e7be89ea61c
+RMD160 (Pillow-6.2.2.tar.gz) = 22b39d6d4dff18415340df080e1b598ee204a97e
+SHA512 (Pillow-6.2.2.tar.gz) = 517c971d4fb23a47466a7e8326c8c29291f7832d4521001c1898d6223ea25d4b0a8b7c8f7e78dd706f421229a8261b558b9fbdc43e47a0a2a7b2b4bbc1a21eff
+Size (Pillow-6.2.2.tar.gz) = 37811273 bytes
 SHA1 (patch-setup.py) = 5a7b2d56532e6688bfe1a0349d4c3136a7c26d2a