earthlab / matplotcheck

A python package for checking and testing matplotlib plots. We use this for autograding student assignments but there are many other potential use cases including package testing (for packages with plots)!
https://matplotcheck.readthedocs.io
BSD 3-Clause "New" or "Revised" License
18 stars 8 forks source link

Update pillow to 8.1.1 #404

Closed pyup-bot closed 3 years ago

pyup-bot commented 3 years ago

This PR updates pillow from 8.1.0 to 8.1.1.

Changelog ### 8.1.1 ``` ------------------ - Use more specific regex chars to prevent ReDoS. CVE-2021-25292 [hugovk] - Fix OOB Read in TiffDecode.c, and check the tile validity before reading. CVE-2021-25291 [wiredfool] - Fix negative size read in TiffDecode.c. CVE-2021-25290 [wiredfool] - Fix OOB read in SgiRleDecode.c. CVE-2021-25293 [wiredfool] - Incorrect error code checking in TiffDecode.c. CVE-2021-25289 [wiredfool] - PyModule_AddObject fix for Python 3.10 5194 [radarhere] ```
Links - PyPI: https://pypi.org/project/pillow - Changelog: https://pyup.io/changelogs/pillow/ - Homepage: https://python-pillow.org
codecov[bot] commented 3 years ago

Codecov Report

Merging #404 (6833733) into main (210076e) will not change coverage. The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##             main     #404   +/-   ##
=======================================
  Coverage   82.49%   82.49%           
=======================================
  Files          22       22           
  Lines        1954     1954           
=======================================
  Hits         1612     1612           
  Misses        342      342           
Flag Coverage Δ
unittests 82.49% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.


Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 210076e...6833733. Read the comment docs.

pyup-bot commented 3 years ago

Closing this in favor of #406