Skip to content

Commit ee311e4

Browse files
committed
Update optional library requirements
1 parent ccbe443 commit ee311e4

File tree

3 files changed

+11
-16
lines changed

3 files changed

+11
-16
lines changed

CHANGELOG.md

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,11 @@ https://semver.org/spec/v2.0.0.html
3131
- Upgrade lower limit for `pyproj` to 3.0.
3232
- Upgrade upper limit for `pyproj` to 3.8.
3333
- Upgrade lower limit for `pyshp` to 2.0.
34+
- Update optional library dependencies:
35+
- Upgrade lower limit for `pillow` to 10.3 due to
36+
vulnerabilities [CVE-2023-50447] and [CVE-2024-28219].
37+
- Upgrade upper limit for `pillow` to 11.2.
38+
- Upgrade upper limit for `OWSLib` to 0.33.
3439
- Update test dependencies:
3540
- Remove dependency on `unittest2`.
3641
- Upgrade lower limit for `pytest` to 7.0.
@@ -1340,6 +1345,10 @@ https://github.com/matplotlib/basemap/compare/v1.0.3rel...v1.0.4rel
13401345
[1.0.3]:
13411346
https://github.com/matplotlib/basemap/tree/v1.0.3rel
13421347

1348+
[CVE-2024-28219]:
1349+
https://nvd.nist.gov/vuln/detail/CVE-2024-28219
1350+
[CVE-2023-50447]:
1351+
https://nvd.nist.gov/vuln/detail/CVE-2023-50447
13431352
[CVE-2023-27476]:
13441353
https://nvd.nist.gov/vuln/detail/CVE-2023-27476
13451354
[CVE-2022-45198]:
Lines changed: 1 addition & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1 @@
1-
ordereddict; python_version == "2.6"
2-
OWSLib >= 0.8.0, < 0.15.0; python_version == "2.6"
3-
OWSLib >= 0.8.0, < 0.19.0; python_version == "2.7"
4-
OWSLib >= 0.8.0, < 0.11.0; python_version == "3.2"
5-
OWSLib >= 0.8.0, < 0.11.0; python_version == "3.3"
6-
OWSLib >= 0.8.0, < 0.18.0; python_version == "3.4"
7-
OWSLib >= 0.8.0, < 0.20.0; python_version == "3.5"
8-
OWSLib >= 0.28.1, < 0.30.0; python_version >= "3.6"
1+
OWSLib >= 0.28.1, < 0.33
Lines changed: 1 addition & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1 @@
1-
pillow >= 3.4.0, < 4.0.0; python_version == "2.6"
2-
pillow >= 6.2.2, < 7.0.0; python_version == "2.7"
3-
pillow >= 3.4.0, < 4.0.0; python_version == "3.2"
4-
pillow >= 4.3.0, < 5.0.0; python_version == "3.3"
5-
pillow >= 5.4.0, < 6.0.0; python_version == "3.4"
6-
pillow >= 7.1.0, < 8.0.0; python_version == "3.5"
7-
pillow >= 8.3.2, < 9.0.0; python_version == "3.6"
8-
pillow >= 9.4.0, < 10.2.0; python_version >= "3.7"
1+
pillow >= 10.3, < 11.2

0 commit comments

Comments
 (0)