File tree Expand file tree Collapse file tree 3 files changed +11
-16
lines changed Expand file tree Collapse file tree 3 files changed +11
-16
lines changed Original file line number Diff line number Diff line change @@ -31,6 +31,11 @@ https://semver.org/spec/v2.0.0.html
31
31
- Upgrade lower limit for ` pyproj ` to 3.0.
32
32
- Upgrade upper limit for ` pyproj ` to 3.8.
33
33
- Upgrade lower limit for ` pyshp ` to 2.0.
34
+ - Update optional library dependencies:
35
+ - Upgrade lower limit for ` pillow ` to 10.3 due to
36
+ vulnerabilities [ CVE-2023 -50447] and [ CVE-2024 -28219] .
37
+ - Upgrade upper limit for ` pillow ` to 11.2.
38
+ - Upgrade upper limit for ` OWSLib ` to 0.33.
34
39
- Update test dependencies:
35
40
- Remove dependency on ` unittest2 ` .
36
41
- Upgrade lower limit for ` pytest ` to 7.0.
@@ -1340,6 +1345,10 @@ https://github.com/matplotlib/basemap/compare/v1.0.3rel...v1.0.4rel
1340
1345
[ 1.0.3] :
1341
1346
https://github.com/matplotlib/basemap/tree/v1.0.3rel
1342
1347
1348
+ [ CVE-2024 -28219] :
1349
+ https://nvd.nist.gov/vuln/detail/CVE-2024-28219
1350
+ [ CVE-2023 -50447] :
1351
+ https://nvd.nist.gov/vuln/detail/CVE-2023-50447
1343
1352
[ CVE-2023 -27476] :
1344
1353
https://nvd.nist.gov/vuln/detail/CVE-2023-27476
1345
1354
[ CVE-2022 -45198] :
Original file line number Diff line number Diff line change 1
- ordereddict; python_version == "2.6"
2
- OWSLib >= 0.8.0, < 0.15.0; python_version == "2.6"
3
- OWSLib >= 0.8.0, < 0.19.0; python_version == "2.7"
4
- OWSLib >= 0.8.0, < 0.11.0; python_version == "3.2"
5
- OWSLib >= 0.8.0, < 0.11.0; python_version == "3.3"
6
- OWSLib >= 0.8.0, < 0.18.0; python_version == "3.4"
7
- OWSLib >= 0.8.0, < 0.20.0; python_version == "3.5"
8
- OWSLib >= 0.28.1, < 0.30.0; python_version >= "3.6"
1
+ OWSLib >= 0.28.1, < 0.33
Original file line number Diff line number Diff line change 1
- pillow >= 3.4.0, < 4.0.0; python_version == "2.6"
2
- pillow >= 6.2.2, < 7.0.0; python_version == "2.7"
3
- pillow >= 3.4.0, < 4.0.0; python_version == "3.2"
4
- pillow >= 4.3.0, < 5.0.0; python_version == "3.3"
5
- pillow >= 5.4.0, < 6.0.0; python_version == "3.4"
6
- pillow >= 7.1.0, < 8.0.0; python_version == "3.5"
7
- pillow >= 8.3.2, < 9.0.0; python_version == "3.6"
8
- pillow >= 9.4.0, < 10.2.0; python_version >= "3.7"
1
+ pillow >= 10.3, < 11.2
You can’t perform that action at this time.
0 commit comments