This update for python-CairoSVG, python-Pillow fixes the following issues:
Update to version 2.5.1.
Updates for version 2.5.0.
python-Pillow update to version 8.3.1:
Make Image.array take optional dtype argument #5572 [t-vi, radarhere]
Use snprintf instead of sprintf. CVE-2021-34552 #5567 [radarhere]
update to version 8.2.0:
update to 8.1.2:
Update to 8.1.1
Security
CVE-2021-25289: The previous fix for CVE-2020-35654 was insufficent due to incorrect error checking in TiffDecode.c.
There is an Exhaustion of Memory DOS in the ICNS, ICO, and BLP container formats where Pillow did not properly check the reported size of the contained image. These images could cause arbitrariliy large memory allocations. This was reported by Jiayi Lin, Luke Shaffer, Xinran Xie, and Akshay Ajayan of ASU.edu.
Other Changes
A crash with the feature flags for LibJpeg and Webp on unreleased Python 3.10 has been fixed
Fix rpmlint warning about duplicate file definition
update to 8.1.0 (boo#1180833, boo#1180834, boo#1180832):
update to version 8.0.1:
changes from version 8.0.0:
update to version 7.2.0:
Update to 7.1.2:
update to version 7.1.1:
changes from version 7.1.0:
update to version 7.0.0:
Update to 6.2.1:
Update to 6.2.0:
update to version 6.1.0:
Update to 6.0.0:
update to version 5.4.1:
changes from version 5.4.0:
update to version 5.3.0:
update to version 5.2.0:
update to version 5.1.0: