guix_mirror_bot pushed a commit to branch python-team
in repository guix.
commit 9594d504114aeec6c044991dffa7f183c984654b
Author: Hugo Buddelmeijer <[email protected]>
AuthorDate: Wed May 27 22:10:17 2026 +0200
gnu: python-pillow: Update to 12.2.0 [security-fixes].
Release notes since 12.1.0 (2026-02-11):
- 12.2.0 (2026-04-01)
<https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html>.
Contains fixes for:
CVE-2026-40192: Denial of Service via Memory Exhaustion.
CVE-2026-42308: An integer overflow when processing fonts.
CVE-2026-42309: A heap buffer overflow with nested list coordinates.
CVE-2026-42310: A PDF Parsing Trailer Infinite Loop (DoS).
CVE-2026-42311: An OOB Write with Invalid PSD Tile Extents (Integer
Overflow).
* gnu/packages/python-xyz.scm (python-pillow): Update to 12.2.0.
Merges: guix/guix!8895
Change-Id: I09cdc768892e85b869b8f2945e4d3ab6e1a4c68a
Signed-off-by: Sharlatan Hellseher <[email protected]>
---
gnu/packages/python-xyz.scm | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/gnu/packages/python-xyz.scm b/gnu/packages/python-xyz.scm
index 844d2f6a9b..2f6495cef0 100644
--- a/gnu/packages/python-xyz.scm
+++ b/gnu/packages/python-xyz.scm
@@ -13947,7 +13947,7 @@ Python list with elements of type @code{PIL.Image}
(from the
(define-public python-pillow
(package
(name "python-pillow")
- (version "12.1.1")
+ (version "12.2.0")
(source
(origin
(method git-fetch)
@@ -13956,7 +13956,7 @@ Python list with elements of type @code{PIL.Image}
(from the
(commit version)))
(file-name (git-file-name name version))
(sha256
- (base32 "1g374rklljx0941j6d1gib9pgcq3scmqw9psqaj2c7m8pilqsn9n"))))
+ (base32 "140ynzxpazq6gq041bhkzx314z4kkzv3wlmvph68a0nkj9nqa3pg"))))
(build-system pyproject-build-system)
(arguments
(list
@@ -13997,7 +13997,7 @@ stored in a few basic pixel formats. It should provide
a solid foundation for
a general image processing tool.")
(properties `((cpe-name . "pillow")))
(license (license:x11-style
- "https://github.com/python-pillow/Pillow/blob/12.1.1/LICENSE";
+ "https://github.com/python-pillow/Pillow/blob/12.2.0/LICENSE";
"MIT-CMU License"))))
(define-public python-pillow-avif-plugin
