File tree Expand file tree Collapse file tree 3 files changed +11
-16
lines changed
Expand file tree Collapse file tree 3 files changed +11
-16
lines changed Original file line number Diff line number Diff line change @@ -31,6 +31,11 @@ https://semver.org/spec/v2.0.0.html
3131 - Upgrade lower limit for ` pyproj ` to 3.0.
3232 - Upgrade upper limit for ` pyproj ` to 3.8.
3333 - Upgrade lower limit for ` pyshp ` to 2.0.
34+ - Update optional library dependencies:
35+ - Upgrade lower limit for ` pillow ` to 10.3 due to
36+ vulnerabilities [ CVE-2023 -50447] and [ CVE-2024 -28219] .
37+ - Upgrade upper limit for ` pillow ` to 11.2.
38+ - Upgrade upper limit for ` OWSLib ` to 0.33.
3439- Update test dependencies:
3540 - Remove dependency on ` unittest2 ` .
3641 - Upgrade lower limit for ` pytest ` to 7.0.
@@ -1340,6 +1345,10 @@ https://github.com/matplotlib/basemap/compare/v1.0.3rel...v1.0.4rel
13401345[ 1.0.3] :
13411346https://github.com/matplotlib/basemap/tree/v1.0.3rel
13421347
1348+ [ CVE-2024 -28219] :
1349+ https://nvd.nist.gov/vuln/detail/CVE-2024-28219
1350+ [ CVE-2023 -50447] :
1351+ https://nvd.nist.gov/vuln/detail/CVE-2023-50447
13431352[ CVE-2023 -27476] :
13441353https://nvd.nist.gov/vuln/detail/CVE-2023-27476
13451354[ CVE-2022 -45198] :
Original file line number Diff line number Diff line change 1- ordereddict; python_version == "2.6"
2- OWSLib >= 0.8.0, < 0.15.0; python_version == "2.6"
3- OWSLib >= 0.8.0, < 0.19.0; python_version == "2.7"
4- OWSLib >= 0.8.0, < 0.11.0; python_version == "3.2"
5- OWSLib >= 0.8.0, < 0.11.0; python_version == "3.3"
6- OWSLib >= 0.8.0, < 0.18.0; python_version == "3.4"
7- OWSLib >= 0.8.0, < 0.20.0; python_version == "3.5"
8- OWSLib >= 0.28.1, < 0.30.0; python_version >= "3.6"
1+ OWSLib >= 0.28.1, < 0.33
Original file line number Diff line number Diff line change 1- pillow >= 3.4.0, < 4.0.0; python_version == "2.6"
2- pillow >= 6.2.2, < 7.0.0; python_version == "2.7"
3- pillow >= 3.4.0, < 4.0.0; python_version == "3.2"
4- pillow >= 4.3.0, < 5.0.0; python_version == "3.3"
5- pillow >= 5.4.0, < 6.0.0; python_version == "3.4"
6- pillow >= 7.1.0, < 8.0.0; python_version == "3.5"
7- pillow >= 8.3.2, < 9.0.0; python_version == "3.6"
8- pillow >= 9.4.0, < 10.2.0; python_version >= "3.7"
1+ pillow >= 10.3, < 11.2
You can’t perform that action at this time.
0 commit comments