f8e8b2c3ae
- Update to 8.1.1 Security * CVE-2021-25289: The previous fix for CVE-2020-35654 was insufficent due to incorrect error checking in TiffDecode.c. * CVE-2021-25290: In TiffDecode.c, there is a negative-offset memcpy with an invalid size * CVE-2021-25291: In TiffDecode.c, invalid tile boundaries could lead to an OOB Read in TiffReadRGBATile * CVE-2021-25292: The PDF parser has a catastrophic backtracking regex that could be used as a DOS attack. * CVE-2021-25293: There is an Out of Bounds Read in SGIRleDecode.c, since pillow 4.3.0. There is an Exhaustion of Memory DOS in the ICNS, ICO, and BLP container formats where Pillow did not properly check the reported size of the contained image. These images could cause arbitrariliy large memory allocations. This was reported by Jiayi Lin, Luke Shaffer, Xinran Xie, and Akshay Ajayan of ASU.edu. Other Changes A crash with the feature flags for LibJpeg and Webp on unreleased Python 3.10 has been fixed OBS-URL: https://build.opensuse.org/request/show/876407 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-Pillow?expand=0&rev=111
133 lines
4.7 KiB
RPMSpec
133 lines
4.7 KiB
RPMSpec
#
|
|
# spec file for package python-Pillow
|
|
#
|
|
# Copyright (c) 2021 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
%define oldpython python
|
|
%define skip_python2 1
|
|
%{?!python_module:%define python_module() python-%{**} python3-%{**}}
|
|
Name: python-Pillow
|
|
Version: 8.1.1
|
|
Release: 0
|
|
Summary: Python Imaging Library (Fork)
|
|
License: HPND
|
|
URL: https://python-pillow.org/
|
|
Source: https://files.pythonhosted.org/packages/source/P/Pillow/Pillow-%{version}.tar.gz
|
|
BuildRequires: %{python_module devel}
|
|
BuildRequires: %{python_module olefile}
|
|
BuildRequires: %{python_module pytest >= 4.0}
|
|
BuildRequires: %{python_module setuptools}
|
|
BuildRequires: %{python_module tk}
|
|
BuildRequires: fdupes
|
|
BuildRequires: libimagequant-devel
|
|
BuildRequires: pkgconfig
|
|
BuildRequires: python-rpm-macros
|
|
BuildRequires: tix
|
|
BuildRequires: unzip
|
|
BuildRequires: pkgconfig(freetype2)
|
|
BuildRequires: pkgconfig(lcms2)
|
|
BuildRequires: pkgconfig(libjpeg)
|
|
BuildRequires: pkgconfig(libtiff-4)
|
|
BuildRequires: pkgconfig(libturbojpeg)
|
|
BuildRequires: pkgconfig(libwebp)
|
|
BuildRequires: pkgconfig(tk)
|
|
BuildRequires: pkgconfig(zlib)
|
|
Requires: python-olefile
|
|
%if 0%{?suse_version} >= 1500
|
|
BuildRequires: pkgconfig(libopenjp2)
|
|
%endif
|
|
%ifpython2
|
|
# Pillow is a friendly PIL fork which we used to package as 'imaging'
|
|
# Without providing python-imaging, all packages requiring it will break
|
|
Obsoletes: %{oldpython}-imaging < %{version}
|
|
Provides: %{oldpython}-imaging = %{version}
|
|
Obsoletes: %{oldpython}-imaging-sane < %{version}
|
|
Provides: %{oldpython}-imaging-sane = %{version}
|
|
%endif
|
|
%ifpython3
|
|
Obsoletes: python3-imaging < %{version}
|
|
Provides: python3-imaging = %{version}
|
|
%endif
|
|
%python_subpackages
|
|
|
|
%description
|
|
Pillow is the "friendly" PIL fork by Alex Clark and Contributors. PIL is the
|
|
Python Imaging Library by Fredrik Lundh and Contributors.
|
|
|
|
%package tk
|
|
Summary: Python Imaging Library (Fork) - Tcl/Tk Module
|
|
Requires: %{name} = %{version}
|
|
Requires: python-tk
|
|
%ifpython2
|
|
# NOTE: We don't need to conflict with python-imaging here,
|
|
# because this package depends on python-Pillow, which already conflicts with python-imaging,
|
|
# so this cannot be installed alongside python-imaging
|
|
# And we cannot conflict with python-imaging directly, since python-Pillow provides python-imaging
|
|
# Just in case, conflict with python-imaging-tk in case it is ever implemented.
|
|
Obsoletes: %{oldpython}-imaging-tk < %{version}
|
|
Provides: %{oldpython}-imaging-tk = %{version}
|
|
%endif
|
|
|
|
%description tk
|
|
Pillow is the "friendly" PIL fork by Alex Clark and Contributors. PIL is the
|
|
Python Imaging Library by Fredrik Lundh and Contributors.
|
|
|
|
%prep
|
|
%setup -q -n Pillow-%{version}
|
|
|
|
%build
|
|
%python_build
|
|
|
|
%install
|
|
%python_install
|
|
%python_expand %fdupes %{buildroot}%{$python_sitearch}
|
|
# add missing path
|
|
%{python_expand echo "PIL" > %{buildroot}%{$python_sitearch}/PIL.pth}
|
|
|
|
%check
|
|
%{python_expand export PYTHONPATH=%{buildroot}%{$python_sitearch} PYTHONDONTWRITEBYTECODE=1
|
|
%if "%{_arch}" == "s390" || "%{_arch}" == "s390x"
|
|
echo "WARNING ignoring tests completely due to https://github.com/python-pillow/Pillow/issues/1204 and segfault"
|
|
%else
|
|
%if "%{_arch}" == "ppc" || "%{_arch}" == "ppc64"
|
|
$python selftest.py --installed || \
|
|
echo "WARNING ignore failure https://github.com/python-pillow/Pillow/issues/1204"
|
|
pytest-%{$python_bin_suffix} --ignore=_build.python2 --ignore=_build.python3 --ignore=_build.pypy3 -v || \
|
|
echo "WARNING ignore failure https://github.com/python-pillow/Pillow/issues/1204"
|
|
%else
|
|
$python selftest.py --installed
|
|
pytest-%{$python_bin_suffix} --ignore=_build.python2 --ignore=_build.python3 --ignore=_build.pypy3 -v -k 'not (test_stroke or test_stroke_multiline)'
|
|
%endif
|
|
%endif
|
|
}
|
|
|
|
%files %{python_files}
|
|
%license LICENSE
|
|
%doc CHANGES.rst README.md
|
|
%{python_sitearch}/PIL
|
|
%{python_sitearch}/PIL.pth
|
|
%{python_sitearch}/Pillow-%{version}-py%{python_version}.egg-info
|
|
%exclude %{python_sitearch}/PIL/ImageTk*
|
|
%exclude %{python_sitearch}/PIL/_imagingtk*
|
|
%pycache_only %exclude %{python_sitearch}/PIL/__pycache__/ImageTk.*
|
|
|
|
%files %{python_files tk}
|
|
%{python_sitearch}/PIL/ImageTk*
|
|
%{python_sitearch}/PIL/_imagingtk*
|
|
%pycache_only %{python_sitearch}/PIL/__pycache__/ImageTk.*
|
|
|
|
%changelog
|