Page MenuHomePhabricator
Create Task
Maniphest T239539

GitHub suggests security issue with Pillow < 6.2.0
Closed, ResolvedPublic
Actions

Description

https://github.com/wikimedia/pywikibot/network/alert/requirements.txt/pillow/open

Details

Related Changes in Gerrit:
SubjectAuthorRepoBranchLines +/-
[setup] Update Pillow requirementsXqtpywikibot/coremaster+5 -5
Customize query in gerrit

Related Objects

Event Timeline

Dvorapa created this task.Dec 1 2019, 4:28 PM
Restricted Application added subscribers: pywikibot-bugs-list, Aklapper. · View Herald TranscriptDec 1 2019, 4:28 PM
Dvorapa renamed this task from GitHub suggests security alert about Pillow < 6.2.0 to GitHub suggests security issue with Pillow < 6.2.0.Dec 1 2019, 4:28 PM
Xqt triaged this task as High priority.Dec 1 2019, 5:14 PM
Xqt claimed this task.Dec 1 2019, 5:48 PM
gerritbot added a comment.Dec 1 2019, 5:48 PM

Change 553858 had a related patch set uploaded (by Xqt; owner: Xqt):
[pywikibot/core@master] [setup] Update Pillow requirements

https://gerrit.wikimedia.org/r/553858

gerritbot added a project: Patch-For-Review.Dec 1 2019, 5:48 PM
Xqt mentioned this in T239542: Drop support of Python 3.4.Dec 1 2019, 6:09 PM
Kizule subscribed.Dec 1 2019, 6:27 PM

URL no works for me, it shows 404.. Why?

Xqt added a comment.Dec 1 2019, 6:34 PM
In T239539#5703449, @Zoranzoki21 wrote:

URL no works for me, it shows 404.. Why?

Probably you aren't a member of this GitHub Group. Is this your GitHub account?

Kizule added a comment.EditedDec 1 2019, 6:48 PM
In T239539#5703457, @Xqt wrote:
In T239539#5703449, @Zoranzoki21 wrote:

URL no works for me, it shows 404.. Why?

Probably you aren't a member of this GitHub Group. Is this your GitHub account?

Yes, it is.

gerritbot added a comment.Jan 22 2020, 8:17 PM

Change 553858 merged by jenkins-bot:
[pywikibot/core@master] [setup] Update Pillow requirements

https://gerrit.wikimedia.org/r/553858

Xqt mentioned this in rPWBC529a57a6109b: [setup] Update Pillow requirements.Jan 22 2020, 8:18 PM
Xqt closed this task as Resolved.Jan 22 2020, 10:57 PM
Xqt removed a project: Patch-For-Review.
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits