Page MenuHomePhabricator
Create Task
Maniphest T249911

Security vulnerability found in Pillow < 6.2.2
Closed, ResolvedPublic
Actions

Description

https://github.com/wikimedia/pywikibot/network/alert/requirements.txt/Pillow/open

Details

Related Changes in Gerrit:
SubjectAuthorRepoBranchLines +/-
Restrict Pillow to 6.2.2+Dvorapapywikibot/coremaster+6 -6
Customize query in gerrit

Related Objects

Event Timeline

Dvorapa created this task.Apr 10 2020, 1:20 PM
Restricted Application added subscribers: pywikibot-bugs-list, Aklapper. · View Herald TranscriptApr 10 2020, 1:20 PM
gerritbot added a comment.Apr 10 2020, 1:33 PM

Change 587995 had a related patch set uploaded (by Dvorapa; owner: Dvorapa):
[pywikibot/core@master] Restrict Pillow to 6.2.2+

https://gerrit.wikimedia.org/r/587995

gerritbot added a project: Patch-For-Review.Apr 10 2020, 1:33 PM
Xqt closed this task as Resolved.Apr 10 2020, 2:23 PM
Xqt claimed this task.
Xqt reassigned this task from Xqt to Dvorapa.
Xqt subscribed.
gerritbot added a comment.Apr 10 2020, 2:25 PM

Change 587995 merged by jenkins-bot:
[pywikibot/core@master] Restrict Pillow to 6.2.2+

https://gerrit.wikimedia.org/r/587995

Dvorapa mentioned this in rPWBC13ef24c60a6d: Restrict Pillow to 6.2.2+.Apr 10 2020, 2:26 PM
Dvorapa triaged this task as High priority.Apr 10 2020, 2:28 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits