Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

pillow - Buffer Overflow #3598

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

pillow - Buffer Overflow #3598

wants to merge 1 commit into from

Conversation

spolti
Copy link
Contributor

@spolti spolti commented Apr 12, 2024

chore: Fixes CVE-2024-28219

What this PR does / why we need it:

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #

Type of changes
Please delete options that are not relevant.

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • This change requires a documentation update

Feature/Issue validation/testing:

Please describe the tests that you ran to verify your changes and relevant result summary. Provide instructions so it can be reproduced.
Please also list any relevant details for your test configuration.

  • Test A

  • Test B

  • Logs

Special notes for your reviewer:

  1. Please confirm that if this PR changes any image versions, then that's the sole change this PR makes.

Checklist:

  • Have you added unit/e2e tests that prove your fix is effective or that this feature works?
  • Has code been commented, particularly in hard-to-understand areas?
  • Have you made corresponding changes to the documentation?

Release note:


@sivanantha321
Copy link
Member

/lgtm

Copy link
Member

@lizzzcai lizzzcai left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@oss-prow-bot oss-prow-bot bot removed the lgtm label Apr 17, 2024
Copy link
Member

@terrytangyuan terrytangyuan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@spolti
Copy link
Contributor Author

spolti commented Apr 17, 2024

hmm, seems that DCO is not happy, @yuzisun should I re-sign the commit or can we skip the DCO?

@yuzisun
Copy link
Member

yuzisun commented Apr 20, 2024

hmm, seems that DCO is not happy, @yuzisun should I re-sign the commit or can we skip the DCO?

you can re-sign the commit, also need to resolve the conflicts

@yuzisun
Copy link
Member

yuzisun commented Apr 21, 2024

@spolti Can you help resolve the conflicts ? thanks

@spolti
Copy link
Contributor Author

spolti commented May 7, 2024

@spolti Can you help resolve the conflicts ? thanks

Done, sry for the delay.

@yuzisun
Copy link
Member

yuzisun commented May 9, 2024

/lgtm
/approve

Copy link

oss-prow-bot bot commented May 9, 2024

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: lizzzcai, spolti, terrytangyuan, yuzisun

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@oss-prow-bot oss-prow-bot bot added the approved label May 9, 2024
Copy link

oss-prow-bot bot commented May 11, 2024

New changes are detected. LGTM label has been removed.

@oss-prow-bot oss-prow-bot bot removed the lgtm label May 11, 2024
python/kserve/poetry.lock Outdated Show resolved Hide resolved
@spolti spolti force-pushed the pillow branch 2 times, most recently from 1b24863 to 8d50c98 Compare May 13, 2024 18:14
chore: Fixes [CVE-2024-28219](https://www.cve.org/CVERecord?id=CVE-2024-28219)

Signed-off-by: Spolti <fspolti@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

5 participants