50a37d
%global py3_incdir %(python3 -c 'import distutils.sysconfig; print(distutils.sysconfig.get_python_inc())')
50a37d
%global py3_libbuilddir %(python3 -c 'import sys; import sysconfig; print("lib.{p}-{v[0]}.{v[1]}".format(p=sysconfig.get_platform(), v=sys.version_info))')
50a37d
50a37d
%global srcname pillow
50a37d
# bootstrap building docs (pillow is required by docutils, docutils are
50a37d
#  required by sphinx; pillow build-requires sphinx)
50a37d
%global with_docs 1
50a37d
50a37d
Name:           python-%{srcname}
50a37d
Version:        5.1.1
cd6656
Release:        18%{?dist}
50a37d
Summary:        Python image processing library
50a37d
50a37d
# License: see http://www.pythonware.com/products/pil/license.htm
50a37d
License:        MIT
50a37d
URL:            http://python-pillow.github.io/
50a37d
Source0:        https://github.com/python-pillow/Pillow/archive/%{version}/Pillow-%{version}.tar.gz
50a37d
Patch0:         0001-Fix-potential-un-terminated-buffer-problem-CWE-120.patch
50a37d
Patch1:         0002-Fix-potential-leaked-storage-issues-CWE-772.patch
50a37d
Patch2:         0003-Fix-dereferencing-type-punned-pointer.patch
50a37d
# Combined fixes for CVE-2020-5312 improperly restricted operations on memory buffer in libImaging/PcxDecode.c
50a37d
# https://bugzilla.redhat.com/show_bug.cgi?id=1789533
50a37d
# https://github.com/python-pillow/Pillow/commit/93b22b846e0269ee9594ff71a72bec02d2bea8fd
50a37d
# and for CVE-2019-16865 reading specially crafted image files leads to allocation of large amounts of memory and denial of service
50a37d
# https://bugzilla.redhat.com/show_bug.cgi?id=1774066
50a37d
# https://github.com/python-pillow/Pillow/commit/cc16025e234b7a7a4dd3a86d2fdc0980698db9cc
50a37d
# https://github.com/python-pillow/Pillow/commit/b36c1bc943d554ba223086c7efb502d080f73905
50a37d
# https://github.com/python-pillow/Pillow/commit/f228d0ccbf6bf9392d7fcd51356ef2cfda80c75a
50a37d
# https://github.com/python-pillow/Pillow/commit/b9693a51c99c260bd66d1affeeab4a226cf7e5a5
50a37d
Patch3:         CVE-2020-5312_CVE-2019-16865.patch
50a37d
# Fix for CVE-2020-5311 - out-of-bounds write in expandrow in libImaging/SgiRleDecode.c
50a37d
# https://bugzilla.redhat.com/show_bug.cgi?id=1789535
50a37d
# https://github.com/python-pillow/Pillow/commit/a79b65c47c7dc6fe623aadf09aa6192fc54548f3
50a37d
Patch4:         CVE-2020-5311.patch
50a37d
# CVE-2020-5313 out-of-bounds read in ImagingFliDecode when loading FLI images
50a37d
# Upstream fix: https://github.com/python-pillow/Pillow/commit/a09acd0decd8a87ccce939d5ff65dab59e7d365b?patch
50a37d
# Tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=1789532
50a37d
Patch5:         CVE-2020-5313.patch
7f73fb
# CVE-2020-11538 out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2
7f73fb
# Upstream fix: https://github.com/python-pillow/Pillow/pull/4504/
7f73fb
# Tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=1852814
7f73fb
Patch6:         CVE-2020-11538.patch
7f73fb
# CVE-2020-35653 decoding a crafted PCX file could result in buffer over-read
7f73fb
# Note that there is a wrong CVE number in the commit msg
7f73fb
# Upstream fix: https://github.com/python-pillow/Pillow/commit/2f409261eb1228e166868f8f0b5da5cda52e55bf
7f73fb
# Tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=1915432
7f73fb
Patch7:         CVE-2020-35653.patch
7f73fb
# CVE-2020-35655 decoding crafted SGI RLE image files could result in buffer over-read
7f73fb
# Upstream fix: https://github.com/python-pillow/Pillow/commit/120eea2e4547a7d1826afdf01563035844f0b7d5
7f73fb
# Tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-35653
7f73fb
Patch8:         CVE-2020-35655.patch
699c67
# CVE-2021-25290 negative-offset memcpy with an invalid size in TiffDecode.c
699c67
# Upstream fix: https://github.com/python-pillow/Pillow/commit/86f02f7c70862a0954bfe8133736d352db978eaa
699c67
# Tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=1934685
699c67
Patch9:         CVE-2021-25290.patch
699c67
# CVE-2021-25292 backtracking regex in PDF parser could be used as a DOS attack
699c67
# Upstream fix: https://github.com/python-pillow/Pillow/commit/3bce145966374dd39ce58a6fc0083f8d1890719c
699c67
# Tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2021-25292
699c67
Patch10:        CVE-2021-25292.patch
699c67
# CVE-2021-25293 out-of-bounds read in SGIRleDecode.c
699c67
# Upstream fix: https://github.com/python-pillow/Pillow/commit/4853e522bddbec66022c0915b9a56255d0188bf9
699c67
# Tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2021-25293
699c67
Patch11:        CVE-2021-25293.patch
699c67
# CVE-2021-27921 reported size of a contained image is not properly checked for a BLP container
699c67
# CVE-2021-27922 reported size of a contained image is not properly checked for an ICNS container
699c67
# CVE-2021-27923 reported size of a contained image is not properly checked for an ICO container
699c67
# Upstream fix: https://github.com/python-pillow/Pillow/commit/480f6819b592d7f07b9a9a52a7656c10bbe07442
699c67
# Tracking bugs:
699c67
#   - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2021-27921
699c67
#   - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2021-27922
699c67
#   - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2021-27923
699c67
Patch12:        CVE-2021-27921_27922_27923.patch
7c055c
# CVE-2021-25288 and 25287 out-of-bounds read in J2kDecode in j2ku_gray_i and j2ku_graya_la
7c055c
# Upstream fixes this patch combines:
7c055c
# - Original fix for the CVEs: https://github.com/python-pillow/Pillow/commit/3bf5eddb89afdf690eceaa52bc4d3546ba9a5f87
7c055c
# - Older commit the fix is based on: https://github.com/python-pillow/Pillow/commit/cf6da6b79080a8c16984102fdc85f7ce28dca613
7c055c
# Tracking bugs:
7c055c
# - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2021-25287
7c055c
# - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2021-25288
7c055c
Patch13:        CVE-2021-25287_25288.patch
7c055c
# CVE-2021-28675 DoS in PsdImagePlugin
7c055c
# Upstream fix: https://github.com/python-pillow/Pillow/commit/22e9bee4ef225c0edbb9323f94c26cee0c623497
7c055c
# Tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2021-28675
7c055c
Patch14:        CVE-2021-28675.patch
7c055c
# CVE-2021-28676 infinite loop in FliDecode.c can lead to DoS
7c055c
# Upstream fix: https://github.com/python-pillow/Pillow/commit/bb6c11fb889e6c11b0ee122b828132ee763b5856
7c055c
# Tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2021-28676
7c055c
Patch15:        CVE-2021-28676.patch
7c055c
# CVE-2021-28677 DoS in the open phase via a malicious EPS file
7c055c
# Upstream fix: https://github.com/python-pillow/Pillow/commit/5a5e6db0abf4e7a638fb1b3408c4e495a096cb92
7c055c
# Tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2021-28677
7c055c
Patch16:        CVE-2021-28677.patch
7c055c
# CVE-2021-28678 improper check in BlpImagePlugin can lead to DoS
7c055c
# Upstream fix: https://github.com/python-pillow/Pillow/commit/496245aa4365d0827390bd0b6fbd11287453b3a1
7c055c
# Tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2021-28678
7c055c
Patch17:        CVE-2021-28678.patch
e95768
# CVE-2021-34552: buffer overflow in Convert.c because it allow an attacker to pass
e95768
# controlled parameters directly into a convert function
e95768
# Upstream fix: https://github.com/python-pillow/Pillow/pull/5567
e95768
# Tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=1982378
e95768
Patch18:        CVE-2021-34552.patch
cd6656
# CVE-2022-22817: PIL.ImageMath.eval allows evaluation of arbitrary expressions
cd6656
# Upstream fixes:
cd6656
# https://github.com/python-pillow/Pillow/commit/8531b01d6cdf0b70f256f93092caa2a5d91afc11
cd6656
# https://github.com/python-pillow/Pillow/commit/f84ab3bb8a0a196a52e8a76bebed2853362629de
cd6656
# Tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=2042527
cd6656
Patch19:        CVE-2022-22817.patch
cd6656
# CVE-2022-22815 python-pillow: improperly initializes ImagePath.Path in path_getbbox() in path.c
cd6656
# CVE-2022-22816 python-pillow: buffer over-read during initialization of ImagePath.Path in path_getbbox() in path.c
cd6656
# Upstream fix: https://github.com/python-pillow/Pillow/commit/5543e4e2d409cd9e409bc64cdc77be0af007a31f
cd6656
# Memory issue fix: https://github.com/python-pillow/Pillow/pull/5958
cd6656
# Tracking bugs:
cd6656
# https://bugzilla.redhat.com/show_bug.cgi?id=2042511
cd6656
# https://bugzilla.redhat.com/show_bug.cgi?id=2042522
cd6656
Patch20:        CVE-2022-22815_CVE-2022-22816.patch
50a37d
50a37d
BuildRequires:  freetype-devel
50a37d
BuildRequires:  gcc
50a37d
BuildRequires:  ghostscript
50a37d
BuildRequires:  lcms2-devel
50a37d
BuildRequires:  libjpeg-devel
50a37d
BuildRequires:  libtiff-devel
50a37d
BuildRequires:  libwebp-devel
50a37d
BuildRequires:  openjpeg2-devel
50a37d
BuildRequires:  tk-devel
50a37d
BuildRequires:  zlib-devel
50a37d
50a37d
BuildRequires:  python3-cffi
50a37d
BuildRequires:  python3-devel
50a37d
BuildRequires:  python3-numpy
50a37d
BuildRequires:  python3-setuptools
50a37d
%if 0%{?with_docs}
50a37d
BuildRequires:  python3-sphinx
50a37d
BuildRequires:  python3-sphinx_rtd_theme
50a37d
%endif # with_docs
50a37d
BuildRequires:  python3-tkinter
50a37d
50a37d
# For EpsImagePlugin.py
50a37d
Requires:       ghostscript
50a37d
50a37d
%global __provides_exclude_from ^%{python3_sitearch}/PIL/.*\\.so$
50a37d
50a37d
%description
50a37d
Python image processing library, fork of the Python Imaging Library (PIL)
50a37d
50a37d
This library provides extensive file format support, an efficient
50a37d
internal representation, and powerful image processing capabilities.
50a37d
50a37d
There are these subpackages: tk (tk interface),
50a37d
devel (development) and doc (documentation).
50a37d
50a37d
50a37d
%package -n python3-%{srcname}
50a37d
Summary:        Python 3 image processing library
50a37d
%{?python_provide:%python_provide python3-%{srcname}}
50a37d
Provides:       python3-imaging = %{version}-%{release}
50a37d
# For MicImagePlugin.py, FpxImagePlugin.py
50a37d
50a37d
%description -n python3-%{srcname}
50a37d
Python image processing library, fork of the Python Imaging Library (PIL)
50a37d
50a37d
This library provides extensive file format support, an efficient
50a37d
internal representation, and powerful image processing capabilities.
50a37d
50a37d
There are these subpackages: tk (tk interface),
50a37d
devel (development) and doc (documentation).
50a37d
50a37d
50a37d
%package -n python3-%{srcname}-devel
50a37d
Summary:        Development files for %{srcname}
50a37d
Requires:       python3-devel, libjpeg-devel, zlib-devel
50a37d
Requires:       python3-%{srcname}%{?_isa} = %{version}-%{release}
50a37d
%{?python_provide:%python_provide python3-%{srcname}-devel}
50a37d
Provides:       python3-imaging-devel = %{version}-%{release}
50a37d
50a37d
%description -n python3-%{srcname}-devel
50a37d
Development files for %{srcname}.
50a37d
50a37d
50a37d
%package -n python3-%{srcname}-doc
50a37d
Summary:        Documentation for %{srcname}
50a37d
BuildArch:      noarch
50a37d
Requires:       python3-%{srcname} = %{version}-%{release}
50a37d
%{?python_provide:%python_provide python3-%{srcname}-doc}
50a37d
Provides:       python3-imaging-doc = %{version}-%{release}
50a37d
50a37d
%description -n python3-%{srcname}-doc
50a37d
Documentation for %{srcname}.
50a37d
50a37d
50a37d
%package -n python3-%{srcname}-tk
50a37d
Summary:        Tk interface for %{srcname}
50a37d
Requires:       python3-tkinter
50a37d
Requires:       python3-%{srcname}%{?_isa} = %{version}-%{release}
50a37d
%{?python_provide:%python_provide python3-%{srcname}-tk}
50a37d
Provides:       python3-imaging-tk = %{version}-%{release}
50a37d
50a37d
%description -n python3-%{srcname}-tk
50a37d
Tk interface for %{name}.
50a37d
50a37d
50a37d
%prep
50a37d
%autosetup -p1 -n Pillow-%{version}
50a37d
50a37d
50a37d
%build
50a37d
%py3_build
50a37d
50a37d
%if 0%{?with_docs}
50a37d
PYTHONPATH=$PWD/build/%py3_libbuilddir make -C docs html BUILDDIR=_build_py3 SPHINXBUILD=sphinx-build-%python3_version
50a37d
rm -f docs/_build_py3/html/.buildinfo
50a37d
%endif # with_docs
50a37d
50a37d
50a37d
%install
50a37d
install -d %{buildroot}/%{py3_incdir}/Imaging
50a37d
install -m 644 src/libImaging/*.h %{buildroot}/%{py3_incdir}/Imaging
50a37d
%py3_install
50a37d
50a37d
50a37d
%check
50a37d
ln -s $PWD/Images $PWD/build/%py3_libbuilddir/Images
50a37d
cp -R $PWD/Tests $PWD/build/%py3_libbuilddir/Tests
50a37d
cp -R $PWD/selftest.py $PWD/build/%py3_libbuilddir/selftest.py
50a37d
pushd build/%py3_libbuilddir
50a37d
PYTHONPATH=$PWD %{__python3} selftest.py
50a37d
popd
50a37d
50a37d
50a37d
%files -n python3-%{srcname}
50a37d
%doc README.rst CHANGES.rst
50a37d
%license docs/COPYING
50a37d
%{python3_sitearch}/*
50a37d
# These are in subpackages
50a37d
%exclude %{python3_sitearch}/PIL/_imagingtk*
50a37d
%exclude %{python3_sitearch}/PIL/ImageTk*
50a37d
%exclude %{python3_sitearch}/PIL/SpiderImagePlugin*
50a37d
%exclude %{python3_sitearch}/PIL/ImageQt*
50a37d
%exclude %{python3_sitearch}/PIL/__pycache__/ImageTk*
50a37d
%exclude %{python3_sitearch}/PIL/__pycache__/SpiderImagePlugin*
50a37d
%exclude %{python3_sitearch}/PIL/__pycache__/ImageQt*
50a37d
50a37d
%files -n python3-%{srcname}-devel
50a37d
%{py3_incdir}/Imaging/
50a37d
50a37d
%files -n python3-%{srcname}-doc
50a37d
%if 0%{?with_docs}
50a37d
%doc docs/_build_py3/html
50a37d
%endif # with_docs
50a37d
50a37d
%files -n python3-%{srcname}-tk
50a37d
%{python3_sitearch}/PIL/_imagingtk*
50a37d
%{python3_sitearch}/PIL/ImageTk*
50a37d
%{python3_sitearch}/PIL/SpiderImagePlugin*
50a37d
%{python3_sitearch}/PIL/__pycache__/ImageTk*
50a37d
%{python3_sitearch}/PIL/__pycache__/SpiderImagePlugin*
50a37d
50a37d
50a37d
%changelog
cd6656
* Fri Feb 11 2022 Charalampos Stratakis <cstratak@redhat.com> - 5.1.1-18
cd6656
- Fixup for CVE-2022-22817
cd6656
- Security fixes for CVE-2022-22815, CVE-2022-22816
cd6656
Resolves: rhbz#2042511, rhbz#2042522
cd6656
cd6656
* Fri Feb 04 2022 Charalampos Stratakis <cstratak@redhat.com> - 5.1.1-17
cd6656
- Fix for CVE-2022-22817
cd6656
Resolves: rhbz#2042527
cd6656
e95768
* Mon Aug 02 2021 Charalampos Stratakis <cstratak@redhat.com> - 5.1.1-16
e95768
- Fix for CVE-2021-34552
e95768
Resolves: rhbz#1982378
e95768
7c055c
* Mon Jun 14 2021 Lumír Balhar <lbalhar@redhat.com> - 5.1.1-15
7c055c
- Fixes for CVE-2021-25288, CVE-2021-25287, CVE-2021-28675, CVE-2021-28676,
7c055c
CVE-2021-28677 and CVE-2021-28678
7c055c
Resolves: rhbz#1958231, rhbz#1958226, rhbz#1958240, rhbz#1958252, rhbz#1958257, rhbz#1958263
7c055c
699c67
* Fri Apr 09 2021 Lumír Balhar <lbalhar@redhat.com> - 5.1.1-14
699c67
- Fixes for CVE-2021-25290, CVE-2021-25292, CVE-2021-25293, CVE-2021-27921
699c67
CVE-2021-27922, and CVE-2021-27923
699c67
Resolves: rhbz#1934685 rhbz#1934699 rhbz#1934705 rhbz#1935384 rhbz#1935396 rhbz#1935401
699c67
7f73fb
* Thu Feb 18 2021 Lumír Balhar <lbalhar@redhat.com> - 5.1.1-13
7f73fb
- Fixes for CVE-2020-35653 and CVE-2020-35655
7f73fb
Resolves: rhbz#1915420 rhbz#1915432
7f73fb
7f73fb
* Mon Jul 13 2020 Lumír Balhar <lbalhar@redhat.com> - 5.1.1-12
7f73fb
- Fix for CVE-2020-11538
7f73fb
Resolves: rhbz#1852814
7f73fb
50a37d
* Wed Mar 04 2020 Lumír Balhar <lbalhar@redhat.com> - 5.1.1-11
50a37d
- Fix for CVE-2020-5313
50a37d
Resolves: rhbz#1789532
50a37d
50a37d
* Mon Feb 17 2020 Lumír Balhar <lbalhar@redhat.com> - 5.1.1-10
50a37d
- Bump and rebuild for gating to deliver CVE fixes
50a37d
Resolves: rhbz#1789535
50a37d
50a37d
* Mon Feb 17 2020 Lumír Balhar <lbalhar@redhat.com> - 5.1.1-9
50a37d
- Fix for CVE-2020-5311 - out-of-bounds write in expandrow
50a37d
Resolves: rhbz#1789535
50a37d
50a37d
* Fri Feb 14 2020 Lumír Balhar <lbalhar@redhat.com> - 5.1.1-8
50a37d
- Combined fixes for CVE-2020-5312 and CVE-2019-16865
50a37d
Resolves: rhbz#1789533
50a37d
Resolves: rhbz#1774066
50a37d
50a37d
* Tue Nov 27 2018 Lumír Balhar <lbalhar@redhat.com> - 5.1.1-7
50a37d
- Add upstream patch to solve build-time warning
50a37d
- Move patches to dist-git
50a37d
- Resolves: rhbz#1639348
50a37d
50a37d
* Mon Oct 15 2018 Lumír Balhar <lbalhar@redhat.com> - 5.1.1-6
50a37d
- Add patches to fix issues found by static code analysis
50a37d
- Resolves: rhbz#1602669
50a37d
50a37d
* Wed Jun 27 2018 Petr Viktorin <pviktori@redhat.com> - 5.1.1-5
50a37d
- Correct dependency on python3-tkinter
50a37d
50a37d
* Tue Jun 19 2018 Petr Viktorin <pviktori@redhat.com> - 5.1.1-4
50a37d
- Drop dependency on python3-olefile (breaking MicImagePlugin.py, FpxImagePlugin)
50a37d
50a37d
* Thu Jun 14 2018 Petr Viktorin <pviktori@redhat.com> - 5.1.1-3
50a37d
- Remove the Python 2 subpackage
50a37d
- Remove the libimagequant dependency
50a37d
  The imagequant library was only used to support a non-default image
50a37d
  quantization mode.
50a37d
50a37d
* Thu May 31 2018 Petr Viktorin <pviktori@redhat.com> - 5.1.1-2
50a37d
- Remove the python2 version of docs
50a37d
- Remove Qt subpackages
50a37d
- Drop dependency on python2-olefile (breaking MicImagePlugin.py, FpxImagePlugin)
50a37d
50a37d
* Wed Apr 25 2018 Sandro Mani <manisandro@gmail.com> - 5.1.1-1
50a37d
- Update to 5.1.1
50a37d
50a37d
* Thu Apr 05 2018 Sandro Mani <manisandro@gmail.com> - 5.1.0-1
50a37d
- Update to 5.1.0
50a37d
50a37d
* Wed Mar 07 2018 Sandro Mani <manisandro@gmail.com> - 5.0.0-3
50a37d
- Add missing BR: gcc
50a37d
50a37d
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 5.0.0-2
50a37d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
50a37d
50a37d
* Wed Jan 03 2018 Sandro Mani <manisandro@gmail.com> - 5.0.0-1
50a37d
- Update to 5.0.0
50a37d
50a37d
* Tue Oct 03 2017 Sandro Mani <manisandro@gmail.com> - 4.3.0-1
50a37d
- Update to 4.3.0
50a37d
50a37d
* Tue Sep 05 2017 Troy Dawson <tdawson@redhat.com> - 4.2.1-5
50a37d
- Cleanup spec file conditionals
50a37d
50a37d
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 4.2.1-4
50a37d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
50a37d
50a37d
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 4.2.1-3
50a37d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
50a37d
50a37d
* Fri Jul 07 2017 Igor Gnatenko <ignatenko@redhat.com> - 4.2.1-2
50a37d
- Rebuild due to bug in RPM (RHBZ #1468476)
50a37d
50a37d
* Thu Jul 06 2017 Sandro Mani <manisandro@gmail.com> - 4.2.1-1
50a37d
- Update to 4.2.1
50a37d
50a37d
* Sat Jul 01 2017 Sandro Mani <manisandro@gmail.com> - 4.2.0-1
50a37d
- Update to 4.2.0
50a37d
50a37d
* Fri Apr 28 2017 Sandro Mani <manisandro@gmail.com> - 4.1.1-1
50a37d
- Update to 4.1.1
50a37d
50a37d
* Wed Apr 05 2017 Sandro Mani <manisandro@gmail.com> - 4.1.0-1
50a37d
- Update to 4.1.0
50a37d
50a37d
* Wed Feb 15 2017 Sandro Mani <manisandro@gmail.com> - 4.0.0-3
50a37d
- Fix some __pycache__ files in wrong subpackage (#1422606)
50a37d
50a37d
* Wed Feb 01 2017 Sandro Mani <manisandro@gmail.com> - 4.0.0-2
50a37d
- Rebuild (libwebp)
50a37d
50a37d
* Tue Jan 03 2017 Sandro Mani <manisandro@gmail.com> - 4.0.0-1
50a37d
- Update to 4.0.0
50a37d
50a37d
* Mon Dec 12 2016 Miro Hrončok <mhroncok@redhat.com> - 3.4.2-3
50a37d
- Enable docs build
50a37d
50a37d
* Mon Dec 12 2016 Miro Hrončok <mhroncok@redhat.com> - 3.4.2-2
50a37d
- Rebuild for Python 3.6
50a37d
50a37d
* Wed Oct 19 2016 Sandro Mani <manisandro@gmail.com> - 3.4.2-1
50a37d
- Update to 3.4.2
50a37d
50a37d
* Tue Oct 04 2016 Sandro Mani <manisandro@gmail.com> - 3.4.1-1
50a37d
- Update to 3.4.1
50a37d
50a37d
* Mon Oct 03 2016 Sandro Mani <manisandro@gmail.com> - 3.4.0-1
50a37d
- Update to 3.4.0
50a37d
50a37d
* Thu Aug 18 2016 Sandro Mani <manisandro@gmail.com> - 3.3.1-1
50a37d
- Update  to 3.3.1
50a37d
50a37d
* Tue Jul 19 2016 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.3.0-2
50a37d
- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
50a37d
50a37d
* Sat Jul 02 2016 Sandro Mani <manisandro@gmail.com> - 3.3.0-1
50a37d
- Update to 3.3.0
50a37d
- Modernize spec
50a37d
50a37d
* Fri Apr 01 2016 Sandro Mani <manisandro@gmail.com> - 3.2.0-1
50a37d
- Update to 3.2.0
50a37d
50a37d
* Wed Feb 10 2016 Sandro Mani <manisandro@gmail.com> - 3.1.1-3
50a37d
- Fix broken python3-pillow package description
50a37d
50a37d
* Sun Feb 07 2016 Igor Gnatenko <i.gnatenko.brain@gmail.com> - 3.1.1-2
50a37d
- Fix provides
50a37d
50a37d
* Thu Feb 04 2016 Sandro Mani <manisandro@gmail.com> - 3.1.1-1
50a37d
- Update to 3.1.1
50a37d
- Fixes CVE-2016-0740, CVE-2016-0775
50a37d
50a37d
* Mon Jan 11 2016 Toshio Kuratomi <toshio@fedoraproject.org> - 3.1.0-2
50a37d
- Fix executable files in doc package bringing in python 2 for the python3 doc
50a37d
  packages
50a37d
50a37d
* Mon Jan 04 2016 Sandro Mani <manisandro@gmail.com> - 3.1.0-1
50a37d
- Update to 3.1.0
50a37d
50a37d
* Tue Dec 29 2015 Igor Gnatenko <i.gnatenko.brain@gmail.com> - 3.0.0-5
50a37d
- Build with docs
50a37d
50a37d
* Mon Dec 28 2015 Igor Gnatenko <i.gnatenko.brain@gmail.com> - 3.0.0-4
50a37d
- Rebuilt for libwebp soname bump
50a37d
50a37d
* Wed Oct 14 2015 Robert Kuska <rkuska@redhat.com> - 3.0.0-3
50a37d
- Rebuilt for Python3.5 rebuild with docs
50a37d
50a37d
* Tue Oct 13 2015 Robert Kuska <rkuska@redhat.com> - 3.0.0-2
50a37d
- Rebuilt for Python3.5 rebuild without docs
50a37d
50a37d
* Fri Oct 02 2015 Sandro Mani <manisandro@gmail.com> - 3.0.0-1
50a37d
- Update to 3.0.0
50a37d
50a37d
* Wed Jul 29 2015 Sandro Mani <manisandro@gmail.com> - 2.9.0-2
50a37d
- Fix python3-pillow-tk Requires: tkinter -> python3-tkinter (#1248085)
50a37d
50a37d
* Thu Jul 02 2015 Sandro Mani <manisandro@gmail.com> - 2.9.0-1
50a37d
- Update to 2.9.0
50a37d
50a37d
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.8.2-2
50a37d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
50a37d
50a37d
* Mon Jun 08 2015 Sandro Mani <manisandro@gmail.com> - 2.8.2-1
50a37d
- Update to 2.8.2
50a37d
50a37d
* Thu Apr 02 2015 Sandro Mani <manisandro@gmail.com> - 2.8.1-1
50a37d
- Update to 2.8.1
50a37d
50a37d
* Wed Apr 01 2015 Sandro Mani <manisandro@gmail.com> - 2.8.0-1
50a37d
- Update to 2.8.0
50a37d
50a37d
* Mon Jan 12 2015 Sandro Mani <manisandro@gmail.com> - 2.7.0-1
50a37d
- Update to 2.7.0
50a37d
- Drop sane subpackage, is in python-sane now
50a37d
- Fix python3 headers directory
50a37d
- Drop Obsoletes: python3-pillow on python3-pillow-qt
50a37d
50a37d
* Mon Oct 13 2014 Sandro Mani <manisandro@gmail.com> - 2.6.1-1
50a37d
- Update to 2.6.1
50a37d
50a37d
* Thu Oct 02 2014 Sandro Mani <manisandro@gmail.com> - 2.6.0-1
50a37d
- Update to 2.6.0
50a37d
50a37d
* Wed Aug 20 2014 Sandro Mani <manisandro@gmail.com> - 2.5.3-3
50a37d
- Rebuilding again to resolve transient build error that caused BZ#1131723
50a37d
50a37d
* Tue Aug 19 2014 Stephen Gallagher <sgallagh@redhat.com> - 2.5.3-2
50a37d
- Rebuilding to resolve transient build error that caused BZ#1131723
50a37d
50a37d
* Tue Aug 19 2014 Sandro Mani <manisandro@gmail.com> - 2.5.3-1
50a37d
- Update to 2.5.3 (Fix CVE-2014-3598, a DOS in the Jpeg2KImagePlugin)
50a37d
50a37d
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.5.2-2
50a37d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
50a37d
50a37d
* Wed Aug 13 2014 Sandro Mani <manisandro@gmail.com> - 2.5.2-1
50a37d
- Update to 2.5.2 (Fix CVE-2014-3589, a DOS in the IcnsImagePlugin)
50a37d
50a37d
* Sat Jul 26 2014 Sandro Mani <manisandro@gmail.com> - 2.5.1-2
50a37d
- Reenable jpeg2k tests on big endian arches
50a37d
50a37d
* Tue Jul 15 2014 Sandro Mani <manisandro@gmail.com> - 2.5.1-1
50a37d
- Update to 2.5.1
50a37d
50a37d
* Wed Jul 02 2014 Sandro Mani <manisandro@gmail.com> - 2.5.0-1
50a37d
- Update to 2.5.0
50a37d
50a37d
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.0-11
50a37d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
50a37d
50a37d
* Wed May 28 2014 Sandro Mani <manisandro@gmail.com> - 2.4.0-10
50a37d
- Rebuild with docs enabled
50a37d
- Update python-pillow_openjpeg-2.1.0.patch
50a37d
50a37d
* Tue May 27 2014 Sandro Mani <manisandro@gmail.com> - 2.4.0-9
50a37d
- Rebuild against openjpeg-2.1.0
50a37d
50a37d
* Fri May 23 2014 Dan Horák <dan[at]danny.cz> - 2.4.0-8
50a37d
- skip jpeg2k tests on big endian arches (#1100762)
50a37d
50a37d
* Wed May 21 2014 Jaroslav Škarvada <jskarvad@redhat.com> - 2.4.0-7
50a37d
- Rebuilt for https://fedoraproject.org/wiki/Changes/f21tcl86
50a37d
50a37d
* Tue May 13 2014 Bohuslav Kabrda <bkabrda@redhat.com> - 2.4.0-6
50a37d
- Set with_docs to 1 to build docs.
50a37d
50a37d
* Tue May 13 2014 Bohuslav Kabrda <bkabrda@redhat.com> - 2.4.0-5
50a37d
- Bootstrap building sphinx docs because of circular dependency with sphinx.
50a37d
50a37d
* Fri May  9 2014 Orion Poplawski <orion@cora.nwra.com> - 2.4.0-4
50a37d
- Rebuild for Python 3.4
50a37d
50a37d
* Tue Apr 22 2014 Sandro Mani <manisandro@gmail.com> - 2.4.0-3
50a37d
- Add patch: Have the tempfile use a suffix with a dot
50a37d
50a37d
* Thu Apr 17 2014 Sandro Mani <manisandro@gmail.com> - 2.4.0-2
50a37d
- Enable Jpeg2000 support
50a37d
- Enable webp support also on s390* archs, bug #962091 is now fixed
50a37d
- Add upstream patch for ghostscript detection
50a37d
50a37d
* Wed Apr 02 2014 Sandro Mani <manisandro@gmail.com> - 2.4.0-1
50a37d
- Update to 2.4.0
50a37d
50a37d
* Wed Mar 19 2014 Sandro Mani <manisandro@gmail.com> - 2.3.1-1
50a37d
- Update to 2.3.1 (Fix insecure use of tempfile.mktemp (CVE-2014-1932 CVE-2014-1933))
50a37d
50a37d
* Thu Mar 13 2014 Jakub Dorňák <jdornak@redhat.com> - 2.3.0-5
50a37d
- python-pillow does not provide python3-imaging
50a37d
  (python3-pillow does)
50a37d
50a37d
* Tue Jan 07 2014 Sandro Mani <manisandro@gmail.com> - 2.3.0-4
50a37d
- Add missing ghostscript Requires and BuildRequires
50a37d
50a37d
* Mon Jan 06 2014 Sandro Mani <manisandro@gmail.com> - 2.3.0-3
50a37d
- Remove python-pillow_help-theme.patch, add python-sphinx-theme-better BR
50a37d
50a37d
* Sun Jan 05 2014 Sandro Mani <manisandro@gmail.com> - 2.3.0-2
50a37d
- Rebuild with docs enabled
50a37d
- Change lcms BR to lcms2
50a37d
50a37d
* Thu Jan 02 2014 Sandro Mani <manisandro@gmail.com> - 2.3.0-1
50a37d
- Update to 2.3.0
50a37d
- Build with doc disabled to break circular python-pillow -> python-sphinx -> python pillow dependency
50a37d
50a37d
* Wed Oct 23 2013 Sandro Mani <manisandro@gmail.com> - 2.2.1-2
50a37d
- Backport fix for decoding tiffs with correct byteorder, fixes rhbz#1019656
50a37d
50a37d
* Wed Oct 02 2013 Sandro Mani <manisandro@gmail.com> - 2.2.1-1
50a37d
- Update to 2.2.1
50a37d
- Really enable webp on ppc, but leave disabled on s390
50a37d
50a37d
* Thu Aug 29 2013 Sandro Mani <manisandro@gmail.com> - 2.1.0-4
50a37d
- Add patch to fix incorrect PyArg_ParseTuple tuple signature, fixes rhbz#962091 and rhbz#988767.
50a37d
- Renable webp support on bigendian arches
50a37d
50a37d
* Wed Aug 28 2013 Sandro Mani <manisandro@gmail.com> - 2.1.0-3
50a37d
- Add patch to fix memory corruption caused by invalid palette size, see rhbz#1001122
50a37d
50a37d
* Tue Jul 30 2013 Karsten Hopp <karsten@redhat.com> 2.1.0-2
50a37d
- Build without webp support on ppc* archs (#988767)
50a37d
50a37d
* Wed Jul 03 2013 Sandro Mani <manisandro@gmail.com> - 2.1.0-1
50a37d
- Update to 2.1.0
50a37d
- Run tests in builddir, not installroot
50a37d
- Build python3-pillow docs with python3
50a37d
- python-pillow_endian.patch upstreamed
50a37d
50a37d
* Mon May 13 2013 Roman Rakus <rrakus@redhat.com> - 2.0.0-10
50a37d
- Build without webp support on s390* archs
50a37d
  Resolves: rhbz#962059
50a37d
50a37d
* Sat May 11 2013 Roman Rakus <rrakus@redhat.com> - 2.0.0-9.gitd1c6db8
50a37d
- Conditionaly disable build of python3 parts on RHEL system
50a37d
50a37d
* Wed May 08 2013 Sandro Mani <manisandro@gmail.com> - 2.0.0-8.gitd1c6db8
50a37d
- Add patch to fix test failure on big-endian
50a37d
50a37d
* Thu Apr 25 2013 Toshio Kuratomi <toshio@fedoraproject.org> - 2.0.0-7.gitd1c6db8
50a37d
- Remove Obsoletes in the python-pillow-qt subpackage. Obsoletes isn't
50a37d
  appropriate since qt support didn't exist in the previous python-pillow
50a37d
  package so there's no reason to drag in python-pillow-qt when updating
50a37d
  python-pillow.
50a37d
50a37d
* Fri Apr 19 2013 Sandro Mani <manisandro@gmail.com> - 2.0.0-6.gitd1c6db8
50a37d
- Update to latest git
50a37d
- python-pillow_quantization.patch now upstream
50a37d
- python-pillow_endianness.patch now upstream
50a37d
- Add subpackage for ImageQt module, with correct dependencies
50a37d
- Add PyQt4 and numpy BR (for generating docs / running tests)
50a37d
50a37d
* Mon Apr 08 2013 Sandro Mani <manisandro@gmail.com> - 2.0.0-5.git93a488e
50a37d
- Reenable tests on bigendian, add patches for #928927
50a37d
50a37d
* Sun Apr 07 2013 Sandro Mani <manisandro@gmail.com> - 2.0.0-4.git93a488e
50a37d
- Update to latest git
50a37d
- disable tests on bigendian (PPC*, S390*) until rhbz#928927 is fixed
50a37d
50a37d
* Fri Mar 22 2013 Sandro Mani <manisandro@gmail.com> - 2.0.0-3.gitde210a2
50a37d
- python-pillow_tempfile.patch now upstream
50a37d
- Add python3-imaging provides (bug #924867)
50a37d
50a37d
* Fri Mar 22 2013 Sandro Mani <manisandro@gmail.com> - 2.0.0-2.git2e88848
50a37d
- Update to latest git
50a37d
- Remove python-pillow-disable-test.patch, gcc is now fixed
50a37d
- Add python-pillow_tempfile.patch to prevent a temporary file from getting packaged
50a37d
50a37d
* Tue Mar 19 2013 Sandro Mani <manisandro@gmail.com> - 2.0.0-1.git2f4207c
50a37d
- Update to 2.0.0 git snapshot
50a37d
- Enable python3 packages
50a37d
- Add libwebp-devel BR for Pillow 2.0.0
50a37d
50a37d
* Wed Mar 13 2013 Peter Robinson <pbrobinson@fedoraproject.org> 1.7.8-6.20130305git
50a37d
- Add ARM support
50a37d
50a37d
* Tue Mar 12 2013 Karsten Hopp <karsten@redhat.com> 1.7.8-5.20130305git
50a37d
- add s390* and ppc* to arch detection
50a37d
50a37d
* Tue Mar 05 2013 Sandro Mani <manisandro@gmail.com> - 1.7.8-4.20130305git7866759
50a37d
- Update to latest git snapshot
50a37d
- 0001-Cast-hash-table-values-to-unsigned-long.patch now upstream
50a37d
- Pillow-1.7.8-selftest.patch now upstream
50a37d
50a37d
* Mon Feb 25 2013 Sandro Mani <manisandro@gmail.com> - 1.7.8-3.20130210gite09ff61
50a37d
- Really remove -fno-strict-aliasing
50a37d
- Place comment on how to retreive source just above the Source0 line
50a37d
50a37d
* Mon Feb 18 2013 Sandro Mani <manisandro@gmail.com> - 1.7.8-2.20130210gite09ff61
50a37d
- Rebuild without -fno-strict-aliasing
50a37d
- Add patch for upstream issue #52
50a37d
50a37d
* Sun Feb 10 2013 Sandro Mani <manisandro@gmail.com> - 1.7.8-1.20130210gite09ff61
50a37d
- Initial RPM package