[El-errata] ELSA-2020-0578 Important: Oracle Linux 7 python-pillow security update (aarch64)

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Tue Feb 25 14:40:20 PST 2020

Oracle Linux Security Advisory ELSA-2020-0578


The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:



Description of changes:

- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066

- Reenabled webp support on little endian archs.

- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.

- Wiped out some memory leaks.

- Mass rebuild 2014-01-24

- Fixed memory corruption.
- Resolves: rhbz#1001122

- Mass rebuild 2013-12-27

- Mark doc subpackage arch dependent. Docs are built depending on supported
features, which are different across archs.
Resolves: rhbz#987839

- Drop lcms support
Resolves: rhbz#987839

- Build without webp support on s390* archs
Resolves: rhbz#962059

- Conditionaly disable build of python3 parts on RHEL system

- Add patch to fix test failure on big-endian

- Remove Obsoletes in the python-pillow-qt subpackage. Obsoletes isn't
appropriate since qt support didn't exist in the previous python-pillow
package so there's no reason to drag in python-pillow-qt when updating

- Update to latest git
- python-pillow_quantization.patch now upstream
- python-pillow_endianness.patch now upstream
- Add subpackage for ImageQt module, with correct dependencies
- Add PyQt4 and numpy BR (for generating docs / running tests)

- Reenable tests on bigendian, add patches for #928927

- Update to latest git
- disable tests on bigendian (PPC*, S390*) until rhbz#928927 is fixed

- python-pillow_tempfile.patch now upstream
- Add python3-imaging provides (bug #924867)

- Update to latest git
- Remove python-pillow-disable-test.patch, gcc is now fixed
- Add python-pillow_tempfile.patch to prevent a temporary file from 
getting packaged

- Update to 2.0.0 git snapshot
- Enable python3 packages
- Add libwebp-devel BR for Pillow 2.0.0

- Add ARM support

- add s390* and ppc* to arch detection

- Update to latest git snapshot
- 0001-Cast-hash-table-values-to-unsigned-long.patch now upstream
- Pillow-1.7.8-selftest.patch now upstream

- Really remove -fno-strict-aliasing
- Place comment on how to retreive source just above the Source0 line

- Rebuild without -fno-strict-aliasing
- Add patch for upstream issue #52

- Initial RPM package

More information about the El-errata mailing list