[Staging 25.11] python3Packages.pillow: apply patch for CVE-2026-40192 (#510523)

This commit is contained in:
dotlambda
2026-04-23 03:23:12 +00:00
committed by GitHub

View File

@@ -4,6 +4,7 @@
buildPythonPackage,
pythonOlder,
fetchFromGitHub,
fetchpatch,
# build-system
setuptools,
@@ -54,6 +55,15 @@ buildPythonPackage rec {
hash = "sha256-NlmNabyoHiakwvomjivTA7N304ovNCMDSaBLSmcmZ7w=";
};
patches = [
(fetchpatch {
# https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j
name = "CVE-2026-40192.patch";
url = "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628.patch";
hash = "sha256-7Hh72WoD7Iy/aB1J7w5X6ge3wx4lPWAQrOR6luO0FOg=";
})
];
build-system = [
setuptools
pybind11