[pkgsrc/trunk]: pkgsrc/graphics/py-Pillow py-Pillow: updated to 8.1.2

[adam <adam%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/ad7502629565
branches:  trunk
changeset: 448587:ad7502629565
user:      adam <adam%pkgsrc.org@localhost>
date:      Wed Mar 10 18:43:30 2021 +0000

description:
py-Pillow: updated to 8.1.2

8.1.2 (2021-03-06)
------------------
- Fix Memory DOS in BLP (CVE-2021-27921), ICNS (CVE-2021-27922) and ICO (CVE-2021-27923) Image Plugins

8.1.1 (2021-03-01)
------------------
- Use more specific regex chars to prevent ReDoS. CVE-2021-25292
- Fix OOB Read in TiffDecode.c, and check the tile validity before reading. CVE-2021-25291
- Fix negative size read in TiffDecode.c. CVE-2021-25290
- Fix OOB read in SgiRleDecode.c. CVE-2021-25293
- Incorrect error code checking in TiffDecode.c. CVE-2021-25289
- PyModule_AddObject fix for Python 3.10

8.1.0 (2021-01-02)
------------------
- Fix TIFF OOB Write error. CVE-2020-35654
- Fix for Read Overflow in PCX Decoding. CVE-2020-35653
- Fix for SGI Decode buffer overrun. CVE-2020-35655
- Fix OOB Read when saving GIF of xsize=1
- Makefile updates
- Add support for PySide6
- Use disposal settings from previous frame in APNG
- Added exception explaining that _repr_png_ saves to PNG
- Use previous disposal method in GIF load_end
- Allow putpalette to accept 1024 integers to include alpha values
- Fix OOB Read when writing TIFF with custom Metadata
- Added append_images support for ICO
- Block TIFFTAG_SUBIFD
- Fixed dereferencing potential null pointers
- Deprecate FreeType 2.7
- Moved warning to end of execution
- Removed unused fromstring and tostring C methods
- init() if one of the formats is unrecognised
- Moved string_dimension CVE image to pillow-depends
- Support raw rgba8888 for DDS

8.0.1 (2020-10-22)
------------------
- Update FreeType used in binary wheels to 2.10.4 to fix CVE-2020-15999.
- Moved string_dimension image to pillow-depends

8.0.0 (2020-10-15)
------------------
- Drop support for EOL Python 3.5
- Drop support for PyPy3 < 7.2.0
- Remove ImageCms.CmsProfile attributes deprecated since 3.2.0
- Remove long-deprecated Image.py functions
- Add support for 16-bit precision JPEG quantization values
- Added reading of IFD tag type
- Initialize offset memory for PyImagingPhotoPut
- Fix TiffDecode comparison warnings
- Docs: Add dark mode
- Added macOS SDK install path to library and include directories
- Imaging.h: prevent confusion with system
- Avoid using pkg_resources in PIL.features.pilinfo
- Add getlength and getbbox functions for TrueType fonts
- Allow tuples with one item to give single color value in getink
- Add support for CBDT and COLR fonts
- Removed OSError in favour of DecompressionBombError for BMP
- Implemented another ellipse drawing algorithm
- Removed unused JpegImagePlugin._fixup_dict function
- Added reading and writing of private PNG chunks
- Implement anchor for TrueType fonts
- Fixed bug in Exif __delitem__
- Fix crash in ImageTk.PhotoImage on MinGW 64-bit
- Moved CVE images to pillow-depends
- Refactor font_getsize and font_render
- Fixed loading profile with non-ASCII path on Windows
- Fixed effect_spread bug for zero distance
- Added formats parameter to Image.open
- Added regular_polygon draw method
- Raise proper TypeError in putpixel
- Added writing of subIFDs
- Fix IFDRational __eq__ bug
- Fixed duplicate variable name
- Added homebrew zlib include directory
- Corrected inverted PDF CMYK colors
- Do not try to close file pointer if file pointer is empty
- ImageOps.autocontrast: add mask parameter
- Read EXIF data tEXt chunk into info as bytes instead of string
- Replaced distutils with setuptools
- Add MIME type to PsdImagePlugin
- Allow ImageOps.autocontrast to specify low and high cutoffs separately

7.2.0 (2020-07-01)
------------------
- Do not convert I;16 images when showing PNGs
- Fixed ICNS file pointer saving
- Fixed loading non-RGBA mode APNGs with dispose background
- Deprecated _showxv
- Deprecate Image.show(command="...")
- Updated JPEG magic number
- Change STRIPBYTECOUNTS to LONG if necessary when saving
- Write JFIF header when saving JPEG
- Replaced tiff_jpeg with jpeg compression when saving TIFF images
- Writing TIFF tags: improved BYTE, added UNDEFINED
- Consider transparency when pasting text on an RGBA image
- Added method argument to single frame WebP saving
- Use ImageFileDirectory_v2 in Image.Exif
- Corrected reading EXIF metadata without prefix
- Fixed drawing a jointed line with a sequence of numeric values
- Added support for 1-D NumPy arrays
- Parse orientation from XMP tags
- Speed up text layout by not rendering glyphs
- Fixed ZeroDivisionError in Image.thumbnail
- Replaced TiffImagePlugin DEBUG with logging
- Fix repeatedly loading .gbr
- JPEG: Truncate icclist instead of setting to None
- Fixes default offset for Exif
- Fixed bug when unpickling TIFF images
- Fix pickling WebP
- Replace IOError and WindowsError aliases with OSError

7.1.2 (2020-04-25)
------------------
- Raise an EOFError when seeking too far in PNG

7.1.1 (2020-04-02)
------------------
- Fix regression seeking and telling PNGs

7.1.0 (2020-04-01)
------------------
- Fix multiple OOB reads in FLI decoding
- Fix buffer overflow in SGI-RLE decoding
- Fix bounds overflow in JPEG 2000 decoding
- Fix bounds overflow in PCX decoding
- Fix 2 buffer overflows in TIFF decoding
- Add APNG support
- ImageGrab.grab() for Linux with XCB
- Added three new channel operations
- Prevent masking of Image reduce method in Jpeg2KImagePlugin
- Added reading of earlier ImageMagick PNG EXIF data
- Fixed endian handling for I;16 getextrema
- Release buffer if function returns prematurely
- Add JPEG comment to info dictionary
- Fix size calculation of Image.thumbnail()
- Fixed stroke on FreeType < 2.9
- If present, only use alpha channel for bounding box
- Warn if an unknown feature is passed to features.check()
- Fix Name field length when saving IM images
- Allow saving of zero quality JPEG images
- Allow explicit zero width to hide outline
- Change ContainerIO return type to match file object mode
- Only draw each polygon pixel once
- Add support for shooting situation Exif IFD tags
- Handle multiple and malformed JPEG APP13 markers
- Depends: Update libwebp to 1.1.0

7.0.0 (2020-01-02)
------------------
- Drop support for EOL Python 2.7
- Fix rounding error on RGB to L conversion
- Exif writing fixes: Rational boundaries and signed/unsigned types
- Allow loading of WMF images at a given DPI
- Added reduce operation
- Raise ValueError for io.StringIO in Image.open
- Fix thumbnail geometry when DCT scaling is used
- Use default DPI when exif provides invalid x_resolution
- Change default resize resampling filter from NEAREST to BICUBIC
- Fixed black lines on upscaled images with the BOX filter
- Better thumbnail aspect ratio preservation
- Add La mode packing and unpacking
- Include tests in coverage reports
- Handle broken Photoshop data
- Raise a specific exception if no data is found for an MPO frame
- Fix Unicode support for PyPy
- Added UnidentifiedImageError
- Remove deprecated __version__ from plugins
- Fixed freeing unallocated pointer when resizing with height too large
- Copy info in Image.transform
- Corrected DdsImagePlugin setting info gamma
- Depends: Update libtiff to 4.1.0
- Improve handling of file resources
- Removed CI testing of Fedora 29
- Added pypy3 to tox envlist
- Drop support for EOL PyQt4 and PySide
- Removed deprecated setting of TIFF image sizes
- Removed deprecated PILLOW_VERSION
- Changed default frombuffer raw decoder args

diffstat:

 graphics/py-Pillow/Makefile               |   6 ++++--
 graphics/py-Pillow/distinfo               |  12 ++++++------
 graphics/py-Pillow/patches/patch-setup.py |  29 ++++-------------------------
 3 files changed, 14 insertions(+), 33 deletions(-)

diffs (77 lines):

diff -r 938889353403 -r ad7502629565 graphics/py-Pillow/Makefile
--- a/graphics/py-Pillow/Makefile       Wed Mar 10 18:40:04 2021 +0000
+++ b/graphics/py-Pillow/Makefile       Wed Mar 10 18:43:30 2021 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.50 2020/05/16 17:42:42 adam Exp $
+# $NetBSD: Makefile,v 1.51 2021/03/10 18:43:30 adam Exp $
 
-DISTNAME=      Pillow-6.2.2
+DISTNAME=      Pillow-8.1.2
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    graphics python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=P/Pillow/}
@@ -18,6 +18,8 @@
 BUILD_DEPENDS+=        ${PYPKGPREFIX}-test-runner-[0-9]*:../../devel/py-test-runner
 TEST_DEPENDS+= netpbm-[0-9]*:../../graphics/netpbm
 
+PYTHON_VERSIONS_INCOMPATIBLE=  27
+
 .include "../../devel/zlib/buildlink3.mk"
 .include "../../graphics/freetype2/buildlink3.mk"
 .include "../../graphics/lcms2/buildlink3.mk"
diff -r 938889353403 -r ad7502629565 graphics/py-Pillow/distinfo
--- a/graphics/py-Pillow/distinfo       Wed Mar 10 18:40:04 2021 +0000
+++ b/graphics/py-Pillow/distinfo       Wed Mar 10 18:43:30 2021 +0000
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.42 2020/01/13 11:01:55 adam Exp $
+$NetBSD: distinfo,v 1.43 2021/03/10 18:43:30 adam Exp $
 
-SHA1 (Pillow-6.2.2.tar.gz) = ed3cbafdb982cd55ca8bb726a3a76e7be89ea61c
-RMD160 (Pillow-6.2.2.tar.gz) = 22b39d6d4dff18415340df080e1b598ee204a97e
-SHA512 (Pillow-6.2.2.tar.gz) = 517c971d4fb23a47466a7e8326c8c29291f7832d4521001c1898d6223ea25d4b0a8b7c8f7e78dd706f421229a8261b558b9fbdc43e47a0a2a7b2b4bbc1a21eff
-Size (Pillow-6.2.2.tar.gz) = 37811273 bytes
-SHA1 (patch-setup.py) = 5a7b2d56532e6688bfe1a0349d4c3136a7c26d2a
+SHA1 (Pillow-8.1.2.tar.gz) = 2c972f30581da0c58edb1e2bed420c2b8f6fd216
+RMD160 (Pillow-8.1.2.tar.gz) = d1c1235ef634c602b03e4905f0f0fff6d5d72daa
+SHA512 (Pillow-8.1.2.tar.gz) = 7e1c14aed7446d53fb67a1f9de283aadc6be3b16e0b56361329af1d0e1b02e4110d1d1a4eb021aada90fbab2ee67d3e582e0c1829d90af39641c5562061c9270
+Size (Pillow-8.1.2.tar.gz) = 45218347 bytes
+SHA1 (patch-setup.py) = 11d48f7a21088eeb304fb88571d6c0f6eccffdb6
diff -r 938889353403 -r ad7502629565 graphics/py-Pillow/patches/patch-setup.py
--- a/graphics/py-Pillow/patches/patch-setup.py Wed Mar 10 18:40:04 2021 +0000
+++ b/graphics/py-Pillow/patches/patch-setup.py Wed Mar 10 18:43:30 2021 +0000
@@ -1,31 +1,10 @@
-$NetBSD: patch-setup.py,v 1.22 2019/11/20 23:34:36 minskim Exp $
+$NetBSD: patch-setup.py,v 1.23 2021/03/10 18:43:30 adam Exp $
 
-Disable mp_compile hack; it has problems with native parallel building.
+Fix finding zlib.h.
 
---- setup.py.orig      2019-10-20 09:47:22.000000000 +0000
+--- setup.py.orig      2021-03-06 05:17:25.000000000 +0000
 +++ setup.py
-@@ -22,7 +22,6 @@ from setuptools import Extension, setup
- 
- # monkey patch import hook. Even though flake8 says it's not used, it is.
- # comment this out to disable multi threaded builds.
--import mp_compile
- 
- if sys.platform == "win32" and sys.version_info >= (3, 9):
-     warnings.warn(
-@@ -332,12 +331,6 @@ class pil_build_ext(build_ext):
-         if self.debug:
-             global DEBUG
-             DEBUG = True
--        if sys.version_info.major >= 3 and not self.parallel:
--            # For Python 2.7, we monkeypatch distutils to have parallel
--            # builds. If --parallel (or -j) wasn't specified, we want to
--            # reproduce the same behavior as before, that is, auto-detect the
--            # number of jobs.
--            self.parallel = mp_compile.MAX_PROCS
-         for x in self.feature:
-             if getattr(self, "disable_%s" % x):
-                 setattr(self.feature, x, False)
-@@ -539,7 +532,7 @@ class pil_build_ext(build_ext):
+@@ -561,7 +561,7 @@ class pil_build_ext(build_ext):
  
          if feature.want("zlib"):
              _dbg("Looking for zlib")