Merge pull request #1486 from ScilifelabDataCentre/DDS-1768-CVE-2023-…

…44271 Updated Pillow to the latest stable version
ScilifelabDataCentre · Nov 7, 2023 · 198a929 · 198a929
2 parents 5423eb4 + 51c42c3
commit 198a929
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/SPRINTLOG.md b/SPRINTLOG.md
@@ -322,3 +322,7 @@ _Nothing merged in CLI during this sprint_
 - New endpoint `AddFailedFiles` for adding failed files to database ([#1472](https://github.com/ScilifelabDataCentre/dds_web/pull/1472))
 - Change the generate usage command to monthly instead of quartely, and add the command to send a usage report specifying the number of months ([#1476](https://github.com/ScilifelabDataCentre/dds_web/pull/1476))
 - New ADR record regarding OKR 2024 ([#1483](https://github.com/ScilifelabDataCentre/dds_web/pull/1483))
+
+# 2023-11-6 - 2023-11-17
+
+- Updated Pillow package version to address vulnerabities ([#1486](https://github.com/ScilifelabDataCentre/dds_web/pull/1486))
diff --git a/requirements.txt b/requirements.txt
@@ -42,7 +42,7 @@ MarkupSafe==2.1.1
 marshmallow==3.14.1
 marshmallow-sqlalchemy==0.27.0
 packaging==21.3
-Pillow==9.3.0 # required by qrcode
+Pillow==10.1.0 # required by qrcode
 pycparser==2.21
 PyMySQL==1.0.2
 PyNaCl==1.5.0