Pillow Vulnerabilities (#9)

* First prep-work for client AND server-side ImageDetectorPlugins * Callback for image detector plugins added * Callback logic now manages to correctly identify client and server * Enabling Docker Support (#5) * Initial dockerfile version * Bugfixes around unit-testing for move to REQ/REP pattern and addtl logging * Further bugfixes w/ detection threshold, new default warning files * docker-compose * Various Docker updates of unknown origins ¯\_(ツ)_/¯ * Audio plugin working w/ docker * Changelog update * Version 0.5.1 - Pillow vulnerability fixed
chollinger93 · Mar 30, 2021 · d2decf9 · d2decf9
1 parent 0e2166c
commit d2decf9
Show file tree

Hide file tree

Showing 5 changed files with 9 additions and 6 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,9 @@ All changes to the project are documented here.
 - pyPI release 
 - Motion detection code on client to cut down on network bandwidth
 
+## [0.5.1] - 2021-03-30
+* Pillow CVE-2021-25290, CVE-2021-25291, etc. fixes
+
 ## [0.5] - 2020-12-14
 * Support for easier `Docker` deployment out-of-the-box
 * Changed subscriber model to `REQ/REP`

diff --git a/docs/codecov.svg b/docs/codecov.svg
diff --git a/scarecrow_client/requirements.txt b/scarecrow_client/requirements.txt
@@ -1,4 +1,4 @@
-Pillow==7.1.2
+Pillow==8.1.1
 lxml==4.6.2
 matplotlib==3.1.2
 opencv-python==4.1.2.30

diff --git a/scarecrow_server/requirements.txt b/scarecrow_server/requirements.txt
@@ -1,5 +1,5 @@
 tensorflow>="2.*"
-Pillow==7.1.2
+Pillow==8.1.1
 lxml==4.4.2
 matplotlib==3.1.2
 opencv-python==4.1.2.30

diff --git a/setup.py b/setup.py
@@ -28,7 +28,7 @@ def run(self):
 setuptools.setup(
     cmdclass={'install': ShellInstall},
     name="scarecrow-cam",
-    version="0.5.0",
+    version="0.5.1",
     author="Christian Hollinger",
     author_email="[email protected]",
     description="A Raspberry Pi powered edge-computing camera setups that runs a Tensorflow object detection model to determine whether a person is on the camera and plays loud audio to scare them off.",