[RHOAIENG-5335] [custom_model|trasformer] pillow - Buffer Overflow

chore: Fixes [CVE-2024-28219](https://www.cve.org/CVERecord?id=CVE-2024-28219) Signed-off-by: Spolti <fspolti@redhat.com>
spolti · Apr 11, 2024 · 0d544a6 · 0d544a6
1 parent 7d1632b
commit 0d544a6
Show file tree

Hide file tree

Showing 15 changed files with 7,390 additions and 8,453 deletions.
diff --git a/python/aiffairness/poetry.lock b/python/aiffairness/poetry.lock
diff --git a/python/alibiexplainer/poetry.lock b/python/alibiexplainer/poetry.lock
diff --git a/python/artexplainer/poetry.lock b/python/artexplainer/poetry.lock
diff --git a/python/custom_model/poetry.lock b/python/custom_model/poetry.lock
diff --git a/python/custom_model/pyproject.toml b/python/custom_model/pyproject.toml
@@ -13,7 +13,7 @@ python = ">=3.9,<3.12"
 kserve = {path = "../kserve", develop = true}
 torchvision = {version = "0.15.1+cpu", source = "pytorch"}
 torch = {version = "2.0.0", source = "pytorch"}
-pillow = "^10.2.0"
+pillow = "^10.3.0"
 
 
 [[tool.poetry.source]]

diff --git a/python/custom_transformer/poetry.lock b/python/custom_transformer/poetry.lock
diff --git a/python/custom_transformer/pyproject.toml b/python/custom_transformer/pyproject.toml
@@ -13,7 +13,7 @@ python = ">=3.9,<3.12"
 kserve = {path = "../kserve", develop = true}
 torchvision = {version = "0.15.1+cpu", source = "pytorch"}
 torch = {version = "2.0.0+cpu", source = "pytorch"}
-pillow = "^10.2.0"
+pillow = "^10.3.0"
 
 
 [[tool.poetry.source]]

diff --git a/python/kserve/poetry.lock b/python/kserve/poetry.lock
diff --git a/python/lgbserver/poetry.lock b/python/lgbserver/poetry.lock
diff --git a/python/paddleserver/poetry.lock b/python/paddleserver/poetry.lock
diff --git a/python/pmmlserver/poetry.lock b/python/pmmlserver/poetry.lock
diff --git a/python/sklearnserver/poetry.lock b/python/sklearnserver/poetry.lock
diff --git a/python/test_resources/graph/error_404_isvc/poetry.lock b/python/test_resources/graph/error_404_isvc/poetry.lock
diff --git a/python/test_resources/graph/success_200_isvc/poetry.lock b/python/test_resources/graph/success_200_isvc/poetry.lock
diff --git a/python/xgbserver/poetry.lock b/python/xgbserver/poetry.lock