CVS commit: pkgsrc/graphics/py-pillow_heif

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon Mar  2 12:50:12 UTC 2026

Modified Files:
        pkgsrc/graphics/py-pillow_heif: Makefile distinfo

Log Message:
py-pillow_heif: update to 1.3.0.

## [1.3.0 - 2026-02-27]

### Added

- Pixel aspect ratio (pasp) read/write support. #408
- No-GIL (free-threaded Python) support. #405

### Fixed

- Integer overflow in encode path buffer validation leading to heap out-of-bounds read. (CVE-2026-28231, GHSA-5gjj-6r7v-ph3x) Thanks to @kaizawa97 for finding this!


To generate a diff of this commit:
cvs rdiff -u -r1.30 -r1.31 pkgsrc/graphics/py-pillow_heif/Makefile
cvs rdiff -u -r1.22 -r1.23 pkgsrc/graphics/py-pillow_heif/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/graphics/py-pillow_heif/Makefile
diff -u pkgsrc/graphics/py-pillow_heif/Makefile:1.30 pkgsrc/graphics/py-pillow_heif/Makefile:1.31
--- pkgsrc/graphics/py-pillow_heif/Makefile:1.30        Sun Feb 22 13:41:17 2026
+++ pkgsrc/graphics/py-pillow_heif/Makefile     Mon Mar  2 12:50:12 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.30 2026/02/22 13:41:17 wiz Exp $
+# $NetBSD: Makefile,v 1.31 2026/03/02 12:50:12 wiz Exp $
 
-DISTNAME=      pillow_heif-1.2.1
+DISTNAME=      pillow_heif-1.3.0
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    graphics
 MASTER_SITES=  ${MASTER_SITE_PYPI:=p/pillow_heif/}

Index: pkgsrc/graphics/py-pillow_heif/distinfo
diff -u pkgsrc/graphics/py-pillow_heif/distinfo:1.22 pkgsrc/graphics/py-pillow_heif/distinfo:1.23
--- pkgsrc/graphics/py-pillow_heif/distinfo:1.22        Sun Feb 22 13:41:17 2026
+++ pkgsrc/graphics/py-pillow_heif/distinfo     Mon Mar  2 12:50:12 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.22 2026/02/22 13:41:17 wiz Exp $
+$NetBSD: distinfo,v 1.23 2026/03/02 12:50:12 wiz Exp $
 
-BLAKE2s (pillow_heif-1.2.1.tar.gz) = 38423d8c0f754c4557c01574955e97eccd6e4b4187b29eb9a7cd6d3e82087acc
-SHA512 (pillow_heif-1.2.1.tar.gz) = 444311a16dadcb5099fb49a9f7e298933f6488e53b70fae536ae89dfc93f447e1c3bdf59eb84f3aff517ea5922547e93bc08dfb22beabd425db8eb24caf46550
-Size (pillow_heif-1.2.1.tar.gz) = 17128668 bytes
+BLAKE2s (pillow_heif-1.3.0.tar.gz) = 86644fac0daf0e234222f7429d7c5f219f79d05c482e169e99513ed9e5d30c5e
+SHA512 (pillow_heif-1.3.0.tar.gz) = 1e82f99b44da4f1f17161050882df1ddd6953c49c6f3e236c09c972c20a3b378cbca7e3152eba7a96538a66069ce860fdde28d3fe61f81763560e45072cfdafc
+Size (pillow_heif-1.3.0.tar.gz) = 17133211 bytes