Bug 32512

Summary:	python-pillow new security issues CVE-2023-44271 and CVE-2024-28219
Product:	Mageia	Reporter:	Nicolas Salguero <nicolas.salguero>
Component:	Security	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal	CC:	andrewsfarm, makowski.mageia, marja11, nicolas.salguero, sysadmin-bugs, yvesbrungard
Version:	9	Keywords:	advisory, validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA9-64-OK
Source RPM:	python-pillow-9.2.0-3.1.mga9.src.rpm	CVE:	CVE-2023-44271,CVE-2024-28219
Status comment:

Description Nicolas Salguero 2023-11-13 17:41:16 CET

Fedora has issued an advisory yesterday (November 12):
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N2JOEDUJDQLCUII2LQYZYSM7RJL2I3P4/

Mageia 8 is also affected.

Nicolas Salguero 2023-11-13 17:41:36 CET

CC: (none) => nicolas.salguero
Whiteboard: (none) => MGA8TOO
Source RPM: (none) => python-pillow-9.2.0-3.mga9.src.rpm

Comment 1 Marja Van Waes 2023-11-13 18:46:03 CET

Assigning to the Python stack maintainers, CC'ing the registered maintainer.

Assignee: bugsquad => python
CC: (none) => makowski.mageia, marja11

Comment 2 papoteur 2023-11-13 23:48:53 CET

https://bugzilla.redhat.com/show_bug.cgi?id=2247821#c5
Fedora said:
Unfortunately, the patch backported from upstream from version 10 to fix the CVE-2023-44271 is not enough for version 9.5 we have in Fedora 38. The problem is that classes in ImageFont module have also `getsize` method which is deprecated in version 9 and removed in version 10 which means that the fix in version 10 is not applied to these methods and they stay vulnerable in this update.
Thus, there is not yet fix, except updating to 10.0.0 or above.

CC: (none) => yvesbrungard

Comment 3 Marja Van Waes 2023-11-14 12:45:02 CET

(In reply to papoteur from comment #2)
> https://bugzilla.redhat.com/show_bug.cgi?id=2247821#c5
> Fedora said:
> Unfortunately, the patch backported from upstream from version 10 to fix the
> CVE-2023-44271 is not enough for version 9.5 we have in Fedora 38. The
> problem is that classes in ImageFont module have also `getsize` method which
> is deprecated in version 9 and removed in version 10 which means that the
> fix in version 10 is not applied to these methods and they stay vulnerable
> in this update.
> Thus, there is not yet fix, except updating to 10.0.0 or above.

Am I wrong to think that the fix works well when other ImageFont methods are used than 'getsize'? Meaning there is a partial fix, which is better than no fix?

Only asking in case upgrading to >= 10.0.0 isn't an option. If that is an option then please try upgrading to 10.*.

Comment 4 papoteur 2023-11-14 13:29:28 CET

I don't think upgrading to 10.* is an option. 
https://pillow.readthedocs.io/en/stable/releasenotes/10.0.0.html
In particular, I see that pyQt5 support is removed. There is a lot of packages which depends of python3-pillow, and the risk is that they will have to be updated too to support python3-pillow v10.*
I will try to build the 9.2 with the patch.

papoteur 2023-11-14 13:32:50 CET

Source RPM: python-pillow-9.2.0-3.mga9.src.rpm => python-pillow-9.2.0-3.mga9.src.rpm python-pillow-8.1.2-1.mga8.src.rpm
CVE: (none) => CVE-2023-44271

Comment 5 Nicolas Salguero 2024-03-19 13:42:34 CET

Mageia 8 EOL.

Source RPM: python-pillow-9.2.0-3.mga9.src.rpm python-pillow-8.1.2-1.mga8.src.rpm => python-pillow-9.2.0-3.1.mga9.src.rpm
Whiteboard: MGA8TOO => (none)

Comment 6 Nicolas Salguero 2024-04-09 10:37:23 CEST

openSUSE has issued an advisory on April 8:
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/VIGU3LU2FRKQUGU33Z74LBL5ZTWXJOGJ/

The problem is fixed in 10.3.0.

Mageia 9 is also affected.

Version: 9 => Cauldron
Status comment: (none) => Fixed upstream in 10.3.0
Source RPM: python-pillow-9.2.0-3.1.mga9.src.rpm => python-pillow-10.2.0-1.mga10.src.rpm
CVE: CVE-2023-44271 => CVE-2023-44271, CVE-2024-28219
Whiteboard: (none) => MGA9TOO
Summary: python-pillow new security issue CVE-2023-44271 => python-pillow new security issues CVE-2023-44271 and CVE-2024-28219

Nicolas Salguero 2024-04-09 11:44:50 CEST

Version: Cauldron => 9
Source RPM: python-pillow-10.2.0-1.mga10.src.rpm => python-pillow-9.2.0-3.1.mga9.src.rpm
Whiteboard: MGA9TOO => (none)

papoteur 2024-04-09 18:42:18 CEST

Status comment: Fixed upstream in 10.3.0 => (none)
Assignee: python => qa-bugs

Comment 7 papoteur 2024-04-09 22:22:57 CEST

I have applied patches:
- for CVE-2023-44271: patches from Ubuntu for 9.0.1 https://git.launchpad.net/ubuntu/+source/pillow/patch/?id=048d907831349a031c0ebd575d14517f13c4fa7c
- for CVE-2024-28219: pull request 7928 from upstream

Release 9
Source RPMS
python-pillow-9.2.0-3.1.mga9

Binaries RPMS in x86_64
python3-pillow-9.2.0-3.1.mga9.x86_64
python3-pillow-devel-9.2.0-3.1.mga9.x86_64
python3-pillow-doc-9.2.0-3.1.mga9.noarch
python3-pillow-qt-9.2.0-3.1.mga9.x86_64
python3-pillow-tk-9.2.0-3.1.mga9.x86_64

Binaries RPMS in i586
python3-pillow-9.2.0-3.1.mga9.i586
python3-pillow-devel-9.2.0-3.1.mga9.i586
python3-pillow-doc-9.2.0-3.1.mga9.noarch
python3-pillow-qt-9.2.0-3.1.mga9.i586
python3-pillow-tk-9.2.0-3.1.mga9.i586

katnatek 2024-04-09 23:58:58 CEST

CVE: CVE-2023-44271, CVE-2024-28219 => CVE-2023-44271,
Keywords: (none) => advisory

katnatek 2024-04-10 02:53:21 CEST

CVE: CVE-2023-44271, => CVE-2023-44271,CVE-2024-28219

Comment 8 katnatek 2024-04-10 02:57:56 CEST

Did you send other build or the packages in comment#7 are wrong?
I see these packages

i586:
python3-pillow-9.2.0-3.2.mga9.i586.rpm
python3-pillow-devel-9.2.0-3.2.mga9.i586.rpm
python3-pillow-doc-9.2.0-3.2.mga9.noarch.rpm
python3-pillow-qt-9.2.0-3.2.mga9.i586.rpm
python3-pillow-tk-9.2.0-3.2.mga9.i586.rpm

x86_64:
python3-pillow-9.2.0-3.2.mga9.x86_64.rpm
python3-pillow-devel-9.2.0-3.2.mga9.x86_64.rpm
python3-pillow-doc-9.2.0-3.2.mga9.noarch.rpm
python3-pillow-qt-9.2.0-3.2.mga9.x86_64.rpm
python3-pillow-tk-9.2.0-3.2.mga9.x86_64.rpm


SRPM:
python-pillow-9.2.0-3.2.mga9.src.rpm

Comment 9 katnatek 2024-04-10 03:11:21 CEST

RH mageia 9 x86_64 

Tested with PySolFC

LC_ALL=C urpmi PySolFC
To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch    
(medium "QA Testing (64-bit)")
  python3-pillow                 9.2.0        3.2.mga9      x86_64  
  python3-pillow-tk              9.2.0        3.2.mga9      x86_64  
(medium "Core Release (distrib1)")
  PySolFC                        2.15.0       1.mga9        noarch  
  PySolFC-cardsets               2.0          14.mga9       noarch  (recommended)
  lib64sdl2_mixer2.0_0           2.6.3        1.mga9        x86_64  
  lib64sdl2_ttf2.0_0             2.20.2       1.mga9        x86_64  
  python3-attrs                  22.2.0       1.mga9        noarch  
  python3-black_hole_solver      0.2.3        4.mga9        noarch  
  python3-freecell_solver        0.4.0        2.mga9        noarch  
  python3-pycotap                1.2.2        3.mga9        noarch  
  python3-pygame                 2.1.2        4.mga9        x86_64  
  python3-pysol-cards            0.14.2       3.mga9        noarch  
  python3-pysol-sound-server     3.20         8.mga9        x86_64  (recommended)
  python3-random2                1.0.1        12.mga9       noarch  
(medium "Core Updates (distrib3)")
  tkinter3                       3.10.11      1.2.mga9      x86_64  
68MB of additional disk space will be used.
41MB of packages will be retrieved.
Proceed with the installation of the 15 packages? (Y/n) 


    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-freecell_solver-0.4.0-2.mga9.noarch.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64sdl2_mixer2.0_0-2.6.3-1.mga9.x86_64.rpm   
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-pysol-cards-0.14.2-3.mga9.noarch.rpm   
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-attrs-22.2.0-1.mga9.noarch.rpm         
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64sdl2_ttf2.0_0-2.20.2-1.mga9.x86_64.rpm    
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-black_hole_solver-0.2.3-4.mga9.noarch.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-pygame-2.1.2-4.mga9.x86_64.rpm         
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/PySolFC-2.15.0-1.mga9.noarch.rpm               
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-pycotap-1.2.2-3.mga9.noarch.rpm        
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-random2-1.0.1-12.mga9.noarch.rpm       
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/PySolFC-cardsets-2.0-14.mga9.noarch.rpm        
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-pysol-sound-server-3.20-8.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/updates/tkinter3-3.10.11-1.2.mga9.x86_64.rpm           
installing /var/cache/urpmi/rpms/python3-random2-1.0.1-12.mga9.noarch.rpm                                                           
//home/katnatek/qa-testing/x86_64/python3-pillow-9.2.0-3.2.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-pysol-sound-server-3.20-8.mga9.x86_64.rpm
/var/cache/urpmi/rpms/PySolFC-cardsets-2.0-14.mga9.noarch.rpm
/var/cache/urpmi/rpms/python3-pycotap-1.2.2-3.mga9.noarch.rpm
/var/cache/urpmi/rpms/python3-pygame-2.1.2-4.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-black_hole_solver-0.2.3-4.mga9.noarch.rpm
/var/cache/urpmi/rpms/PySolFC-2.15.0-1.mga9.noarch.rpm
/var/cache/urpmi/rpms/python3-attrs-22.2.0-1.mga9.noarch.rpm
/var/cache/urpmi/rpms/lib64sdl2_mixer2.0_0-2.6.3-1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-pysol-cards-0.14.2-3.mga9.noarch.rpm
/var/cache/urpmi/rpms/lib64sdl2_ttf2.0_0-2.20.2-1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/tkinter3-3.10.11-1.2.mga9.x86_64.rpm
//home/katnatek/qa-testing/x86_64/python3-pillow-tk-9.2.0-3.2.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-freecell_solver-0.4.0-2.mga9.noarch.rpm
Preparing...                     ##################################################################################################
     1/15: tkinter3              ##################################################################################################
     2/15: lib64sdl2_mixer2.0_0  ##################################################################################################
     3/15: python3-pillow        ##################################################################################################
     4/15: python3-random2       ##################################################################################################
     5/15: python3-pysol-cards   ##################################################################################################
     6/15: python3-pillow-tk     ##################################################################################################
     7/15: python3-pysol-sound-server
                                 ##################################################################################################
     8/15: python3-freecell_solver
                                 ##################################################################################################
     9/15: lib64sdl2_ttf2.0_0    ##################################################################################################
    10/15: python3-pygame        ##################################################################################################
    11/15: python3-attrs         ##################################################################################################
    12/15: python3-black_hole_solver
                                 ##################################################################################################
    13/15: python3-pycotap       ##################################################################################################
    14/15: PySolFC-cardsets      ##################################################################################################
    15/15: PySolFC               ##################################################################################################
      1/1: removing python3-pillow-9.2.0-3.1.mga9.x86_64
                                 ##################################################################################################

pysol works, just complain the card set Neo is not found

Comment 10 katnatek 2024-04-10 03:27:22 CEST

RH mageia 9 x86_64

Install the rest of packages

LC_ALL=C urpmi /home/katnatek/qa-testing/x86_64/*.rpm
Package python3-pillow-9.2.0-3.2.mga9.x86_64 is already installed
Marking python3-pillow as manually installed, it won't be auto-orphaned
writing /var/lib/rpm/installed-through-deps.list
To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch    
(medium "Core Release (distrib1)")
  lib64jpeg-devel                2.1.4        1.mga9        x86_64  
  lib64qt5bluetooth5             5.15.7       1.mga9        x86_64  
  lib64qt5designer5              5.15.7       2.mga9        x86_64  
  lib64qt5location5              5.15.7       2.mga9        x86_64  
  lib64qt5nfc5                   5.15.7       1.mga9        x86_64  
  lib64qt5positioningquick5      5.15.7       2.mga9        x86_64  
  lib64qt5quick3d5               5.15.7       1.mga9        x86_64  
  lib64qt5quick3dassetimport5    5.15.7       1.mga9        x86_64  
  lib64qt5quick3drender5         5.15.7       1.mga9        x86_64  
  lib64qt5quick3druntimerender5  5.15.7       1.mga9        x86_64  
  lib64qt5quick3dutils5          5.15.7       1.mga9        x86_64  
  lib64qt5remoteobjects5         5.15.7       1.mga9        x86_64  
  lib64qt5serialport5            5.15.7       1.mga9        x86_64  
  lib64qt5websockets5            5.15.7       1.mga9        x86_64  
  lib64qt5xmlpatterns5           5.15.7       1.mga9        x86_64  
  python3-qt5                    5.15.7       3.mga9        x86_64  
  python3-qt5-bluetooth          5.15.7       3.mga9        x86_64  
  python3-qt5-dbus               5.15.7       3.mga9        x86_64  
  python3-qt5-designer           5.15.7       3.mga9        x86_64  
  python3-qt5-location           5.15.7       3.mga9        x86_64  
  python3-qt5-multimedia         5.15.7       3.mga9        x86_64  
  python3-qt5-multimediawidgets  5.15.7       3.mga9        x86_64  
  python3-qt5-nfc                5.15.7       3.mga9        x86_64  
  python3-qt5-opengl             5.15.7       3.mga9        x86_64  
  python3-qt5-positioning        5.15.7       3.mga9        x86_64  
  python3-qt5-printsupport       5.15.7       3.mga9        x86_64  
  python3-qt5-quick3d            5.15.7       3.mga9        x86_64  
  python3-qt5-quickwidgets       5.15.7       3.mga9        x86_64  
  python3-qt5-remoteobjects      5.15.7       3.mga9        x86_64  
  python3-qt5-sensors            5.15.7       3.mga9        x86_64  
  python3-qt5-serialport         5.15.7       3.mga9        x86_64  
  python3-qt5-sql                5.15.7       3.mga9        x86_64  
  python3-qt5-svg                5.15.7       3.mga9        x86_64  
  python3-qt5-test               5.15.7       3.mga9        x86_64  
  python3-qt5-texttospeech       5.15.7       3.mga9        x86_64  
  python3-qt5-webchannel         5.15.7       3.mga9        x86_64  
  python3-qt5-websockets         5.15.7       3.mga9        x86_64  
  python3-qt5-widgets            5.15.7       3.mga9        x86_64  
  python3-qt5-x11extras          5.15.7       3.mga9        x86_64  
  python3-qt5-xml                5.15.7       3.mga9        x86_64  
  python3-qt5-xmlpatterns        5.15.7       3.mga9        x86_64  
  qtquick3d5                     5.15.7       1.mga9        x86_64  
  qtremoteobjects5               5.15.7       1.mga9        x86_64  
  qtxmlpatterns5                 5.15.7       1.mga9        x86_64  
  qtxmlpatterns5-xmlpatterns     5.15.7       1.mga9        x86_64  
(medium "Core Updates (distrib3)")
  lib64python3-devel             3.10.11      1.2.mga9      x86_64  
  lib64python3.10-testsuite      3.10.11      1.2.mga9      x86_64  (recommended)
  python3-docs                   3.10.11      1.2.mga9      noarch  (recommended)
  tkinter3                       3.10.11      1.2.mga9      x86_64  
(command line)
  python3-pillow-devel           9.2.0        3.2.mga9      x86_64  
  python3-pillow-doc             9.2.0        3.2.mga9      noarch  
  python3-pillow-qt              9.2.0        3.2.mga9      x86_64  
  python3-pillow-tk              9.2.0        3.2.mga9      x86_64  
158MB of additional disk space will be used.
30MB of packages will be retrieved.
Proceed with the installation of the 53 packages? (Y/n) y


    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-printsupport-5.15.7-3.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-serialport-5.15.7-3.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/qtxmlpatterns5-xmlpatterns-5.15.7-1.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-widgets-5.15.7-3.mga9.x86_64.rpm   
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/qtremoteobjects5-5.15.7-1.mga9.x86_64.rpm      
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-texttospeech-5.15.7-3.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-multimediawidgets-5.15.7-3.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-dbus-5.15.7-3.mga9.x86_64.rpm      
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-sql-5.15.7-3.mga9.x86_64.rpm       
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-multimedia-5.15.7-3.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-xml-5.15.7-3.mga9.x86_64.rpm       
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-nfc-5.15.7-3.mga9.x86_64.rpm       
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-quick3d-5.15.7-3.mga9.x86_64.rpm   
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-sensors-5.15.7-3.mga9.x86_64.rpm   
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64qt5xmlpatterns5-5.15.7-1.mga9.x86_64.rpm  
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-positioning-5.15.7-3.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64qt5location5-5.15.7-2.mga9.x86_64.rpm     
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-location-5.15.7-3.mga9.x86_64.rpm  
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-designer-5.15.7-3.mga9.x86_64.rpm  
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-remoteobjects-5.15.7-3.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64jpeg-devel-2.1.4-1.mga9.x86_64.rpm        
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64qt5quick3druntimerender5-5.15.7-1.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-quickwidgets-5.15.7-3.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64qt5quick3drender5-5.15.7-1.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64qt5designer5-5.15.7-2.mga9.x86_64.rpm     
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-opengl-5.15.7-3.mga9.x86_64.rpm    
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64qt5serialport5-5.15.7-1.mga9.x86_64.rpm   
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-xmlpatterns-5.15.7-3.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-x11extras-5.15.7-3.mga9.x86_64.rpm 
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64qt5quick3dassetimport5-5.15.7-1.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-test-5.15.7-3.mga9.x86_64.rpm      
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-bluetooth-5.15.7-3.mga9.x86_64.rpm 
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/qtxmlpatterns5-5.15.7-1.mga9.x86_64.rpm        
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/qtquick3d5-5.15.7-1.mga9.x86_64.rpm            
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-svg-5.15.7-3.mga9.x86_64.rpm       
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-websockets-5.15.7-3.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64qt5websockets5-5.15.7-1.mga9.x86_64.rpm   
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-webchannel-5.15.7-3.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64qt5remoteobjects5-5.15.7-1.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64qt5positioningquick5-5.15.7-2.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64qt5nfc5-5.15.7-1.mga9.x86_64.rpm          
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64qt5quick3d5-5.15.7-1.mga9.x86_64.rpm      
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64qt5quick3dutils5-5.15.7-1.mga9.x86_64.rpm 
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/lib64qt5bluetooth5-5.15.7-1.mga9.x86_64.rpm    
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/release/python3-qt5-5.15.7-3.mga9.x86_64.rpm           
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/updates/lib64python3.10-testsuite-3.10.11-1.2.mga9.x86_64.rpm
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/updates/python3-docs-3.10.11-1.2.mga9.noarch.rpm       
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/updates/tkinter3-3.10.11-1.2.mga9.x86_64.rpm           
    https://mirror.math.princeton.edu/pub/mageia/distrib/9/x86_64/media/core/updates/lib64python3-devel-3.10.11-1.2.mga9.x86_64.rpm 
installing /var/cache/urpmi/rpms/qtxmlpatterns5-xmlpatterns-5.15.7-1.mga9.x86_64.rpm                                                
/var/cache/urpmi/rpms/python3-qt5-widgets-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-printsupport-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-serialport-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-dbus-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64python3.10-testsuite-3.10.11-1.2.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-multimediawidgets-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-texttospeech-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/qtremoteobjects5-5.15.7-1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-docs-3.10.11-1.2.mga9.noarch.rpm
/var/cache/urpmi/rpms/python3-qt5-multimedia-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-xml-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-sql-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64qt5xmlpatterns5-5.15.7-1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-nfc-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-quick3d-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-sensors-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-opengl-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64qt5designer5-5.15.7-2.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64qt5serialport5-5.15.7-1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-xmlpatterns-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-designer-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-location-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-remoteobjects-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64jpeg-devel-2.1.4-1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64qt5quick3druntimerender5-5.15.7-1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-quickwidgets-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64qt5quick3drender5-5.15.7-1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64qt5location5-5.15.7-2.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-positioning-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64python3-devel-3.10.11-1.2.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-bluetooth-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/tkinter3-3.10.11-1.2.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64qt5quick3dassetimport5-5.15.7-1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-test-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-x11extras-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-webchannel-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64qt5remoteobjects5-5.15.7-1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64qt5positioningquick5-5.15.7-2.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64qt5websockets5-5.15.7-1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/qtxmlpatterns5-5.15.7-1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/qtquick3d5-5.15.7-1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-svg-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-websockets-5.15.7-3.mga9.x86_64.rpm
/var/cache/urpmi/rpms/python3-qt5-5.15.7-3.mga9.x86_64.rpm
/home/katnatek/qa-testing/x86_64/python3-pillow-devel-9.2.0-3.2.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64qt5bluetooth5-5.15.7-1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64qt5nfc5-5.15.7-1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64qt5quick3d5-5.15.7-1.mga9.x86_64.rpm
/var/cache/urpmi/rpms/lib64qt5quick3dutils5-5.15.7-1.mga9.x86_64.rpm
Preparing...                     ##################################################################################################
     1/53: lib64qt5quick3dutils5 ##################################################################################################
     2/53: lib64qt5quick3drender5
                                 ##################################################################################################
     3/53: lib64qt5quick3dassetimport5
                                 ##################################################################################################
     4/53: lib64qt5quick3druntimerender5
                                 ##################################################################################################
     5/53: qtquick3d5            ##################################################################################################
     6/53: lib64qt5quick3d5      ##################################################################################################
     7/53: python3-qt5-quick3d   ##################################################################################################
     8/53: lib64qt5remoteobjects5
                                 ##################################################################################################
     9/53: qtremoteobjects5      ##################################################################################################
    10/53: python3-qt5-remoteobjects
                                 ##################################################################################################
    11/53: qtxmlpatterns5        ##################################################################################################
    12/53: lib64qt5xmlpatterns5  ##################################################################################################
    13/53: qtxmlpatterns5-xmlpatterns
                                 ##################################################################################################
    14/53: python3-qt5-xmlpatterns
                                 ##################################################################################################
    15/53: lib64qt5nfc5          ##################################################################################################
    16/53: python3-qt5-nfc       ##################################################################################################
    17/53: lib64qt5bluetooth5    ##################################################################################################
    18/53: python3-qt5-bluetooth ##################################################################################################
    19/53: python3-qt5-svg       ##################################################################################################
    20/53: lib64qt5websockets5   ##################################################################################################
    21/53: python3-qt5-websockets
                                 ##################################################################################################
    22/53: lib64qt5positioningquick5
                                 ##################################################################################################
    23/53: lib64qt5location5     ##################################################################################################
    24/53: python3-qt5-location  ##################################################################################################
    25/53: python3-qt5-webchannel
                                 ##################################################################################################
    26/53: python3-qt5-x11extras ##################################################################################################
    27/53: python3-qt5-test      ##################################################################################################
    28/53: tkinter3              ##################################################################################################
    29/53: lib64python3.10-testsuite
                                 ##################################################################################################
    30/53: python3-qt5-positioning
                                 ##################################################################################################
    31/53: python3-qt5-quickwidgets
                                 ##################################################################################################
    32/53: lib64jpeg-devel       ##################################################################################################
    33/53: lib64qt5serialport5   ##################################################################################################
    34/53: python3-qt5-serialport
                                 ##################################################################################################
    35/53: lib64qt5designer5     ##################################################################################################
    36/53: python3-qt5-designer  ##################################################################################################
    37/53: python3-qt5-opengl    ##################################################################################################
    38/53: python3-qt5-sensors   ##################################################################################################
    39/53: python3-qt5-sql       ##################################################################################################
    40/53: python3-qt5-xml       ##################################################################################################
    41/53: python3-qt5-multimedia
                                 ##################################################################################################
    42/53: python3-docs          ##################################################################################################
    43/53: lib64python3-devel    ##################################################################################################
    44/53: python3-qt5-texttospeech
                                 ##################################################################################################
    45/53: python3-qt5-multimediawidgets
                                 ##################################################################################################
    46/53: python3-qt5-dbus      ##################################################################################################
    47/53: python3-qt5-printsupport
                                 ##################################################################################################
    48/53: python3-qt5-widgets   ##################################################################################################
    49/53: python3-qt5           ##################################################################################################
    50/53: python3-pillow-devel  ##################################################################################################


installing python3-pillow-tk-9.2.0-3.2.mga9.x86_64.rpm python3-pillow-doc-9.2.0-3.2.mga9.noarch.rpm python3-pillow-qt-9.2.0-3.2.mga9.x86_64.rpm from /home/katnatek/qa-testing/x86_64
Preparing...                     ##################################################################################################
    51/53: python3-pillow-qt     ##################################################################################################
    52/53: python3-pillow-doc    ##################################################################################################
    53/53: python3-pillow-tk     ##################################################################################################

Not issues detected

Comment 11 papoteur 2024-04-10 08:21:22 CEST

(In reply to katnatek from comment #8)
> Did you send other build or the packages in comment#7 are wrong?
> I see these packages
> 
> i586:
> python3-pillow-9.2.0-3.2.mga9.i586.rpm
> python3-pillow-devel-9.2.0-3.2.mga9.i586.rpm
> python3-pillow-doc-9.2.0-3.2.mga9.noarch.rpm
> python3-pillow-qt-9.2.0-3.2.mga9.i586.rpm
> python3-pillow-tk-9.2.0-3.2.mga9.i586.rpm
> 
> x86_64:
> python3-pillow-9.2.0-3.2.mga9.x86_64.rpm
> python3-pillow-devel-9.2.0-3.2.mga9.x86_64.rpm
> python3-pillow-doc-9.2.0-3.2.mga9.noarch.rpm
> python3-pillow-qt-9.2.0-3.2.mga9.x86_64.rpm
> python3-pillow-tk-9.2.0-3.2.mga9.x86_64.rpm
> 
> 
> SRPM:
> python-pillow-9.2.0-3.2.mga9.src.rpm

Yes, my bad.

Comment 12 katnatek 2024-04-14 03:02:20 CEST

RH mageia 9 x86_64

I'm not going to do a test as deep as in https://bugs.mageia.org/show_bug.cgi?id=31019#c4

But I test img2pdf and works fine

katnatek 2024-04-14 03:02:39 CEST

CC: (none) => andrewsfarm

katnatek 2024-04-14 03:03:05 CEST

Whiteboard: (none) => MGA9-64-OK

Comment 13 Thomas Andrews 2024-04-14 16:31:00 CEST

Validating.

CC: (none) => sysadmin-bugs
Keywords: (none) => validated_update

Comment 14 Mageia Robot 2024-04-15 20:22:37 CEST

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2024-0133.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED