Imageio is a Python library that allows users to read and write images, videos, and other data. It is cross-platform and can run on Python 3.9 and later.
Website
https://pypi.org/project/imageio/
Documentation
https://imageio.readthedocs.io/en/stable/
Essentially, distro developers are firefighters, putting out fires made by careless upstreams.
What I've wasted time on, today:
- making the non-standalone test suite of #Hatchling (sigh) work without #UV again, so that a critical build dependency of a growing number of #Python packages could be tested everywhere
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cc6e54e1df5e0802198c793f39107a9028b8698f
https://bugs.gentoo.org/930662
- fixing effectively dead (but with a promise of revival) #PassLib not to break random stuff via printing warnings when using newer #BCrypt versions
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c1e015b65b74283a51893672739c5e4784b95273
https://bugs.gentoo.org/925289
- hacking the test suite of #ImageIO work using an offline copy of test data, rather than cloning its git repository at the beginning of tests
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=77ff4bc09d68067f2c635d43d446f308990e0873
I really wish people would consider donating to distro developers more often, rather than to projects that create this thankless work for us.
W gruncie rzeczy, devowie distro s膮 jak stra偶acy, walcz膮cy z po偶arami wywo艂anymi przez nieostro偶nych tw贸rc贸w oprogramowania.
Dzisiaj zmarnowa艂em czas na:
- naprawienie test贸w systemu budowania #Hatchling (kt贸re nie s膮 wyodr臋bnione od test贸w Hatcha, wzdych), by dzia艂a艂y zn贸w bez #UV, aby艣my powt贸rnie mogli wsz臋dzie testowa膰 t臋 krytyczn膮 zale偶no艣膰 rosn膮cej liczby paczek Pythona
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cc6e54e1df5e0802198c793f39107a9028b8698f
https://bugs.gentoo.org/930662
- naprawianie praktycznie martwej (ale z obietnic膮 resuscytacji) biblioteki #PassLib, by nie psu艂a przypadkowych paczek, wypisuj膮c ostrze偶enia z nowszymi wersjami biblioteki #BCrypt
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c1e015b65b74283a51893672739c5e4784b95273
https://bugs.gentoo.org/925289
- obchodzenie upierdliwo艣ci w #ImageIO tak, by da艂o si臋 t臋 bibliotek臋 testowa膰 offline, z pobranymi wcze艣niej danymi, zamiast przy ka偶dym uruchomieniu test贸w klonowa膰 repozytorium git
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=77ff4bc09d68067f2c635d43d446f308990e0873
Naprawd臋 chcia艂bym, by ludzie cz臋艣ciej rozwa偶ali wsparcie dev贸w distro, a nie tylko projekt贸w, kt贸re tworz膮 im t臋 niewdzi臋czn膮 prac臋.
#Apple #iOS 17.1 terrifyingly spooky vulns... please patch ASAP!
#FindMy: An app may be able to read sensitive location information
#ImageIO: Processing an image may result in disclosure of process memory
#IOTextEncryptionFamily: An app may be able to execute arbitrary code with kernel privileges
#Kernel: An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations
#mDNSResponder: A device may be passively tracked by its Wi-Fi MAC address
#Passkeys: An attacker may be able to access passkeys without authentication
#Photos: Photos in the Hidden Photos Album may be viewed without authentication
#WebKit: Processing web content may lead to arbitrary code execution (x3)
The #WebP bug (identified by @citizenlab) that underlies both the #Apple #ImageIO and the #Chrome + #Firefox hotfixes, is a very complex beast.
For efficiency purposes, the WebP implementation used everwhere ("libwebp") is extremely complex and relied on assumptions the (resourceful!) attackers were able to break.
"The problem, we now know, is that this format is incredibly complex and fragile, and the preconditions to trigger this issue are immense." https://blog.isosceles.com/the-webp-0day/
Today I improved my #Python script to convert #png files in a folder to #gif, using a graphic interface with #PySimpleGUI (I have a CLI version too I have recently converted from #Pillow to #imageio) and during class I made a png to #mp4 version!
png -> mp4 (GUI) https://github.com/villares/sketch-a-day/blob/main/admin_scripts/pngs_to_mp4_gui.py
png -> gif (GUI)
https://github.com/villares/sketch-a-day/blob/main/admin_scripts/pngs_to_gif_gui.py
png -> gif (CLI) https://github.com/villares/sketch-a-day/blob/main/admin_scripts/pngs_to_gif.py
... Got the #securityUpdate for #Apple #iOS 15 ...
- About the security content of iOS 15.7.9 and iPadOS 15.7.9 #ImageIO #CVE2023_41064, released 20230911,
https://support.apple.com/en-us/HT213913
- Apple security releases,
https://support.apple.com/en-us/HT201222
馃摤 Apple stopft kritische Sicherheitsl眉cken in iOS und macOS
#Cyberangriffe #Mobilfunk #Blastpass #CitizenLab #ExploitKette #ImageIO #LockdownModus #NSOGroup #Pegasus #WalletApp https://tarnkappe.info/artikel/cyberangriff/apple-stopft-kritische-sicherheitsluecken-in-ios-und-macos-280288.html
iOS 16.6.1 Update: Sicherheitsl眉cken in Wallet und Image I/O behoben
Nachdem Apple iOS 16.6.1 f眉r iPhone-Nutzer gestern Nachmittag freigegeben hat, hat das Unternehmen auch Details zu den in diesem Update enthaltenen Sicherheitskorre
https://www.apfeltalk.de/magazin/news/ios-16-6-1-update-sicherheitsluecken-in-wallet-und-image-i-o-behoben/
#iPad #iPhone #Mac #News #Apple #CitizenLab #ImageIO #IOS1661 #MacOSVentura1352 #Sicherheitslcken #UniversityOfToronto #Update #WalletApp #WatchOS962
