Skip to content

Bump skia-python to 144.0.post2 (GHSA-2mhw-8qcg-gr96) - #52

Merged
nathan-williams merged 1 commit into
masterfrom
bump-skia-python-144.0.post2
Nov 6, 2026
Merged

nathan-williams merged 1 commit into
masterfrom
bump-skia-python-144.0.post2

Conversation

@nathan-williams

Copy link
Copy Markdown

Bumps skia-python to 144.0.post2 (>= 144.0.post1) to address GHSA-2mhw-8qcg-gr96 / CVE-2025-27363 (vulnerable libfreetype vendored in skia-python <= 144.0 Linux wheels).

@nathan-williams
nathan-williams merged commit 77ced85 into master Nov 6, 2026
9 checks passed
@nathan-williams
nathan-williams deleted the bump-skia-python-144.0.post2 branch November 6, 2026 16:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant