CVE-2021-25922

Advisory

Fafi 0.2.1 updates its dependency 'pillow' to version '8.1.1' to include a security fix.
https://github.com/svandragt/fafi/pull/42

Affected package

Affected versions

Fixed versions

Vulnerability changelog

_Search Firefox bookmark contents, with this commandline client. Fafi extracts the content of the bookmarks and stores them into a searchable SQLite database._

- skip .test domains
- new argument`—max-exists` (replaces `—stop-when-exists`)
- incremental indexing based since last indexed bookmark
- user chooses firefox profile to index when multiple profiles are detected
- update dependencies (python 3.8 required)
- security updates

Install via `pipx install fafi` or via poetry see the readme. (feedback wanted, how do you like to install these utilities)

Resources

• https://pypi.org/project/fafi
• https://pyup.io/changelogs/fafi/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25922