PyPi: Sofia-Image-Pipeline

CVE-2023-44271

Transitive

Safety vulnerability ID: 71412

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Nov 03, 2023 Updated at Oct 31, 2024
Scan your Python projects for vulnerabilities →

Advisory

Sofia-image-pipeline 1.3.0 updates its dependency 'pillow' to include a security fix.

Affected package

sofia-image-pipeline

Latest version: 1.3.5

SIP takes a SoFiA generated source catalog and produce images for publication or quick inspection. Images include HI contours overlaid on multiwavelength images, HI moment maps, pixel-by-pixel SNR maps, pv-diagrams with SoFiA mask, and spectra with and without noise.

Affected versions

Fixed versions

Vulnerability changelog

This version of SIP includes some major improvements and new capabilities. When possible (if the cubes are in frequency and not already converted to velocity), we now plot moment maps in the **source rest frame** rather than in the observed frame. This is critical for making 1-to-1 comparisons of galaxy properties across cosmic time. However, spectra are plotted in the observed frame. We also make figures for mom2 maps, and position-velocity diagrams along the minor axis when available. Finally, we have added the capability of plotting a limited number of spectral lines other than HI.

New Features
* Plots will contain warnings if the beam info is not contained in the expected header keyword (BMAJ, BMIN, BPA), but will still be made.
* Will plot the **position velocity diagram along the minor axis (with mask) if the fits file is available**, and indicate pv_min angle on mom1 map. 61
* **Added capability of plotting multiple spectral lines (for now just CO(1-0), OH 1667 MHz, and HI)**. This is a work in progress. 1
* **HI column density calculation includes correction for redshift**. 73
* Can now retrieve full images from decals/decals-dr9 when images are greater than default pixel scale *3000 pixels, by changing requested scale.
* **Makes moment 2 figures when fits file is available**. 83 90
* Ability to plot on [DECaPS false color images](https://decaps.legacysurvey.org/viewer) when available (`-s decaps`). #95

What's Changed
* Removed dependency on reproject.
* 800kB combo png limit + decals-dev by paoloserra in https://github.com/kmhess/SoFiA-image-pipeline/pull/72
* fix 79 by paoloserra in https://github.com/kmhess/SoFiA-image-pipeline/pull/80
* Improved contour and SNR plotting for absorption line sources.
* Default DECaLS image is now from DR-10. Can ask for DR-9 with `-s decals-dr9`. 76
* Can deal with cubes in which the BUNIT has been written as `'beam-1 Jy*Hz'` as is done by SpectralCube. 48
* Improved treatment of different spectral axes (especially VRAD). 77
* Some security fixes and requirement upgrades.
* np.int() is now int(). 86
* Improved plot axes--generally larger for color bars, secondary axes, and spectra.
* Can now make plots of full cube spectrum even if the name is different from SoFiA output. 45
* Plot secondary frequency axis on spectra when cube is in Hz.
* **Moment 1, moment 2, w20, w50, are plotted in the source rest frame** rather than in the observed frame **when possible**.

Known Issues
* Currently does not work with matplotlib 3.8 due to a compatibility issue between matplotlib and astropy. 94

**Full Changelog**: https://github.com/kmhess/SoFiA-image-pipeline/compare/v1.2.0...v1.3.0

Resources

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application

Severity Details

CVSS Base Score

HIGH 7.5

CVSS v3 Details

HIGH 7.5
Attack Vector (AV)
NETWORK
Attack Complexity (AC)
LOW
Privileges Required (PR)
NONE
User Interaction (UI)
NONE
Scope (S)
UNCHANGED
Confidentiality Impact (C)
NONE
Integrity Impact (I)
NONE
Availability Availability (A)
HIGH