CVE-2023-50447

Advisory

Aucmedi version 0.9.0 upgrades its Pillow dependency to version 10.2.0 from 9.3.0 in response to CVE-2023-50447.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

:sparkles: New Features
- [`7b88203`](https://github.com/frankkramer-lab/aucmedi/commit/7b882030fd01c8ee7b493ffbcef5445392a87ef7) - **Architecture**: added ConvNeXt 3D architectures *(commit by muellerdo)*
- [`2cfec6e`](https://github.com/frankkramer-lab/aucmedi/commit/2cfec6e7598c590883cdbff3982fb3b2196a7f5e) - **Architecture**: integrated ConvNeXt 3D architectures into AUCMEDI environment *(commit by muellerdo)*
- [`cb41966`](https://github.com/frankkramer-lab/aucmedi/commit/cb419666ffc2f38eeed51b498ab943a9af829175) - added multi-modality support *(commit by muellerdo)*
- [`5fd029c`](https://github.com/frankkramer-lab/aucmedi/commit/5fd029cc78bdf26b64892f98e30b75418e503ed0) - **sitk_loader**: allow more dynamic resampling in terms of multi-modality *(commit by muellerdo)*
- [`979a660`](https://github.com/frankkramer-lab/aucmedi/commit/979a66073206c5b7ee3c9a1ac5915ddf05d6931c) - **Architectures**: removed 2D ResNeXt image architecture support *(commit by muellerdo)*
- [`76866a9`](https://github.com/frankkramer-lab/aucmedi/commit/76866a94ea9d47df6521dc62d6b4d122baa9f9d9) - **Architecture**: added 2D ResNeXt (50 & 101), again... *(commit by muellerdo)*

:bug: Bug Fixes
- [`a7e335c`](https://github.com/frankkramer-lab/aucmedi/commit/a7e335c4c4f6837e00322dfe69e3502f5d57615d) - **Ensemble**: fixed incorrect callback extension *(commit by muellerdo)*
- [`78b3078`](https://github.com/frankkramer-lab/aucmedi/commit/78b3078f14ccdc1010b2698f95e82b5bf9cb4d93) - classes parameter (np.array) *(commit by Sassy-Nazogram)*
- [`f6945b8`](https://github.com/frankkramer-lab/aucmedi/commit/f6945b860f0d089823dd4771df06a1876abaaa48) - **Evaluation**: changed datatype from float to object for ROC multi-lists *(commit by muellerdo)*
- [`6d0df6a`](https://github.com/frankkramer-lab/aucmedi/commit/6d0df6ae3eabe9ee36765ea41b9c63f86f70908f) - **Evaluation**: replaced np.object with object due to deprecated *(commit by muellerdo)*
- [`8cb896f`](https://github.com/frankkramer-lab/aucmedi/commit/8cb896f285157bc501955bc450f378c92cef6d11) - **Evaluation**: specified groupby column to be consistent with pandas 2.X *(commit by muellerdo)*

:recycle: Refactors
- [`4530bb9`](https://github.com/frankkramer-lab/aucmedi/commit/4530bb94021d79c13ad2c8ba1b82c7a76d1fa9bc) - **AutoML**: added Tensorflow Addons F1 to AutoML train again *(commit by muellerdo)*
- [`e5940db`](https://github.com/frankkramer-lab/aucmedi/commit/e5940db562fb85e202f309fd5a648c836bb8dde8) - **Tutorials**: reverted to TF addons F1 metric in the tutorials *(commit by muellerdo)*

:white_check_mark: Tests
- [`c2ce77b`](https://github.com/frankkramer-lab/aucmedi/commit/c2ce77b5b8bf1a5cceec5b9012b10302b201702b) - **Architecture**: added unittesting for ConvNeXt 3D *(commit by muellerdo)*
- [`7549dc8`](https://github.com/frankkramer-lab/aucmedi/commit/7549dc8a954fe941b27a74cdcada2e0c084ddf20) - unittesting for 3D multi-modality data loading *(commit by muellerdo)*
- [`4414024`](https://github.com/frankkramer-lab/aucmedi/commit/441402472beac25e2537fec491007c48d9a9dc39) - **sitk_loader**: improved unittesting for resampling of multi-modality nii/mha volumes *(commit by muellerdo)*

:construction_worker: Build System
- [`800713b`](https://github.com/frankkramer-lab/aucmedi/commit/800713b80c92796a262ca175ef03c51c3f79cd42) - increased package version 3D-classification-models to 1.0.7 *(commit by muellerdo)*
- [`4caf08d`](https://github.com/frankkramer-lab/aucmedi/commit/4caf08df66fdd6530291ba2bf98873f9aa335418) - Updated to version 0.8.2 *(commit by muellerdo)*
- [`7750c96`](https://github.com/frankkramer-lab/aucmedi/commit/7750c96078c4b3782ffa67bf1cd9c7ee939a0158) - **Tensorflow**: incrased package version to 2.11.1 *(commit by muellerdo)*
- [`8837e06`](https://github.com/frankkramer-lab/aucmedi/commit/8837e06049daf84850c8b2c2c8a8b863a52efd9c) - **Tensorflow-Addons**: removed TF-addon and keras-applications support *(commit by muellerdo)*
- [`2ce29b2`](https://github.com/frankkramer-lab/aucmedi/commit/2ce29b27f75e4de905cdad23b044d69eca0471b8) - updated dependency list *(commit by muellerdo)*
- [`8b7da52`](https://github.com/frankkramer-lab/aucmedi/commit/8b7da52b6be792dd963b78af9ac3b3dc7ca482e3) - **Python**: dropped Python3.8 for CI and added 3.9 & 3.10 *(commit by muellerdo)*
- [`6cbe6e9`](https://github.com/frankkramer-lab/aucmedi/commit/6cbe6e9ff9da1a4abb59c6088d78457cb1e0f464) - **Python**: removed Python 3.12 again from CI as there is no TF1.4 support there *(commit by muellerdo)*
- [`2de4ba3`](https://github.com/frankkramer-lab/aucmedi/commit/2de4ba31edff72f11a590a181775710c21f82f4d) - **Tensorflow-Addons**: added TFaddons back due to requirements for Keras ViT.. *(commit by muellerdo)*
- [`fc11a51`](https://github.com/frankkramer-lab/aucmedi/commit/fc11a513fc2b860ff0ae4f48d5e2e38cb8a440a5) - **Keras-Applications**: added also back Keras Applications (and 2D ResNeXt) as classification-models-3D require it... *(commit by muellerdo)*
- [`6990dd5`](https://github.com/frankkramer-lab/aucmedi/commit/6990dd55e23c28b9d30df93bc699f04f1beb96d4) - **Python**: converted python version to strings to be 3.10 instead of 3.1 *(commit by muellerdo)*
- [`7152f87`](https://github.com/frankkramer-lab/aucmedi/commit/7152f87b095ce62feb45d80bb8aa2bf068689572) - **plotnine**: upgraded plotnine to version 0.12.0 *(commit by muellerdo)*
- [`5db39c1`](https://github.com/frankkramer-lab/aucmedi/commit/5db39c1f8c5af463de015bcd07be3446f79f35c1) - **plotnine**: fixed version to 0.12.4 *(commit by muellerdo)*
- [`c48c4c9`](https://github.com/frankkramer-lab/aucmedi/commit/c48c4c9a3c25e0a475f872a52b5ed66bab9132c4) - **scikit**: updated scikit-learn & scikit-image *(commit by muellerdo)*
- [`ba40783`](https://github.com/frankkramer-lab/aucmedi/commit/ba407836d90272e66780ab9b5960051ec2ccb902) - **Pillow**: updated Pillow to 10.2.0 for security *(commit by muellerdo)*
- [`da8c660`](https://github.com/frankkramer-lab/aucmedi/commit/da8c660e744f26ad4527f263df3d7899427e937e) - updated to version 0.9.0 *(commit by muellerdo)*

:memo: Documentation Changes
- [`812bb88`](https://github.com/frankkramer-lab/aucmedi/commit/812bb880899d429475666985a773247d63392ba7) - **Tutorials**: fixed incorrect link - solves #200 *(commit by muellerdo)*

:wrench: Chores
- [`444c11d`](https://github.com/frankkramer-lab/aucmedi/commit/444c11d7264f2aa990bc52a6f81ce14b9c4005d3) - updated copyright to 2023 *(commit by muellerdo)*
- [`729a275`](https://github.com/frankkramer-lab/aucmedi/commit/729a2759e60a6a60bad028cb8eb2533633576a7a) - merged dev branch to ConvNeXt3D PR *(commit by muellerdo)*
- [`22d5415`](https://github.com/frankkramer-lab/aucmedi/commit/22d54152b4c5693908e086a7bf920e1c8f64c310) - updated copyright to 2024 *(commit by muellerdo)*
- [`a155af8`](https://github.com/frankkramer-lab/aucmedi/commit/a155af850783ca39684ec3a189fe5472f194a76c) - updated copyright on website *(commit by muellerdo)*

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50447