Update pillow lower pins due to vulnerabilities

Author: molinav

CHANGELOG.md

@@ -26,6 +26,9 @@ https://semver.org/spec/v2.0.0.html
     [CVE-2021-41495] and [CVE-2021-41496].
   - Set `numpy >= 1.22` for Python >= 3.8 due to `numpy` vulnerability
     [CVE-2021-34141].
+- Enforce up-to-date `pillow` dependency when possible:
+  - Set `pillow >= 9.0.1` for Python >= 3.7 due to `pillow`
+    vulnerability [CVE-2022-24303].
 
 ## [1.3.3] - 2022-05-11
 
@@ -1021,6 +1024,8 @@ https://github.com/matplotlib/basemap/compare/v1.0.3rel...v1.0.4rel
 [1.0.3]:
 https://github.com/matplotlib/basemap/tree/v1.0.3rel
 
+[CVE-2022-24303]:
+https://nvd.nist.gov/vuln/detail/CVE-2022-24303
 [CVE-2022-22817]:
 https://nvd.nist.gov/vuln/detail/CVE-2022-22817
 [CVE-2022-22816]:

packages/basemap/requirements-test.txt

@@ -28,4 +28,4 @@ pillow >= 4.3.0, < 5.0.0; python_version == "3.3"
 pillow >= 5.4.0, < 6.0.0; python_version == "3.4"
 pillow >= 7.1.0, < 8.0.0; python_version == "3.5"
 pillow >= 8.3.2, < 9.0.0; python_version == "3.6"
-pillow >= 9.0.0, < 10.0.0; python_version >= "3.7"
+pillow >= 9.0.1, < 10.0.0; python_version >= "3.7"