pillow v9.0.1 Release Notes

Release Date: 2022-02-03 // 4 months ago
    • ๐Ÿšš In show_file, use os.remove to remove temporary images. CVE-2022-24303 #6010 [radarhere, hugovk]

    • Restrict builtins within lambdas for ImageMath.eval. CVE-2022-22817 #6009 [radarhere]


Previous changes from v9.0.0

    • Restrict builtins for ImageMath.eval(). CVE-2022-22817 #5923 [radarhere]

    • ๐Ÿ”Œ Ensure JpegImagePlugin stops at the end of a truncated file #5921 [radarhere]

    • ๐Ÿ›  Fixed ImagePath.Path array handling. CVE-2022-22815, CVE-2022-22816 #5920 [radarhere]

    • โœ‚ Remove consecutive duplicate tiles that only differ by their offset #5919 [radarhere]

    • ๐Ÿ‘Œ Improved I;16 operations on big endian #5901 [radarhere]

    • Limit quantized palette to number of colors #5879 [radarhere]

    • ๐Ÿ›  Fixed palette index for zeroed color in FASTOCTREE quantize #5869 [radarhere]

    • When saving RGBA to GIF, make use of first transparent palette entry #5859 [radarhere]

    • Pass SAMPLEFORMAT to libtiff #5848 [radarhere]

    • โž• Added rounding when converting P and PA #5824 [radarhere]

    • ๐Ÿ‘Œ Improved putdata() documentation and data handling #5910 [radarhere]

    • Exclude carriage return in PDF regex to help prevent ReDoS #5912 [hugovk]

    • ๐Ÿ›  Fixed freeing pointer in ImageDraw.Outline.transform #5909 [radarhere]

    • โž• Added ImageShow support for xdg-open #5897 [m-shinder, radarhere]

    • ๐Ÿ‘Œ Support 16-bit grayscale ImageQt conversion #5856 [cmbruns, radarhere]

    • Convert subsequent GIF frames to RGB or RGBA #5857 [radarhere]

    • Do not prematurely return in ImageFile when saving to stdout #5665 [infmagic2047, radarhere]

    • โž• Added support for top right and bottom right TGA orientations #5829 [radarhere]

    • Corrected ICNS file length in header #5845 [radarhere]

    • Block tile TIFF tags when saving #5839 [radarhere]

    • โž• Added line width argument to polygon #5694 [radarhere]

    • Do not redeclare class each time when converting to NumPy #5844 [radarhere]

    • Only prevent repeated polygon pixels when drawing with transparency #5835 [radarhere]

    • โž• Add support for pickling TrueType fonts #5826 [hugovk, radarhere]

    • ๐ŸŽ Only prefer command line tools SDK on macOS over default MacOSX SDK #5828 [radarhere]

    • โฌ‡๏ธ Drop support for soon-EOL Python 3.6 #5768 [hugovk, nulano, radarhere]

    • ๐Ÿ›  Fix compilation on 64-bit Termux #5793 [landfillbaby]

    • ๐Ÿ‘‰ Use title for display in ImageShow #5788 [radarhere]

    • โœ‚ Remove support for FreeType 2.7 and older #5777 [hugovk, radarhere]

    • ๐Ÿ›  Fix for PyQt6 #5775 [hugovk, radarhere]

    • ๐Ÿ”– Removed deprecated PILLOW_VERSION, Image.show command parameter, Image._showxv and ImageFile.raise_ioerror #5776 [radarhere]