Skip to content

Releases: python-pillow/Pillow

10.3.0

01 Apr 12:34
Compare
Choose a tag to compare

https://pillow.readthedocs.io/en/stable/releasenotes/10.3.0.html

Changes

Deprecations

  • Deprecate eval(), replacing it with lambda_eval() and unsafe_eval() #7927 [@hugovk]
  • Deprecate ImageCms constants and versions() function #7702 [@nulano]

Documentation

Type hints

Dependencies

Read more

10.2.0

02 Jan 09:38
Compare
Choose a tag to compare

https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html

Changes

Dependencies

Deprecations

Documentation

Testing

Type hints

10.1.0

15 Oct 13:05
Compare
Choose a tag to compare

https://pillow.readthedocs.io/en/stable/releasenotes/10.1.0.html

Changes

Dependencies

Documentation

Testing

10.0.1

15 Sep 14:02
Compare
Choose a tag to compare

10.0.0

01 Jul 14:57
Compare
Choose a tag to compare

https://pillow.readthedocs.io/en/stable/releasenotes/10.0.0.html

Changes

Dependencies

Deprecations

Documentation

Removals

  • Remove deprecated ImageFont.getsize and related functions for Pillow 10.0.0 #7080 [@radarhere]
  • Remove deprecations for Pillow 10.0.0 #7059 [@hugovk]
  • Drop support for soon-EOL Python 3.7 #7058 [@hugovk]

Testing

9.5.0

01 Apr 09:33
2045906
Compare
Choose a tag to compare

https://pillow.readthedocs.io/en/stable/releasenotes/9.5.0.html

Changes

Dependencies

Documentation

Testing

9.4.0

02 Jan 03:01
Compare
Choose a tag to compare

https://pillow.readthedocs.io/en/stable/releasenotes/9.4.0.html

Changes

Dependencies

Documentation

Testing

9.3.0

29 Oct 14:17
Compare
Choose a tag to compare

https://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.html

Changes

Dependencies

Documentation

Testing

9.2.0

01 Jul 18:32
Compare
Choose a tag to compare

https://pillow.readthedocs.io/en/stable/releasenotes/9.2.0.html

Changes

Dependencies

Deprecations

  • Deprecate ImageFont.getsize and related functions #6381 [@nulano]

Documentation

Testing

9.1.1

17 May 16:46
Compare
Choose a tag to compare

This release addresses several security problems.

CVE-2022-30595: When reading a TGA file with RLE packets that cross scan lines, Pillow reads the information past the end of the first line without deducting that from the length of the remaining file data. This vulnerability was introduced in Pillow 9.1.0, and can cause a heap buffer overflow.

Opening an image with a zero or negative height has been found to bypass a decompression bomb check. This will now raise a SyntaxError instead, in turn raising a PIL.UnidentifiedImageError.