Pillow

Latest version: v11.1.0

Safety actively analyzes 721825 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 6 of 24

7.0.0

Not secure
------------------

- Drop support for EOL Python 2.7 4109
[hugovk, radarhere, jdufresne]

- Fix rounding error on RGB to L conversion 4320
[homm]

- Exif writing fixes: Rational boundaries and signed/unsigned types 3980
[kkopachev, radarhere]

- Allow loading of WMF images at a given DPI 4311
[radarhere]

- Added reduce operation 4251
[homm]

- Raise ValueError for io.StringIO in Image.open 4302
[radarhere, hugovk]

- Fix thumbnail geometry when DCT scaling is used 4231
[homm, radarhere]

- Use default DPI when exif provides invalid x_resolution 4147
[beipang2, radarhere]

- Change default resize resampling filter from NEAREST to BICUBIC 4255
[homm]

- Fixed black lines on upscaled images with the BOX filter 4278
[homm]

- Better thumbnail aspect ratio preservation 4256
[homm]

- Add La mode packing and unpacking 4248
[homm]

- Include tests in coverage reports 4173
[hugovk]

- Handle broken Photoshop data 4239
[radarhere]

- Raise a specific exception if no data is found for an MPO frame 4240
[radarhere]

- Fix Unicode support for PyPy 4145
[nulano]

- Added UnidentifiedImageError 4182
[radarhere, hugovk]

- Remove deprecated __version__ from plugins 4197
[hugovk, radarhere]

- Fixed freeing unallocated pointer when resizing with height too large 4116
[radarhere]

- Copy info in Image.transform 4128
[radarhere]

- Corrected DdsImagePlugin setting info gamma 4171
[radarhere]

- Depends: Update libtiff to 4.1.0 4195, Tk Tcl to 8.6.10 4229, libimagequant to 2.12.6 4318
[radarhere]

- Improve handling of file resources 3577
[jdufresne]

- Removed CI testing of Fedora 29 4165
[hugovk]

- Added pypy3 to tox envlist 4137
[jdufresne]

- Drop support for EOL PyQt4 and PySide 4108
[hugovk, radarhere]

- Removed deprecated setting of TIFF image sizes 4114
[radarhere]

- Removed deprecated PILLOW_VERSION 4107
[hugovk]

- Changed default frombuffer raw decoder args 1730
[radarhere]

6.2.2

Not secure
------------------

- This is the last Pillow release to support Python 2.7 3642

- Overflow checks for realloc for tiff decoding. CVE-2020-5310
[wiredfool, radarhere]

- Catch SGI buffer overrun. CVE-2020-5311
[radarhere]

- Catch PCX P mode buffer overrun. CVE-2020-5312
[radarhere]

- Catch FLI buffer overrun. CVE-2020-5313
[radarhere]

- Raise an error for an invalid number of bands in FPX image. CVE-2019-19911
[wiredfool, radarhere]

6.2.1

Not secure
------------------

- Add support for Python 3.8 4141
[hugovk]

6.2.0

Not secure
------------------

- Catch buffer overruns 4104
[radarhere]

- Initialize rows_per_strip when RowsPerStrip tag is missing 4034
[cgohlke, radarhere]

- Raise error if TIFF dimension is a string 4103
[radarhere]

- Added decompression bomb checks 4102
[radarhere]

- Fix ImageGrab.grab DPI scaling on Windows 10 version 1607+ 4000
[nulano, radarhere]

- Corrected negative seeks 4101
[radarhere]

- Added argument to capture all screens on Windows 3950
[nulano, radarhere]

- Updated warning to specify when Image.frombuffer defaults will change 4086
[radarhere]

- Changed WindowsViewer format to PNG 4080
[radarhere]

- Use TIFF orientation 4063
[radarhere]

- Raise the same error if a truncated image is loaded a second time 3965
[radarhere]

- Lazily use ImageFileDirectory_v1 values from Exif 4031
[radarhere]

- Improved HSV conversion 4004
[radarhere]

- Added text stroking 3978
[radarhere, hugovk]

- No more deprecated bdist_wininst .exe installers 4029
[hugovk]

- Do not allow floodfill to extend into negative coordinates 4017
[radarhere]

- Fixed arc drawing bug for a non-whole number of degrees 4014
[radarhere]

- Fix bug when merging identical images to GIF with a list of durations 4003
[djy0, radarhere]

- Fix bug in TIFF loading of BufferedReader 3998
[chadawagner]

- Added fallback for finding ld on MinGW Cygwin 4019
[radarhere]

- Remove indirect dependencies from requirements.txt 3976
[hugovk]

- Depends: Update libwebp to 1.0.3 3983, libimagequant to 2.12.5 3993, freetype to 2.10.1 3991
[radarhere]

- Change overflow check to use PY_SSIZE_T_MAX 3964
[radarhere]

- Report reason for pytest skips 3942
[hugovk]

6.1.0

Not secure
------------------

- Deprecate Image.__del__ 3929
[jdufresne]

- Tiff: Add support for JPEG quality 3886
[olt]

- Respect the PKG_CONFIG environment variable when building 3928
[chewi]

- Use explicit memcpy() to avoid unaligned memory accesses 3225
[DerDakon]

- Improve encoding of TIFF tags 3861
[olt]

- Update Py_UNICODE to Py_UCS4 3780
[nulano]

- Consider I;16 pixel size when drawing 3899
[radarhere]

- Add TIFFTAG_SAMPLEFORMAT to blocklist 3926
[cgohlke, radarhere]

- Create GIF deltas from background colour of GIF frames if disposal mode is 2 3708
[sircinnamon, radarhere]

- Added ImageSequence all_frames 3778
[radarhere]

- Use unsigned int to store TIFF IFD offsets 3923
[cgohlke]

- Include CPPFLAGS when searching for libraries 3819
[jefferyto]

- Updated TIFF tile descriptors to match current decoding functionality 3795
[dmnisson]

- Added an ``image.entropy()`` method (second revision) 3608
[fish2000]

- Pass the correct types to PyArg_ParseTuple 3880
[QuLogic]

- Fixed crash when loading non-font bytes 3912
[radarhere]

- Fix SPARC memory alignment issues in Pack/Unpack functions 3858
[kulikjak]

- Added CMYK;16B and CMYK;16N unpackers 3913
[radarhere]

- Fixed bugs in calculating text size 3864
[radarhere]

- Add __main__.py to output basic format and support information 3870
[jdufresne]

- Added variation font support 3802
[radarhere]

- Do not down-convert if image is LA when showing with PNG format 3869
[radarhere]

- Improve handling of PSD frames 3759
[radarhere]

- Improved ICO and ICNS loading 3897
[radarhere]

- Changed Preview application path so that it is no longer static 3896
[radarhere]

- Corrected ttb text positioning 3856
[radarhere]

- Handle unexpected ICO image sizes 3836
[radarhere]

- Fixed bits value for RGB;16N unpackers 3837
[kkopachev]

- Travis CI: Add Fedora 30, remove Fedora 28 3821
[hugovk]

- Added reading of CMYK;16L TIFF images 3817
[radarhere]

- Fixed dimensions of 1-bit PDFs 3827
[radarhere]

- Fixed opening mmap image through Path on Windows 3825
[radarhere]

- Fixed ImageDraw arc gaps 3824
[radarhere]

- Expand GIF to include frames with extents outside the image size 3822
[radarhere]

- Fixed ImageTk getimage 3814
[radarhere]

- Fixed bug in decoding large images 3791
[radarhere]

- Fixed reading APP13 marker without Photoshop data 3771
[radarhere]

- Added option to include layered windows in ImageGrab.grab on Windows 3808
[radarhere]

- Detect libimagequant when installed by pacman on MingW 3812
[radarhere]

- Fixed raqm layout bug 3787
[radarhere]

- Fixed loading font with non-Unicode path on Windows 3785
[radarhere]

- Travis CI: Upgrade PyPy from 6.0.0 to 7.1.1 3783
[hugovk, johnthagen]

- Depends: Updated openjpeg to 2.3.1 3794, raqm to 0.7.0 3877, libimagequant to 2.12.3 3889
[radarhere]

- Fix numpy bool bug 3790
[radarhere]

6.0.0

Not secure
------------------

- Python 2.7 support will be removed in Pillow 7.0.0 3682
[hugovk]

- Add EXIF class 3625
[radarhere]

- Add ImageOps exif_transpose method 3687
[radarhere]

- Added warnings to deprecated CMSProfile attributes 3615
[hugovk]

- Documented reading TIFF multiframe images 3720
[akuchling]

- Improved speed of opening an MPO file 3658
[Glandos]

- Update palette in quantize 3721
[radarhere]

- Improvements to TIFF is_animated and n_frames 3714
[radarhere]

- Fixed incompatible pointer type warnings 3754
[radarhere]

- Improvements to PA and LA conversion and palette operations 3728
[radarhere]

- Consistent DPI rounding 3709
[radarhere]

- Change size of MPO image to match frame 3588
[radarhere]

- Read Photoshop resolution data 3701
[radarhere]

- Ensure image is mutable before saving 3724
[radarhere]

- Correct remap_palette documentation 3740
[radarhere]

- Promote P images to PA in putalpha 3726
[radarhere]

- Allow RGB and RGBA values for new P images 3719
[radarhere]

- Fixed TIFF bug when seeking backwards and then forwards 3713
[radarhere]

- Cache EXIF information 3498
[Glandos]

- Added transparency for all PNG grayscale modes 3744
[radarhere]

- Fix deprecation warnings in Python 3.8 3749
[radarhere]

- Fixed GIF bug when rewinding to a non-zero frame 3716
[radarhere]

- Only close original fp in __del__ and __exit__ if original fp is exclusive 3683
[radarhere]

- Fix BytesWarning in Tests/test_numpy.py 3725
[jdufresne]

- Add missing MIME types and extensions 3520
[pirate486743186]

- Add I;16 PNG save 3566
[radarhere]

- Add support for BMP RGBA bitfield compression 3705
[radarhere]

- Added ability to set language for text rendering 3693
[iwsfutcmd]

- Only close exclusive fp on Image __exit__ 3698
[radarhere]

- Changed EPS subprocess stdout from devnull to None 3635
[radarhere]

- Add reading old-JPEG compressed TIFFs 3489
[kkopachev]

- Add EXIF support for PNG 3674
[radarhere]

- Add option to set dither param on quantize 3699
[glasnt]

- Add reading of DDS uncompressed RGB data 3673
[radarhere]

- Correct length of Tiff BYTE tags 3672
[radarhere]

- Add DIB saving and loading through Image open 3691
[radarhere]

- Removed deprecated VERSION 3624
[hugovk]

- Fix 'BytesWarning: Comparison between bytes and string' in PdfDict 3580
[jdufresne]

- Do not resize in Image.thumbnail if already the destination size 3632
[radarhere]

- Replace .seek() magic numbers with io.SEEK_* constants 3572
[jdufresne]

- Make ContainerIO.isatty() return a bool, not int 3568
[jdufresne]

- Add support to all transpose operations for I;16 modes 3563, 3741
[radarhere]

- Deprecate support for PyQt4 and PySide 3655
[hugovk, radarhere]

- Add TIFF compression codecs: LZMA, Zstd, WebP 3555
[cgohlke]

- Fixed pickling of iTXt class with protocol > 1 3537
[radarhere]

- _util.isPath returns True for pathlib.Path objects 3616
[wbadart]

- Remove unnecessary unittest.main() boilerplate from test files 3631
[jdufresne]

- Exif: Seek to IFD offset 3584
[radarhere]

- Deprecate PIL.*ImagePlugin.__version__ attributes 3628
[jdufresne]

- Docs: Add note about ImageDraw operations that exceed image bounds 3620
[radarhere]

- Allow for unknown PNG chunks after image data 3558
[radarhere]

- Changed EPS subprocess stdin from devnull to None 3611
[radarhere]

- Fix possible integer overflow 3609
[cgohlke]

- Catch BaseException for resource cleanup handlers 3574
[jdufresne]

- Improve pytest configuration to allow specific tests as CLI args 3579
[jdufresne]

- Drop support for Python 3.4 3596
[hugovk]

- Remove deprecated PIL.OleFileIO 3598
[hugovk]

- Remove deprecated ImageOps undocumented functions 3599
[hugovk]

- Depends: Update libwebp to 1.0.2 3602
[radarhere]

- Detect MIME types 3525
[radarhere]

Page 6 of 24

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.