Movatterモバイル変換


[0]ホーム

URL:


ContentsMenuExpandLight modeDark modeAuto light/dark, in light modeAuto light/dark, in dark modeSkip to content
Pillow (PIL Fork) 12.0.0 documentation
Light LogoDark Logo
Pillow (PIL Fork) 12.0.0 documentation
Back to top

9.0.1 (2022-02-03)

Security

This release addresses several security problems.

CVE 2022-24303: Temp image removal

If the path to the temporary directory on Linux or macOScontained a space, this would break removal of the temporary image file afterim.show() (and related actions), and potentially remove an unrelated file. Thishas been present since PIL.

CVE 2022-22817: Restrict lambda expressions

While Pillow 9.0 restricted top-level builtins available toPIL.ImageMath.eval(), it did not prevent builtinsavailable to lambda expressions. These are now also restricted.

Other changes

Pillow 9.0 added support forxdg-open as an image viewer, but there have beenreports that the temporary image file was removed too quickly to be loaded into thefinal application. A delay has been added.

On this page

[8]ページ先頭

©2009-2025 Movatter.jp