Skip to content

Added release notes for #6842 and #6846 #6850

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mergify merged 3 commits into from
Jan 1, 2023
Merged

Added release notes for #6842 and #6846 #6850

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
a632b7a
Added release notes for #6842
radarhere Jan 1, 2023
35b4c43
Added release notes for #6846
radarhere Jan 1, 2023
e908afe
Updated security descriptions
radarhere Jan 1, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
41 changes: 14 additions & 27 deletions docs/releasenotes/9.4.0.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,30 +1,6 @@
9.4.0
-----

Backwards Incompatible Changes
==============================

TODO
^^^^

TODO

Deprecations
============

TODO
^^^^

TODO

API Changes
===========

TODO
^^^^

TODO

API Additions
=============

Expand Down Expand Up @@ -96,10 +72,21 @@ When saving a JPEG image, a comment can now be written from
Security
========

TODO
^^^^
Fix memory DOS in ImageFont
^^^^^^^^^^^^^^^^^^^^^^^^^^^

A corrupt or specially crafted TTF font could have font metrics that lead to
unreasonably large sizes when rendering text in font. ``ImageFont.py`` did not
check the image size before allocating memory for it. This dates to the PIL
fork. Pillow 8.2.0 added a check for large sizes, but did not consider the
case where one dimension is zero.

Null pointer dereference crash in ImageFont
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

TODO
Pillow attempted to dereference a null pointer in ``ImageFont``, leading to a
crash. An error is now raised instead. This has been present since
Pillow 8.0.0.

Other Changes
=============
Expand Down