PyPI · #59 most downloaded on PyPI

pillow

12.3.0426M downloads/mopython-pillow/Pillow ↗New releases in your daily digest, changelog included.

Python Imaging Library (fork)

Last release 3 months ago
01 Jul 2026
Ships on a steady schedule
a new release about every 3 months
Nearly every release is documented
notes for 60 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
16 years old
107 releases · first in 2010

Release timeline

107 releases since 2010

2010201220142016

Releases

12.3.01 Jul 2026Security
Add security release notes #9741 [ @radarhere ]
https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html

Removals

Remove non-image ImageCms modes #9697 [@radarhere]

Documentation

Add release notes for SBOM and performance improvements #9747 [@radarhere]

Add security release notes #9741 [@radarhere]

Add release notes for Python 3.15 beta wheels #9696 [@radarhere]

ImageFont can also be used with ImageText #9597 [@radarhere]

Additional guidelines for security reports #9659 [@wiredfool]

Fixed typo #9636 [@radarhere]

Added CVEs to 12.2.0 release notes #9591 [@radarhere]

Revise development support information in README #9583 [@aclark4life]

Add INCIDENT_RESPONSE.md #9555 [@aclark4life]

Add STRIDE threat model to security docs #9562 [@aclark4life]

Add CVEs to 12.2.0 release notes #9556 [@radarhere]

Update README with revised security policy #9553 [@radarhere]

Update security policy #9552 [@aclark4life]

Update macOS tested Python versions #9534 [@radarhere]

Dependencies

Update dependency harfbuzz to v14.2.1 #9720 [@renovate[bot]]

Update dependency mypy to v2 #9653 [@renovate[bot]]

Update dependency cibuildwheel to v4 #9665 [@renovate[bot]]

Update github-actions #9655 [@renovate[bot]]

Update dependency libavif to v1.4.2 #9652 [@renovate[bot]]

Update dependency lcms2 to v2.19.1 #9651 [@renovate[bot]]

Update dependency check-jsonschema to v0.37.2 #9650 [@renovate[bot]]

Update google/oss-fuzz digest to d872252 #9614 [@renovate[bot]]

Update dependency lcms2 to v2.19 #9609 [@renovate[bot]]

Update dependency libpng to v1.6.58 - autoclosed #9608 [@renovate[bot]]

Update dependency harfbuzz to v14 #9610 [@renovate[bot]]

Update dependency mypy to v1.20.2 #9599 [@renovate[bot]]

Update github-actions #9611 [@renovate[bot]]

Update dependency cibuildwheel to v3.4.1 #9607 [@renovate[bot]]

Move dependency versions to single JSON and enable Renovate #9559 [@hugovk]

Updated raqm to 0.10.5 #9557 [@radarhere]

Update dependency cibuildwheel to v3.4.0 #9532 [@renovate[bot]]

Testing

Remove matrix.os from benchmark #9735 [@radarhere]

Remove references to libavif patch #9734 [@radarhere]

Add benchmark tests #9654 [@akx]

Use reshape() instead of setting NumPy array shape directly #9728 [@radarhere]

Add dependencies.json to Windows cache key #9721 [@radarhere]

Increase AVIF test epsilon for loong64 #9714 [@wszqkzqk]

Add colour to Linux and Windows wheel build logs #9677 [@hugovk]

Do not test NumPy against Python 3.15 Windows AMD64 wheels #9674 [@radarhere]

Run pyroma in tox -e lint instead of pytest #9670 [@hugovk]

Update Ghostscript to 10.7.1 #9634 [@radarhere]

Update free-threading CI #9625 [@hugovk]

Increase AVIF test epsilon for riscv64 #9606 [@radarhere]

Add Fedora 44 #9594 [@radarhere]

Test Ubuntu 26.04 LTS (Resolute Raccoon) #9587 [@hugovk]

Skip EPS test_1 for Ghostscript 10.06.0 #9588 [@radarhere]

Catch subprocess.CalledProcessError in test_grab_x11 #9578 [@radarhere]

Correct feature name #9542 [@radarhere]

Skip test if FreeType is not available #9540 [@radarhere]

Remove type hint ignore #9538 [@radarhere]

Update macOS tested Python versions #9534 [@radarhere]

Remove Debian 12 and Fedora 42 from CI #9530 [@hugovk]

Remove manylinux2014 and Amazon Linux 2 #9528 [@radarhere]

Type hints

Use NumPy 2.4.6 for mypy #9705 [@radarhere]

Update dependency mypy to v2 #9653 [@renovate[bot]]

Update putpixel type hint to allow lists in xy #9585 [@radarhere]

Remove type hint ignore #9538 [@radarhere]

Other changes

Speed up ImageChops operations #9738 [@akx]

Speed up Image.filter() #9736 [@akx]

Speed up Image.getchannel(), Image.merge(), Image.putalpha() and Image.split() #9675 [@akx]

Speed up Image.fill(), Image.linear_gradient() and Image.radial_gradient(). #9737 [@akx]

Speed up Image.resample() #9739 [@akx]

Speed up alpha_composite, matrix, negative, quantize #9740 [@akx]

Remove PyErr_Clear() of "weird" exceptions #9730 [@radarhere]

Check realloc return value #9722 [@radarhere]

Add max_length to PdfStream decode() #9718 [@radarhere]

Return early when there is no fill region #9732 [@radarhere]

Allow error to be raised if PyDict_SetItemString fails #9731 [@radarhere]

Speed up Image.blend() #9649 [@akx]

Raise OverflowError if number of vertices is too large for Path #9729 [@radarhere]

Remove unused HSV and LAB matrix conversion from C #9724 [@radarhere]

Prevent reusing ImagingDecoderObject.setimage #9656 [@Serotav]

Raise ValueError if FPX tile size is not 64px by 64px #9660 [@radarhere]

Only clear error if it is BufferError #9727 [@radarhere]

Apply XOR mask to 1 and L mode CUR images #9641 [@radarhere]

Do not raise error from unknown channel ID when parsing PSD layers #9644 [@radarhere]

Raise ValueError if P;2L or P;4L data is truncated in frombytes() #9725 [@radarhere]

Embed SBOM into wheels #9679 [@hugovk]

Do not set eval() globals in ImageMath.unsafe_eval() #9576 [@radarhere]

Add Tcl/Tk license to wheels #9663 [@radarhere]

Ensure map stride is at least one full row of pixels #9719 [@radarhere]

Raise OverflowError if text width exceeds INT_MAX #9717 [@radarhere]

Raise error if image modes do not match ImageCms transform modes #9715 [@radarhere]

Use int64_t for text height #9716 [@radarhere]

Return if error occurs in Py_mod_exec slot #9712 [@radarhere]

Add decompression bomb checks to FontFile classes #9711 [@radarhere]

If C error is raised, return NULL #9706 [@radarhere]

Prevent saving 1 mode images as TGA with run-length encoding #9709 [@radarhere]

Raise ValueError if EPS BeginBinary bytecount is negative #9708 [@radarhere]

Do not DECREF tuple until tuple items are no longer used #9707 [@radarhere]

Do not update NumPy automatically #9713 [@radarhere]

Simplified code #9642 [@radarhere]

If realloc fails, do not reduce block size #9702 [@radarhere]

DECREF PyDict_GetItemRef result #9701 [@radarhere]

Use int64_t to calculate paste box dimensions #9703 [@radarhere]

Calculate JPEG2000 total_component_width for each tile in isolation #9704 [@radarhere]

Raise ValueError if value is not bytes for TIFF_BYTE or TIFF_ASCII tag #9699 [@radarhere]

Release Py_Buffer on error #9698 [@radarhere]

Use os.startfile() in WindowsViewer show_file() #9692 [@radarhere]

Validate large filter sizes when initializing RankFilter #9695 [@radarhere]

Add decompression bomb check to GdImageFile #9693 [@radarhere]

Free image bands when an error occurs while splitting an image #9694 [@radarhere]

Check PyList_Append return value #9690 [@radarhere]

Check WebPMuxNew return value #9689 [@radarhere]

Check PyCapsule_New return value #9691 [@radarhere]

Do not return negative width for text length #9623 [@radarhere]

Add args argument to METH_NOARGS methods #9687 [@radarhere]

Check ImagingNewDirty return value #9688 [@radarhere]

Use int64_t for text width #9686 [@radarhere]

Move PyDateTime_IMPORT inside Py_mod_exec slot #9580 [@radarhere]

Validate size and rank when initializing RankFilter #9661 [@radarhere]

Raise ValueError if insufficient data is read from DDS RGB file #9405 [@radarhere]

Correct IFDRational.__float__() return value #9676 [@nyxst4ck]

Correct length when accessing ImagePath.Path subscript #9685 [@radarhere]

Release reference on non-flattened sequence error #9684 [@radarhere]

Do not release Py_buffer until buf is no longer in use #9683 [@radarhere]

Do not resize macOS retina screenshots by default #9266 [@radarhere]

Add abstract BaseImageFont class #9595 [@radarhere]

Cast before multiplying #9678 [@radarhere]

Limit radius to half width or height of rounded rectangle #9561 [@radarhere]

linesize is always xsize multiplied by pixelsize #9647 [@radarhere]

Check annotate_hash_table return value #9572 [@radarhere]

Catch KeyError when checking mode from PNG IHDR chunk #9604 [@radarhere]

Only pass one argument to C expand #9664 [@radarhere]

Raise error if declared JPEG2000 marker length is too small #9666 [
Note truncated.

Additional notes

12.3.0

Security

2026-59200: Prevent decompression bomb when parsing PDF

When parsing a PDF, PdfStream.decode() attempts to decompress data without any limit. A default maximum of ImageFile.SAFEBLOCK has been added. PdfParser was added in Pillow 5.1.0. Reported by redyank.

2026-55798: WindowsViewer.get_command injection

If an attacker has control over the path passed to ImageShow.WindowsViewer.get_command(), and the result is executed by the user, the attacker may be able to execute arbitrary shell commands. Reported by Bin Luo, University of Electronic Science and Technology of China (luob87709@gmail.com).

2026-59203: EPS image infinite loop

If a negative byte count is specified for the BeginBinary byte count, an infinite loop is possible as Pillow seeks repeatedly backwards. This value will now be validated. BeginBinary parsing was only added in Pillow 12.0.0. Reported by jiagongzheng-stack.

2026-59204: JPEG2000 image memory usage

The total component width was incorrectly accumulated across tiles within a JPEG2000 image, potentially leading to excessive memory use. This was introduced as part of an earlier security fix in Pillow 8.2.0, but has now been fixed. Reported by Fr3v1.

2026-54058: McIdas out-of-bounds (OOB) read

McIdas images can specify the stride, and if incorrectly set, may cause an OOB read. This has been fixed. Reported by Devansh Shah, RUDRA Cybersecurity Pvt. Ltd.

2026-59198: Out-of-bounds (OOB) read when saving 1 mode TGA images

Saving 1 mode images as TGA with run-length encoding can trigger an OOB read. This was added in Pillow 5.2.0, but the functionality is not possible under the TGA specification, so it has been removed. Reported by Seratov.

2026-59197: Out-of-bounds (OOB) write from large RankFilter sizes

~PIL.ImageFilter.RankFilter, and its subclasses, can potentially write out-of-bounds if given a large size. This has been fixed. Reported by Seratov.

2026-59199: Out-of-bounds (OOB) write from Image.paste()

Large paste box dimensions can cause an OOB write in Image.crop(), Image.paste() and Image.alpha_composite(). This has been fixed. Reported by Seratov.

2026-59205: Out-of-bounds (OOB) write in ImageCmsTransform

Apply a transform mode to a different image mode can trigger an OOB write in ImageCmsTransform. Errors are now raised if the mode does not match. Reported by Seratov.

2026-54059, 2026-54060, 2026-55379: Prevent FontFile decompression bomb

Decompression bomb checks have now been added to ~PIL.FontFile.FontFile, and its subclasses, checking the width and height of characters. Reported by Rahul Singh and Dinesh.

2026-55380: Prevent GD decompression bomb

A decompression bomb check has been added to ~PIL.GdImageFile.GdImageFile. This is format must be explicitly called though, rather than being accessible from Image.open(). Reported by Rahul Singh.

API additions

Added scale_down argument to ImageGrab.grab()

~PIL.ImageGrab.grab now accepts an optional keyword argument of scale_down. This affects macOS screenshots with a bbox on a Retina screen. By default, images will be captured at 2x. If scale_down is True, they will be at 1x.

Previously, macOS screenshots with a bbox were captured at 1x by default.

Added max_length argument to PdfStream.decode()

When calling PdfStream.decode(), the maximum length of data to decode can now be specified. This will default to ImageFile.SAFEBLOCK.

Other changes

Python 3.15 beta

To help other projects prepare for Python 3.15, wheels are now built for the 3.15 beta as a preview. This is not official support for Python 3.15, but rather an opportunity for you to test how Pillow works with the beta and report any problems.

SBOM in wheels

Following 770, the Software Bill-of-Materials (SBOM) has now been embedded into Pillow's wheels.

Removed Python 3.13 free-threaded wheels

Python 3.13 added an experimental free-threaded mode, and Pillow 11.0.0 added corresponding wheels. Now that Python 3.14 includes official support for it, Pillow has removed wheels for Python 3.13 free-threaded mode.

Performance improvements

A number of changes have been made to optimize the use of C when manipulating images. This improves performance by up to 5.6 times of Image's alpha_composite, fill, filter, getchannel, linear_gradient, matrix, merge, negative, putalpha, quantize, radial_gradient, resample, split, and ImageChops operations.

Open source →

12.2.01 Apr 2026

https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html

Documentation

Update 12.2.0 release notes #9522 [@hugovk]
Add loader plugins: AMOS abk, Atari Degas, 40+ more obscure formats via Netpbm #9482 [@bitplane]
Update Python versions #9515 [@radarhere]
Jeffrey A. Clark -> Jeffrey 'Alex' Clark #9513 [@aclark4life]
Add release notes for #9394, #9419 and #9456 #9467 [@radarhere]
Add Amiga Workbench .info loader to 3rd party plugins list #9459 [@bitplane]
Merge PFM documentation into PPM #9434 [@radarhere]
Update macOS tested Pillow versions #9431 [@radarhere]
Fix CVE number #9430 [@hugovk]

Dependencies

Update xz to 5.8.3 #9523 [@radarhere]
Update libjpeg-turbo to 3.1.4.1 #9507 [@radarhere]
Update libpng to 1.6.56 #9499 [@radarhere]
Update freetype to 2.14.3 #9485 [@radarhere]
Updated libavif to 1.4.1 #9479 [@radarhere]
Updated harfbuzz to 13.2.1 #9461 [@radarhere]
Update Ghostscript to 10.7.0 #9469 [@radarhere]
Update harfbuzz to 13.0.1 #9453 [@radarhere]
Update libavif to 1.4.0 #9460 [@radarhere]
Update freetype to 2.14.2 #9449 [@radarhere]
Update actions/download-artifact action to v8 #9451 [@renovate[bot]]
Updated libpng to 1.6.55 #9425 [@radarhere]

Testing

Cleanup .spider extension in the same test where it is added #9517 [@radarhere]
Run tests in parallel via tox for 3.5x speedup #9516 [@hugovk]
Enable colour in CI logs #9486 [@hugovk]
Update Ghostscript to 10.7.0 #9469 [@radarhere]
Simplify TGA test code #9477 [@radarhere]
Update tests to check for ValueError when encoding an empty image #9464 [@radarhere]
Upgrade CI from macos-15-intel to macos-26-intel #9454 [@hugovk]
Add check-case-conflict hook #9446 [@radarhere]
Specify platform when pulling docker image #9440 [@radarhere]
GHA: Cache libavif and webp builds for Ubuntu #9437 [@hugovk]
Update macOS tested Pillow versions #9431 [@radarhere]

Other changes

Check calloc return value #9527 [@radarhere]
Check all allocs in the Arrow tree #9488 [@wiredfool]
Reject non-numeric elements inside list coords #9526 [@hugovk]
Move variable declaration inside define #9525 [@radarhere]
Resize tall images vertically first #9524 [@radarhere]
Avoid overflow by not adding extents together #9520 [@hugovk]
Use long for glyph position #9518 [@hugovk]
Raise an error if the trailer chain loops back on itself #9519 [@hugovk]
Only read as much data from gzip-decompressed data as necessary #9521 [@hugovk]
Allow None extents in C setimage() #9504 [@radarhere]
Use critical sections to protect FontObject #9498 [@colesbury]
Add ImageText.Text.wrap() to wrap text #9286 [@radarhere]
Always call StubHandler open() when opening StubImageFile #9412 [@radarhere]
Improved BCn overflow check #9043 [@radarhere]
Image will never be None #9512 [@radarhere]
Raise EOFError when seeking too far in PSD #9388 [@radarhere]
Raise error if ImageGrab subprocess gives non-zero returncode #9321 [@radarhere]
Allow for different palette entry sizes when correcting BMP pixel data offset #9472 [@radarhere]
Ignore unspecified extra samples for TIFF separate planar configuration #9514 [@radarhere]
Add PERF to lint and fix findings #9510 [@hugovk]
Switch iOS back to macos-15-intel #9509 [@radarhere]
Catch struct.error #9505 [@radarhere]
Check PyCapsule_GetPointer and PyBytes_FromStringAndSize return values #9508 [@radarhere]
Fix missing null dereference checks #9489 [@wiredfool]
CI: Retry failed downloads #9506 [@hugovk]
Use PyModule_AddObjectRef #9503 [@radarhere]
Release reference to encoder on error #9500 [@radarhere]
Fixed AVIF and WEBP dealloc #9501 [@radarhere]
Check PyType_Ready return values #9502 [@radarhere]
Check if PyObject_CallMethod result is NULL #9494 [@radarhere]
Do not use palette from grayscale or bilevel colorspace when reading JPEG2000 images #9468 [@radarhere]
If TGA v2 extension area specifies no alpha, fill alpha channel #9478 [@radarhere]
Set image pixels individually on 32-bit Windows #9492 [@radarhere]
Add error messages before returning NULL when encoding #9493 [@radarhere]
Fix _getxy refcount leaks #9487 [@hugovk]
Fix invalid test font #9483 [@radarhere]
Add Exif tag "FrameRate" #9470 [@zhiyuanouyang]
Support reading JPEG2000 images with CMYK palettes #9456 [@radarhere]
Simplify setimage() by always passing extents #9395 [@radarhere]
If bitmap buffer is empty, do not render anything #8324 [@radarhere]
Change to ValueError when encoding an empty image #9394 [@radarhere]
Add FontFile.to_imagefont() #9419 [@fjhenigman]
[pre-commit.ci] pre-commit autoupdate #9450 [@pre-commit-ci[bot]]
Use walrus operator #9448 [@radarhere]
Only close file handle in ImagePalette.save() if it was opened internally #9444 [@bysiber]
Fix self.decode typo #9445 [@bysiber]
Fix BMP RLE delta escape reading from wrong file position #9443 [@bysiber]
Correct error check when encoding AVIF images #9442 [@radarhere]
Fix unexpected error when saving zero dimension images #9391 [@radarhere]
Use uppercase format ID for PALM #9435 [@radarhere]

Open source →

Additional notes

12.2.0

Compare

Choose a tag to compare

Open source →

Additional notes

12.2.0

Security

2026-40192: Prevent FITS decompression bomb

When decompressing GZIP data from a FITS image, Pillow did not limit the amount of data being read, meaning that it was vulnerable to GZIP decompression bombs. This was introduced in Pillow 10.3.0.

The data being read is now limited to only the necessary amount.

2026-42311: Fix OOB write with invalid tile extents

Pillow 12.1.1 addressed 2026-25990 by improving checks for tile extents to prevent an OOB write from specially crafted PSD images in Pillow >= 10.3.0. However, these checks did not consider integer overflow. This has been corrected.

2026-42310: Prevent PDF parsing trailer infinite loop

When parsing a PDF, if a trailer refers to itself, or a more complex cyclic loop exists, then an infinite loop occurs. Pillow now keeps a record of which trailers it has already processed. PdfParser was added in Pillow 5.1.0.

2026-42308: Integer overflow when processing fonts

If a font advances for each glyph by an exceedingly large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This has been fixed.

2026-42309: Heap buffer overflow with nested list coordinates

Passing nested lists as coordinates to APIs that accept coordinates such as ImagePath.Path, ~PIL.ImageDraw.ImageDraw.polygon and ~PIL.ImageDraw.ImageDraw.line could cause a heap buffer overflow, as nested lists were recursively unpacked beyond the allocated buffer. Coordinate lists are now validated to contain exactly two numeric coordinates. This was introduced in Pillow 11.2.1.

API changes

Error when encoding an empty image

Attempting to encode an image with zero width or height would previously raise a SystemError. That has now been changed to a ValueError.

This does not add any new errors. SGI, ICNS and ICO formats are still able to save (0, 0) images.

API additions

FontFile.to_imagefont()

~PIL.FontFile.FontFile instances can now be directly converted to ~PIL.ImageFont.ImageFont instances:

>>> from PIL import PcfFontFile
>>> with open("Tests/fonts/10x20-ISO8859-1.pcf", "rb") as fp:
...   pcffont = PcfFontFile.PcfFontFile(fp)
...   pcffont.to_imagefont()
...
<PIL.ImageFont.ImageFont object at 0x10457bb80>

ImageText.Text.wrap

.ImageText.Text.wrap has been added, to wrap text to fit within a given width:

from PIL import ImageText
text = ImageText.Text("Hello World!")
text.wrap(50)
print(text.text)  # "Hello\nWorld!"

or within a certain width and height, returning a new .ImageText.Text instance if the text does not fit:

text = ImageText.Text("Text does not fit within height")
print(text.wrap(50, 25).text == " within height")
print(text.text)  # "Text does\nnot fit"

or scaling, optionally with a font size limit:

text.wrap(50, 15, "shrink")
text.wrap(50, 15, ("shrink", 7))
text.wrap(58, 10, "grow")
text.wrap(50, 50, ("grow", 12))

EXIF tag FrameRate

The EXIF tag FrameRate has been added.

Other changes

Support reading JPEG2000 images with CMYK palettes

JPEG2000 images with CMYK palettes can now be read. This is the first integration of CMYK palettes into Pillow.

Lazy plugin loading

When opening or saving an image, Pillow now lazily loads only the required plugin based on the file extension, instead of importing all plugins upfront. This makes open 2.3-15.6x faster and save 2.2-9x faster for common formats.

Thread safety for free-threaded Python

Critical sections are now used to protect FreeType font objects, improving thread safety when using fonts in the free-threaded build of Python.

12.1.02 Jan 2026Deprecated

Deprecate getdata(), in favour of new get_flattened_data() #9292 [ @radarhere ]

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.0.html

Deprecations

Deprecate getdata(), in favour of new get_flattened_data() #9292 [@radarhere]

Documentation

Specify APNG duration type when opening #9368 [@radarhere]
Added release notes for #9350 #9366 [@radarhere]
Update ImageMorph documentation #9349 [@radarhere]
Docs: update major bump cadence #9334 [@hugovk]
Add release notes for #9070 #9320 [@radarhere]
Updated Ubuntu version #9306 [@radarhere]
Update macOS tested Pillow versions #9265 [@radarhere]

Dependencies

Update harfbuzz to 12.3.0 #9355 [@radarhere]
Update xz to 5.8.2 #9343 [@radarhere]
Updated libjpeg-turbo to 3.1.3 #9333 [@radarhere]
Updated zlib-ng to 2.3.2 #9324 [@radarhere]
Updated libpng to 1.6.53 #9325 [@radarhere]
Update actions/checkout action to v6 #9323 [@renovate[bot]]
Update dependency mypy to v1.19.0 #9322 [@renovate[bot]]
Updated libpng to 1.6.51 #9305 [@radarhere]
Updated brotli to 1.2.0 #9284 [@radarhere]
Update libimagequant to 4.4.1 #9301 [@radarhere]
Update zlib-ng to 2.3.1, except on manylinux2014 aarch64 #9312 [@radarhere]
Updated harfbuzz to 12.2.0 #9289 [@radarhere]
Update github-actions #9277 [@renovate[bot]]

Testing

Replace pre-commit with prek #9360 [@hugovk]
Test PyQt6 on Python 3.14 on Windows #9353 [@radarhere]
Test 32-bit Windows on Windows Server 2022 #9345 [@radarhere]
Correct variable type #9335 [@radarhere]
Fix ResourceWarnings in selftest.py #9332 [@hugovk]
Fix testing good P mode BMP images #9319 [@radarhere]
Test Python 3.15 pre-release #9331 [@hugovk]
Test ImageFont.ImageFont, in case freetype2 is not supported #9287 [@radarhere]
Add Fedora 43 #9290 [@radarhere]
Remove Fedora 41 #9260 [@radarhere]

Type hints

Add ImageFile context manager #9367 [@radarhere]
Assert fp is not None #8617 [@radarhere]
Added return type to ImageFile _close_fp() #9356 [@radarhere]
Use different variables for Image and ImageFile instances #9316 [@radarhere]
Correct variable type #9335 [@radarhere]
Improve type hints #9317 [@radarhere]
Use different variables for Image and ImageFile instances #9268 [@radarhere]
Added type hints #9269 [@radarhere]
Correct getitem return type #9264 [@radarhere]

Other changes

Simplify band splitting #9291 [@radarhere]
Support saving APNG float durations #9365 [@radarhere]
Allow 1 mode images in MorphOp #9348 [@radarhere]
Use minimum supported Python version for Lint #9364 [@radarhere]
Allow for duplicate font variation styles #9362 [@radarhere]
Call parent verify method #9357 [@radarhere]
Return LUT from LutBuilder build_default_lut() #9350 [@radarhere]
Simplify WebP code #9329 [@radarhere]
Use unsigned long for DWORD #9352 [@radarhere]
Cast to UINT32 before shifting bits #9347 [@radarhere]
[pre-commit.ci] pre-commit autoupdate #9318 [@pre-commit-ci[bot]]
Allow window ID to be passed to ImageGrab.grab() on macOS #9070 [@yankeguo]
Apply encoder options when saving multiple PNG frames #9300 [@radarhere]
Read all non-zero transparency from mode 1 PNG images as 255 #9282 [@radarhere]
Support writing IFD, SIGNED_RATIONAL and InkNames TIFF tags #9276 [@radarhere]
Remove unused modes #9275 [@radarhere]
Correct allocating new color to RGBA palette #9313 [@radarhere]
Close image on ImageFont exception #9304 [@radarhere]
Reapply "Use macos-latest for iOS arm64 simulator" #9259 [@radarhere]
Escape period in pre-commit-config #9036 [@radarhere]
Add Apache-2.0 notice to IcoImagePlugin #8947 [@stefan6419846]
[pre-commit.ci] pre-commit autoupdate #9288 [@pre-commit-ci[bot]]
Simplify code now that I;16* modes are the only IMAGING_TYPE_SPECIAL #9263 [@radarhere]
Remove BytesIO from DdsImagePlugin #9273 [@radarhere]
Fix ZeroDivisionError in DdsImagePlugin #9272 [@radarhere]
Fix warnings #9257 [@radarhere]

Open source →

Additional notes

12.1.0

Compare

Choose a tag to compare

Open source →

Additional notes

12.1.0

Deprecations

Image getdata()

~PIL.Image.Image.getdata has been deprecated. ~PIL.Image.Image.get_flattened_data can be used instead. This new method is identical, except that it returns a tuple of pixel values, instead of an internal Pillow data type.

API changes

ImageMorph build_default_lut()

To match the behaviour of ~PIL.ImageMorph.LutBuilder.build_lut, ~PIL.ImageMorph.LutBuilder.build_default_lut() now returns the new LUT.

API additions

Image get_flattened_data()

~PIL.Image.Image.get_flattened_data is identical to the deprecated ~PIL.Image.Image.getdata, except that the new method returns a tuple of pixel values, instead of an internal Pillow data type.

Specify window in ImageGrab on macOS

When using ~PIL.ImageGrab.grab, a specific window can now be selected on macOS in addition to Windows. On macOS, this is a CGWindowID:

from PIL import ImageGrab
ImageGrab.grab(window=cgwindowid)

Other changes

Added MorphOp support for 1 mode images

~PIL.ImageMorph.MorphOp now supports both 1 mode and L mode images.

Open source →

12.0.015 Oct 2025Deprecated

Remove deprecations for Pillow 12.0.0 #9053 [ @radarhere ]

https://pillow.readthedocs.io/en/stable/releasenotes/12.0.0.html

Removals

Remove support for FreeType <= 2.9.0 #9159 [@radarhere]
Drop support for Python 3.9 #9119 [@hugovk]
Remove deprecations for Pillow 12.0.0 #9053 [@radarhere]

Deprecations

Deprecate Image._show #9186 [@radarhere]
Deprecate ImageCmsProfile product_name and product_info #8995 [@lukegb]

Documentation

ImagingHistogramInstance can use two bands #9251 [@radarhere]
Update 12.0.0 release notes #9247 [@hugovk]
Added ImageDraw alpha channel examples #9201 [@radarhere]
Update Python version #9230 [@radarhere]
Updated macOS tested Pillow versions #9209 [@radarhere]
Add GitHub profile link to release notes #9197 [@radarhere]
Split versionadded info #9190 [@radarhere]
Document ImageFile.MAXBLOCK #9163 [@radarhere]
Updated macOS version in CI targets #9157 [@radarhere]
Fix typos #9135 [@radarhere]
Added "Colors" to concepts #9067 [@radarhere]
Update macOS tested Pillow versions #9068 [@radarhere]
Thanks, folks! #9056 [@aclark4life]
Setup nit: "fork" should be lowercased #9055 [@aclark4life]

Dependencies

Update dependency cibuildwheel to v3.2.1 #9246 [@renovate[bot]]
[pre-commit.ci] pre-commit autoupdate #9233 [@pre-commit-ci[bot]]
Update harfbuzz to 12.1.0 #9218 [@radarhere]
Update libtiff to 4.7.1 #9222 [@radarhere]
Update FreeType to 2.14.1 on macOS and Linux wheels #9217 [@radarhere]
Update dependency cibuildwheel to v3.2.0 #9219 [@renovate[bot]]
Update Ghostscript to 10.6.0 #9202 [@radarhere]
Update openjpeg to 2.5.4 #9215 [@radarhere]
Update harfbuzz to 11.5.0 #9203 [@radarhere]
Update dependency mypy to v1.18.2 #9213 [@renovate[bot]]
Update dependency mypy to v1.18.1 #9207 [@renovate[bot]]
Update github-actions #9194 [@renovate[bot]]
Updated harfbuzz to 11.4.5 #9150 [@radarhere]
Update zlib-ng to 2.2.5 #9140 [@radarhere]
Update raqm to 0.10.3 #9137 [@radarhere]
Update libjpeg-turbo to 3.1.2 #9188 [@radarhere]
[pre-commit.ci] pre-commit autoupdate #9180 [@pre-commit-ci[bot]]
Update dependency cibuildwheel to v3.1.4 #9164 [@renovate[bot]]
Update actions/checkout action to v5 #9156 [@renovate[bot]]
Update actions/download-artifact action to v5 #9141 [@renovate[bot]]
Updated harfbuzz to 11.3.3 #9103 [@radarhere]
[pre-commit.ci] pre-commit autoupdate #9131 [@pre-commit-ci[bot]]
Updated libimagequant to 4.4.0 #9074 [@radarhere]
Update dependency mypy to v1.17.1 #9130 [@renovate[bot]]
Update dependency cibuildwheel to v3.1.3 #9129 [@renovate[bot]]
Update dependency cibuildwheel to v3.1.2 #9118 [@renovate[bot]]
Updated libpng to 1.6.50 #9058 [@radarhere]
Update cygwin/cygwin-install-action action to v6 #9108 [@renovate[bot]]
Update dependency mypy to v1.17.0 #9092 [@renovate[bot]]
Updated libwebp to 1.6.0 #9082 [@radarhere]
Update dependency cibuildwheel to v3.0.1 #9075 [@renovate[bot]]
[pre-commit.ci] pre-commit autoupdate #9073 [@pre-commit-ci[bot]]

Testing

Check return types #9045 [@radarhere]
Upgrade from macos-13 #9212 [@radarhere]
Wheels CI: Check number of expected dists #9239 [@hugovk]
Assert image type #8845 [@radarhere]
Test GD transparency #9196 [@radarhere]
Test mode when saving PPM images #9195 [@radarhere]
Test unsupported BMP bitfields layout #9193 [@radarhere]
Update Ghostscript to 10.6.0 #9202 [@radarhere]
Use monkeypatch #9192 [@radarhere]
Always check XMLPacket value #9113 [@radarhere]
Rename variable to not shadow import #9124 [@radarhere]
Removed unused code #9182 [@radarhere]
Add has_feature_version helper #9172 [@radarhere]
Replace print with assert #9171 [@radarhere]
Add Debian 13 Trixie #9147 [@hugovk]
Do not import from Tests directory in checks #9143 [@radarhere]
Improve features test coverage #9077 [@radarhere]
Remove WebP feature handling #9096 [@radarhere]
Update for pyroma 5.0 #9093 [@radarhere]
Improve WmfImagePlugin test coverage #9090 [@radarhere]
Improve DdsImagePlugin test coverage #9091 [@radarhere]
Improve ImageMath test coverage #9087 [@radarhere]
Fix unclosed file warning #9065 [@radarhere]
Pyroma now supports PEP 639 #9064 [@radarhere]

Type hints

Install arro3 dependencies when type checking #9254 [@radarhere]
Check return types #9045 [@radarhere]
Assert image type #8845 [@radarhere]
Move imports into TYPE_CHECKING #9123 [@radarhere]
Remove support for NumPy 1.20 when type checking #9125 [@radarhere]

Other changes

Use macos-14 for iOS arm64 simulator #9258 [@hugovk]
Use enums for Modes and RawModes in C #9256 [@radarhere]
Add ImageText #9098 [@radarhere]
Shift bits before making value negative #9255 [@radarhere]
Support saving variable length rational TIFF tags by default #9241 [@radarhere]
Added four private SGI TIFF tags #9245 [@radarhere]
Band names for arrow exported images #9099 [@wiredfool]
Use macos-latest for iOS arm64 simulator #9250 [@radarhere]
If pasting an image onto itself at a lower position, copy from bottom #8882 [@radarhere]
Removed unused access for I;32L and I;32B #9238 [@radarhere]
Corrected scientific-python-nightly-wheels pattern #9252 [@radarhere]
Run sdist when scheduled, but do not upload to scientific-python-nightly-wheels index #9248 [@radarhere]
Removed shebang lines and executable flags #9179 [@radarhere]
Remove Pillow version from PDF comment #9176 [@radarhere]
Support saving variable length rational TIFF tags #9111 [@radarhere]
Build Python 3.14 on macOS 10.15 #9234 [@radarhere]
Test largest CUR cursor #9191 [@radarhere]
Do not unnecessarily update FLI __offset #9184 [@radarhere]
Fill alpha channel when quantizing RGB images #9133 [@radarhere]
Allow RGBA palettes to work with ImageOps.expand() #9138 [@radarhere]
Fixed loading rotated PCD images #9177 [@radarhere]
Cast before shifting bits #9236 [@radarhere]
Use _ensure_mutable() #9200 [@radarhere]
Seek past BeginBinary data when parsing EPS metadata #9211 [@radarhere]
Do not allow negative offset with memory mapping #9235 [@radarhere]
Clear C image when MPO frame image size changes #9208 [@radarhere]
When converting RGBA to PA, use RGB to P quantization #9153 [@radarhere]
Remove use of sudo from libavif and raqm install scripts #9231 [@radarhere]
Load image palette into Python after converting to PA #9152 [@radarhere]
Check all reserved bytes in FLI header #9183 [@radarhere]
Limit length of read operation in ImageFont._load_pilfont_data() #9181 [@radarhere]
Python 3.9 wheels are no longer needed #9214 [@radarhere]
Remove unused Image _expand() #9227 [@radarhere]
Updated FreeType to 2.14.1 on Windows #9206 [@radarhere]
Only deprecate fromarray mode for changing data types #9063 [@radarhere]
Fix reading RGB and CMYK IPTC images #9088 [@radarhere]
Install zstd for libtiff on Linux wheels #9097 [@radarhere]
Improve WalImageFile test coverage #9189 [@radarhere]
ImageMorph operations must have length 1 #9102 [@radarhere]
Set correct size for rotated PCD images after opening #9086 [@radarhere]
Simplify check for GBR width and height #9089 [@radarhere]
Make in parallel when building libjpeg-turbo and openjpeg for macOS and Linux wheels #9144 [@radarhere]
Fix ZeroDivisionError in ImageStat #9105 [@radarhere]
When deleting EXIF IFD tag, delete IFD data #9083 [@radarhere]
Allow alpha_composite to use LA images #9066 [@radarhere]
Improve _accept length check #9170 [@radarhere]
Do not set core to DeferredError #9166 [@radarhere]
Use macos-14 for iOS arm64 simulator

Note truncated.

Open source →

Additional notes

12.0.0

Compare

Choose a tag to compare

Open source →

Additional notes

12.0.0

Backwards incompatible changes

Python 3.9

Pillow has dropped support for Python 3.9, which reached end-of-life in October 2025.

ImageFile.raise_oserror

ImageFile.raise_oserror() has been removed. The function was undocumented and was only useful for translating error codes returned by a codec's decode() method, which ImageFile already did automatically.

IptcImageFile helper functions

The functions IptcImageFile.dump and IptcImageFile.i, and the constant IptcImageFile.PAD have been removed. These were undocumented helper functions intended for internal use, so there is no replacement. They can each be replaced by a single line of code using builtin functions in Python.

ImageCms constants and versions() function

A number of constants and a function in .ImageCms have been removed. This includes a table of flags based on LittleCMS version 1 which has been replaced with a new class .ImageCms.Flags based on LittleCMS 2 flags.

Deprecated	Use instead
ImageCms.DESCRIPTION	No replacement
ImageCms.VERSION	PIL.__version__
ImageCms.FLAGS["MATRIXINPUT"]	.ImageCms.Flags.CLUT_POST_LINEARIZATION
ImageCms.FLAGS["MATRIXOUTPUT"]	.ImageCms.Flags.FORCE_CLUT
ImageCms.FLAGS["MATRIXONLY"]	No replacement
ImageCms.FLAGS["NOWHITEONWHITEFIXUP"]	.ImageCms.Flags.NOWHITEONWHITEFIXUP
ImageCms.FLAGS["NOPRELINEARIZATION"]	.ImageCms.Flags.CLUT_PRE_LINEARIZATION
ImageCms.FLAGS["GUESSDEVICECLASS"]	.ImageCms.Flags.GUESSDEVICECLASS
ImageCms.FLAGS["NOTCACHE"]	.ImageCms.Flags.NOCACHE
ImageCms.FLAGS["NOTPRECALC"]	.ImageCms.Flags.NOOPTIMIZE
ImageCms.FLAGS["NULLTRANSFORM"]	.ImageCms.Flags.NULLTRANSFORM
ImageCms.FLAGS["HIGHRESPRECALC"]	.ImageCms.Flags.HIGHRESPRECALC
ImageCms.FLAGS["LOWRESPRECALC"]	.ImageCms.Flags.LOWRESPRECALC
ImageCms.FLAGS["GAMUTCHECK"]	.ImageCms.Flags.GAMUTCHECK
ImageCms.FLAGS["WHITEBLACKCOMPENSATION"]	.ImageCms.Flags.BLACKPOINTCOMPENSATION
ImageCms.FLAGS["BLACKPOINTCOMPENSATION"]	.ImageCms.Flags.BLACKPOINTCOMPENSATION
ImageCms.FLAGS["SOFTPROOFING"]	.ImageCms.Flags.SOFTPROOFING
ImageCms.FLAGS["PRESERVEBLACK"]	.ImageCms.Flags.NONEGATIVES
ImageCms.FLAGS["NODEFAULTRESOURCEDEF"]	.ImageCms.Flags.NODEFAULTRESOURCEDEF
ImageCms.FLAGS["GRIDPOINTS"]	.ImageCms.Flags.GRIDPOINTS()
ImageCms.versions()	PIL.features.version_module with feature="littlecms2", sys.version or sys.version_info, and PIL.__version__

ImageMath eval()

ImageMath.eval() has been removed. Use ~PIL.ImageMath.lambda_eval or ~PIL.ImageMath.unsafe_eval instead.

BGR;15, BGR;16 and BGR;24

The experimental BGR;15, BGR;16 and BGR;24 modes have been removed.

Non-image modes in ImageCms

The use in .ImageCms of input modes and output modes that are not Pillow image modes has been removed. Defaulting to "L" or "1" if the mode cannot be mapped has also been removed.

Support for LibTIFF earlier than 4

Support for LibTIFF earlier than version 4 has been removed. Upgrade to a newer version of LibTIFF instead.

ImageDraw.getdraw hints parameter

The hints parameter in ~PIL.ImageDraw.getdraw() has been removed.

FreeType 2.9.0

Support for FreeType 2.9.0 has been removed. FreeType 2.9.1 is the minimum version supported.

We recommend upgrading to at least FreeType 2.10.4, which fixed a severe vulnerability introduced in FreeType 2.6 (2020-15999).

Deprecations

Image._show

Image._show has been deprecated, and will be removed in Pillow 13 (2026-10-15). Use ~PIL.ImageShow.show instead.

ImageCms.ImageCmsProfile.product_name and .product_info

ImageCms.ImageCmsProfile.product_name and the corresponding .product_info attributes have been deprecated, and will be removed in Pillow 13 (2026-10-15). They have been set to None since Pillow 2.3.0.

API changes

Image.alpha_composite: LA images

~PIL.Image.alpha_composite can now use LA images as well as RGBA.

API additions

Added ImageText.Text

PIL.ImageText.Text has been added, as a simpler way to use fonts with text strings or bytes.

Without ImageText.Text:

from PIL import Image, ImageDraw
im = Image.new(mode, size)
d = ImageDraw.Draw(im)

d.textlength(text, font, direction, features, language, embedded_color)
d.multiline_textbbox(xy, text, font, anchor, spacing, align, direction, features, language, stroke_width, embedded_color)
d.text(xy, text, fill, font, anchor, spacing, align, direction, features, language, stroke_width, stroke_fill, embedded_color)

With ImageText.Text:

from PIL import ImageText
text = ImageText.Text(text, font, mode, spacing, direction, features, language)
text.embed_color()
text.stroke(stroke_width, stroke_fill)

text.get_length()
text.get_bbox(xy, anchor, align)

im = Image.new(mode, size)
d = ImageDraw.Draw(im)
d.text(xy, text, fill, anchor=anchor, align=align)

Other changes

Python 3.14

Pillow 11.3.0 had wheels built against Python 3.14 beta, available as a preview to help others prepare for 3.14, and to ensure Pillow could be used immediately at the release of 3.14.0 final (2025-10-07, 745).

Pillow 12.0.0 now officially supports Python 3.14.

Image.fromarray mode parameter

In Pillow 11.3.0, the mode parameter in ~PIL.Image.fromarray() was deprecated. Part of this functionality has been restored in Pillow 12.0.0. Since pixel values do not contain information about palettes or color spaces, the parameter can be used to place grayscale L mode data within a P mode image, or read RGB data as YCbCr for example.

ImageMorph operations must have length 1

Valid ImageMorph operations are 4, N, 1 and M. By limiting the length to 1 character within Pillow, long execution times can be avoided if a user provided long pattern strings. Reported by Jang Choi.

11.3.01 Jul 2025Deprecated

Deprecate fromarray mode argument #9018 [ @radarhere ]

https://pillow.readthedocs.io/en/stable/releasenotes/11.3.0.html

Deprecations

Deprecate fromarray mode argument #9018 [@radarhere]
Deprecate saving I mode images as PNG #9023 [@radarhere]

Documentation

Added release notes for #9041 #9042 [@radarhere]
Add release notes for #8912 and #8969 #9019 [@radarhere]
ImageFont does not handle multiline text #9000 [@radarhere]
Updated Ubuntu CI targets #8988 [@radarhere]
Update MinGW package names #8987 [@H4M5TER]
Updated docstring #8943 [@radarhere]
Mention that tobytes() with the raw encoder uses Pack.c #8878 [@radarhere]
Refactor docs Makefile #8933 [@hugovk]
Add template for quarterly release issue #8932 [@aclark4life]
Add list of third party plugins #8910 [@radarhere]
Update redirected URL #8919 [@radarhere]
Docs: use sentence case for headers #8914 [@hugovk]
Docs: remove unused Makefile targets #8917 [@hugovk]
Remove indentation from lists #8915 [@radarhere]
Python 3.13 is tested on Arch #8894 [@radarhere]
Move XV Thumbnails to read only section #8893 [@aclark4life]
Updated macOS tested Pillow versions #8890 [@radarhere]

Dependencies

Add AVIF to wheels using only aomenc and dav1d AVIF codecs for reduced size #8858 [@fdintino]
Use same AVIF URL when fetching dependency #8871 [@radarhere]
Update dependency mypy to v1.16.1 #9026 [@renovate[bot]]
Update libpng to 1.6.49 #9014 [@radarhere]
Update dependency cibuildwheel to v3 #9010 [@renovate[bot]]
Updated libjpeg-turbo to 3.1.1 #9009 [@radarhere]
Update dependency mypy to v1.16.0 #8991 [@renovate[bot]]
Updated libpng to 1.6.48 #8940 [@radarhere]
Updated Ghostscript to 10.5.1 #8939 [@radarhere]
Updated harfbuzz to 11.2.1 #8937 [@radarhere]
Updated libavif to 1.3.0 #8949 [@radarhere]
Update dependency cibuildwheel to v2.23.3 #8931 [@renovate[bot]]
Updated harfbuzz to 11.1.0 #8904 [@radarhere]

Testing

Add match parameter to pytest.warns() #9038 [@hugovk]
Increase pytest verbosity #9040 [@radarhere]
Improve SgiImagePlugin test coverage #8896 [@radarhere]
Update ruff pre-commit ID #8994 [@radarhere]
Only check DHT marker for libjpeg-turbo #9025 [@radarhere]
Improve BLP tests #9020 [@radarhere]
Fix warning #9016 [@radarhere]
Test Python 3.14t on macOS and Linux #9011 [@radarhere]
Only accept missing tkinter when building wheels on Windows #8981 [@radarhere]
Fix test #8996 [@radarhere]
Stop testing deprecated Windows Server 2019 runner image #8989 [@radarhere]
Run slow tests on valgrind, but without timeout #8975 [@radarhere]
Close file pointer earlier #8895 [@radarhere]
Added Fedora 42 #8899 [@radarhere]
Removed Fedora 40 #8887 [@radarhere]

Type hints

Assert palette is not None #8877 [@radarhere]
Do not import type checking #8854 [@radarhere]
Improve type hints #8883 [@radarhere]
Update dependency mypy to v1.16.0 #8991 [@renovate[bot]]

Other changes

Updated check script paths #9052 [@radarhere]
Raise FileNotFoundError when opening an empty path #9048 [@radarhere]
Handle IPTC TIFF tags with incorrect type #8925 [@radarhere]
Do not update palette for L mode GIF frame #8924 [@radarhere]
Use save parameters as encoderinfo defaults #9001 [@radarhere]
Add support for iOS #9030 [@freakboy3742]
Fix qtables and quality scaling #8879 [@Kyliroco]
Read 16-bit McIdas images into I;16B mode to allow for memory mapping #9046 [@radarhere]
Support ttb multiline text #8730 [@radarhere]
Use unpacking #9044 [@radarhere]
Fix saving MPO with more than one appended image #8979 [@radarhere]
Restore original encoderinfo after saving #8942 [@radarhere]
Return PixelAccess from first load of ICO and IPTC images #8922 [@radarhere]
Improve justifying text #8905 [@radarhere]
Set color table fourth channel to zero for 1 and L mode when saving BMP #8889 [@radarhere]
Improve reading XPM images #8874 [@radarhere]
Fix buffer overflow when saving compressed DDS images #9041 [@radarhere]
Use PEP 489 multi-phase initialization #8983 [@radarhere]
Support saving I;16L TIFF images #9015 [@radarhere]
Do not call sys.executable in ImageShow in PyInstaller application #9028 [@radarhere]
Search for libtiff library file first on Windows and macOS #9034 [@radarhere]
Fix libtiff cleanup #9002 [@radarhere]
Use percent formatting for _dbg calls #9035 [@radarhere]
Removed ImageCmsProfile._set method #9032 [@radarhere]
Added Python 3.14 macOS x86-64 wheels #9031 [@radarhere]
Support writing QOI images #9007 [@thisismypassport]
Simplify C error handling #9021 [@radarhere]
Add Python 3.14 beta wheels #9012 [@hugovk]
Remove padding between interleaved PCX palette data #9005 [@radarhere]
Start QOI decoding with a zero-initialized array of previously seen pixels #9008 [@radarhere]
Correct drawing I;16 horizontal lines #8985 [@radarhere]
Reduce number of bytes read for PCX header #9004 [@radarhere]
Handle XMP data from an UNDEFINED TIFF tag #8997 [@radarhere]
Do not decode bytes in PPM error message #8958 [@radarhere]
Parse XMP tag bytes without decoding to string #8960 [@radarhere]
Clear TIFF core image if memory mapping was used for last load #8962 [@radarhere]
Use mask in C when drawing wide polygon lines #8984 [@radarhere]
Simplify code #8863 [@radarhere]
Call startswith once with a tuple #8998 [@radarhere]
[pre-commit.ci] pre-commit autoupdate #8993 [@pre-commit-ci[bot]]
Use ImageFile.MAXBLOCK in tobytes() #8906 [@radarhere]
Removed unreachable code #8918 [@radarhere]
Valgrind Memory Leak Checking #8954 [@wiredfool]
Add parallel test target, using pytest-xdist #8972 [@wiredfool]
Add support for flat uint8 arrow arrays for multi channel images #8908 [@wiredfool]
Removed CMAKE_POLICY_VERSION_MINIMUM=3.5 for libavif #8973 [@radarhere]
Reduced number of bytes read in WMF header #8964 [@radarhere]
Do not build against libavif < 1 #8969 [@radarhere]
Improved support for Python 3.14 #8948 [@radarhere]
[pre-commit.ci] pre-commit autoupdate #8944 [@pre-commit-ci[bot]]
Allow loading ImageFile state from Pillow < 11.2.1 #8938 [@radarhere]
Remove outdated comment #8929 [@radarhere]
Add support for Grim in Wayland sessions ImageGrab #8912 [@AdianKozlica]
Add make [-C docs] htmllive to rebuild and reload HTML files #8913 [@hugovk]
Build Windows arm64 wheels on arm64 runner #8898 [@radarhere]

Open source →

Additional notes

11.3.0

Compare

Choose a tag to compare

Open source →

Additional notes

11.3.0

Security

2025-48379: Write buffer overflow on BCn encoding

There is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without checking for available space.

This only affects users who save untrusted data as a compressed DDS image.

Unclear how large the potential write could be. It is likely limited by process segfault, so it's not necessarily deterministic. It may be practically unbounded.
Unclear if there's a restriction on the bytes that could be emitted. It's likely that the only restriction is that the bytes would be emitted in chunks of 8 or 16.

This was introduced in Pillow 11.2.0 when the feature was added.

Deprecations

Image.fromarray mode parameter

The mode parameter in ~PIL.Image.fromarray() has been deprecated. The mode can be automatically determined from the object's shape and type instead.

Note

Since pixel values do not contain information about palettes or color spaces, part of this functionality was restored in Pillow 12.0.0. The parameter can be used to place grayscale L mode data within a P mode image, or read RGB data as YCbCr for example.

Saving I mode images as PNG

In order to fit the 32 bits of I mode images into PNG, when PNG images can only contain at most 16 bits for a channel, Pillow has been clipping the values. Rather than quietly changing the data, this is now deprecated. Instead, the image can be converted to another mode before saving:

from PIL import Image
im = Image.new("I", (1, 1))
im.convert("I;16").save("out.png")

Other changes

Added QOI saving

Support has been added for saving QOI images. colorspace can be used to specify the colorspace as sRGB with linear alpha, e.g. im.save("out.qoi", colorspace="sRGB"). By default, all channels will be linear.

Support using more screenshot utilities with ImageGrab on Linux

~PIL.ImageGrab.grab is now able to use GNOME Screenshot, grim or Spectacle on Linux in order to take a snapshot of the screen.

Do not build against libavif < 1

Pillow only supports libavif 1.0.0 or later. In order to prevent errors when building from source, if a user happens to have an earlier libavif on their system, Pillow will now ignore it.

AVIF support in wheels

Support for reading and writing AVIF images is now included in Pillow's wheels, except for Windows ARM64 and iOS. libaom is available as an encoder and dav1d as a decoder. (Thank you Frankie Dintino and Andrew Murray!)

iOS

Pillow now provides wheels that can be used on iOS ARM64 devices, and on the iOS simulator on ARM64 and x86_64. Currently, only Python 3.13 wheels are available. (Thank you Russell Keith-Magee and Andrew Murray!)

Python 3.14 beta

To help other projects prepare for Python 3.14, wheels are now built for the 3.14 beta as a preview. This is not official support for Python 3.14, but rather an opportunity for you to test how Pillow works with the beta and report any problems.

11.2.112 Apr 2025Deprecated

Replace deprecated classifier with licence expression (PEP 639) #8850 [ @hugovk ]

https://pillow.readthedocs.io/en/stable/releasenotes/11.2.1.html

Deprecations

Moved get_child_images() to ImageFile #8689 [@radarhere]

Documentation

Add 11.2.1 release notes #8885 [@radarhere]
Added avif to config settings #8875 [@radarhere]
Added release notes for #8330 #8853 [@radarhere]
Added release notes for #8781 and #8837 #8843 [@radarhere]
Added media_white_point to ImageCms documentation #8829 [@radarhere]
Removed FIXME #8825 [@radarhere]
Updated comment #8822 [@radarhere]
Added release notes for #8807 #8824 [@radarhere]
DXT3 images are read in RGBA mode #8817 [@radarhere]
JPEG comments are from the COM marker #8788 [@radarhere]
Update Sphinx to 8.2 to remove nitpick ignore #8763 [@radarhere]
Updated AffineTransform docstring to mention it uses the inverse matrix #8735 [@radarhere]
Added MozJPEG documentation #8699 [@radarhere]
Added Sphinx configuration key #8691 [@radarhere]
Updated macOS tested Pillow versions #8654 [@radarhere]

Dependencies

Updated xz to 5.8.1 #8868 [@radarhere]
Updated harfbuzz to 11.0.1 #8870 [@radarhere]
Update scientific-python/upload-nightly-action action to v0.6.2 #8865 [@renovate[bot]]
Updated xz to 5.8.0 in macOS and Linux wheels, but not on manylinux2014 #8836 [@radarhere]
Update dependency cibuildwheel to v2.23.2 #8832 [@renovate[bot]]
Updated harfbuzz to 11.0.0 #8830 [@radarhere]
Update dependency cibuildwheel to v2.23.1 #8818 [@renovate[bot]]
Updated Ghostscript to 10.5.0 #8814 [@radarhere]
Updated libtiff to 4.7.0 #8812 [@radarhere]
[pre-commit.ci] pre-commit autoupdate #8795 [@pre-commit-ci[bot]]
Updated harfbuzz to 10.4.0 #8770 [@radarhere]
Update dependency mypy to v1.15.0 #8791 [@renovate[bot]]
Updated libpng to 1.6.47 #8764 [@radarhere]
Updated lcms2 to 2.17 #8742 [@radarhere]
Update dependency cibuildwheel to v2.23.0 #8785 [@renovate[bot]]
Updated zlib-ng to 2.2.4 #8745 [@radarhere]
Updated libimagequant to 4.3.4 on Windows #8744 [@radarhere]
[pre-commit.ci] pre-commit autoupdate #8729 [@pre-commit-ci[bot]]
Updated harfbuzz to 10.2.0 #8688 [@radarhere]
Updated xz to 5.6.4 #8711 [@radarhere]
Updated libpng to 1.6.46 #8712 [@radarhere]
Updated libimagequant to 4.3.4 #8710 [@radarhere]
Updated libpng to 1.6.45 #8670 [@radarhere]
Update cygwin/cygwin-install-action action to v5 #8675 [@renovate[bot]]
[pre-commit.ci] pre-commit autoupdate #8665 [@pre-commit-ci[bot]]
Updated freetype to 2.13.3 in macOS and Linux wheels #8653 [@radarhere]
Upgrade zlib-ng to 2.2.3 #8656 [@hugovk]

Testing

Fixed unclosed file warning #8847 [@radarhere]
Assert image type #8619 [@radarhere]
Parametrize tests #8838 [@radarhere]
Change back to actions/setup-python #8833 [@radarhere]
Simplified test code #8823 [@radarhere]
Improved FliImagePlugin test coverage #8806 [@radarhere]
Install libtiff-dev on Ubuntu GitHub Actions #8816 [@radarhere]
Test using _seek to skip frames #8804 [@radarhere]
Improved PcxImagePlugin test coverage #8797 [@radarhere]
Use match argument #8801 [@radarhere]
Improved BdfFontFile test coverage #8783 [@radarhere]
Revert "Do not install libimagequant" #8778 [@radarhere]
Improved FtexImagePlugin test coverage #8766 [@radarhere]
Improved FontFile test coverage #8771 [@radarhere]
Improved MpoImagePlugin test coverage #8765 [@radarhere]
Improved SunImagePlugin coverage #8762 [@radarhere]
Improve TarIO test coverage #8759 [@radarhere]
Improve type checking in tests #8618 [@radarhere]
Add PyPy3.11 to CI #8758 [@hugovk]
Don't call make clean or pip in tox #8754 [@hugovk]
Don't shadow builtin open #8756 [@radarhere]
Removed unused test code #8752 [@radarhere]
Use monkeypatch #8747 [@radarhere]
Do not install libimagequant on MinGW #8724 [@radarhere]
Use getpixel() instead of load() #8727 [@radarhere]
Revert "Ignore brew dependencies for libraqm on macOS 13" #8725 [@radarhere]
Fixed exceptions when closing AppendingTiffWriter #8723 [@radarhere]
Fixed unclosed file warnings #8705 [@radarhere]
Use monkeypatch #8707 [@radarhere]
Use Ubuntu 22.04 for 24.04 ppc64le and s390x #8713 [@radarhere]
Updated Ubuntu arm to 24.04 with arm64 runner #8700 [@radarhere]
Test oldest Python on 32-bit Windows 2019 and remove AppVeyor #8525 [@hugovk]
Corrected argument types #8681 [@radarhere]
Test Python 3.14 pre-release #8690 [@radarhere]
Skip test_embeddable if compiler cannot be initialized #8686 [@radarhere]
Improved test coverage #8679 [@radarhere]
Removed xfail for test_embeddable on Python 3.13 #8683 [@radarhere]
Use python-numpy and python-olefile instead of virtual python3 packages #8682 [@hugovk]
Use python-pip instead of python3-pip in MinGW #8678 [@radarhere]
Use ImageFile._Tile #8666 [@radarhere]
Improved SPIDER test coverage #8668 [@radarhere]
Removed unused image open #8649 [@radarhere]
PngImageFile text is a property #8648 [@radarhere]
Trigger wheel builds from changes in pyproject.toml #8674 [@radarhere]

Type hints

Added fromarrow type hints #8867 [@radarhere]
Assert image type #8619 [@radarhere]
Check that _fp type is not DeferredError before use #8640 [@radarhere]
Corrected type check #8760 [@radarhere]
Improve type checking in tests #8618 [@radarhere]
Corrected argument types #8681 [@radarhere]
Use ImageFile._Tile #8666 [@radarhere]
Added return types #8639 [@radarhere]
Add overloads for exif_transpose #8657 [@cdce8p]

Other changes

Do not include libavif in wheels #8876 [@radarhere]
Remove GPL v2 from FreeType license #8884 [@radarhere]
[pre-commit.ci] pre-commit autoupdate #8873 [@pre-commit-ci[bot]]
Replace deprecated classifier with licence expression (PEP 639) #8850 [@hugovk]
Fixed conversion of AVIF image rotation property to EXIF orientation #8866 [@fdintino]
Removed condition that is always true #8862 [@radarhere]
Use multibuild build_github #8861 [@radarhere]
Include filename in ImageFile state #8859 [@radarhere]
Add KDE Wayland support for ImageGrab #8842 [@AdianKozlica]
Only change readonly if saved filename matches opened filename #8852 [@radarhere]
Allow HWND to be passed to ImageGrab.grab() on Windows #8516 [@radarhere]
Allow cmake<4 when building libavif and libtiff #8851 [@radarhere]
Image -> Arrow support #8330 [@wiredfool]
Add AVIF plugin (decoder + encoder using libavif) #5201 [@fdintino]
Updated xz to 5.8.0 on manylinux2014 by removing po4a dependency #8848 [@radarhere]
Revert to zlib on macOS < 10.15 #8772 [@radarhere]
Close TarIO file handle on error #8846 [@radarhere]
Do not import TYPE_CHECKING #8844 [@radarhere]
Enable memory mapping on PyPy #8840 [@radarhere]
Corrected Palm P mode save #8685 [@radarhere]
Improved connecting discontiguous corners #8659 [@radarhere]
Only read until the offset of the next tile #8609 [@radarhere]
Added USE_RAW_ALPHA for BMP images #8602 [@radarhere]
Fixed orientation when opening YCbCr TIFF images #8556 [@radarhere]
Allow loading of EMF images at a given DPI #8536 [@radarhere]
Skip failing records when rendering WMF images #8506 [@radarhere]
If append_images is populated, default save_all to True #8781 [@radarhere]
Added GimpPaletteFile frombyt

Note truncated.

Open source →

Additional notes

11.2.1

Compare

Choose a tag to compare

Open source →

Additional notes

11.2.1

Warning

The release of Pillow 11.2.0 was halted prematurely, due to hitting PyPI's project size limit and concern over the size of Pillow wheels containing libavif. The PyPI limit has now been increased and Pillow 11.2.1 has been released instead, without libavif included in the wheels. To avoid confusion, the incomplete 11.2.0 release has been removed from PyPI.

Security

Undefined shift when loading compressed DDS images

When loading some compressed DDS formats, an integer was bitshifted by 24 places to generate the 32 bits of the lookup table. This was undefined behaviour, and has been present since Pillow 3.4.0.

Deprecations

Image.Image.get_child_images()

Image.Image.get_child_images() has been deprecated, and will be removed in Pillow 13 (2026-10-15). It will be moved to ImageFile.ImageFile.get_child_images(). The method uses an image's file pointer, and so child images could only be retrieved from an PIL.ImageFile.ImageFile instance.

API changes

append_images no longer requires save_all

Previously, save_all was required in order to use append_images. Now, save_all will default to True if append_images is not empty and the format supports saving multiple frames:

im.save("out.gif", append_images=ims)

API additions

"justify" multiline text alignment

In addition to "left", "center" and "right", multiline text can also be aligned using "justify" in ~PIL.ImageDraw:

from PIL import Image, ImageDraw
im = Image.new("RGB", (50, 25))
draw = ImageDraw.Draw(im)
draw.multiline_text((0, 0), "Multiline\ntext 1", align="justify")
draw.multiline_textbbox((0, 0), "Multiline\ntext 2", align="justify")

Specify window in ImageGrab on Windows

When using ~PIL.ImageGrab.grab, a specific window can be selected using the HWND:

from PIL import ImageGrab
ImageGrab.grab(window=hwnd)

Check for MozJPEG

You can check if Pillow has been built against the MozJPEG version of the libjpeg library, and what version of MozJPEG is being used:

from PIL import features
features.check_feature("mozjpeg")  # True or False
features.version_feature("mozjpeg")  # "4.1.1" for example, or None

Saving compressed DDS images

Compressed DDS images can now be saved using a pixel_format argument. DXT1, DXT3, DXT5, BC2, BC3 and BC5 are supported:

im.save("out.dds", pixel_format="DXT1")

Other changes

Arrow support

Arrow is an in-memory data exchange format that is the spiritual successor to the NumPy array interface. It provides for zero-copy access to columnar data, which in our case is Image data.

To create an image with zero-copy shared memory from an object exporting the arrow_c_array interface protocol:

from PIL import Image
import pyarrow as pa
arr = pa.array([0]*(5*5*4), type=pa.uint8())
im = Image.fromarrow(arr, 'RGBA', (5, 5))

Pillow images can also be converted to Arrow objects:

from PIL import Image
import pyarrow as pa
im = Image.open('hopper.jpg')
arr = pa.array(im)

Reading and writing AVIF images

Pillow can now read and write AVIF images when built from source with libavif 1.0.0 or later.

11.1.02 Jan 2025Security

Apply security fixes to GitHub Actions #8526 [ @hugovk ]

https://pillow.readthedocs.io/en/stable/releasenotes/11.1.0.html

Documentation

Added release notes for writing XMP bytes to JPEG and MPO #8627 [@radarhere]
Added release notes for using zlib-ng instead of zlib #8599 [@radarhere]
Replace python-pillow.org with python-pillow.github.io #8586 [@hugovk]
ImageFile tile is never None #8582 [@radarhere]
Only use start year in copyright, remove end years #8577 [@hugovk]
Python 3.12 is tested on MinGW #8575 [@radarhere]
Use brew formula to install libraqm #8574 [@radarhere]
Added link to GitHub releases in CHANGES #8571 [@radarhere]
Release drafter: move removals, deprecations, documentation up, and uncategorised changes last #8570 [@hugovk]
Updated macOS tested Pillow versions #8538 [@radarhere]
Use test image filename #8534 [@radarhere]
Update Windows 11 Arm64 tested versions #8523 [@nulano]
Move MPO into "Fully supported formats" #8504 [@radarhere]
Update license to MIT-CMU #8490 [@radarhere]

Dependencies

Update dependency mypy to v1.14.1 #8643 [@renovate]
Update dependency mypy to v1.14.0 #8613 [@renovate]
Updated libwebp to 1.5.0 #8612 [@radarhere]
Updated libXau to 1.0.12 #8598 [@radarhere]
Updated libjpeg-turbo to 3.1.0 #8595 [@radarhere]
Updated harfbuzz to 10.1.0 #8533 [@radarhere]
Updated openjpeg to 2.5.3 #8591 [@radarhere]
Update dependency cibuildwheel to v2.22.0 #8580 [@renovate]
Update codecov/codecov-action action to v5 #8557 [@renovate]
Migrate renovate config #8527 [@renovate]
Update dependency mypy to v1.13.0 #8491 [@renovate]
Update dependency mypy to v1.12.1 #8487 [@renovate]

Testing

Added CentOS Stream 10 #8646 [@radarhere]
Use monkeypatch #8628 [@radarhere]
Pass file handle to ContainerIO #8625 [@radarhere]
Use register_handler #8499 [@radarhere]
Use monkeypatch #8626 [@radarhere]
Test libjpeg-turbo on macOS #8596 [@radarhere]
Test 3.13t (free-threaded) from Quansight-Labs/setup-python on Linux and macOS #8565 [@hugovk]
Run gcc problem matcher on Python 3.13 #8541 [@radarhere]
Add trove-classifiers>=2024.10.12 to 'tests' extra and use for Windows CI #8514 [@hugovk]
Apply security fixes to GitHub Actions #8526 [@hugovk]
Remove unused gcov: true for codecov-action@v4 #8521 [@hugovk]
Added Fedora 41 #8520 [@radarhere]
Do not repeatedly save to the same path #8512 [@radarhere]
Use fixture to re-open image for each JPEG2000 test #8484 [@radarhere]
Fixed catching warnings #8505 [@radarhere]
Updated test type hint #8482 [@radarhere]
Removed Fedora 39 #8466 [@radarhere]

Type hints

Pass file handle to ContainerIO #8625 [@radarhere]
Corrected loadImageSeries type hint #8624 [@radarhere]
Removed quotes after dropping support for Python 3.8 #8544 [@radarhere]
Fixed type hint #8532 [@radarhere]
Updated test type hint #8482 [@radarhere]

Other changes

Corrected BLP1 alpha depth handling #8651 [@radarhere]
Remove pre-C99 definitions #8644 [@radarhere]
Allow saving as BigTIFF #8642 [@radarhere]
Restored Makernote as a deprecated enum #8629 [@radarhere]
Use elif #8641 [@radarhere]
Add zizmor to pre-commit and fix potential cache-poisoning in wheels workflow #8638 [@hugovk]
Keep new IFDs when converting EXIF to bytes #8635 [@radarhere]
Added RGBX;16N to RGB unpacker #8637 [@radarhere]
Populate JPEG DPI from JFIF cm density #8633 [@radarhere]
Support saving CMYK JP2 images #8592 [@radarhere]
Added reading of J2K comments #8622 [@radarhere]
Removed variable #8631 [@radarhere]
Do not use temporary file in ImageGrab.grabclipboard() on macOS #8630 [@radarhere]
Fixed connecting discontiguous corners #8620 [@radarhere]
Do not create new image when exif_transpose() is used in place #8555 [@radarhere]
Added default values for _Tile offset and args #8553 [@radarhere]
Platform guessing affects more than just Linux #8551 [@radarhere]
Raise UnidentifiedImageError when opening TIFF without dimensions #8535 [@radarhere]
Pass IFDs to libtiff as TIFF_LONG8 #8529 [@radarhere]
Do not save XMP from JPEG info #8483 [@radarhere]
Include JpegImageFile layers in pickle state #8476 [@radarhere]
Fixed indentation #8623 [@radarhere]
Updated MakerNote capitalization #8615 [@radarhere]
Replace constants with EXIF enums #8611 [@radarhere]
Install libjpeg-turbo8-dev #8610 [@radarhere]
Raise ValueError when WMF inch is zero #8600 [@radarhere]
Extract tar files with "data" filter in Windows build scripts #8606 [@radarhere]
Updated libjpeg-turbo URL #8608 [@radarhere]
Derive dir from filename if root is the same in winbuild #8567 [@radarhere]
Updated libjpeg-turbo and harfbuzz URLs #8604 [@radarhere]
Do not describe raw data as a table #8579 [@radarhere]
Improved handling of RGBA palettes when saving GIF images #8494 [@radarhere]
Use .tar.gz zlib in Windows build to match macOS and Linux #8601 [@radarhere]
Use zlib-ng instead of zlib #8500 [@nulano]
Do not attempt to install cmake if it is already present #8593 [@radarhere]
[pre-commit.ci] pre-commit autoupdate #8578 [@pre-commit-ci]
Updated build option error messages #8576 [@radarhere]
Fix file position desync when calling into libtiff #8560 [@Knio]
Do not attempt to install cmake a second time when building macOS or Linux wheels #8566 [@radarhere]
Do not install Pyroma in MinGW, to use only system packages #8562 [@radarhere]
Isolate macOS wheel builds from Homebrew #8497 [@freakboy3742]
Removed use of os.path.realpath #8545 [@radarhere]
Allow linking to zlib import library on Windows #8519 [@cubanpit]
[pre-commit.ci] pre-commit autoupdate #8531 [@pre-commit-ci]
Detach PyQt6 QPixmap instance before returning #8509 [@radarhere]
Upgraded multibuild to remove openjpeg lib64 copy #8511 [@radarhere]
brew remove libdeflate #8502 [@radarhere]
Fix SEGFAULT from calling FT_New_Face/FT_Done_Face in multiple threads #8496 [@lysnikolaou]
Corrected EMF DPI #8485 [@radarhere]
Added filename placeholder in winbuild URL #8498 [@radarhere]
Fix IFDRational with a zero denominator #8474 [@renovate]
Fixed disabling a feature during install #8469 [@radarhere]
Skip PyPy3.9 wheels #8467 [@radarhere]
Removed unnecessary code #8465 [@radarhere]

Open source →

Additional notes2 sources agree

See GitHub Releases:

https://github.com/python-pillow/Pillow/releases

Open source →

Additional notes

11.1.0

Compare

Choose a tag to compare

Open source →

Additional notes

11.1.0

Deprecations

ExifTags.IFD.Makernote

ExifTags.IFD.Makernote has been deprecated. Instead, use ExifTags.IFD.MakerNote.

API changes

Writing XMP bytes to JPEG and MPO

Pillow 11.0.0 added writing XMP data to JPEG and MPO images:

im.info["xmp"] = b"test"
im.save("out.jpg")

However, this meant that XMP data was automatically kept from an opened image, which is inconsistent with the rest of Pillow's behaviour. This functionality has been removed. To write XMP data, the xmp argument can still be used for JPEG files:

im.save("out.jpg", xmp=b"test")

To save XMP data to the second frame of an MPO image, encoderinfo can now be used:

second_im.encoderinfo = {"xmp": b"test"}
im.save("out.mpo", save_all=True, append_images=[second_im])

API additions

Check for zlib-ng

You can check if Pillow has been built against the zlib-ng version of the zlib library, and what version of zlib-ng is being used:

from PIL import features
features.check_feature("zlib_ng")  # True or False
features.version_feature("zlib_ng")  # "2.2.2" for example, or None

Saving TIFF as BigTIFF

TIFF images can now be saved as BigTIFF using a big_tiff argument:

im.save("out.tiff", big_tiff=True)

Other changes

Reading JPEG 2000 comments

When opening a JPEG 2000 image, the comment may now be read into ~PIL.Image.Image.info for J2K images, not just JP2 images.

Saving JPEG 2000 CMYK images

With OpenJPEG 2.5.3 or later, Pillow can now save CMYK images as JPEG 2000 files.

Minimum C version

C99 is now the minimum version of C required to compile Pillow from source.

zlib-ng in wheels

Wheels are now built against zlib-ng for improved speed. In tests, saving a PNG was found to be more than twice as fast at higher compression levels.

Open source →

pillow

Release timeline

Releases

Removals

Documentation

Dependencies

Testing

Type hints

Other changes

Choose a tag to compare

12.3.0

Security

2026-59200: Prevent decompression bomb when parsing PDF

2026-55798: WindowsViewer.get_command injection

2026-59203: EPS image infinite loop

2026-59204: JPEG2000 image memory usage

2026-54058: McIdas out-of-bounds (OOB) read

2026-59198: Out-of-bounds (OOB) read when saving 1 mode TGA images

2026-59197: Out-of-bounds (OOB) write from large RankFilter sizes

2026-59199: Out-of-bounds (OOB) write from Image.paste()

2026-59205: Out-of-bounds (OOB) write in ImageCmsTransform

2026-54059, 2026-54060, 2026-55379: Prevent FontFile decompression bomb

2026-55380: Prevent GD decompression bomb

API additions

Added scale_down argument to ImageGrab.grab()

Added max_length argument to PdfStream.decode()

Other changes

Python 3.15 beta

SBOM in wheels

Removed Python 3.13 free-threaded wheels

Performance improvements

Documentation

Dependencies

Testing

Other changes

Choose a tag to compare

12.2.0

Security

2026-40192: Prevent FITS decompression bomb

2026-42311: Fix OOB write with invalid tile extents

2026-42310: Prevent PDF parsing trailer infinite loop

2026-42308: Integer overflow when processing fonts

2026-42309: Heap buffer overflow with nested list coordinates

API changes

Error when encoding an empty image

API additions

FontFile.to_imagefont()

ImageText.Text.wrap

EXIF tag FrameRate

Other changes

Support reading JPEG2000 images with CMYK palettes

Lazy plugin loading

Thread safety for free-threaded Python

Dependencies

Other changes

Choose a tag to compare

12.1.1

Security

2026-25990: Fix OOB write with invalid tile extents

Other changes

Patch libavif for svt-av1 4.0 compatibility

Deprecations

Documentation

Dependencies

Testing

Type hints

Other changes

Choose a tag to compare

12.1.0

Deprecations

Image getdata()

API changes

ImageMorph build_default_lut()

API additions

Image get_flattened_data()

Specify window in ImageGrab on macOS

Other changes

Added MorphOp support for 1 mode images

Removals

Deprecations