v1.140.0
nautechsystems/nautilus_traderv1.140.0Mar 14, 2022by github-actions[bot]
AI Summary
Patch release upgrading Pillow to fix a security vulnerability related to temporary directory handling on Linux/macOS.
Key Highlights
- Fixed moderate severity security vulnerability in Pillow
- Upgraded to Pillow 9.0.1
New Features
- Upgraded Pillow to version 9.0.1
Full Release Notes
# NautilusTrader 1.140.0 Beta
## Release Notes
Released on 13th March 2022 (UTC).
This is a patch release which fixes a moderate severity security vulnerability in
pillow < 9.0.1:
If the path to the temporary directory on Linux or macOS contained a space,
this would break removal of the temporary image file after im.show() (and related actions),
and potentially remove an unrelated file. This been present since PIL.
This release upgrades to pillow 9.0.1.
Note the minor version was incremented in error.