setup.py | 79 57 + 22 - 0 !
1 file changed, 57 insertions(+), 22 deletions(-)

---

Tests/test_file_webp.py | 8 7 + 1 - 0 !
1 file changed, 7 insertions(+), 1 deletion(-)

---

docs/_static/js/script.js | 60 60 + 0 - 0 !
1 file changed, 60 insertions(+)

---

docs/conf.py | 1 0 + 1 - 0 !
1 file changed, 1 deletion(-)

---

docs/conf.py | 1 0 + 1 - 0 !
1 file changed, 1 deletion(-)

---

docs/Makefile | 2 1 + 1 - 0 !
docs/conf.py | 2 1 + 1 - 0 !
2 files changed, 2 insertions(+), 2 deletions(-)

---

setup.py | 24 15 + 9 - 0 !
1 file changed, 15 insertions(+), 9 deletions(-)

 handle more than one directory returned by pkg-config.

tiff (4.5.0-1) in Debian results in two include directories being returned:
```
-I/usr/include/x86_64-linux-gnu -I/usr/include
```

src/PIL/ImageMath.py | 4 4 + 0 - 0 !
1 file changed, 4 insertions(+)

 don't allow __ or builtins in env dictionarys for imagemath.eval

(cherry picked from commit 45c726fd4daa63236a8f3653530f297dc87b160a)

Tests/test_imagemath.py | 5 5 + 0 - 0 !
src/PIL/ImageMath.py | 9 5 + 4 - 0 !
2 files changed, 10 insertions(+), 4 deletions(-)

 allow ops

(cherry picked from commit 0ca3c33c59927e1c7e0c14dbc1eea1dfb2431a80)

Tests/test_imagemath.py | 5 5 + 0 - 0 !
src/PIL/ImageMath.py | 2 1 + 1 - 0 !
2 files changed, 6 insertions(+), 1 deletion(-)

 include further builtins

(cherry picked from commit 557ba59d13de919d04b3fd4cdef8634f7d4b3348)

src/_imagingcms.c | 9 4 + 5 - 0 !
1 file changed, 4 insertions(+), 5 deletions(-)

 use strncpy to avoid buffer overflow

(cherry picked from commit 2a93aba5cfcf6e241ab4f9392c13e3b74032c061)

Tests/test_imagefont.py | 19 19 + 0 - 0 !
docs/reference/ImageFont.rst | 18 18 + 0 - 0 !
src/PIL/ImageFont.py | 15 15 + 0 - 0 !
3 files changed, 52 insertions(+)

 added imagefont.max_string_length

(cherry picked from commit 1fe1bb49c452b0318cad12ea9d97c3bef188e9a7)