Update CHANGES.rst

python-pillow · Sep 2, 2021 · 23c7ca8 · 23c7ca8
1 parent 8450366
commit 23c7ca8
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/CHANGES.rst b/CHANGES.rst
@@ -5,6 +5,12 @@ Changelog (Pillow)
 8.3.2 (2021-09-02)
 ------------------
 
+- CVE-2021-23437 Raise ValueError if color specifier is too long
+  [hugovk, radarhere]
+
+- Fix 6-byte OOB read in FliDecode
+  [wiredfool]
+
 - Add support for Python 3.10 #5569, #5570
   [hugovk, radarhere]