Retro-add release notes for 2.3.1 for #7864

python-pillow · Mar 13, 2024 · c451df3 · c451df3
1 parent ba9aa0e
commit c451df3
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/docs/releasenotes/2.3.1.rst b/docs/releasenotes/2.3.1.rst
@@ -0,0 +1,12 @@
+2.3.1
+-----
+
+Security
+========
+
+Fix CVE-2014-1932, CVE-2014-1933
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+.. note:: More information about these vulnerabilities included in database records :cve:`CVE-2014-1932`, :cve:`CVE-2014-1933`
+
+Fix insecure use of tempfile.mktemp as reported in `Debian bug #737059 <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737059>`_.