Update CHANGES.rst

hugovk · hugovk · commit 23c7ca82f09d · 2021-09-02T15:08:30.000+03:00
diff --git a/CHANGES.rst b/CHANGES.rst
@@ -5,6 +5,12 @@ Changelog (Pillow)
 8.3.2 (2021-09-02)
 ------------------
 
+- CVE-2021-23437 Raise ValueError if color specifier is too long
+  [hugovk, radarhere]
+
+- Fix 6-byte OOB read in FliDecode
+  [wiredfool]
+
 - Add support for Python 3.10 #5569, #5570
   [hugovk, radarhere]
 
