Added release notes for #8837

This commit is contained in:
Andrew Murray 2025-03-29 22:47:06 +11:00
parent fcf5670797
commit 564cd284b0

View File

@ -4,15 +4,12 @@
Security
========
TODO
^^^^
Undefined shift when loading compressed DDS images
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
TODO
:cve:`YYYY-XXXXX`: TODO
^^^^^^^^^^^^^^^^^^^^^^^
TODO
When loading some compressed DDS formats, an integer was bitshifted by 24 places to
generate the 32 bits of the lookup table. This was undefined behaviour, and has been
present since Pillow 3.4.0.
Deprecations
============