From 98319efcc5460e4d9a2c14e83f8fcdf082754918 Mon Sep 17 00:00:00 2001
From: Hugo van Kemenade <hugovk@users.noreply.github.com>
Date: Thu, 2 Sep 2021 15:07:13 +0300
Subject: [PATCH] Update CHANGES.rst

---
 CHANGES.rst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/CHANGES.rst b/CHANGES.rst
index ca4145e90..8d3b9e0d8 100644
--- a/CHANGES.rst
+++ b/CHANGES.rst
@@ -71,6 +71,12 @@ Changelog (Pillow)
 8.3.2 (2021-09-02)
 ------------------
 
+- CVE-2021-23437 Raise ValueError if color specifier is too long
+  [hugovk, radarhere]
+
+- Fix 6-byte OOB read in FliDecode
+  [wiredfool]
+
 - Add support for Python 3.10 #5569, #5570
   [hugovk, radarhere]