Pillow/docs/releasenotes/10.0.1.rst
2024-03-15 10:01:42 -04:00

19 lines
493 B
ReStructuredText

10.0.1
------
Security
========
Fix CVE-2023-4863
^^^^^^^^^^^^^^^^^
.. note:: More information about this vulnerability included in database record :cve:`2023-4863`
This release provides an updated install script and updated wheels to
include libwebp 1.3.2, preventing a potential heap buffer overflow in WebP.
Updated tests to pass with latest zlib version
==============================================
The release of zlib 1.3 caused one of the tests in the Pillow test suite to fail.