Update CHANGES.rst [ci skip]

python-pillow · Apr 1, 2024 · 63cbfcf · 63cbfcf
1 parent 2776126
commit 63cbfcf
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/CHANGES.rst b/CHANGES.rst
@@ -5,6 +5,9 @@ Changelog (Pillow)
 10.3.0 (unreleased)
 -------------------
 
+- CVE-2024-28219: Use strncpy to avoid buffer overflow #7928
+  [radarhere, hugovk]
+
 - Deprecate eval(), replacing it with lambda_eval() and unsafe_eval() #7927
   [radarhere, hugovk]