Update CHANGES.rst [ci skip]

python-pillow · Feb 2, 2022 · c04d812 · c04d812
1 parent 4fabec3
commit c04d812
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/CHANGES.rst b/CHANGES.rst
@@ -2,6 +2,15 @@
 Changelog (Pillow)
 ==================
 
+9.0.1 (2022-02-03)
+------------------
+
+- In show_file, use os.remove to remove temporary images. CVE-2022-24303 #6010
+  [radarhere, hugovk]
+
+- Restrict builtins within lambdas for ImageMath.eval. CVE-2022-22817 #6009
+  [radarhere]
+
 9.0.0 (2022-01-02)
 ------------------