Security fixes for 8.2.0#5377

Merged

hugovk merged 10 commits intopython-pillow:masterfrom

hugovk:security-and-release-notes

Apr 1, 2021

Commits on Apr 1, 2021

Add security release notes
hugovk
committed
Fix OOB Read in Jpeg2KDecode CVE-2021-25287,CVE-2021-25288

wiredfool
authored and
hugovk
committed
Fix EPS DOS on _open -- CVE-2021-28677

wiredfool
authored and
hugovk
committed
Fix FLI DOS -- CVE-2021-28676

wiredfool
authored and
hugovk
committed
Fix Memory DOS in ImageFont

wiredfool
authored and
hugovk
committed
Fix DOS in PSDImagePlugin -- CVE-2021-28675

wiredfool
authored and
hugovk
committed
Fix BLP DOS -- CVE-2021-28678

wiredfool
authored and
hugovk
committed
Reorder, roughly alphabetic
hugovk
committed
Review, typos and lint
hugovk
committed
Fix typo [ci skip]

hugovk
and
radarhere
authored