J2k DOS fix --  CVE-2014-3598

Found and reported by Andrew Drake of dropbox.com
Bump Version/Changelog

Conflicts:

	CHANGES.rst
	PIL/__init__.py
	_imaging.c
	setup.py