Add changelog

hashicorp · Apr 10, 2024 · 51ff6a1 · 51ff6a1
1 parent fa7b417
commit 51ff6a1
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/.changelog/474.txt b/.changelog/474.txt
@@ -0,0 +1,14 @@
+```release-note:security
+Upgrade to use Go `1.21.9`. This resolves CVE
+[CVE-2023-45288](https://nvd.nist.gov/vuln/detail/CVE-2023-45288) (`http2`).
+```
+
+```release-note:security
+Upgrade to support Envoy `1.28.2`. This resolves CVE
+[CVE-2024-27919](https://nvd.nist.gov/vuln/detail/CVE-2024-27919) (`http2`).
+```
+
+```release-note:security
+Upgrade to use golang.org/x/net `v0.24.0`. This resolves CVE
+[CVE-2023-45288](https://nvd.nist.gov/vuln/detail/CVE-2023-45288) (`x/net`).
+```