add CVE IDs to changelog

hashicorp · Oct 16, 2024 · b62f0fa · b62f0fa
1 parent 947d789
commit b62f0fa
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/.changelog/21816.txt b/.changelog/21816.txt
@@ -1,9 +1,9 @@
 ```release-note:security
-mesh: Add `http.incoming.requestNormalization` to Mesh configuration entry to support inbound service traffic request normalization.
+mesh: Add `http.incoming.requestNormalization` to Mesh configuration entry to support inbound service traffic request normalization. This resolves [CVE-2024-10005](https://nvd.nist.gov/vuln/detail/CVE-2024-10005) and [CVE-2024-10006](https://nvd.nist.gov/vuln/detail/CVE-2024-10006).
 ```
 ```release-note:security
-mesh: Add `contains` and `ignoreCase` to L7 Intentions HTTP header matching criteria to support configuration resilient to variable casing and multiple values.
+mesh: Add `contains` and `ignoreCase` to L7 Intentions HTTP header matching criteria to support configuration resilient to variable casing and multiple values. This resolves [CVE-2024-10006](https://nvd.nist.gov/vuln/detail/CVE-2024-10006).
 ```
 ```release-note:breaking-change
-mesh: Enable Envoy `HttpConnectionManager.normalize_path` by default on inbound traffic to mesh proxies.
+mesh: Enable Envoy `HttpConnectionManager.normalize_path` by default on inbound traffic to mesh proxies. This resolves [CVE-2024-10005](https://nvd.nist.gov/vuln/detail/CVE-2024-10005).
 ```