From c6f911a0a41069e3d79acf6e18e47c520c306d05 Mon Sep 17 00:00:00 2001 From: Ivan Valdes Date: Tue, 28 Jan 2025 11:11:37 -0800 Subject: [PATCH] changelog: add entries regarding 3.5.18 dependency updates Signed-off-by: Ivan Valdes --- CHANGELOG/CHANGELOG-3.5.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/CHANGELOG/CHANGELOG-3.5.md b/CHANGELOG/CHANGELOG-3.5.md index 1d32b1c6a96..64dd60f2424 100644 --- a/CHANGELOG/CHANGELOG-3.5.md +++ b/CHANGELOG/CHANGELOG-3.5.md @@ -26,6 +26,8 @@ Previous change logs can be found at [CHANGELOG-3.4](https://github.com/etcd-io/ ### Dependencies - Bump [golang-jwt/jwt to 4.5.1 to address GO-2024-3250](https://github.com/etcd-io/etcd/pull/18899). - Compile binaries using [go 1.22.11](https://github.com/etcd-io/etcd/pull/19211). +- Bump [golang.org/x/crypto to 0.32.0 to address CVE-2024-45337](https://github.com/etcd-io/etcd/pull/19154). +- Bump [golang.org/x/net to 0.34.0 to address CVE-2024-45338](https://github.com/etcd-io/etcd/pull/19158).