backport of commit 760fbc2046

2 years ago · bf0d64beb2
parent 9003796051
commit bf0d64beb2
1 changed files with 4 additions and 0 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -7,6 +7,10 @@
     principle does not have permission to create the bucket Packer will fail
     the build.[GH-13059](https://github.com/hashicorp/packer/pull/13059)

+### SECURITY:
+* core: Bump github.com/hashicorp/go-retryablehttp to address
+     CVE-2024-6104.[GH-13081](https://github.com/hashicorp/packer/pull/13081)
+
 ### IMPROVEMENTS:
 * core/hcl2: The issue is that local variables in templates are evaluated in a
     non-deterministic order, leading to inconsistent behavior. To fix this,