From 64c32a4ada4851db861df23b88541da3716ff637 Mon Sep 17 00:00:00 2001 From: Andrew Hsu Date: Wed, 17 Jul 2019 15:12:22 +0000 Subject: [PATCH] added entry to changelog Signed-off-by: Andrew Hsu --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index ef71444c423..7e59457f0b9 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -102,6 +102,7 @@ For official release notes for Docker Engine CE and Docker Engine EE, visit the - Fix: fetch the right device number when greater than 255 and using `--device-read-bps` option. [moby/moby#39212](https://github.com/moby/moby/pull/39212) - Fix: "Path does not exist" error when path definitely exists. [moby/moby#39251](https://github.com/moby/moby/pull/39251) - Fix: [CVE-2018-15664](https://nvd.nist.gov/vuln/detail/CVE-2018-15664) symlink-exchange attack with directory traversal. [moby/moby#39357](https://github.com/moby/moby/pull/39357) +- Fix [CVE-2019-13509](https://nvd.nist.gov/vuln/detail/CVE-2019-13509) in DebugRequestMiddleware: unconditionally scrub data field. ### Networking