From 2b3e9e963ccd3df59012acb46f3bbc1d93222d06 Mon Sep 17 00:00:00 2001
From: Zach Wasserman <zach@fleetdm.com>
Date: Fri, 16 Sep 2022 10:48:55 -0700
Subject: [PATCH] Add go1.19.1 update to 4.20.1 changelog (#7799)

---
 CHANGELOG.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2af326c220..f54b235989 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 ## Fleet 4.20.1 (Sep 15, 2022)
 
+**This is a security release.**
+
+* **Security**: Upgrade Go to 1.19.1 to resolve a possible HTTP denial of service vulnerability ([CVE-2022-27664](https://nvd.nist.gov/vuln/detail/CVE-2022-27664)).
+
 * Fixed a bug in which [vulnerability automations](https://fleetdm.com/docs/using-fleet/automations#vulnerability-automations) sent duplicate webhooks.
 
 * Fixed a bug in which logging in with single sign-on (SSO) did not work after a failed authorization attempt.