From 29b79d652a039e816533bcca577524cd5dd3b574 Mon Sep 17 00:00:00 2001
From: Hans Hasselberg <hans@hashicorp.com>
Date: Wed, 20 Mar 2019 10:53:32 +0000
Subject: [PATCH] Update CHANGELOG.md

---
 CHANGELOG.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4ac998695a..4ef77605cd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 ## UNRELEASED
 
+SECURITY:
+
+* Fixed a problem where `verify_server_hostname` was not being respected and the default `false` was being used. This problem exists only in Consul 1.4.3. (CVE-2019-9764) [[GH-5519](https://github.com/hashicorp/consul/issues/5519)]
+
 FEATURES:
 * agent: (Consul Enterprise) Snapshot agent can now use Azure Blob Storage for automated backups.
 * agent: enable reloading of agent-to-agent TLS configuration (https://github.com/hashicorp/consul/pull/5419)]