[6.0] 162dee04a changes.rst: 6.0.13 edits

Simon Stridsberg simon.stridsberg at varnish-software.com
Mon Mar 18 18:20:06 UTC 2024


commit 162dee04ac06d9f65672264af35cf00ed6a34ac8
Author: Simon Stridsberg <simon.stridsberg at varnish-software.com>
Date:   Mon Mar 18 11:30:01 2024 +0100

    changes.rst: 6.0.13 edits

diff --git a/doc/changes.rst b/doc/changes.rst
index 6c747fade..fd7818264 100644
--- a/doc/changes.rst
+++ b/doc/changes.rst
@@ -27,13 +27,17 @@ individual releases. These documents are updated as part of the
 release process.
 
 =================================
-Varnish Cache 6.0.13 (unreleased)
+Varnish Cache 6.0.13 (2024-03-18)
 =================================
 
+* Add ``h2_window_timeout`` paramater to mitigate CVE-2023-43622 (VSV00014_).
+
 * The ``Process`` timestamp for ``vcl_synth {}`` was wrongly issued
   before the VCL callback, now it gets emitted after VCL returns for
   consistency with ``vcl_deliver {}``
 
+.. _VSV00014: https://varnish-cache.org/security/VSV00014.html
+
 =================================
 Varnish Cache 6.0.12 (2023-11-13)
 =================================


More information about the varnish-commit mailing list