Update CHANGELOG

Signed-off-by: Julien Pivotto <roidelapluie@inuits.eu>
prometheus · Jan 18, 2021 · d93a35d · d93a35d
1 parent 9f088cd
commit d93a35d
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,7 +1,11 @@
 ## 0.5.1 / 2021-01-15
 
+This release includes a side-channel timing security issue that would allow an
+attacker to verify if a username is defined in the configuration. #39
+
 * [ENHANCEMENT] Cache basic authentication results to significantly improve
   performance. #32
+* [BUGFIX] Prevent user enumeration by timing requests. #39
 
 ## 0.5.0 / 2021-01-13