[release-2.11] Update 2.9 changelog and release notes (#6902)

Signed-off-by: Dimitar Dimitrov <[email protected]> (cherry picked from commit a5badbb) Co-authored-by: Dimitar Dimitrov <[email protected]>
grafana · Dec 12, 2023 · ca69b87 · ca69b87
1 parent 7202fe4
commit ca69b87
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -438,17 +438,28 @@
 * [BUGFIX] Stop tools from panicking when `-help` flag is passed. #5412
 * [BUGFIX] Remove github.com/golang/glog command line flags from tools. #5413
 
+## 2.9.4
+
+### Grafana Mimir
+
+* [ENHANCEMENT] Update Docker base images from `alpine:3.18.3` to `alpine:3.18.5`. #6895
+
 ## 2.9.3
 
+### Grafana Mimir
+
 * [BUGFIX] Update `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` to `0.44` which includes a fix for CVE-2023-45142. #6637
 
 ## 2.9.2
 
+### Grafana Mimir
+
 * [BUGFIX] Update grpc-go library to 1.56.3 and `golang.org/x/net` to `0.17`, which include fix for CVE-2023-44487. #6353 #6364
 
 ## 2.9.1
 
 ### Grafana Mimir
+
 * [ENHANCEMENT] Update alpine base image to 3.18.3. #6021
 
 ## 2.9.0

diff --git a/docs/sources/mimir/release-notes/v2.9.md b/docs/sources/mimir/release-notes/v2.9.md
@@ -64,3 +64,7 @@ The following configuration option defaults were changed:
 
 - Store-gateway: Detect collisions in the postings cache. [PR 4770](https://github.com/grafana/mimir/pull/4770)
 - Store-gateway: Fix panic caused by cached LabelValues responses with more than 655360 values. [PR 5021](https://github.com/grafana/mimir/pull/5021)
+
+### 2.9.4
+
+- Security: updated the Alpine base image version to 3.18.5 to address [CVE-2023-5363](https://nvd.nist.gov/vuln/detail/CVE-2023-5363). [PR 6895](https://github.com/grafana/mimir/pull/6895)