diff options
| author | Winnie Hellmann <winnie@gitlab.com> | 2017-12-07 15:11:06 +0300 |
|---|---|---|
| committer | Winnie Hellmann <winnie@gitlab.com> | 2017-12-07 15:11:06 +0300 |
| commit | 0af015399b680e9c379a5c99a6ede1ed2e92ab50 (patch) | |
| tree | c52e0527b54af6b1495d77b3ca90d3c32a1f8825 | |
| parent | 1366718ba69f17d04e5534a51eb008e25a36d4e3 (diff) | |
Update CHANGELOG.md for 10.0.7
[ci skip]
| -rw-r--r-- | CHANGELOG.md | 9 | ||||
| -rw-r--r-- | changelogs/unreleased/bvl-email-disclosure.yml | 5 | ||||
| -rw-r--r-- | changelogs/unreleased/issue_30663.yml | 5 | ||||
| -rw-r--r-- | changelogs/unreleased/rs-security-group-api.yml | 5 |
4 files changed, 9 insertions, 15 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index c8a362631da..e89debb4fa3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,15 @@ documentation](doc/development/changelog.md) for instructions on adding your own entry. +## 10.0.7 (2017-12-07) + +### Security (3 changes) + +- Don't match partial email adresses. !2227 +- Prevent creating issues through API when user does not have permissions. +- Prevent an information disclosure in the Groups API. + + ## 10.0.6 (2017-11-08) - [SECURITY] Add X-Content-Type-Options header in API responses to make it more difficult to find other vulnerabilities. diff --git a/changelogs/unreleased/bvl-email-disclosure.yml b/changelogs/unreleased/bvl-email-disclosure.yml deleted file mode 100644 index d6cd8709d9f..00000000000 --- a/changelogs/unreleased/bvl-email-disclosure.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Don't match partial email adresses -merge_request: 2227 -author: -type: security diff --git a/changelogs/unreleased/issue_30663.yml b/changelogs/unreleased/issue_30663.yml deleted file mode 100644 index b20ed6a82e7..00000000000 --- a/changelogs/unreleased/issue_30663.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Prevent creating issues through API when user does not have permissions -merge_request: -author: -type: security diff --git a/changelogs/unreleased/rs-security-group-api.yml b/changelogs/unreleased/rs-security-group-api.yml deleted file mode 100644 index 34a39ddd6dc..00000000000 --- a/changelogs/unreleased/rs-security-group-api.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Prevent an information disclosure in the Groups API -merge_request: -author: -type: security |