diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-03-19 18:55:23 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-03-19 18:55:23 +0300 |
| commit | 772c302cee7c86e7ac251a8e7108e9d61f6637aa (patch) | |
| tree | 3dc891553812f85cd3a1694f7f2dd0b09693e024 | |
| parent | 794e4471f3c64894e5489ffafb4e22b45be880ad (diff) | |
Update CHANGELOG.md for 11.7.7
[ci skip]
| -rw-r--r-- | CHANGELOG.md | 8 | ||||
| -rw-r--r-- | changelogs/unreleased/security-2826-fix-project-serialization-in-quick-actions.yml | 5 | ||||
| -rw-r--r-- | changelogs/unreleased/security-shared-project-private-group.yml | 5 |
3 files changed, 8 insertions, 10 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 72534f659bb..f1ac01fe7c8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,14 @@ documentation](doc/development/changelog.md) for instructions on adding your own entry. +## 11.7.7 (2019-03-19) + +### Security (2 changes) + +- Remove project serialization in quick actions response. +- Fixed ability to see private groups by users not belonging to given group. + + ## 11.7.6 (2019-02-28) ### Security (22 changes) diff --git a/changelogs/unreleased/security-2826-fix-project-serialization-in-quick-actions.yml b/changelogs/unreleased/security-2826-fix-project-serialization-in-quick-actions.yml deleted file mode 100644 index 272f8a95957..00000000000 --- a/changelogs/unreleased/security-2826-fix-project-serialization-in-quick-actions.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Remove project serialization in quick actions response -merge_request: -author: -type: security diff --git a/changelogs/unreleased/security-shared-project-private-group.yml b/changelogs/unreleased/security-shared-project-private-group.yml deleted file mode 100644 index 3b21daa5491..00000000000 --- a/changelogs/unreleased/security-shared-project-private-group.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Fixed ability to see private groups by users not belonging to given group -merge_request: -author: -type: security |