diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-03-27 19:08:57 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-03-27 19:08:57 +0300 |
| commit | 894d90c7a22d295105a45c0450806c9b0a0701a4 (patch) | |
| tree | 48b9de819c97b74e277f5362c19f284ca7317bfa /CHANGELOG.md | |
| parent | dd5ae73e0214e8e977dc552772c4e5410e849040 (diff) | |
Update CHANGELOG.md for 11.9.3
[ci skip]
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index af0b81ccfc2..cd44cd80ba7 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,20 @@ documentation](doc/development/changelog.md) for instructions on adding your own entry. +## 11.9.3 (2019-03-27) + +### Security (8 changes) + +- Disallow guest users from accessing Releases. +- Fix PDF.js vulnerability. +- Hide "related branches" when user does not have permission. +- Fix XSS in resolve conflicts form. +- Added rake task for removing EXIF data from existing uploads. +- Return cached languages if they've been detected before. +- Disallow updating namespace when updating a project. +- Use UntrustedRegexp for matching refs policy. + + ## 11.9.2 (2019-03-26) - Unreleased due to QA failure. |