diff options
| author | GitLab Bot <gitlab-bot@gitlab.com> | 2021-04-27 17:04:46 +0300 |
|---|---|---|
| committer | GitLab Bot <gitlab-bot@gitlab.com> | 2021-04-27 17:04:46 +0300 |
| commit | d8d57a90208c62b29e5218f97525404859232a55 (patch) | |
| tree | b9a1c84456ffdd0a9671d5eba849866b2f5ca09a /CHANGELOG.md | |
| parent | 7965eb0409d69d96af080e5e4b91119a668c68a6 (diff) | |
Add latest changes from gitlab-org/security/gitlab@13-11-stable-eev13.11.2
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 096a598100e..a48f0afd15b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,17 @@ documentation](doc/development/changelog.md) for instructions on adding your own entry. +## 13.11.2 (2021-04-27) + +### Security (5 changes) + +- Prevent tokens with only read_api scope from executing mutations. +- Do not allow deploy tokens in the dependency proxy authentication service. +- Disable keyset pagination for branches by default. +- Bump Carrierwave gem to v1.3.2. +- Restrict setting system_note_timestamp to owners. + + ## 13.11.1 (2021-04-22) ### Changed (1 change) |