diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-03-28 18:18:32 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-03-28 18:18:32 +0300 |
| commit | 52eda8925d53044f20b4c17fa8f6703152b1990b (patch) | |
| tree | 6ae66cbeea5af2e55d0176d7cea2d8f55fffd487 /CHANGELOG.md | |
| parent | c29a92fc31acaefcc60abf1c9354d148ffc6985c (diff) | |
Update CHANGELOG.md for 11.7.10
[ci skip]
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index a8e48dee42e..dc8123a5888 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -576,6 +576,19 @@ entry. - Creates mixin to reduce code duplication between CE and EE in graph component. +## 11.7.10 (2019-03-28) + +### Security (7 changes) + +- Disallow guest users from accessing Releases. +- Fix PDF.js vulnerability. +- Hide "related branches" when user does not have permission. +- Fix XSS in resolve conflicts form. +- Added rake task for removing EXIF data from existing uploads. +- Disallow updating namespace when updating a project. +- Use UntrustedRegexp for matching refs policy. + + ## 11.7.8 (2019-03-26) ### Security (7 changes) |