diff options
| author | GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com> | 2019-11-26 20:12:51 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com> | 2019-11-26 20:12:51 +0300 |
| commit | 7278d3f14262a093ce700db2da5ded6a6ade17f7 (patch) | |
| tree | 233db22f51cb5cbb53a08279967b8c6ae0fee30e /CHANGELOG.md | |
| parent | dfac6800795f87717bf96adf9641e8cec0c241ad (diff) | |
Update CHANGELOG.md for 12.3.7
[ci skip]
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 5c51f879b4f..1c71567317b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -735,6 +735,21 @@ entry. - Remove Postgresql specific setup tasks and move to schema.rb. +## 12.3.7 + +### Security (9 changes) + +- Check permissions before showing a forked project's source. +- Encrypt application setting tokens. +- Update Workhorse and Gitaly to fix a security issue. +- Hide commit counts from guest users in Cycle Analytics. +- Limit potential for DNS rebind SSRF in chat notifications. +- Fix 500 error caused by invalid byte sequences in links. +- Ensure are cleaned by ImportExport::AttributeCleaner. +- Remove notes regarding Related Branches from Issue activity feeds for guest users. +- Escape namespace in label references to prevent XSS. + + ## 12.3.4 ### Fixed (2 changes) |