diff options
| author | GitLab Bot <gitlab-bot@gitlab.com> | 2020-08-18 21:10:10 +0300 |
|---|---|---|
| committer | GitLab Bot <gitlab-bot@gitlab.com> | 2020-08-18 21:10:10 +0300 |
| commit | 85f7fa54f404f28b0f351c2be0f7a6e9d74fe65f (patch) | |
| tree | b0f4a7578f374185fb649be904641cd79baa2ca0 /CHANGELOG.md | |
| parent | a8a9c520128bffc1157db4dc1beaa215fc731c80 (diff) | |
Add latest changes from gitlab-org/gitlab@master
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 18 |
1 files changed, 15 insertions, 3 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index cf3ef0434ea..3ea88385f9b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,7 +8,11 @@ entry. ## 13.2.5 (2020-08-17) -- No changes. +### Security (2 changes) + +- Stop deploy token being mis-used as user in ProjectPolicy and GroupPolicy. +- Project access is checked during deploy token authentication. + ## 13.2.4 (2020-08-11) @@ -1072,7 +1076,11 @@ entry. ## 13.1.7 (2020-08-17) -- No changes. +### Security (2 changes) + +- Stop deploy token being mis-used as user in ProjectPolicy and GroupPolicy. +- Project access is checked during deploy token authentication. + ## 13.1.6 (2020-08-05) @@ -1631,7 +1639,11 @@ entry. ## 13.0.13 (2020-08-17) -- No changes. +### Security (2 changes) + +- Stop deploy token being mis-used as user in ProjectPolicy and GroupPolicy. +- Project access is checked during deploy token authentication. + ## 13.0.12 (2020-08-05) |