Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat (limited to 'changelogs')
-rw-r--r--changelogs/unreleased/security-kroki-arbitraryfile-read-write.yml5
-rw-r--r--changelogs/unreleased/security-projects-branch-collaboration-loop.yml5
2 files changed, 10 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-kroki-arbitraryfile-read-write.yml b/changelogs/unreleased/security-kroki-arbitraryfile-read-write.yml
new file mode 100644
index 00000000000..acefc5e6fac
--- /dev/null
+++ b/changelogs/unreleased/security-kroki-arbitraryfile-read-write.yml
@@ -0,0 +1,5 @@
+---
+title: Fix arbitrary read/write in AsciiDoctor and Kroki gems
+merge_request:
+author:
+type: security
diff --git a/changelogs/unreleased/security-projects-branch-collaboration-loop.yml b/changelogs/unreleased/security-projects-branch-collaboration-loop.yml
new file mode 100644
index 00000000000..607bd37d2f6
--- /dev/null
+++ b/changelogs/unreleased/security-projects-branch-collaboration-loop.yml
@@ -0,0 +1,5 @@
+---
+title: Prevent infinite loop when checking if collaboration is allowed
+merge_request:
+author:
+type: security