From ee1afd263a656d1e8818a4f5eb50fd16cce339b2 Mon Sep 17 00:00:00 2001 From: Mark Fletcher Date: Fri, 16 Mar 2018 19:06:18 +0000 Subject: Update CHANGELOG.md for 10.3.9 [ci skip] --- CHANGELOG.md | 9 +++++++++ changelogs/unreleased/42591-update-nokogiri.yml | 5 ----- changelogs/unreleased/fix-auth0-unsafe-login.yml | 5 ----- changelogs/unreleased/fj-15329-services-callbacks-ssrf.yml | 5 ----- 4 files changed, 9 insertions(+), 15 deletions(-) delete mode 100644 changelogs/unreleased/42591-update-nokogiri.yml delete mode 100644 changelogs/unreleased/fix-auth0-unsafe-login.yml delete mode 100644 changelogs/unreleased/fj-15329-services-callbacks-ssrf.yml diff --git a/CHANGELOG.md b/CHANGELOG.md index 957983193d7..b1a11f009ca 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,15 @@ documentation](doc/development/changelog.md) for instructions on adding your own entry. +## 10.3.9 (2018-03-16) + +### Security (3 changes) + +- Fixed some SSRF vulnerabilities in services, hooks and integrations. !2337 +- Update nokogiri to 1.8.2. !16807 +- Fix GitLab Auth0 integration signing in the wrong user. + + ## 10.3.8 (2018-03-01) ### Security (1 change) diff --git a/changelogs/unreleased/42591-update-nokogiri.yml b/changelogs/unreleased/42591-update-nokogiri.yml deleted file mode 100644 index 5f9587d2d92..00000000000 --- a/changelogs/unreleased/42591-update-nokogiri.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Update nokogiri to 1.8.2 -merge_request: 16807 -author: -type: security diff --git a/changelogs/unreleased/fix-auth0-unsafe-login.yml b/changelogs/unreleased/fix-auth0-unsafe-login.yml deleted file mode 100644 index 01c6ea69dcc..00000000000 --- a/changelogs/unreleased/fix-auth0-unsafe-login.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Fix GitLab Auth0 integration signing in the wrong user -merge_request: -author: -type: security diff --git a/changelogs/unreleased/fj-15329-services-callbacks-ssrf.yml b/changelogs/unreleased/fj-15329-services-callbacks-ssrf.yml deleted file mode 100644 index 7fa6f6a5874..00000000000 --- a/changelogs/unreleased/fj-15329-services-callbacks-ssrf.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Fixed some SSRF vulnerabilities in services, hooks and integrations -merge_request: 2337 -author: -type: security -- cgit v1.2.3