From 5791b69181f4f21bc22dc06863169e8ac3a89f8d Mon Sep 17 00:00:00 2001 From: Filipa Lacerda Date: Mon, 28 May 2018 12:07:32 +0100 Subject: Update CHANGELOG.md for 10.6.6 [ci skip] --- CHANGELOG.md | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'CHANGELOG.md') diff --git a/CHANGELOG.md b/CHANGELOG.md index 99cf96035d9..6da264c8709 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -457,6 +457,16 @@ entry. - Upgrade Gitaly to upgrade its charlock_holmes. +## 10.6.6 (2018-05-28) + +### Security (4 changes) + +- Do not allow non-members to create MRs via forked projects when MRs are private. +- Prevent user passwords from being changed without providing the previous password. +- Fix API to remove deploy key from project instead of deleting it entirely. +- Fixed bug that allowed importing arbitrary project attributes. + + ## 10.6.5 (2018-04-24) ### Security (1 change) -- cgit v1.2.3