diff options
| author | Michael Kozono <mkozono@gmail.com> | 2017-11-09 20:51:14 +0000 |
|---|---|---|
| committer | Michael Kozono <mkozono@gmail.com> | 2017-11-09 20:51:14 +0000 |
| commit | f97110692c24e4e722f3bf379e1108b1503cdeda (patch) | |
| tree | c48c26442b9fadd4faf58a5ca05e0cef24dea15d | |
| parent | b3344b7f17c335a817c5d7608c5e47fd7cabc023 (diff) | |
| download | gitlab-ce-mk-add-security-fixes-to-changelog-10-0-stable.tar.gz | |
Add 10.0.6 security fixes to CHANGELOG.mdmk-add-security-fixes-to-changelog-10-0-stable
| -rw-r--r-- | CHANGELOG.md | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index bb47479c5f9..c8a362631da 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,7 +4,8 @@ entry. ## 10.0.6 (2017-11-08) -- No changes. +- [SECURITY] Add X-Content-Type-Options header in API responses to make it more difficult to find other vulnerabilities. +- [SECURITY] Properly translate IP addresses written in decimal, octal, or other formats in SSRF protections in project imports. ## 10.0.5 (2017-11-03) |