diff options
| author | Robert Speicher <rspeicher@gmail.com> | 2017-02-14 15:44:39 -0500 |
|---|---|---|
| committer | Robert Speicher <rspeicher@gmail.com> | 2017-02-14 15:44:39 -0500 |
| commit | 35216e3e88ad0ef413926844dede4a57edfc9d01 (patch) | |
| tree | dc9cfe475e870a69d287d25f8eb683dd0f978004 | |
| parent | 79e8e6134f89c4a09a422ca128a7579d844f040c (diff) | |
| download | gitlab-ce-35216e3e88ad0ef413926844dede4a57edfc9d01.tar.gz | |
Update CHANGELOG.md for 8.16.5
[ci skip]
| -rw-r--r-- | CHANGELOG.md | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 71d38e5453d..1a2b2d3d4c6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,13 @@ documentation](doc/development/changelog.md) for instructions on adding your own entry. +## 8.16.5 (2017-02-14) + +- Patch Asciidocs rendering to block XSS. +- Fix XSS vulnerability in SVG attachments. +- Prevent the GitHub importer from assigning labels and comments to merge requests or issues belonging to other projects. +- Patch XSS vulnerability in RDOC support. + ## 8.16.4 (2017-02-02) - Support non-ASCII characters in GFM autocomplete. !8729 |