diff options
| author | Rémy Coutable <remy@rymai.me> | 2016-11-28 16:32:01 +0100 |
|---|---|---|
| committer | Rémy Coutable <remy@rymai.me> | 2016-11-28 16:32:01 +0100 |
| commit | d5b662c2a7512f6c419cb22faab1e08009b7c050 (patch) | |
| tree | b037ca54463d384ed8abd74c23e88c1827f53b73 /CHANGELOG.md | |
| parent | 61abf53a622ad31f266f0eec1695fcb2e2bd27e1 (diff) | |
| download | gitlab-ce-d5b662c2a7512f6c419cb22faab1e08009b7c050.tar.gz | |
Update CHANGELOG.md for 8.13.7
[ci skip]
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 18b3755d365..12a3e63ed2e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -222,6 +222,15 @@ entry. - Fix "Without projects" filter. !6611 (Ben Bodenmiller) - Fix 404 when visit /projects page +## 8.13.7 (2016-11-28) + +- fixes 500 error on project show when user is not logged in and project is still empty. !7376 +- Update grape entity to 0.6.0. !7491 +- Fix information disclosure in `Projects::BlobController#update`. +- Fix missing access checks on issue lookup using IssuableFinder. +- Replace issue access checks with use of IssuableFinder. +- Non members cannot create labels through the API. + ## 8.13.6 (2016-11-17) - Omniauth auto link LDAP user falls back to find by DN when user cannot be found by UID. !7002 |