diff options
| author | Oswaldo Ferreira <oswaldo@gitlab.com> | 2018-01-11 14:23:43 -0200 |
|---|---|---|
| committer | Oswaldo Ferreira <oswaldo@gitlab.com> | 2018-01-11 14:23:43 -0200 |
| commit | 47b04690289303b3209a3b72df08fd0a6bd3233f (patch) | |
| tree | 0387a7c048db078422607799c16195f52f30d2f1 /CHANGELOG.md | |
| parent | 16855c8b9fc07dfd6d0c1c3fbbeecee47cde25ff (diff) | |
| download | gitlab-ce-47b04690289303b3209a3b72df08fd0a6bd3233f.tar.gz | |
Update CHANGELOG.md for 10.1.6
[ci skip]
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index e88ab5b6565..c29c289310d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -474,6 +474,20 @@ entry. - Add Gitaly metrics to the performance bar. +## 10.1.6 (2018-01-11) + +### Security (8 changes, 1 of them is from the community) + +- Fix writable shared deploy keys. +- Filter out sensitive fields from the project services API. (Robert Schilling) +- Fix RCE via project import mechanism. +- Prevent OAuth login POST requests when a provider has been disabled. +- Prevent a SQL injection in the MilestonesFinder. +- Check user authorization for source and target projects when creating a merge request. +- Fix path traversal in gitlab-ci.yml cache:key. +- Fix XSS vulnerability in pipeline job trace. + + ## 10.1.5 (2017-12-07) ### Security (5 changes) |