summaryrefslogtreecommitdiff
path: root/CHANGELOG.md
diff options
context:
space:
mode:
authorRobert Speicher <rspeicher@gmail.com>2017-02-14 15:44:39 -0500
committerRobert Speicher <rspeicher@gmail.com>2017-02-14 15:44:39 -0500
commit35216e3e88ad0ef413926844dede4a57edfc9d01 (patch)
treedc9cfe475e870a69d287d25f8eb683dd0f978004 /CHANGELOG.md
parent79e8e6134f89c4a09a422ca128a7579d844f040c (diff)
downloadgitlab-ce-35216e3e88ad0ef413926844dede4a57edfc9d01.tar.gz
Update CHANGELOG.md for 8.16.5
[ci skip]
Diffstat (limited to 'CHANGELOG.md')
-rw-r--r--CHANGELOG.md7
1 files changed, 7 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 71d38e5453d..1a2b2d3d4c6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,13 @@
documentation](doc/development/changelog.md) for instructions on adding your own
entry.
+## 8.16.5 (2017-02-14)
+
+- Patch Asciidocs rendering to block XSS.
+- Fix XSS vulnerability in SVG attachments.
+- Prevent the GitHub importer from assigning labels and comments to merge requests or issues belonging to other projects.
+- Patch XSS vulnerability in RDOC support.
+
## 8.16.4 (2017-02-02)
- Support non-ASCII characters in GFM autocomplete. !8729