diff options
| author | GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com> | 2019-10-28 15:00:07 +0000 |
|---|---|---|
| committer | GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com> | 2019-10-28 15:00:07 +0000 |
| commit | 1cffa1171494d4ca9f074900f8533e7ddf861ad4 (patch) | |
| tree | 6654ec49718a18f35a31b75fa92ec410c7ecc77b /CHANGELOG.md | |
| parent | c4edbefa458319a81e238f8f034d19f6ea6292ca (diff) | |
| download | gitlab-ce-1cffa1171494d4ca9f074900f8533e7ddf861ad4.tar.gz | |
Update CHANGELOG.md for 12.4.1
[ci skip]
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 9411180abff..16a36724b4f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,24 @@ documentation](doc/development/changelog.md) for instructions on adding your own entry. +## 12.4.1 + +### Security (12 changes) + +- Standardize error response when route is missing. +- Do not display project labels that are not visible for user accessing group labels. +- Show cross-referenced label and milestones in issues' activities only to authorized users. +- Analyze incoming GraphQL queries and check for recursion. +- Disallow unprivileged users from commenting on private repository commits. +- Don't allow maintainers of a target project to delete the source branch of a merge request from a fork. +- Require Maintainer permission on group where project is transferred to. +- Don't leak private members in project member autocomplete suggestions. +- Return 404 on LFS request if project doesn't exist. +- Mask sentry auth token in Error Tracking dashboard. +- Fixes a Open Redirect issue in `InternalRedirect`. +- Sanitize all wiki markup formats with GitLab sanitization pipelines. + + ## 12.4.0 ### Security (14 changes) |