diff options
| author | GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com> | 2019-09-26 22:36:05 +0000 |
|---|---|---|
| committer | GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com> | 2019-09-26 22:36:05 +0000 |
| commit | dded7f0f4079ee3574a172ad7773e0e453c9ef46 (patch) | |
| tree | a15b85c3796c119cdf21879a880e2d775b5c0d90 /CHANGELOG.md | |
| parent | da27da93b4ece9a44a04fdfb9cc2e3c3443b9576 (diff) | |
| download | gitlab-ce-dded7f0f4079ee3574a172ad7773e0e453c9ef46.tar.gz | |
Update CHANGELOG.md for 12.2.6
[ci skip]
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index b71039316ba..a6d0da2b67f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -297,6 +297,22 @@ entry. - Updates tooltip of 'detached' label/state. +## 12.2.6 + +### Security (10 changes) + +- Add a policy check for system notes that may not be visible due to cross references to private items. +- Display only participants that user has permission to see on milestone page. +- Do not disclose project milestones on group milestones page when project milestones access is disabled in project settings. +- Fix new project path being disclosed through unsubscribe link of issue/merge requests. +- Prevent bypassing email verification using Salesforce. +- Do not show resource label events referencing not accessible labels. +- Cancel all running CI jobs triggered by the user who is just blocked. +- Fix Gitaly SearchBlobs flag RPC injection [Gitaly v1.59.3]. +- Only render fixed number of mermaid blocks. +- Prevent GitLab accounts takeover if SAML is configured. + + ## 12.2.5 ### Security (1 change) |