summaryrefslogtreecommitdiff
path: root/CHANGELOG.md
diff options
context:
space:
mode:
authorGitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>2019-11-26 22:07:49 +0000
committerGitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>2019-11-26 22:07:49 +0000
commitf220df53b6606e7e6699cc1073a6d2fa07ccdad1 (patch)
tree10de24fec10aa690c59b42516624f5356e5d55a0 /CHANGELOG.md
parent7278d3f14262a093ce700db2da5ded6a6ade17f7 (diff)
downloadgitlab-ce-f220df53b6606e7e6699cc1073a6d2fa07ccdad1.tar.gz
Update CHANGELOG.md for 12.4.4
[ci skip]
Diffstat (limited to 'CHANGELOG.md')
-rw-r--r--CHANGELOG.md15
1 files changed, 15 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1c71567317b..bea21092b43 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -367,6 +367,21 @@ entry.
- Change selects from default browser style to custom style.
+## 12.4.4
+
+### Security (9 changes)
+
+- Check permissions before showing a forked project's source.
+- Encrypt application setting tokens.
+- Update Workhorse and Gitaly to fix a security issue.
+- Hide commit counts from guest users in Cycle Analytics.
+- Limit potential for DNS rebind SSRF in chat notifications.
+- Fix 500 error caused by invalid byte sequences in links.
+- Ensure are cleaned by ImportExport::AttributeCleaner.
+- Remove notes regarding Related Branches from Issue activity feeds for guest users.
+- Escape namespace in label references to prevent XSS.
+
+
## 12.4.3
### Fixed (2 changes)