From 8fd8de432813228da9f52a21854825c2edc32a8d Mon Sep 17 00:00:00 2001 From: GitLab Release Tools Bot Date: Thu, 30 Apr 2020 14:14:20 +0000 Subject: [PATCH] Update CHANGELOG.md for 12.10.2 [ci skip] --- CHANGELOG.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 48a55ff660d..223fadfba69 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,20 @@ documentation](doc/development/changelog.md) for instructions on adding your own entry. +## 12.10.2 (2020-04-30) + +### Security (8 changes) + +- Ensure MR diff exists before codeowner check. +- Apply CODEOWNERS validations to web requests. +- Prevent unauthorized access to default branch. +- Do not return private project ID without permission. +- Fix doorkeeper CVE-2020-10187. +- Change GitHub service integration token input to password. +- Return only safe urls for mirrors. +- Validate workhorse 'rewritten_fields' and properly use them during multipart uploads. + + ## 12.10.1 (2020-04-24) ### Fixed (5 changes) -- GitLab