From b44c16511571f1f6ee9f1c9bde468b6bbfffbc91 Mon Sep 17 00:00:00 2001
From: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Date: Thu, 30 Apr 2020 14:24:14 +0000
Subject: [PATCH] Update CHANGELOG.md for 12.8.10

[ci skip]
---
 CHANGELOG.md | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9ae7ef425e7..c12ef304111 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1010,6 +1010,19 @@ entry.
 - Improvement in token reference.
 
 
+## 12.8.10 (2020-04-30)
+
+### Security (7 changes)
+
+- Ensure MR diff exists before codeowner check.
+- Prevent unauthorized access to default branch.
+- Do not return private project ID without permission.
+- Fix doorkeeper CVE-2020-10187.
+- Prevent ES credentials leak.
+- Return only safe urls for mirrors.
+- Validate workhorse 'rewritten_fields' and properly use them during multipart uploads.
+
+
 ## 12.8.9 (2020-04-14)
 
 ### Security (3 changes)
-- 
GitLab