Add Changelog entry for private labels security fix

55df95c3 · Grzegorz Bizon · 01ab6d70 · 55df95c3
Commit 55df95c3 authored Apr 21, 2016 by Grzegorz Bizon
Show whitespace changes
Inline Side-by-side

Showing with 1 addition and 0 deletions

CHANGELOG CHANGELOG +1 -0

No files found.
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -4,6 +4,7 @@ v 8.8.0 (unreleased)

 v 8.7.0 (unreleased)
  - Gitlab::GitAccess and Gitlab::GitAccessWiki are now instrumented
+  - Fix vulnerability that made it possible to gain access to private labels and milestones
  - The number of InfluxDB points stored per UDP packet can now be configured
  - Fix error when cross-project label reference used with non-existent project
  - Transactions for /internal/allowed now have an "action" tag set