kotovalexarian-likes-gitlab/gitlab-org--gitlab-foss
1
0
Fork 0
Code Releases Activity

Merge branch 'master' of dev.gitlab.org:gitlab/gitlabhq

Browse source
This commit is contained in:
Marin Jankovski 2019-10-01 10:56:49 +02:00
commit 2d03845a76
No known key found for this signature in database
GPG key ID: 29689955693D45E8
2 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
CHANGELOG.md
View file

@ -636,12 +636,19 @@ entry.
## 12.1.12
<<<<<<< HEAD
### Security (11 changes)
=======
### Security (12 changes)
>>>>>>> master
- Add a policy check for system notes that may not be visible due to cross references to private items.
- Display only participants that user has permission to see on milestone page.
- Do not disclose project milestones on group milestones page when project milestones access is disabled in project settings.
<<<<<<< HEAD
=======
- Check permissions before showing head pipeline blocking merge requests.
>>>>>>> master
- Fix new project path being disclosed through unsubscribe link of issue/merge requests.
- Prevent bypassing email verification using Salesforce.
- Do not show resource label events referencing not accessible labels.

5
changelogs/unreleased/12-3-stable.yml Normal file
View file

@ -0,0 +1,5 @@
---
title: Fix Gitaly SearchBlobs flag RPC injection
merge_request:
author:
type: security