Update CHANGELOG.md for 12.6.2

[ci skip]
2020-01-02 15:05:14 +00:00 · 2020-01-02 15:05:14 +00:00 · cd93978d8b
commit cd93978d8b
parent fe98ad8383
1 changed files with 12 additions and 0 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -2,6 +2,18 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.

+## 12.6.2
+
+### Security (6 changes)
+
+- GraphQL: Add timeout to all queries.
+- Filter out notification settings for projects that a user does not have at least read access.
+- Hide project name and path when unsusbcribing from an issue or merge request.
+- Fix 500 error caused by invalid byte sequences in uploads links.
+- Return only runners from groups where user is owner for user CI owned runners.
+- Fix Vulnerability of Release Evidence.
+
+
 ## 12.6.1

 ### Fixed (2 changes)