Update CHANGELOG.md for 12.4.4

[ci skip]
This commit is contained in:
GitLab Release Tools Bot 2019-11-26 22:07:49 +00:00
parent 7278d3f142
commit f220df53b6

View file

@ -367,6 +367,21 @@ entry.
- Change selects from default browser style to custom style.
## 12.4.4
### Security (9 changes)
- Check permissions before showing a forked project's source.
- Encrypt application setting tokens.
- Update Workhorse and Gitaly to fix a security issue.
- Hide commit counts from guest users in Cycle Analytics.
- Limit potential for DNS rebind SSRF in chat notifications.
- Fix 500 error caused by invalid byte sequences in links.
- Ensure are cleaned by ImportExport::AttributeCleaner.
- Remove notes regarding Related Branches from Issue activity feeds for guest users.
- Escape namespace in label references to prevent XSS.
## 12.4.3
### Fixed (2 changes)