From 28a77b2a0bf6d5aecb45e761572ddb9ff24c3d38 Mon Sep 17 00:00:00 2001 From: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com> Date: Mon, 28 Oct 2019 15:03:05 +0000 Subject: [PATCH] Update CHANGELOG-EE.md for 12.4.1-ee [ci skip] --- CHANGELOG-EE.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/CHANGELOG-EE.md b/CHANGELOG-EE.md index a487479108269..48dc0827d0ecc 100644 --- a/CHANGELOG-EE.md +++ b/CHANGELOG-EE.md @@ -1,5 +1,17 @@ Please view this file on the master branch, on stable branches it's out of date. +## 12.4.1 + +### Security (6 changes) + +- Do not display project labels that are not visible for user accessing group labels. +- Do not index system notes for issue update. +- Redact search results based on Ability.allowed?. +- Do not show private cross references in epic notes. +- Filter out packages the user does'nt have permission to see at group level. +- Fixes a Open Redirect issue in `InternalRedirect`. + + ## 12.4.0 ### Security (2 changes) -- GitLab