Update CHANGELOG.md for 11.3.7

[ci skip]

Update CHANGELOG.md for 11.3.7
[ci skip]
8f0f14fa · GitLab Release Tools Bot · 18b0f385 · 8f0f14fa
Commit 8f0f14fa authored Oct 26, 2018 by GitLab Release Tools Bot
Hide whitespace changes
Inline Side-by-side

Showing with 12 additions and 0 deletions

CHANGELOG.md CHANGELOG.md +12 -0

No files found.
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -246,6 +246,18 @@ entry.
 - Check frozen string in style builds. (gfyoung)


+## 11.3.7 (2018-10-26)
+
+### Security (6 changes)
+
+- Escape entity title while autocomplete template rendering to prevent XSS. !2557
+- Persist only SHA digest of PersonalAccessToken#token.
+- Fix XSS in merge request source branch name.
+- Redact personal tokens in unsubscribe links.
+- Prevent SSRF attacks in HipChat integration.
+- Validate Wiki attachments are valid temporary files.
+
+
 ## 11.3.6 (2018-10-17)

 - No changes.