Update CHANGELOG.md for 8.16.5

[ci skip]

Update CHANGELOG.md for 8.16.5
[ci skip]
35216e3e · Robert Speicher · 79e8e613 · 35216e3e
Commit 35216e3e authored Feb 14, 2017 by Robert Speicher
Show whitespace changes
Inline Side-by-side

Showing with 7 additions and 0 deletions

CHANGELOG.md CHANGELOG.md +7 -0

No files found.
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,13 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.

+## 8.16.5 (2017-02-14)
+
+- Patch Asciidocs rendering to block XSS.
+- Fix XSS vulnerability in SVG attachments.
+- Prevent the GitHub importer from assigning labels and comments to merge requests or issues belonging to other projects.
+- Patch XSS vulnerability in RDOC support.
+
 ## 8.16.4 (2017-02-02)

 - Support non-ASCII characters in GFM autocomplete. !8729