CHANGES for 8.2.4

mitsuhiko · mattrobenolt · commit d8537ba2bfea · 2016-03-29T10:04:10.000-07:00
diff --git a/CHANGES b/CHANGES
@@ -1,3 +1,8 @@
+Version 8.2.4
+-------------
+
+- [SECURITY] If being run in multi-organization mode, it was possible for a user to craft a URL which would allow them to view membership details of other users.
+
 Version 8.2.3
 -------------
 
