Update CHANGELOG.md for 11.10.8

[ci skip]

CHANGELOG.md

@@ -2,6 +2,26 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
+## 11.10.8 (2019-06-27)
+
+### Security (10 changes)
+
+- Fix Denial of Service for comments when rendering issues/MR comments.
+- Gate MR head_pipeline behind read_pipeline ability.
+- Fix DoS vulnerability in color validation regex.
+- Expose merge requests count based on user access.
+- Persist tmp snippet uploads at users.
+- Add missing authorizations in GraphQL.
+- Disable Rails SQL query cache when applying service templates.
+- Prevent Billion Laughs attack.
+- Correctly check permissions when creating snippet notes.
+- Prevent the detection of merge request templates by unauthorized users.
+
+### Performance (1 change)
+
+- Add improvements to global search of issues and merge requests. !27817
+
+
 ## 11.10.7 (2019-06-26)
 ### Fixed (3 changes)

changelogs/unreleased/fj-59522-improve-search-controller-performance.yml

----
-title: Add improvements to global search of issues and merge requests
-merge_request: 27817
-author:
-type: performance

changelogs/unreleased/osw-persist-tmp-snippet-uploads.yml

----
-title: Persist tmp snippet uploads at users
-merge_request:
-author:
-type: security

changelogs/unreleased/security-11-10-mr-head-pipeline-leak.yml

----
-title: Gate MR head_pipeline behind read_pipeline ability.
-merge_request:
-author:
-type: security

changelogs/unreleased/security-2858-fix-color-validation.yml

----
-title: Fix DoS vulnerability in color validation regex
-merge_request:
-author:
-type: security

changelogs/unreleased/security-59581-related-merge-requests-count.yml

----
-title: Expose merge requests count based on user access
-merge_request:
-author:
-type: security

changelogs/unreleased/security-DOS_issue_comments_banzai.yml

----
-title: Fix Denial of Service for comments when rendering issues/MR comments
-merge_request:
-author:
-type: security

changelogs/unreleased/security-bvl-enforce-graphql-type-authorization.yml

----
-title: Add missing authorizations in GraphQL
-merge_request:
-author:
-type: security

changelogs/unreleased/security-fix-issue-59379-11-10.yml

----
-title: Disable Rails SQL query cache when applying service templates
-merge_request:
-author:
-type: security

changelogs/unreleased/security-fp-prevent-billion-laughs-attack.yml

----
-title: Prevent Billion Laughs attack
-merge_request:
-author:
-type: security

changelogs/unreleased/security-notes-in-private-snippets.yml

----
-title: Correctly check permissions when creating snippet notes
-merge_request:
-author:
-type: security

changelogs/unreleased/security-prevent-detection-of-merge-request-template-name.yml

----
-title: Prevent the detection of merge request templates by unauthorized users
-merge_request:
-author:
-type: security