Correcting NEWS and CHANGES discrepancies

1 files changed, 20 insertions, 4 deletions

diff --git a/CHANGES b/CHANGES
index f24c49ed3..5779fceef 100644
--- a/CHANGES
+++ b/CHANGES
@@ -469,6 +469,11 @@ View Server:
 Version 0.11.2
 --------------
 
+Security:
+
+ * Fixed CVE-2010-2234: Apache CouchDB Cross Site Request Forgery Attack
+ * Avoid potential DOS attack by guarding all creation of atoms.
+
 Replicator:
 
  * Fix bug when pushing design docs by non-admins, which was hanging the
@@ -484,10 +489,6 @@ Authentication:
 
  * User documents can now be deleted by admins or the user.
 
-Security:
-
- * Avoid potential DOS attack by guarding all creation of atoms.
-
 Futon:
 
  * Add some Futon files that were missing from the Makefile.
@@ -666,6 +667,21 @@ Build and System Integration:
  * Gavin McDonald setup a build-bot instance. More info can be found at
    http://ci.apache.org/buildbot.html
 
+Version 0.10.2
+--------------
+
+Security:
+
+ * Fixed CVE-2010-0009: Apache CouchDB Timing Attack Vulnerability
+
+Replicator:
+
+ * Avoid leaking file descriptors on automatic replication restarts.
+
+Build and System Integration:
+
+ * Fixed distribution preparation for building on Mac OS X.
+
 Version 0.10.1
 --------------