add CVE 2010-0009 to CHANGES and NEWS

git-svn-id: https://svn.apache.org/repos/asf/couchdb/branches/0.10.x@929679 13f79535-47bb-0310-9956-ffa450edef68
apache · Mar 31, 2010 · abeba4a · abeba4a
1 parent 7ab1b43
commit abeba4a
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/CHANGES b/CHANGES
@@ -9,6 +9,7 @@ This version has not been released yet.
 Replicator
 
 * Avoid leaking file descriptors on automatic replication restarts.
+* Close security vulnerability CVE-2010-0009.
 
 Version 0.10.1
 --------------

diff --git a/NEWS b/NEWS
@@ -7,6 +7,11 @@ For details about backwards incompatible changes, please see:
 
 Each release section notes when backwards incompatible changes have been made.
 
+Version 0.10.2
+--------------
+
+ * Fixed CVE-2010-0009: Apache CouchDB Timing Attack Vulnerability.
+
 Version 0.10.1
 --------------