You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@couchdb.apache.org by ja...@apache.org on 2010/03/31 21:29:32 UTC

svn commit: r929675 - in /couchdb/trunk: CHANGES NEWS

Author: jan
Date: Wed Mar 31 19:29:32 2010
New Revision: 929675

URL: http://svn.apache.org/viewvc?rev=929675&view=rev
Log:
add CVE 2010-0009 to CHANGES and NEWS

Modified:
    couchdb/trunk/CHANGES
    couchdb/trunk/NEWS

Modified: couchdb/trunk/CHANGES
URL: http://svn.apache.org/viewvc/couchdb/trunk/CHANGES?rev=929675&r1=929674&r2=929675&view=diff
==============================================================================
--- couchdb/trunk/CHANGES (original)
+++ couchdb/trunk/CHANGES Wed Mar 31 19:29:32 2010
@@ -11,6 +11,7 @@ Version 0.11.0
 
 Security:
 
+ * Fixed CVE-2010-0009: Apache CouchDB Timing Attack Vulnerability.
  * Added default cookie-authentication and users database.
  * Added Futon user interface for user signup and login.
  * Added per-database reader access control lists.

Modified: couchdb/trunk/NEWS
URL: http://svn.apache.org/viewvc/couchdb/trunk/NEWS?rev=929675&r1=929674&r2=929675&view=diff
==============================================================================
--- couchdb/trunk/NEWS (original)
+++ couchdb/trunk/NEWS Wed Mar 31 19:29:32 2010
@@ -17,6 +17,7 @@ Version 0.11.0
 
 This version is a feature-freeze release candidate for Apache CouchDB 1.0.
 
+ * Fixed CVE-2010-0009: Apache CouchDB Timing Attack Vulnerability.
  * Added support for building a Windows installer as part of 'make dist'.
  * Added optional 'raw' binary collation for faster view builds where Unicode
    collation is not important.