You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@couchdb.apache.org by ja...@apache.org on 2013/06/18 16:32:34 UTC
[15/41] git commit: updated refs/heads/1832-fix-empty-attachment-name
to ad774b6
Correcting NEWS and CHANGES discrepancies
Project: http://git-wip-us.apache.org/repos/asf/couchdb/repo
Commit: http://git-wip-us.apache.org/repos/asf/couchdb/commit/ef39d080
Tree: http://git-wip-us.apache.org/repos/asf/couchdb/tree/ef39d080
Diff: http://git-wip-us.apache.org/repos/asf/couchdb/diff/ef39d080
Branch: refs/heads/1832-fix-empty-attachment-name
Commit: ef39d080cf36c8696d1480bc68336cec9ce5a6fd
Parents: bd52bc2
Author: Noah Slater <ns...@apache.org>
Authored: Wed Feb 27 19:31:26 2013 +0000
Committer: Noah Slater <ns...@apache.org>
Committed: Wed Feb 27 19:31:26 2013 +0000
----------------------------------------------------------------------
NEWS | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/couchdb/blob/ef39d080/NEWS
----------------------------------------------------------------------
diff --git a/NEWS b/NEWS
index 493bc59..76cbf12 100644
--- a/NEWS
+++ b/NEWS
@@ -229,12 +229,12 @@ Version 1.0.0
Version 0.11.2
--------------
+ * Fixed CVE-2010-2234: Apache CouchDB Cross Site Request Forgery Attack
+ * Avoid potential DOS attack by guarding all creation of atoms.
* Replicator buxfixes for replicating design documents from secured databases.
* Better error messages on invalid URL requests.
* User documents can now be deleted by admins or the user.
- * Avoid potential DOS attack by guarding all creation of atoms.
* Some Futon and JavaScript library bugfixes.
- * Fixed CVE-2010-2234: Apache CouchDB Cross Site Request Forgery Attack
Version 0.11.1
--------------