You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@couchdb.apache.org by dj...@apache.org on 2013/07/30 16:45:47 UTC
[5/5] git commit: updated refs/heads/master to a183999
Mention CVE in 0.11.2 changelog.
Project: http://git-wip-us.apache.org/repos/asf/couchdb/repo
Commit: http://git-wip-us.apache.org/repos/asf/couchdb/commit/a1839998
Tree: http://git-wip-us.apache.org/repos/asf/couchdb/tree/a1839998
Diff: http://git-wip-us.apache.org/repos/asf/couchdb/diff/a1839998
Branch: refs/heads/master
Commit: a18399980c7d293c3ac15350c1c9b0e1071d0b96
Parents: f03bfb4
Author: Dirkjan Ochtman <dj...@apache.org>
Authored: Tue Jul 30 16:42:24 2013 +0200
Committer: Dirkjan Ochtman <dj...@apache.org>
Committed: Tue Jul 30 16:42:24 2013 +0200
----------------------------------------------------------------------
share/doc/src/changelog.rst | 16 +++++++++++-----
1 file changed, 11 insertions(+), 5 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/couchdb/blob/a1839998/share/doc/src/changelog.rst
----------------------------------------------------------------------
diff --git a/share/doc/src/changelog.rst b/share/doc/src/changelog.rst
index e30edf1..f83eaca 100644
--- a/share/doc/src/changelog.rst
+++ b/share/doc/src/changelog.rst
@@ -799,6 +799,11 @@ View Server
Version 1.0.1
-------------
+Security
+^^^^^^^^
+
+* Fixed CVE-2010-2234: Apache CouchDB Cross Site Request Forgery Attack.
+
Authentication
^^^^^^^^^^^^^^
@@ -870,6 +875,12 @@ View Server
Version 0.11.2
--------------
+Security
+^^^^^^^^
+
+* Fixed CVE-2010-2234: Apache CouchDB Cross Site Request Forgery Attack.
+* Avoid potential DOS attack by guarding all creation of atoms.
+
Authentication
^^^^^^^^^^^^^^
@@ -893,11 +904,6 @@ Replicator
* Fix bug when pulling design documents from a source that requires
basic-auth.
-Security
-^^^^^^^^
-
-* Avoid potential DOS attack by guarding all creation of atoms.
-
Version 0.11.1
--------------