You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@couchdb.apache.org by ja...@apache.org on 2010/03/31 21:33:25 UTC
svn commit: r929679 - in /couchdb/branches/0.10.x: CHANGES NEWS
Author: jan
Date: Wed Mar 31 19:33:25 2010
New Revision: 929679
URL: http://svn.apache.org/viewvc?rev=929679&view=rev
Log:
add CVE 2010-0009 to CHANGES and NEWS
Modified:
couchdb/branches/0.10.x/CHANGES
couchdb/branches/0.10.x/NEWS
Modified: couchdb/branches/0.10.x/CHANGES
URL: http://svn.apache.org/viewvc/couchdb/branches/0.10.x/CHANGES?rev=929679&r1=929678&r2=929679&view=diff
==============================================================================
--- couchdb/branches/0.10.x/CHANGES (original)
+++ couchdb/branches/0.10.x/CHANGES Wed Mar 31 19:33:25 2010
@@ -9,6 +9,7 @@ This version has not been released yet.
Replicator
* Avoid leaking file descriptors on automatic replication restarts.
+* Close security vulnerability CVE-2010-0009.
Version 0.10.1
--------------
Modified: couchdb/branches/0.10.x/NEWS
URL: http://svn.apache.org/viewvc/couchdb/branches/0.10.x/NEWS?rev=929679&r1=929678&r2=929679&view=diff
==============================================================================
--- couchdb/branches/0.10.x/NEWS (original)
+++ couchdb/branches/0.10.x/NEWS Wed Mar 31 19:33:25 2010
@@ -7,6 +7,11 @@ For details about backwards incompatible
Each release section notes when backwards incompatible changes have been made.
+Version 0.10.2
+--------------
+
+ * Fixed CVE-2010-0009: Apache CouchDB Timing Attack Vulnerability.
+
Version 0.10.1
--------------