1 files changed, 1 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 3c39579b..4d64e807 100644
--- a/NEWS
+++ b/NEWS
@@ -43,6 +43,7 @@ Version 0.11.2
   * User documents can now be deleted by admins or the user.
   * Avoid potential DOS attack by guarding all creation of atoms.
   * Some Futon and JavaScript library bugfixes.
+  * Fixed CVE-2010-2234: Apache CouchDB Cross Site Request Forgery Attack
 
 Version 0.11.1
 --------------