Release notes updates.

diff --git a/docs/rel_notes.txt b/docs/rel_notes.txt
index 5501eba8a5975802d592b9c666692d6c3ef08d0c..808b4a8ff2a316dd52cd26a75c27c92025388edf 100644 (file)
--- a/docs/rel_notes.txt
+++ b/docs/rel_notes.txt
@@ -131,10 +131,6 @@ fix the problem on your installation.
 
 *** SECURITY ISSUES RESOLVED ***
 
-- The bug list sort order could take arbitrary SQL.  There
-  are no known exploits for this problem.
-  (bug 130821)
-
 - The bug reporter could set the priority even when
   'letsubmitterchoosepriority' was off.
   (bug 63018)
@@ -389,6 +385,12 @@ fix the problem on your installation.
   corrupted.
   (bug 92263)
 
+- The bug list sort order is now stricter about the SQL it will accept,
+  ensuring you use correct column name syntax.  Before this, there were
+  some syntax checks, so it is not known whether this problem was
+  exploitable.
+  (bug 130821)
+
 ********************************************
 *** USERS UPGRADING FROM 2.14 OR EARLIER ***
 ********************************************