Correcting NEWS and CHANGES discrepancies
Added CVE-2010-3854 to NEWS and CHANGES
Added CVE-2010-2234 to NEWS and CHANGES