Tidied up security items in NEWS and CHANGES on 0.11.x branch
Removed duplicate NEWS entry for CVE-2010-0009 on 0.11.x branch