Copy in changes from 1.1.29 and 1.2.2.
diff --git a/CHANGES b/CHANGES
index a0df614..905d6dc 100644
--- a/CHANGES
+++ b/CHANGES
@@ -18,6 +18,13 @@
* support Unicode root path both in CVS and Subversion (Tigris #500)
* fix encoding problems on diff view and generating patch (#301)
+Version 1.2.2 (released 03-Jan-2023)
+
+ * security fix: escape revision view changed paths (#311) [CVE-2023-22456]
+ * standalone.py defaults to UTF-8 output now, too
+ * fix viewvc-install error handling bug
+ * fix a problem on CVS checkout files with rcsparse (#272)
+
Version 1.2.1 (released 26-Mar-2020)
* security fix: escape subdir lastmod file name (#211) [CVE-2020-5283]
@@ -36,6 +43,10 @@
* standalone query interface removed (#206)
* GUI support (--gui) removed from standalone.py
+Version 1.1.29 (released 03-Jan-2023)
+
+ * security fix: escape revision view changed paths (#311) [CVE-2023-22456]
+
Version 1.1.28 (released 26-Mar-2020)
* security fix: escape subdir lastmod file name (#211) [CVE-2020-5283]
