Release notes updates.

git-svn-id: svn://10.0.0.236/trunk@122908 18797224-902f-48f8-a5cc-f745e15eee43

mozilla/webtools/bugzilla/docs/rel_notes.txt

@@ -143,10 +143,6 @@ fix the problem on your installation.
 
 *** SECURITY ISSUES RESOLVED ***
 
-- The bug list sort order could take arbitrary SQL.  There
-  are no known exploits for this problem.
-  (bug 130821)
-
 - The bug reporter could set the priority even when
   'letsubmitterchoosepriority' was off.
   (bug 63018)
@@ -401,6 +397,12 @@ fix the problem on your installation.
   corrupted.
   (bug 92263)
 
+- The bug list sort order is now stricter about the SQL it will accept,
+  ensuring you use correct column name syntax.  Before this, there were
+  some syntax checks, so it is not known whether this problem was
+  exploitable.
+  (bug 130821)
+
 ********************************************
 *** USERS UPGRADING FROM 2.14 OR EARLIER ***
 ********************************************