diff --git a/ChangeLog b/ChangeLog
index 8cf7789..a445543 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -22,7 +22,7 @@ Version 2.8.1b18 - 25 Nov 24 2003
 	 control chars
 	MAJOR BUGFIX: path with trailing / or starting / is now parsed correctly
 	pathes with dot after slash are now detected at parse level (side
-	 effect of prev. fix)
+	 effect of prev. fix, fixed security prob)
 	tests moved from server/ into tests/ directory
 	removed special test case for root directory in path.c -> use more
 	 general alg. instead. This fixed "/" dir.
diff --git a/TODO b/TODO
index b3faac9..17add38 100644
--- a/TODO
+++ b/TODO
@@ -56,7 +56,7 @@ write RENAME FSP command
 bind-ip-address for server (and client via FSP_LOCAL_IP)
 report number of clients connected, size of hostable in new command
  CC_INFO command
-special defence against rapid/double fire clients
+special defence against rapid/double fire clients (burst command in fspclient)
 common log format - replace custom fspd log
 
 :midle:may not be in 2.8.2
@@ -88,7 +88,7 @@ libraries and support for FSP protocol
 ======================================
 
 DONE: FSP library for Java
-new small,light fsplib for C.
+WIP:  new small,light fsplib for C.
 FSP backend for APT
 FSP plugin do Netscape/MSIE
 Transfer HTTP over fsp transport