diff --git a/BUGS b/BUGS
index d38965f60..5515aa6ee 100644
--- a/BUGS
+++ b/BUGS
@@ -10,7 +10,4 @@ Known bugs in sudo version 1.6
    in subsequent configure runs, even if other --with-* options are
    given.  This is a flaw in GNU autoconf.
 
-4) Cmnd_Alias's need to precede permissions specs.  At the very least,
-   visudo should give an error if you get this wrong.
-
-5) On DUNIX in sia mode, hitting return at the prompt does not quit.
+4) On DUNIX in sia mode, hitting return at the prompt does not quit.
diff --git a/CHANGES b/CHANGES
index 65272ee78..f0e2240a5 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1122,3 +1122,20 @@ Sudo 1.5.9 released.
      temp files but it does *require* that you not try to put the
      temp file in a world-writable directory.  This shoud not be
      an issue as the temp file should live in the same dir as sudoers.
+
+352) Fixed crypt() check in libufc.
+
+353) It is now possible to put a list of users as the first thing in a
+     user specification.  I don't suggest ths but it makes the grammar
+     more uniform.
+
+354) Visudo will now warn about what it thinks are undefined aliases.
+     Since it can't be 100% sure these are just warnings, not errors.
+
+355) Add a --without-passwd option to configure that turns off
+     passwd/shadow file authentication.  Only usable with an alternate
+     authentication scheme.
+
+356) Add a --disable-authentication option to configure that causes sudo
+     to not require authentication by default.  The PASSWD tag can be
+     used to require authentication for an entry.