add CVE

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1880673 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/CHANGES b/CHANGES
index 34171412f33c71353a66d3c3a3bbc673b834454e..187465278cfe8ac286eb812cd6349b0d4f9662a5 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -11,7 +11,7 @@ Changes with Apache 2.4.47
      where possibly made that result in concurrent, unsafe use of
      a memory pool. [Stefan Eissing]
 
-  *) SECURITY: 
+  *) SECURITY: CVE-2020-9490 (cve.mitre.org)
      mod_http2: a specially crafted value for the 'Cache-Digest' header
      request would result in a crash when the server actually tries
      to HTTP/2 PUSH a resource afterwards. [Stefan Eissing]