Put post-release security entries underneath

2.4.43 instead of 2.4.44.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1876764 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/CHANGES b/CHANGES
index 2a5dde627874c1f75071422b6c3bd85a93b5edbf..48ab7de054866574debab167a65e31b93cba34ab 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,6 +1,12 @@
                                                          -*- coding: utf-8 -*-
 Changes with Apache 2.4.44
 
+Changes with Apache 2.4.43
+
+  *) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
+
+Changes with Apache 2.4.42
+
   *) SECURITY: CVE-2020-1934 (cve.mitre.org)
      mod_proxy_ftp: Use of uninitialized value with malicious backend FTP
      server. [Eric Covener]
@@ -10,12 +16,6 @@ Changes with Apache 2.4.44
      matches and substitutions with encoded line break characters.
      The fix for CVE-2019-10098 was not effective.  [Ruediger Pluem]
 
-Changes with Apache 2.4.43
-
-  *) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
-
-Changes with Apache 2.4.42
-
   *) mod_proxy_http: Fix the forwarding of requests with content body when a
      balancer member is unavailable; the retry on the next member was issued
      with an empty body (regression introduced in 2.4.41). PR63891.