Note pid table changes: SECURITY: CVE-2007-3304 (cve.mitre.org)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@553551 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/src/CHANGES b/src/CHANGES
index 3358272ff5d1df20b72c7f4f6a78908e06481656..b2c21c2588e038c67c6284ac45e1913fa0832e82 100644 (file)
--- a/src/CHANGES
+++ b/src/CHANGES
@@ -1,6 +1,9 @@
 Changes with Apache 1.3.38
 
-
+  *) SECURITY: CVE-2007-3304 (cve.mitre.org)
+     Ensure that the parent process cannot be forced to kill non-child
+     processes by checking scoreboard PID data with parent process
+     privately stored PID data. [Jim Jagielski]
 
 Changes with Apache 1.3.37