* Security first.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@608062 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/CHANGES b/CHANGES
index e66e7898ead35f08d4e44e96931eea23f5f2db58..cdddeebe62f97b590744f8ade7e203686766a21a 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -6,11 +6,6 @@ Changes with Apache 2.2.7
      redirect string in the HTML output of the balancer manager.
      Reported by SecurityReason. [Ruediger Pluem]
 
-  *) mod_ldap: Try to establish a new backend LDAP connection when the
-     Microsoft LDAP client library returns LDAP_UNAVAILABLE, e.g. after the
-     LDAP server has closed the connection due to a timeout.
-     PR 39095 [Eric Covener]
-
   *) SECURITY: CVE-2007-6422 (cve.mitre.org)
      Prevent crash in balancer manager if invalid balancer name is passed
      as parameter. Reported by SecurityReason. [Ruediger Pluem]
@@ -29,6 +24,11 @@ Changes with Apache 2.2.7
      and etag. PR 44152.
      [Michael Clark <michael metaparadigm.com>, Ruediger Pluem]
 
+  *) mod_ldap: Try to establish a new backend LDAP connection when the
+     Microsoft LDAP client library returns LDAP_UNAVAILABLE, e.g. after the
+     LDAP server has closed the connection due to a timeout.
+     PR 39095 [Eric Covener]
+
   *) log.c: Ensure Win32 resurrects its lost robust logger processes.
      [William Rowe]