correct CVE year

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1890439 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/CHANGES b/CHANGES
index 06696f0a2deb8a056fe4f7d9a58bb42be914e77e..115d24d25fe3f763e7f5fb1ea9bcbd9a99dc005d 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -146,12 +146,12 @@ Changes with Apache 2.4.47
      mod_auth_digest: possible stack overflow by one nul byte while validating
      the Digest nonce.  [Yann Ylavic]
 
-  *) SECURITY: CVE-2020-26691 (cve.mitre.org)
+  *) SECURITY: CVE-2021-26691 (cve.mitre.org)
      mod_session: Fix possible crash due to NULL pointer dereference, which
      could be used to cause a Denial of Service with a malicious backend
      server and SessionHeader.  [Yann Ylavic]
 
-  *) SECURITY: CVE-2020-26690 (cve.mitre.org)
+  *) SECURITY: CVE-2021-26690 (cve.mitre.org)
      mod_session: Fix possible crash due to NULL pointer dereference, which
      could be used to cause a Denial of Service.  [Yann Ylavic]