Note the big change

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@95765 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/src/CHANGES b/src/CHANGES
index fe4ea2340ae08ec4569031ddcad43de0301d15bf..00c5bf8b3377a40b6584800dd18ff910319beb3b 100644 (file)
--- a/src/CHANGES
+++ b/src/CHANGES
@@ -1,5 +1,11 @@
 Changes with Apache 1.3.25
 
+  *) Code changes required to address and close the security
+     issues in CAN-2002-0392 (mitre.org) [CERT VU#944335].
+     To support this, we utilize the ANSI functionality of
+     strtol, and provide ap_strtol for completeness.
+     [The whole gang]
+     
   *) PORT: With OpenBSD 3.1 and up, allow modules to work on their
      ELF-based architectures. [Brad <brad@openbsd.org>]