Add CHANGES notification for the ap_get_win32_interpreter problem

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@96465 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/src/CHANGES b/src/CHANGES
index d6823848be9b50100194b0e8594e2b43744e2bf5..ce07eff9a2ac91833a6bcea05d32d6633690414c 100644 (file)
--- a/src/CHANGES
+++ b/src/CHANGES
@@ -1,4 +1,8 @@
 Changes with Apache 1.3.27
+  *) Win32: Fix one byte buffer overflow in ap_get_win32_interpreter
+     when a CGI script's #! line does not contain a \r or \n (i.e.
+     a line feed character) in the first 1023 bytes. The overflow
+     is always a '\0' (string termination) character.
 
   *) Add new "suppress-error-charset" environment variable to
      allow a BrowserMatch workaround for clients that incorrectly