changelog: update 6.0.20 CVEs and titles

diff --git a/ChangeLog b/ChangeLog
index 078167c12d02689e87bab788575ea4bbc6b8af51..a01357f514308ccb8141e97f6c2459702a6c5fa2 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,7 +1,7 @@
 6.0.20 -- 2024-06-26
 
-Security #7041: defrag: id reuse can lead to invalid reassembly (6.0.x backport)(CVE 2024-37151)
-Security #7112: http2: oom from duplicate headers (6.0.x backport)
+Security #7112: http2: oom from duplicate headers (6.0.x backport)(MODERATE - CVE 2024-38535)
+Security #7041: defrag: id reuse can lead to invalid reassembly (6.0.x backport)(CRITICAL - CVE 2024-37151)
 Bug #7014: rust: build with rust 1.78 with slice::from_raw_parts now requiring the pointer to be non-null (6.0.x backport)
 Bug #7007: rust: fails to build for msrv
 Bug #5578: rules: stateful drop on dsize sig with app proto set