From: William A. Rowe Jr <wrowe@apache.org>
Date: Fri, 9 Sep 2011 13:29:18 +0000 (+0000)
Subject: Reflect user-visible behavior change
X-Git-Tag: 2.3.15~281
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4de9afa583d52728e15a99aaf9b3e7e5c74740b3;p=thirdparty%2Fapache%2Fhttpd.git

Reflect user-visible behavior change

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1167156 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/CHANGES b/CHANGES
index 5c5d06a7e29..646304d80f9 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,6 +1,10 @@
-                                                         -*- coding: utf-8 -*-
+                                                         -*- coding: utf-8 -*-
 Changes with Apache 2.3.15
 
+  *) SECURITY: CVE-2011-3348 (cve.mitre.org)
+     mod_proxy_ajp: Respond with HTTP_NOT_IMPLEMENTED when the method is not
+     recognized.  [Jean-Frederic Clere]
+
   *) SECURITY: CVE-2011-3192 (cve.mitre.org)
      core: Fix handling of byte-range requests to use less memory, to avoid
      denial of service. If the sum of all ranges in a request is larger than