From: Eric Covener <covener@apache.org>
Date: Thu, 3 Jun 2021 16:55:50 +0000 (+0000)
Subject: correct CVE year
X-Git-Tag: candidate-2.4.49~3^2~100
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=59393dd87f5ef32e72060a47895e4ac7567ea888;p=thirdparty%2Fapache%2Fhttpd.git

correct CVE year


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1890439 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/CHANGES b/CHANGES
index 06696f0a2de..115d24d25fe 100644
--- a/CHANGES
+++ b/CHANGES
@@ -146,12 +146,12 @@ Changes with Apache 2.4.47
      mod_auth_digest: possible stack overflow by one nul byte while validating
      the Digest nonce.  [Yann Ylavic]
 
-  *) SECURITY: CVE-2020-26691 (cve.mitre.org)
+  *) SECURITY: CVE-2021-26691 (cve.mitre.org)
      mod_session: Fix possible crash due to NULL pointer dereference, which
      could be used to cause a Denial of Service with a malicious backend
      server and SessionHeader.  [Yann Ylavic]
 
-  *) SECURITY: CVE-2020-26690 (cve.mitre.org)
+  *) SECURITY: CVE-2021-26690 (cve.mitre.org)
      mod_session: Fix possible crash due to NULL pointer dereference, which
      could be used to cause a Denial of Service.  [Yann Ylavic]