From: Graham Leggett <minfrin@apache.org>
Date: Mon, 14 Sep 2009 20:55:40 +0000 (+0000)
Subject: Add attribution and CVE notices.
X-Git-Tag: 2.3.3~300
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=f9999f9bd94d12f6eb7b27367a7f18c03538451c;p=thirdparty%2Fapache%2Fhttpd.git

Add attribution and CVE notices.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814850 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/CHANGES b/CHANGES
index 1511df20451..737ae3da17a 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2,6 +2,12 @@
 
 Changes with Apache 2.3.3
 
+  *) CVE-2009-3095: mod_proxy_ftp sanity check authn credentials.
+     [Stefan Fritsch <sf fritsch.de>, Joe Orton]
+
+  *) CVE-2009-3094: mod_proxy_ftp NULL pointer dereference on error paths.
+     [Stefan Fritsch <sf fritsch.de>, Joe Orton]
+
   *) mod_dav: Allow other modules to add things to the DAV or Allow headers
      of an OPTIONS request. [Brian France <brian brianfrance.com>]