One down...

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@91712 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/CHANGES b/CHANGES
index e49e2b28afb1564eda3b16573c52a7b3a3ed8ee0..e516cacba4efe8ac26e920e1dd7e72bfe88c4551 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,5 +1,10 @@
 Changes with Apache 2.0.28-dev
 
+  *) Fixed a memory leak in the getline parsing code that could
+     be triggered by arbitrarily large header lines. Requests
+     from the core input filter for single lines are now limited
+     to HUGE_STRING_LEN (8192 bytes).  [Aaron Bannert]
+
   *) Introduce an Apache mod_ssl initial configuration template 
      (ssl.conf, generated from ssl-std.conf).  [Ralf S. Engelschall]