in 2.2.9

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@666291 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/CHANGES b/CHANGES
index 9dccaf348dac125292fd20d4b937401f5588aa9f..8b07da76d5fdf56c39f23458a92f2ae4f3c1c01d 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -2,12 +2,6 @@
 Changes with Apache 2.3.0
 [ When backported to 2.2.x, remove entry from this file ]
 
-  *) SECURITY: CVE-2008-2364 (cve.mitre.org)
-     mod_proxy_http: Better handling of excessive interim responses
-     from origin server to prevent potential denial of service and high
-     memory usage. Reported by Ryujiro Shibuya. [Ruediger Pluem,
-     Joe Orton, Jim Jagielski]
-
   *) mod_proxy_http: Do not forward requests with 'Expect: 100-continue' to
      known HTTP/1.0 servers. Return 'Expectation failed' (417) instead.
      [Ruediger Pluem]