Note CVEs

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1836159 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/CHANGES b/CHANGES
index 6e250dd87a5a4ef4c65126b32af01abad69e94bb..66f49cc622fa3d6ade98f9c6e30754ec42f231ba 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -3,6 +3,12 @@ Changes with Apache 2.4.35
 
 Changes with Apache 2.4.34
 
+  *) SECURITY: CVE-2018-8011 (cve.mitre.org)
+     mod_md: DoS via Coredumps on specially crafted requests
+
+  *) SECURITY: CVE-2018-1333 (cve.mitre.org)
+     mod_http2: DoS for HTTP/2 connections by specially crafted requests
+
   *) Introduce zh-cn and zh-tw (simplified and traditional Chinese) error
      document translations. [CodeingBoy, popcorner]