bump CVE to the top of CHANGES

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1355831 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/CHANGES b/CHANGES
index 12cf3dcbbece449f419981e7f2b25ca5f35dc95f..706120633f89e5351f30c7f5289940f1559142ad 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,13 +1,13 @@
                                                          -*- coding: utf-8 -*-
 Changes with Apache 2.5.0
 
-  *) mod_ssl: Add RFC 5878 support. [Ben Laurie]
-
   *) SECURITY: CVE-2012-2687 (cve.mitre.org)
      mod_negotiation: Escape filenames in variant list to prevent an
      possible XSS for a site where untrusted users can upload files to
      a location with MultiViews enabled. [Niels Heinen <heinenn google.com>]
 
+  *) mod_ssl: Add RFC 5878 support. [Ben Laurie]
+
   *) mod_authz_core: If an expression in "Require expr" returns denied and
      references %{REMOTE_USER}, trigger authentication and retry. PR 52892.
      [Stefan Fritsch]