Log CVE for change

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1576403 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/CHANGES b/CHANGES
index 470af87ef67b901c19960957c1f8db65f581f95b..c5e39b0f95bc31355d9d3eedb9dbd795a8298a11 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -2,8 +2,10 @@
 
 Changes with Apache 2.4.8
 
-  *) Clean up cookie logging with fewer redundant string parsing passes.
-     Log only cookies with a value assignment.
+  *) SECURITY: CVE-2014-0098 (cve.mitre.org)
+     Clean up cookie logging with fewer redundant string parsing passes.
+     Log only cookies with a value assignment. Prevents degfaults when
+     logging truncated cookies.
      [William Rowe, Ruediger Pluem, Jim Jagielski]
 
   *) core: draft-ietf-httpbis-p1-messaging-23 corrections regarding