From: Joe Orton <jorton@apache.org>
Date: Tue, 15 Jul 2014 16:12:46 +0000 (+0000)
Subject: Expand -0117 text a bit and credit Eric who wrote the
X-Git-Tag: 2.4.10~6
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=5a0e1ee41adbfd399a1fa9dd1e899d3f7f8f2685;p=apache

Expand -0117 text a bit and credit Eric who wrote the
one-liner down first ;)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1610738 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/CHANGES b/CHANGES
index 597094f976..d6a8539540 100644
--- a/CHANGES
+++ b/CHANGES
@@ -3,7 +3,9 @@
 Changes with Apache 2.4.10
 
   *) SECURITY: CVE-2014-0117 (cve.mitre.org)
-     Fix crashing with mod_proxy Connection handling.
+     mod_proxy: Fix crash in Connection header handling which 
+     allowed a denial of service attack against a reverse proxy
+     with a threaded MPM.  [Eric Covener]
 
   *) SECURITY: CVE-2014-3523 (cve.mitre.org)
      Fix a memory consumption denial of service in the WinNT MPM (used in all Windows