From: Jim Jagielski <jim@apache.org>
Date: Wed, 18 Jul 2018 11:51:43 +0000 (+0000)
Subject: Note CVEs
X-Git-Tag: 2.4.35~136
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=a392a0bc4278f32f54d5fa62a313fe0b2af22006;p=apache

Note CVEs


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1836159 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/CHANGES b/CHANGES
index 6e250dd87a..66f49cc622 100644
--- a/CHANGES
+++ b/CHANGES
@@ -3,6 +3,12 @@ Changes with Apache 2.4.35
 
 Changes with Apache 2.4.34
 
+  *) SECURITY: CVE-2018-8011 (cve.mitre.org)
+     mod_md: DoS via Coredumps on specially crafted requests
+
+  *) SECURITY: CVE-2018-1333 (cve.mitre.org)
+     mod_http2: DoS for HTTP/2 connections by specially crafted requests
+
   *) Introduce zh-cn and zh-tw (simplified and traditional Chinese) error
      document translations. [CodeingBoy, popcorner]