From 5a0e1ee41adbfd399a1fa9dd1e899d3f7f8f2685 Mon Sep 17 00:00:00 2001 From: Joe Orton Date: Tue, 15 Jul 2014 16:12:46 +0000 Subject: [PATCH] Expand -0117 text a bit and credit Eric who wrote the one-liner down first ;) git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1610738 13f79535-47bb-0310-9956-ffa450edef68 --- CHANGES | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/CHANGES b/CHANGES index 597094f976..d6a8539540 100644 --- a/CHANGES +++ b/CHANGES @@ -3,7 +3,9 @@ Changes with Apache 2.4.10 *) SECURITY: CVE-2014-0117 (cve.mitre.org) - Fix crashing with mod_proxy Connection handling. + mod_proxy: Fix crash in Connection header handling which + allowed a denial of service attack against a reverse proxy + with a threaded MPM. [Eric Covener] *) SECURITY: CVE-2014-3523 (cve.mitre.org) Fix a memory consumption denial of service in the WinNT MPM (used in all Windows -- 2.50.1