svn commit: r1627750 - /httpd/httpd/trunk/CHANGES

[ji...@apache.org]

Author: jim
Date: Fri Sep 26 11:01:27 2014
New Revision: 1627750

URL: http://svn.apache.org/r1627750
Log:
backported

Modified:
    httpd/httpd/trunk/CHANGES

Modified: httpd/httpd/trunk/CHANGES
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?rev=1627750&r1=1627749&r2=1627750&view=diff
==============================================================================
--- httpd/httpd/trunk/CHANGES [utf-8] (original)
+++ httpd/httpd/trunk/CHANGES [utf-8] Fri Sep 26 11:01:27 2014
@@ -5,19 +5,12 @@ Changes with Apache 2.5.0
      Leading 0 could be erroneously considered as an octal value. PR 56598.
      [Chris Card <ctcard hotmail com>]
   
-  *) SECURITY: CVE-2014-3581 (cve.mitre.org)
-     mod_cache: Avoid a crash when Content-Type has an empty value. PR56924.
-     [Mark Montague <mark catseye.org>, Jan Kaluza]
-
   *) mod_proxy: Now allow for 191 character worker names, with non-fatal
      errors if name is truncated. PR53218. [Jim Jagielski]
 
   *) mod_ssl: Add optional function "ssl_get_tls_cb" to allow support
      for channel bindings.  [Simo Sorce <simo redhat.com>]
 
-  *) mod_cache: Avoid sending 304 responses during failed revalidations
-     PR56881. [Eric Covener]
-
   *) core: Avoid useless warning message when parsing a section guarded by
      <IfDefine foo> if $(foo) is used within the section.
      PR 56858 [Christophe Jaillet]