svn commit: r390517 - /httpd/httpd/branches/2.0.x/CHANGES

[co...@apache.org]

Author: colm
Date: Fri Mar 31 14:02:42 2006
New Revision: 390517

URL: http://svn.apache.org/viewcvs?rev=390517&view=rev
Log:
Put the SECURITY notices at the top again.

Modified:
    httpd/httpd/branches/2.0.x/CHANGES

Modified: httpd/httpd/branches/2.0.x/CHANGES
URL: http://svn.apache.org/viewcvs/httpd/httpd/branches/2.0.x/CHANGES?rev=390517&r1=390516&r2=390517&view=diff
==============================================================================
--- httpd/httpd/branches/2.0.x/CHANGES [utf-8] (original)
+++ httpd/httpd/branches/2.0.x/CHANGES [utf-8] Fri Mar 31 14:02:42 2006
@@ -1,9 +1,7 @@
                                                          -*- coding: utf-8 -*-
 Changes with Apache 2.0.56
 
-  *) keep the Content-Length header for a HEAD with no response body.
-     PR 18757 [Greg Ames]
-     
+    
   *) SECURITY: CVE-2005-3357 (cve.mitre.org)
      mod_ssl: Fix a possible crash during access control checks if a
      non-SSL request is processed for an SSL vhost (such as the
@@ -17,6 +15,9 @@
      ap_escape_html so we escape quotes.  Reported by JPCERT.
      [Mark Cox]
 
+  *) keep the Content-Length header for a HEAD with no response body.
+     PR 18757 [Greg Ames]
+ 
   *) Modify apr[util] .h detection to avoid breakage on VPATH builds
      using Solaris make (amoung others) and avoid breakage in ./buildconf
      when srclib/apr[-util] are symlinks rather than directories proper.