Add CVE reference for sendfile issues

git-svn-id: https://svn.apache.org/repos/asf/tomcat/trunk@1146010 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index cfa4eec..f2e61b3 100644 (file)
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -121,9 +121,9 @@
         is used. Fixes null thread name in access log and JMX MBean. (rjung)
       </fix>
       <fix>
-        Protect against infinite loops (HTTP NIO) and crashes (HTTP APR) if
-        sendfile is configured to send more data than is available in the file.
-        (markt)
+        Fix CVE-2011-2526. Protect against infinite loops (HTTP NIO) and crashes
+        (HTTP APR) if sendfile is configured to send more data than is available
+        in the file. (markt)
       </fix>
       <fix>
         Prevent NPEs when a socket is closed in non-error conditions after