Add 1.34.2 CHANGES

ac000 · ac000 · commit 8ab74a8cc929 · 2025-02-27T22:02:21.000Z
This is autogenerated from docs/changes.xml by

  $ make -C docs/ changes &amp;&amp; mv build/CHANGES .

Signed-off-by: Andrew Clayton &lt;a.clayton@nginx.com&gt;
diff --git a/CHANGES b/CHANGES
@@ -1,4 +1,14 @@
 
+Changes with Unit 1.34.2                                         26 Feb 2025
+
+    *) Security: fix missing websocket payload length validation in the Java
+       language module which could lead to Java language module processes
+       consuming excess CPU. (CVE-2025-1695).
+
+    *) Bugfix: fix incorrect websocket payload length calculation in the
+       Java language module.
+
+
 Changes with Unit 1.34.1                                         10 Jan 2025
 
     *) Bugfix: fix instability issues due to OpenTelemetry (OTEL) support.
