Update CHANGES.txt for 1.34.2

ac000 · ac000 · commit bc125b9997d3 · 2025-03-03T17:13:10.000Z
Signed-off-by: Andrew Clayton &lt;a.clayton@nginx.com&gt;
diff --git a/source/CHANGES.txt b/source/CHANGES.txt
@@ -1,3 +1,13 @@
+Changes with Unit 1.34.2                                         26 Feb 2025
+
+    *) Security: fix missing websocket payload length validation in the Java
+       language module which could lead to Java language module processes
+       consuming excess CPU. (CVE-2025-1695).
+
+    *) Bugfix: fix incorrect websocket payload length calculation in the
+       Java language module.
+
+
 Changes with Unit 1.34.1                                         10 Jan 2025
 
     *) Bugfix: fix instability issues due to OpenTelemetry (OTEL) support.
