Update CHANGES.txt for 1.34.2

ac000 · ac000 · commit f7821cb1832b · 2025-03-03T14:32:36.000Z
Signed-off-by: Andrew Clayton &lt;a.clayton@nginx.com&gt;
diff --git a/source/CHANGES.txt b/source/CHANGES.txt
@@ -1,3 +1,13 @@
+Changes with Unit 1.34.2                                         26 Feb 2025
+
+    *) Security: fix missing websocket payload length validation in the Java
+       language module which could lead to Java language module processes
+       consuming excess CPU. (CVE-2025-1695).
+
+    *) Bugfix: fix incorrect websocket payload length calculation in the
+       Java language module.
+
+
 Changes with Unit 1.34.1                                         10 Jan 2025
 
     *) Bugfix: fix instability issues due to OpenTelemetry (OTEL) support.
