Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576)

diff --git a/CHANGES b/CHANGES
index 193b5b5d47027c8568fd126b2f80c4df7ee7fb56..67cedf04c9e1ba6367c8cbc6a44b50583bbb5282 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,10 @@
 
  Changes between 1.0.0e and 1.0.0f [xx XXX xxxx]
 
+  *) Clear bytes used for block padding of SSL 3.0 records.
+     (CVE-2011-4576)
+     [Adam Langley (Google)]
+
   *) Only allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619)
      [Adam Langley (Google)]