From: Dr. Stephen Henson <steve@openssl.org>
Date: Wed, 4 Jan 2012 15:33:15 +0000 (+0000)
Subject: Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576)
X-Git-Tag: OpenSSL_1_0_0f~6
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=528ef87850f54676d13ff17d40a166cf8f127331;p=oweals%2Fopenssl.git

Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576)
---

diff --git a/CHANGES b/CHANGES
index 193b5b5d47..67cedf04c9 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,10 @@
 
  Changes between 1.0.0e and 1.0.0f [xx XXX xxxx]
 
+  *) Clear bytes used for block padding of SSL 3.0 records.
+     (CVE-2011-4576)
+     [Adam Langley (Google)]
+
   *) Only allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619)
      [Adam Langley (Google)]