Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576)

2012-01-04 15:33:15 +00:00 · 2012-01-04 15:33:15 +00:00 · 528ef87850
commit 528ef87850
parent 9004c53107
1 changed files with 4 additions and 0 deletions
--- a/4
+++ b/4
@ -4,6 +4,10 @@

 Changes between 1.0.0e and 1.0.0f [xx XXX xxxx]

+  *) Clear bytes used for block padding of SSL 3.0 records.
+     (CVE-2011-4576)
+     [Adam Langley (Google)]
+
  *) Only allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619)
     [Adam Langley (Google)]