From cf6da05304d554aaa885151451aa4ecaa977e601 Mon Sep 17 00:00:00 2001
From: Bodo Moeller <bodo@openssl.org>
Date: Wed, 15 Oct 2014 04:03:28 +0200
Subject: Support TLS_FALLBACK_SCSV.

Reviewed-by: Stephen Henson <steve@openssl.org>
---
 CHANGES | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'CHANGES')

diff --git a/CHANGES b/CHANGES
index f67fe39367..7c25d4a857 100644
--- a/CHANGES
+++ b/CHANGES
@@ -305,6 +305,12 @@
 
  Changes between 1.0.1h and 1.0.2 [xx XXX xxxx]
 
+  *) Add support for TLS_FALLBACK_SCSV.
+     Client applications doing fallback retries should call
+     SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
+     (CVE-2014-3566)
+     [Adam Langley, Bodo Moeller]
+
   *) Accelerated NIST P-256 elliptic curve implementation for x86_64
      (other platforms pending).
      [Shay Gueron (Intel Corp), Andy Polyakov]
-- 
cgit v1.2.3