Support TLS_FALLBACK_SCSV.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index f67fe393672e68c66804e26e1cfd0e9739fb68c8..7c25d4a8572976296f3653fd1424ef441f667398 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -305,6 +305,12 @@
 
  Changes between 1.0.1h and 1.0.2 [xx XXX xxxx]
 
+  *) Add support for TLS_FALLBACK_SCSV.
+     Client applications doing fallback retries should call
+     SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
+     (CVE-2014-3566)
+     [Adam Langley, Bodo Moeller]
+
   *) Accelerated NIST P-256 elliptic curve implementation for x86_64
      (other platforms pending).
      [Shay Gueron (Intel Corp), Andy Polyakov]