- markus@cvs.openbsd.org 2009/01/26 09:58:15

[openssh.git] / ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 3946bf6b951a626e434b542c6b1c9b7c1951e3cb..ee79119fa1ea27b20dce70c34fa493f7007b5932 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -80,6 +80,12 @@
    - naddy@cvs.openbsd.org 2009/01/24 17:10:22
      [ssh_config.5 sshd_config.5]
      sync list of preferred ciphers; ok djm@
+   - markus@cvs.openbsd.org 2009/01/26 09:58:15
+     [cipher.c cipher.h packet.c]
+     Work around the CPNI-957037 Plaintext Recovery Attack by always
+     reading 256K of data on packet size or HMAC errors (in CBC mode only).
+     Help, feedback and ok djm@
+     Feedback from Martin Albrecht and Paterson Kenny
 
 20090107
  - (djm) [uidswap.c] bz#1412: Support >16 supplemental groups in OS X.