Fix SSL_BUFFER_LEN
diff --git a/ChangeLog b/ChangeLog
index ae1a572..e554f8d 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -34,9 +34,13 @@
* Fix symlink command for cross compiling with CMake (found by Andre
Heinecke)
* Fix DER output of gen_key app (found by Gergely Budai)
- * Very small packets were incorrectly rejected when truncated HMAC was in
+ * Very small records were incorrectly rejected when truncated HMAC was in
use with some ciphersuites and versions (RC4 in all versions, CBC with
versions < TLS 1.1).
+ * Very large records using more than 224 bytes of padding were incorrectly
+ rejected with CBC-based ciphersuites and TLS >= 1.1
+ * Very large records using less padding could cause a buffer overread of up
+ to 32 bytes with CBC-based ciphersuites and TLS >= 1.1
= PolarSSL 1.3.7 released on 2014-05-02
Features