commit c2a1dd98d5047851282e11f464ba59981a625b38
author Hanno Becker <hanno.becker@arm.com> Wed Oct 17 14:53:05 2018 +0100
committer Hanno Becker <hanno.becker@arm.com> Wed Oct 17 14:55:03 2018 +0100
tree 008334bd8f3c131f7729a512ac0390c72730392a
parent 3aab4cc48632937f3142f09c24a17af537daae3d

Adapt ChangeLog

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 8c82d08..18f9d80 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -7,6 +7,9 @@
       MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095
     * Fix a bug in the update function for SSL ticket keys which previously
       invalidated keys of a lifetime of less than a 1s. Fixes #1968.
+    * Fix a bug in the record decryption routine ssl_decrypt_buf()
+      which lead to accepting properly authenticated but improperly
+      padded records in case of CBC ciphersuites using Encrypt-then-MAC.
 
 Changes
    * Add tests for session resumption in DTLS.