SSG reaction wrt to "POODLE" CVE flaw required?