From: emery <anr1629@rit.edu>
Date: Mon, 7 Apr 2025 15:02:00 +0000 (-0400)
Subject: Updated the change log to include SSLv3 being disabled by default.
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=6509f18c9fdbf76a63e8c6056da989cd047a7fb2;p=thirdparty%2Fopenssl.git

Updated the change log to include SSLv3 being disabled by default.

This change was implemented into version 1.1.0 and onward. The last version that had SSLv3 enabled was version 1.0.2h, which is why the addition was made where it is.

CLA: trivial

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Yang <kaishen.yy@antfin.com>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/27289)
---

diff --git a/CHANGES.md b/CHANGES.md
index a66ce7654dc..d2cc795e31b 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -6624,6 +6624,11 @@ OpenSSL 1.1.0
 
    *Rob Percival <robpercival@google.com>*
 
+ * SSLv3 is by default disabled at build-time. Builds that are not
+   configured with "enable-ssl3" will not support SSLv3.
+
+   *Kurt Roeckx*
+
 OpenSSL 1.0.2
 -------------