Update CHANGES.md

Co-authored-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29385)

diff --git a/CHANGES.md b/CHANGES.md
index d6ae4aa6147ff879366efba5928344d6c1f37e37..0e5a3c813f634a0de3b9798e317e6d992a2676bb 100644 (file)
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -36,10 +36,11 @@ OpenSSL 4.0
 
    *Norbert Pocs*
 
- * libcrypto no longer arms OPENSSL_cleanup() as atexit(3) handler by default.
-   Memory leak detectors now report there is allocated and reachable memory
-   at application exit. To avoid such leak detection the application must
-   call OPENSSL_cleanup() before main() exits.
+ * libcrypto no longer cleans up globally allocated data on process exit. This data
+   is cleaned up automatically by the OS instead. Some memory leak detectors
+   may report spurious allocated and reachable memory at application exit. To
+   avoid such spurious leak detection reports the application may call
+   OPENSSL_cleanup() before the process exits.
 
    *Alexandr Nedvedicky*