CHANGES.md: CRL Certificate Issuer and IDP extensions

Updated CHANGES.md for commit e2990825a238363c4afac60f5f0e335c3fd33f28

Co-authored-by: Viktor Dukhovni <viktor1ghub@dukhovni.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29136)

diff --git a/CHANGES.md b/CHANGES.md
index 6ac08a2ca464ee83d7bf1d9db4622fec567790fb..a57ed8ab7fe4bbcf3564da03ac313b64754b13ec 100644 (file)
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -52,6 +52,11 @@ OpenSSL 4.0
 
    *Igor Ustinov*
 
+ * Reject CRLs with a Certificate Issuer extension in a certificate revocation
+   entry unless the Indirect flag is set to TRUE in the IDP extension of the CRL.
+
+   *Daniel Kubec*
+
 OpenSSL 3.6
 -----------