Add CHANGES entry

To match changes in #25526

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25536)

diff --git a/CHANGES.md b/CHANGES.md
index 305296ac3edcd9aa0a9ce72c493b1281e881a71d..cc6baa6934cd414cb0d4e51420b16740975d5ad8 100644 (file)
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -37,6 +37,11 @@ OpenSSL 3.4
 
 ### Changes between 3.3 and 3.4 [xx XXX xxxx]
 
+ * For the FIPS provider only, replaced the primary DRBG with a continuous
+   health check module.  This also removes the now forbidden DRBG chaining.
+
+   *Paul Dale*
+
  * Improved base64 BIO correctness and error reporting.
 
    *Viktor Dukhovni*