From e35bdd3ed6cac3f8e1977218fc7e5e165783a4f3 Mon Sep 17 00:00:00 2001
From: emery <anr1629@rit.edu>
Date: Mon, 7 Apr 2025 11:02:00 -0400
Subject: [PATCH] Updated the change log to include SSLv3 being disabled by
 default.

This change was implemented into version 1.1.0 and onward. The last version that had SSLv3 enabled was version 1.0.2h, which is why the addition was made where it is.

CLA: trivial

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Yang <kaishen.yy@antfin.com>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/27289)

(cherry picked from commit 6509f18c9fdbf76a63e8c6056da989cd047a7fb2)
---
 CHANGES.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/CHANGES.md b/CHANGES.md
index 10949a685c8..472b50c6d78 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -5931,6 +5931,11 @@ OpenSSL 1.1.0
 
    *Rob Percival <robpercival@google.com>*
 
+ * SSLv3 is by default disabled at build-time. Builds that are not
+   configured with "enable-ssl3" will not support SSLv3.
+
+   *Kurt Roeckx*
+
 OpenSSL 1.0.2
 -------------
 
-- 
2.47.2