condense and refine changelog a bitv2.5.2

1 files changed, 9 insertions, 18 deletions

diff --git a/ChangeLog b/ChangeLog
index ddb09b0..c9af9d2 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -30,39 +30,30 @@ LibreSSL Portable Release Notes:
 
 2.5.2 - Security features and bugfixes
 
-        * Improved portability of ocspcheck(1)
+        * Added the recallocarray(3) memory allocation function, and converted
+          various places in the library to use it, such as CBB and BUF_MEM_grow.
+          recallocarray(3) is similar to reallocarray. Newly allocated memory
+          is cleared similar to calloc(3). Memory that becomes unallocated
+          while shrinking or moving existing allocations is explicitly
+          discarded by unmapping or clearing to 0
 
-        * Fixed assorted memory leaks and error handling.
+        * Added new root CAs from SECOM Trust Systems / Security Communication
+          of Japan.
 
-        * Removed STREEBOG 512 MAC
-
-        * Addednew root CAs from SECOM Trust Systems / Security Communication
-          of Japan
-
-        * Added EVP interface for MD5+SHA1 hashes
+        * Added EVP interface for MD5+SHA1 hashes.
 
         * Fixed DTLS client failures when the server sends a certificate
           request.
 
-        * Many new regression tests
-
         * Correct handling of padding when upgrading an SSLv2 challenge into
           an SSLv3/TLS connection.
 
-        * Added recallocarray(1) memory allocation function, converted various
-          places in the library to use it, such as CBB and BUF_MEM_grow.
-          This function ensures that when a private memory buffer is resized,
-          freed memory is explicitly cleared before being returned to the
-          heap.
-
         * Allow protocols and ciphers to be set on a TLS config object in
           libtls.
 
         * Improved nc(1) TLS handshake CPU usage and server-side error
           reporting.
 
-        * Removed handshake digest code and replaced with handshake hash.
-
 2.5.1 - Bug and security fixes, new features, documentation updates
 
         * X509_cmp_time() now passes a malformed GeneralizedTime field as an