Add to changelog

1 files changed, 5 insertions, 1 deletions

diff --git a/ChangeLog b/ChangeLog
index 57b34e3..9fbc33a 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -45,6 +45,8 @@ LibreSSL Portable Release Notes:
           - Added endbr64 instructions to amd64 assembly.
           - Imported RFC 5280 policy checking code from BoringSSL and used it
             to replace the old exponential time code.
+          - Modified X509_NAME_get_text_by_[NID|OBJ] to safely return a C string
+            instead of potentially arbitrary bytes
         * New features
           - Added support for truncated SHA-2 and for SHA-3.
         * Compatibility changes
@@ -67,8 +69,10 @@ LibreSSL Portable Release Notes:
           - Fix error checking of i2d_ECDSA_SIG() in ossl_ecdsa_sign().
           - Fixed detection of extended operations (XOP) on AMD hardware.
           - Ensure Montgomery exponentiation is used for the initial RSA blinding.
+          - Policy is always checked in X509 validation, Critical policy extensions
+            are no longer silently ignored.
         * Documentation improvements
-          - Improved documentation of BIO_ctrl(3), BIO_set_info_callback(3), 
+          - Improved documentation of BIO_ctrl(3), BIO_set_info_callback(3),
             BIO_get_info_callback(3), BIO_method_type(3), and BIO_method_name(3).
           - Marked BIO_CB_return(), BIO_cb_pre(), and BIO_cb_post() as intentionally
             undocumented.