===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/74.html,v
retrieving revision 1.7
retrieving revision 1.8
diff -u -r1.7 -r1.8
--- www/74.html	2023/10/04 08:42:20	1.7
+++ www/74.html	2023/10/04 15:00:14	1.8
@@ -237,12 +237,12 @@
     <li>Removed most public symbols that were deprecated in OpenSSL 0.9.8.
     <li>Removed the public X9.31 API (RSA_X931_PADDING is still available).
     <li>Removed Cipher Text Stealing mode.
-      openssl(1) nseq command.
     <li>Removed ENGINE support, including ECDH_METHOD and ECDSA_METHOD.
     <li>Removed COMP, DSO, dynamic loading of conf modules and support for
       custom ex_data and error stacks.
     <li>Removed proxy certificate (RFC 3820) support.
     <li>Removed SXNET and NETSCAPE_CERT_SEQUENCE support including the
+      openssl(1) nseq command.
     <li>ENGINE support was removed and OPENSSL_NO_ENGINE is set. In spite
       of this, some stub functions are provided to avoid patching some
       applications that do not honor OPENSSL_NO_ENGINE.
@@ -303,7 +303,8 @@
     <li>Correctly handle negative input to various BIGNUM functions.
     <li>Ensure ERR_load_ERR_strings() does not set errno unexpectedly.
     <li>Fix error checking of i2d_ECDSA_SIG() in ossl_ecdsa_sign().
-    <li>Fixed aliasing issue in BN_mod_inverse().
+    <li>Fixed aliasing issue in BN_mod_inverse(). Disallowed aliasing of result
+      and modulus in various BN_mod_* functions.
     <li>Fixed detection of extended operations (XOP) on AMD hardware.
     <li>Ensure Montgomery exponentiation is used for the initial RSA blinding.
     <li>Policy is always checked in X509 validation. Critical policy extensions
@@ -312,7 +313,6 @@
     <li>Add missing pointer invalidation in SSL_free().
     <li>Fixed X509err() and X509V3err() and their internal versions.
     <li>Ensure that OBJ_obj2txt() always returns a C string again.
-    <li>Fixed aliasing issue in BN_mod_inverse().
     <li>Made EVP_PKEY_set1_hkdf_key() fail on a NULL key.
     <li>On socket errors in the poll loop, netcat could issue system calls
       on invalidated file descriptors.