Commit 4cf52a2fed for openssl.org

commit 4cf52a2feda838b99a9255417844fbd20420159d
Author: kovan <xaum.io@gmail.com>
Date:   Mon Feb 2 11:22:44 2026 +0100

    doc: add CHANGES.md entry for const-correct X509_ATTRIBUTE functions

    Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

    Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com>
    Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
    Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
    Reviewed-by: Tim Hudson <tjh@openssl.org>
    MergeDate: Fri Feb 13 14:46:30 2026
    (Merged from https://github.com/openssl/openssl/pull/29813)

diff --git a/CHANGES.md b/CHANGES.md
index 98e78e5d10..a8682317e5 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -47,6 +47,15 @@ OpenSSL 4.0

    *Bob Beck*

+ * Made X509_ATTRIBUTE accessor functions const-correct. The functions
+   X509_ATTRIBUTE_get0_object(), X509_ATTRIBUTE_get0_type(), and
+   X509_ATTRIBUTE_get0_data() now accept `const X509_ATTRIBUTE *` and
+   return const pointers. Related PKCS12 functions PKCS12_get_attr_gen(),
+   PKCS12_get_attr(), and PKCS8_get_attr() have also been updated to
+   return `const ASN1_TYPE *`.
+
+   *kovan*
+
  * Added CSHAKE as per [SP 800-185]

    *Shane Lontis*