Clarification about Montgomery problem

diff --git a/CHANGES b/CHANGES
index 8fe0b9b5b3826be115d891fb31d329600ca4771c..a625423887e3e92631adf85e0aca007bbc66b38f 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,8 +4,10 @@
 
  Changes between 0.9.5a and 0.9.6  [xx XXX 2000]
 
-  *) Disable optimized squaring variant in BN_mod_mul_montgomery,
+  *) Disable 'optimized' squaring variant in BN_mod_mul_montgomery,
      it can return incorrect results.
+     (Note: The buggy variant was not enabled in OpenSSL 0.9.5a,
+     but it was in 0.9.6-beta[12].)
      [Bodo Moeller]
 
   *) Disable the check for content being present when verifying detached