diff --git a/3rdparty/everest/library/x25519.c b/3rdparty/everest/library/x25519.c
index 68b636f487..526dc37954 100644
--- a/3rdparty/everest/library/x25519.c
+++ b/3rdparty/everest/library/x25519.c
@@ -137,7 +137,7 @@ int mbedtls_x25519_calc_secret( mbedtls_x25519_context *ctx, size_t *olen,
 
     Hacl_Curve25519_crypto_scalarmult( buf, secret, ctx->peer_point);
 
-    /* Wipe the copy and don't let the peer chose a small subgroup point */
+    /* Wipe the copy and don't let the peer choose a small subgroup point */
     mbedtls_platform_zeroize( secret, MBEDTLS_X25519_KEY_SIZE_BYTES );
 
     if( memcmp( buf, secret, MBEDTLS_X25519_KEY_SIZE_BYTES) == 0 )
diff --git a/ChangeLog.d/ecdh-legacy-buffer-overflow.txt b/ChangeLog.d/ecdh-legacy-buffer-overflow.txt
index 490fd2ed6f..54deb795e1 100644
--- a/ChangeLog.d/ecdh-legacy-buffer-overflow.txt
+++ b/ChangeLog.d/ecdh-legacy-buffer-overflow.txt
@@ -3,4 +3,4 @@ Security
      provided output buffer is too small, sometimes (depending on the value of
      the computed shared secret), the function would not return an error as it
      should, but instead write past the end of the buffer. Reported by Eva
-     Crystal (0xiviel) from XSource Security. CVE-2026-35336
+     Crystal (0xiviel) from XSource Security. CVE-2026-35336.