From 0a8fda272a5a0abef3b47c91bed37185d5a726b1 Mon Sep 17 00:00:00 2001
From: Minos Galanakis <minos.galanakis@arm.com>
Date: Wed, 1 Jul 2026 12:00:14 +0100
Subject: [PATCH] ChangeLog: Removed CVE-ID

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
---
 ChangeLog | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index 643cc92bad..4212640731 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -63,7 +63,7 @@ Security
    * Fix a bug where mbedtls_ssl_read() and mbedtls_ssl_write() could return
      1 instead of an error code if the random generator failed when a server
      called these functions before the end of a TLS 1.3 handshake.
-     Reported by Mohammad Seet (mhdsait101). CVE-2026-40294
+     Reported by Mohammad Seet (mhdsait101).
    * Fix TLS 1.3 clients to reject a HelloRetryRequest whose selected group was
      not advertised in the original ClientHello. Reported independently by
      Din Asotić / Xiangdong Li, Beijing University of Posts and