From a798b5804ef8571bcfd6609019758014325162c4 Mon Sep 17 00:00:00 2001 From: Ben Taylor <32939606+bjwtaylor@users.noreply.github.com> Date: Mon, 8 Jun 2026 15:49:42 +0100 Subject: [PATCH] Add CVE ID to ChangeLog Co-authored-by: Gilles Peskine Signed-off-by: Ben Taylor <32939606+bjwtaylor@users.noreply.github.com> --- ChangeLog.d/pkcs-free-stale-pointers.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ChangeLog.d/pkcs-free-stale-pointers.txt b/ChangeLog.d/pkcs-free-stale-pointers.txt index b56a62cc57..2c29fed5ef 100644 --- a/ChangeLog.d/pkcs-free-stale-pointers.txt +++ b/ChangeLog.d/pkcs-free-stale-pointers.txt @@ -3,4 +3,4 @@ Security an mbedtls_pkcs7 context across parse -> free -> parse -> free cycles. The function now resets the context after freeing it, ensuring stale signed_data.signers.next pointers cannot be walked by a later free - operation. + operation. CVE-2026-50579