From 5cb95431c473281157575b8805e8e890f0192fa1 Mon Sep 17 00:00:00 2001 From: Ronald Cron Date: Wed, 2 Sep 2026 09:34:01 +0200 Subject: [PATCH] Add CVE ID Signed-off-by: Ronald Cron --- ChangeLog | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 76d65c6ac2..e2ced90d7a 100644 --- a/ChangeLog +++ b/ChangeLog @@ -30,7 +30,7 @@ Security unauthenticated plaintext data to be processed across a key change. In servers with MBEDTLS_SSL_EARLY_DATA enabled, this could be exploited by a man-in-the-middle attacker to cause loss of 0-RTT early data. - Reported by Ben Smyth. + Reported by Ben Smyth. CVE-2026-73096 * Fix a remote buffer overflow in (D)TLS with ECDHE-PSK cipher suites when CBC is disabled. Reported by Karnakar Reddy. CVE-2026-50580 * Fix a potential information disclosure in TLS 1.2 servers using session