From ece41aa84d7879d7e55c59e955a5884b541f7f3b Mon Sep 17 00:00:00 2001 From: Minos Galanakis Date: Wed, 1 Jul 2026 12:00:14 +0100 Subject: [PATCH] ChangeLog: Removed CVE-ID Signed-off-by: Minos Galanakis --- ChangeLog | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 44dbe3ca2b..76d65c6ac2 100644 --- a/ChangeLog +++ b/ChangeLog @@ -61,7 +61,7 @@ Security * Fix a bug where mbedtls_ssl_read() and mbedtls_ssl_write() could return 1 instead of an error code if the random generator failed when a server called these functions before the end of a TLS 1.3 handshake. - Reported by Mohammad Seet (mhdsait101). CVE-2026-40294 + Reported by Mohammad Seet (mhdsait101). * Fix TLS 1.3 clients to reject a HelloRetryRequest whose selected group was not advertised in the original ClientHello. Reported independently by Din Asotić / Xiangdong Li, Beijing University of Posts and