From 0f82ff2d254059cbbf32458883e1704a37a1ea5b Mon Sep 17 00:00:00 2001 From: Ronald Cron Date: Wed, 2 Sep 2026 09:37:47 +0200 Subject: [PATCH] Add CVE ID Signed-off-by: Ronald Cron --- ChangeLog | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 698166b0b6..dcbcec1a96 100644 --- a/ChangeLog +++ b/ChangeLog @@ -41,7 +41,7 @@ Security unauthenticated plaintext data to be processed across a key change. In servers with MBEDTLS_SSL_EARLY_DATA enabled, this could be exploited by a man-in-the-middle attacker to cause loss of 0-RTT early data. - Reported by Ben Smyth. + Reported by Ben Smyth. CVE-2026-73096 * Fix a possible buffer overflow in mbedtls_ecdh_calc_secret(): when the provided output buffer is too small, sometimes (depending on the value of the computed shared secret), the function would not return an error as it