Update ChangeLog to add CVE

Co-authored-by: Gilles Peskine <[email protected]>
Signed-off-by: Ben Taylor <[email protected]>
This commit is contained in:
Ben Taylor
2026-06-24 11:05:44 +01:00
committed by Ben Taylor
co-authored by Gilles Peskine
parent 62d3b1ecc0
commit 3e6608a5b6
@@ -4,7 +4,7 @@ Security
handshake to fail. This could allow a handshake to continue with a master
secret that was not correctly bound to the handshake transcript,
undermining the security guarantees of the extended master secret
extension. Report by Mathew Gretton-Dann.
extension. Report by Mathew Gretton-Dann. CVE-2026-50581
* Fix a TLS 1.3 server-side error-handling bug affecting session ticket
generation. Under rare conditions, such as memory allocation failures
while computing the resumption master secret, the server could issue