diff --git a/ChangeLog.d/ssl_tls13_prepare_new_session_ticket-psa_get_random.txt b/ChangeLog.d/ssl_tls13_prepare_new_session_ticket-psa_get_random.txt
index 0fc8b0aa85..b020546b12 100644
--- a/ChangeLog.d/ssl_tls13_prepare_new_session_ticket-psa_get_random.txt
+++ b/ChangeLog.d/ssl_tls13_prepare_new_session_ticket-psa_get_random.txt
@@ -1,5 +1,5 @@
 Security
    * Fix a bug where mbedtls_ssl_read() and mbedtls_ssl_write() could return
-     1 instead of an error code if the random generator fails if a server
-     calls these functions before the end of a TLS 1.3 handshake.
+     1 instead of an error code if the random generator failed when a server
+     called these functions before the end of a TLS 1.3 handshake.
      Reported by Mohammad Seet (mhdsait101). CVE-2026-40294