Issue #26644: Raise ValueError for negative SSLSocket.recv() and read()
diff --git a/Misc/NEWS b/Misc/NEWS
index 0ecd9d1..8c193f6 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -61,6 +61,9 @@
 Library
 -------
 
+- Issue #26644: Raise ValueError rather than SystemError when a negative
+  length is passed to SSLSocket.recv() or read().
+
 - Issue #24266: Ctrl+C during Readline history search now cancels the search
   mode when compiled with Readline 7.