Merge pull request #1687 from minosgalanakis/security/mlfbyt4c_tls13_policy_bypass_changelog_3.6

Add Attribution CVE mbedtls:mbedtls-3.6-restricted

ChangeLog.d/chacha20-counter-overflow.txt

@@ -1,4 +1,4 @@
 Security
    * Reject ChaCha20 operations that would make the 32-bit block counter wrap
      around, which could otherwise reuse keystream and compromise
-     confidentiality. CVE-2026-50584
+     confidentiality. Reported by jiliang. CVE-2026-50584

ChangeLog.d/ecp-modp-side-channel.txt

@@ -2,4 +2,5 @@ Security
    * Fix a side channel in ECC computations that allows a powerful local
      attacker (typically, untrusted OS attacking a secure enclave) to fully
      recover long-term secret keys. Found and reported by Alejandro Cabrera
-     Aldaya from Tampere University.
+     Aldaya from Tampere University. CVE-2026-54435
+

ChangeLog.d/mbedtls_pk_ecc_set_pubkey.txt

@@ -1,3 +1,4 @@
 Security
    * Fix a 1-byte buffer overread when parsing a malformed ECC public key
-     in the PK module.
+     in the PK module. CVE-2026-50583
+

ChangeLog.d/security-issue1569.txt

@@ -1,4 +1,7 @@
 Security
    * Improved documentation of mbedtls_ssl_conf_sig_algs() to emphasize that
      this function only sets signature algorithms that are enforced during
-     TLS key exchange and not on certificate verification.
+     TLS key exchange and not on certificate verification. Reported by
+     Xiangdong Li, Beijing University of Posts and Telecommunications (BUPT).
+     CVE-2026-54441
+

ChangeLog.d/tls13-hrr-selected-group.txt

@@ -1,5 +1,7 @@
 Security
    * Fix TLS 1.3 clients to reject a HelloRetryRequest whose selected group was
-     not advertised in the original ClientHello. Reported by
+     not advertised in the original ClientHello. Reported independently by
      Din Asotić / Xiangdong Li, Beijing University of Posts and
-     Telecommunications (BUPT)
+     Telecommunications (BUPT), and NVIDIA Project Vanessa.
+     CVE-2026-25832.
+