diff --git a/ChangeLog.d/security-issue1569.txt b/ChangeLog.d/security-issue1569.txt
index c7d3ca0782..c9e285b80e 100644
--- a/ChangeLog.d/security-issue1569.txt
+++ b/ChangeLog.d/security-issue1569.txt
@@ -1,4 +1,7 @@
 Security
    * Improved documentation of mbedtls_ssl_conf_sig_algs() to emphasize that
      this function only sets signature algorithms that are enforced during
-     TLS key exchange and not on certificate verification.
+     TLS key exchange and not on certificate verification. Reported by
+     Xiangdong Li, Beijing University of Posts and Telecommunications (BUPT).
+     CVE-2026-54441
+
diff --git a/ChangeLog.d/tls13-hrr-selected-group.txt b/ChangeLog.d/tls13-hrr-selected-group.txt
index 20d7a18fbd..4c338480f6 100644
--- a/ChangeLog.d/tls13-hrr-selected-group.txt
+++ b/ChangeLog.d/tls13-hrr-selected-group.txt
@@ -1,5 +1,7 @@
 Security
    * Fix TLS 1.3 clients to reject a HelloRetryRequest whose selected group was
-     not advertised in the original ClientHello. Reported by
+     not advertised in the original ClientHello. Reported independently by
      Din Asotić / Xiangdong Li, Beijing University of Posts and
-     Telecommunications (BUPT)
+     Telecommunications (BUPT), and NVIDIA Project Vanessa.
+     CVE-2026-25832.
+