diff --git a/ChangeLog.d/fix-info-leak-in-ssl.txt b/ChangeLog.d/fix-info-leak-in-ssl.txt
new file mode 100644
index 0000000000..2a0309fc40
--- /dev/null
+++ b/ChangeLog.d/fix-info-leak-in-ssl.txt
@@ -0,0 +1,6 @@
+Security
+   * Fix a potential information disclosure in TLS 1.2 servers using session
+     tickets. If the session ticket write callback failed without setting the
+     lifetime output parameter, Mbed TLS could send 4 bytes of uninitialized
+     stack memory to the peer in the NewSessionTicket message. Fixes #1570.
+     Reported by James Love. CVE-2026-50586.