diff --git a/ChangeLog.d/security1585.txt b/ChangeLog.d/security1585.txt
new file mode 100644
index 0000000000..5aa1bc81f1
--- /dev/null
+++ b/ChangeLog.d/security1585.txt
@@ -0,0 +1,6 @@
+Security
+   * Ensure 'dtls_srtp_info' field from 'mbedtls_ssl_context'
+     is properly zeroized when mbedtls_ssl_session_reset() is called. This
+     could cause incorrect DTLS-SRTP parameter inheritance for applications
+     reusing an SSL context.
+     Reported by jjfz123. CVE-2026-50585.