From 890c8a1d698f7121105b6c1c460629f5dfd93dc4 Mon Sep 17 00:00:00 2001
From: Valerio Setti <vsetti@baylibre.com>
Date: Mon, 22 Jun 2026 14:55:31 +0200
Subject: [PATCH] changelog: add reset for some fields of the SSL context
 structure

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
---
 ChangeLog.d/security1585.txt | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100644 ChangeLog.d/security1585.txt

diff --git a/ChangeLog.d/security1585.txt b/ChangeLog.d/security1585.txt
new file mode 100644
index 0000000000..5aa1bc81f1
--- /dev/null
+++ b/ChangeLog.d/security1585.txt
@@ -0,0 +1,6 @@
+Security
+   * Ensure 'dtls_srtp_info' field from 'mbedtls_ssl_context'
+     is properly zeroized when mbedtls_ssl_session_reset() is called. This
+     could cause incorrect DTLS-SRTP parameter inheritance for applications
+     reusing an SSL context.
+     Reported by jjfz123. CVE-2026-50585.