diff --git a/ChangeLog.d/security1585.txt b/ChangeLog.d/security1585.txt
new file mode 100644
index 0000000000..f9f21691db
--- /dev/null
+++ b/ChangeLog.d/security1585.txt
@@ -0,0 +1,6 @@
+Security
+   * Ensure 'badmac_seen' and 'dtls_srtp_info' fields from 'mbedtls_ssl_context'
+     are properly zeroized when mbedtls_ssl_session_reset() is called. This
+     could cause premature DTLS connection failure or incorrect DTLS-SRTP
+     parameter inheritance for applications reusing an SSL context.
+     Reported by jjfz123. CVE-2026-50585.