From 931b9831593cdab547f314f9dc33c2bf0909025f Mon Sep 17 00:00:00 2001
From: Valerio Setti <vsetti@baylibre.com>
Date: Mon, 22 Jun 2026 14:55:31 +0200
Subject: [PATCH] changelog: add reset for some fields of the SSL context
 structure

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
---
 ChangeLog.d/security1585.txt | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100644 ChangeLog.d/security1585.txt

diff --git a/ChangeLog.d/security1585.txt b/ChangeLog.d/security1585.txt
new file mode 100644
index 0000000000..f9f21691db
--- /dev/null
+++ b/ChangeLog.d/security1585.txt
@@ -0,0 +1,6 @@
+Security
+   * Ensure 'badmac_seen' and 'dtls_srtp_info' fields from 'mbedtls_ssl_context'
+     are properly zeroized when mbedtls_ssl_session_reset() is called. This
+     could cause premature DTLS connection failure or incorrect DTLS-SRTP
+     parameter inheritance for applications reusing an SSL context.
+     Reported by jjfz123. CVE-2026-50585.