diff --git a/ChangeLog.d/1583-1584-ssl-transcript-errors.txt b/ChangeLog.d/1583-1584-ssl-transcript-errors.txt
new file mode 100644
index 0000000000..921b40b11d
--- /dev/null
+++ b/ChangeLog.d/1583-1584-ssl-transcript-errors.txt
@@ -0,0 +1,5 @@
+Bugfix
+   * Fix a bug where errors during transcript-hash computation for TLS 1.2
+     extended master secret and TLS 1.3 resumption master secret could be
+     ignored instead of causing the handshake to fail. Fixes #1583 and #1584.
+