diff --git a/changes/bug2385 b/changes/bug2385
new file mode 100644
index 0000000000..e7151f49eb
--- /dev/null
+++ b/changes/bug2385
@@ -0,0 +1,5 @@
+ o Minor bugfixes:
+   - Clear keys and key-derived material left on the stack in rendservice.c
+     and rendclient.c
+   - Check return value of crypto_pk_write_private_key_to_string() in
+     end_service_load_keys()