diff --git a/ChangeLog b/ChangeLog
index 29b1aef55..7f2b033c9 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -8,6 +8,8 @@ Security
      (not triggerable remotely in (D)TLS).
    * Fix missing padding length check in mbedtls_rsa_rsaes_pkcs1_v15_decrypt
      required by PKCS1 v2.2
+   * Fix potential integer overflow to buffer overflow in
+     mbedtls_rsa_rsaes_pkcs1_v15_encrypt and mbedtls_rsa_rsaes_oaep_encrypt
 
 Bugfix
    * Fix bug in mbedtls_mpi_add_mpi() that caused wrong results when the three