diff --git a/ChangeLog b/ChangeLog
index a8cb94a..6f55c32 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -28,6 +28,7 @@
      switch back to random with POLARSSL_SSL_AEAD_RANDOM_IV in config.h).
    * Blind RSA private operations even when POLARSSL_RSA_NO_CRT is defined.
    * ssl_set_own_cert() now returns an error on key-certificate mismatch.
+   * Forbid repeated extensions in X.509 certificates.
 
 = PolarSSL 1.3.9 released 2014-10-20
 Security