Fixes different off by ones
diff --git a/ChangeLog b/ChangeLog
index 4940016..29fb341 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -12,6 +12,11 @@
    * Fix the key_app_writer example which was writing a leading zero byte which
      was creating an invalid ASN.1 tag. Found by Aryeh R. Fixes #1257.
 
+Changes
+   * Adds of lengths checks in different functions (not a security issue as
+     original buffer is overgrown) thanks to Philippe Antoine from Catena
+     cyber. #1663.
+
 = mbed TLS 2.7.4 branch released 2018-06-18
 
 Bugfix