diff --git a/ChangeLog b/ChangeLog
index e847b65..90c6e6b 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -20,6 +20,10 @@
    * Fix a potential integer overflow in the version verification for DER
      encoded X509 certificates. The overflow would enable maliciously
      constructed certificates to bypass the certificate verification check.
+   * Fix potential integer overflow in the version verification for DER
+     encoded X509 CSRs. The overflow would enable maliciously constructed CSRs
+     to bypass the version verification check. Found by Peng Li/Yueh-Hsun Lin,
+     KNOX Security, Samsung Research America
 
 = mbed TLS 1.3.20 branch released 2017-06-21