diff --git a/ChangeLog b/ChangeLog
index 5243ca7..341ae91 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -9,6 +9,9 @@
      (default: 8) intermediates, even when it was not trusted. Could be
      triggered remotely on both sides. (With auth_mode set to required
      (default), the handshake was correctly aborted.)
+   * Realiably zeroize sensitive data after use in AES example applications
+     programs/aes/aescrypt2 and programs/aes/crypt_and_hash.
+     Found by Laurent Simon.
 
 API Changes
    * Certificate verification functions now set flags to -1 in case the full