diff --git a/ChangeLog b/ChangeLog
index f7e00c3..121fbd5 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -47,6 +47,9 @@
      cause buffer bound checks to be bypassed. Found by Eyal Itkin.
    * Fixed heap overreads in mbedtls_x509_get_time(). Found by Peng
      Li/Yueh-Hsun Lin, KNOX Security, Samsung Research America.
+   * Fix potential memory leak in mbedtls_x509_crl_parse(). The leak was caused
+     by missing calls to mbedtls_pem_free() in cases when a
+     MBEDTLS_ERR_PEM_NO_HEADER_FOOTER_PRESENT error was encountered.
 
 = mbed TLS 2.4.1 branch released 2016-12-13