diff --git a/ChangeLog b/ChangeLog
index ce0e831..3da4a84 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -3,8 +3,8 @@
 = mbed TLS x.x.x branch released xxxx-xx-xx
 
 Security
-   * Fix dhm_check_range() failing to detect trivial subgroups and essentially
-     always returning 0. Reported by prashantkspatil.
+   * Fix dhm_check_range() failing to detect trivial subgroups and potentially
+     leaking 1 bit of the private key. Reported by prashantkspatil.
 
 Bugfix
    * Fix ssl_parse_record_header() to silently discard invalid DTLS records