diff --git a/ChangeLog b/ChangeLog
index 3469445..f03b83d 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,6 +5,7 @@
 Bugfix
    * Allow loading symlinked certificates. Fixes #3005. Reported and fixed
      by Jonathan Bennett <JBennett@incomsystems.biz> via #3008.
+   * Fix an unchecked call to mbedtls_md() in the x509write module.
 
 Security
    * Fix potential memory overread when performing an ECDSA signature
@@ -14,6 +15,8 @@
      denial of service (application crash or extra resource consumption).
      Found by Auke Zeilstra and Peter Schwabe, using static analysis.
 
+Bugfix
+
 = mbed TLS 2.16.4 branch released 2020-01-15
 
 Security