diff --git a/ChangeLog b/ChangeLog
index 458a90f..ea1dfa0 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -130,6 +130,11 @@
      extensions in CSRs and CRTs that caused these bitstrings to not be encoded
      correctly as trailing zeroes were not accounted for as unused bits in the
      leading content octet. Fixes #1610.
+   * Fix missing bounds checks in X.509 parsing functions that could
+     lead to successful parsing of ill-formed X.509 CRTs. Fixes #2437.
+   * Fix multiple X.509 functions previously returning ASN.1 low-level error
+     codes to always wrap these codes into X.509 high level error codes before
+     returning. Fixes #2431.
 
 Changes
    * Reduce RAM consumption during session renegotiation by not storing