diff --git a/ChangeLog b/ChangeLog
index d1a87be..1b6770a 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -16,6 +16,8 @@
 Features
    * Add function pk_check_pair() to test if public and private keys match.
    * Add x509_crl_parse_der().
+   * Add compile-time option POLARSSL_X509_MAX_INTERMEDIATE_CA to limit the
+     length of an X.509 verification chain.
 
 Bugfix
    * User set CFLAGS were ignore by Cmake with gcc (introduced in 1.3.9, found