diff --git a/ChangeLog b/ChangeLog
index 1b1028bff..6bf2a5a6d 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -25,6 +25,9 @@ Security
      (default: 8) intermediates, even when it was not trusted. Could be
      triggered remotely on both sides. (With auth_mode set to required
      (default), the handshake was correctly aborted.)
+   * Realiably zeroize sensitive data after use in AES example applications
+     programs/aes/aescrypt2 and programs/aes/crypt_and_hash.
+     Found by Laurent Simon.
 
 Features
    * Add the functions mbedtls_platform_setup() and mbedtls_platform_teardown()