diff --git a/ChangeLog b/ChangeLog
index 7d3c5f26d..9173c3db5 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -8,7 +8,8 @@ Security
 
 Security
    * Fix a potential integer underflow to buffer overread in 
-     mbedtls_rsa_rsaes_oaep_decrypt
+     mbedtls_rsa_rsaes_oaep_decrypt. It is not triggerable remotely in
+     SSL/TLS.
 
 Bugfix
    * Fix bug in mbedtls_mpi_add_mpi() that caused wrong results when the three