diff --git a/ChangeLog b/ChangeLog
index f2c9db3f5..d36ff4e4a 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -6,6 +6,7 @@ Security
    * Unlike previously documented, enabling MBEDTLS_PSA_HMAC_DRBG_MD_TYPE does
      not cause the PSA subsystem to use HMAC_DRBG: it uses HMAC_DRBG only when
      MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG and MBEDTLS_CTR_DRBG_C are disabled.
+     CVE-2024-45157
 
 Bugfix
    * Fix the build in some configurations when check_config.h is not included.