diff --git a/ChangeLog b/ChangeLog
index 3fa559364..7d7889df0 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -8,7 +8,8 @@ Security
 
 Security
    * Fix a potential integer underflow to buffer overread in 
-     mbedtls_rsa_rsaes_oaep_decrypt
+     mbedtls_rsa_rsaes_oaep_decrypt. It is not triggerable remotely in
+     SSL/TLS.
 
 Bugfix
    * Fix bug in mbedtls_mpi_add_mpi() that caused wrong results when the three