diff --git a/CHANGELOG b/CHANGELOG
index 625f9036e..312a9bb62 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -3,7 +3,7 @@ CHANGELOG Roundcube Webmail
 
 - Fix regression in LDAP fuzzy search where it always used prefix search instead (#5713)
 - Fix bug where base_dn setting was ignored inside group_filters (#5720)
-- Password: Fix security issue in virtualmin and sasl drivers
+- Password: Fix security issue in virtualmin and sasl drivers [CVE-2017-8114]
 
 RELEASE 1.1.8
 -------------