diff --git a/CHANGELOG b/CHANGELOG
index 48202fec7..7a6bb7236 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -6,7 +6,7 @@ CHANGELOG Roundcube Webmail
 - Fix regression in LDAP fuzzy search where it always used prefix search instead (#5713)
 - Fix bug where namespace prefix could not be truncated on folders list if show_real_foldernames=true (#5695)
 - Fix bug where base_dn setting was ignored inside group_filters (#5720)
-- Password: Fix security issue in virtualmin and sasl drivers
+- Password: Fix security issue in virtualmin and sasl drivers [CVE-2017-8114]
 
 RELEASE 1.2.4
 -------------