diff --git a/ChangeLog.d/security-issue1569.txt b/ChangeLog.d/security-issue1569.txt
new file mode 100644
index 0000000000..320947ec90
--- /dev/null
+++ b/ChangeLog.d/security-issue1569.txt
@@ -0,0 +1,4 @@
+Security
+   * Improved documentation of mbedtls_ssl_conf_sig_algs() to emphasize that
+     this function only set signature algorithms that are enforced during
+     TLS key exchange and not only on certificate verification.