diff --git a/ChangeLog.d/tls13-hrr-selected-group.txt b/ChangeLog.d/tls13-hrr-selected-group.txt
index 20d7a18fbd..c318b393fc 100644
--- a/ChangeLog.d/tls13-hrr-selected-group.txt
+++ b/ChangeLog.d/tls13-hrr-selected-group.txt
@@ -2,4 +2,4 @@ Security
    * Fix TLS 1.3 clients to reject a HelloRetryRequest whose selected group was
      not advertised in the original ClientHello. Reported by
      Din Asotić / Xiangdong Li, Beijing University of Posts and
-     Telecommunications (BUPT)
+     Telecommunications (BUPT). CVE-2026-25832