diff --git a/CHANGELOG.md b/CHANGELOG.md
index dce53c44..a92845b5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,7 @@
 -   Fix purging default file from HTTP cache
 -   Fix parsing S3 storage definition from environment variable
 -   Fix checking length of CPU time array ([#10](https://github.com/datarhei/core/issues/10))
+-   Fix RTMP DoS attack (thx Johannes Frank)
 -   Deprecate ENV names that do not correspond to JSON name
 
 ### Core v16.11.0 > v16.12.0