- Better checking for reading over buffer boundaries
 - Zeroize altSubjectName chain memory before use

diff --git a/ChangeLog b/ChangeLog
index e00643b..39c45af 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -45,6 +45,7 @@
    * Handle encryption with private key and decryption with public key as per
    	 RFC 2313
    * Handle empty certificate subject names
+   * Prevent reading over buffer boundaries on X509 certificate parsing
 
 Security
    * Fixed potential memory corruption on miscrafted client messages (found by