diff --git a/debian/changelog b/debian/changelog
index b5c5b266d..24d43df65 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -407,7 +407,7 @@ linux (4.9.6-1) UNRELEASED; urgency=medium
     - Input: ALPS - fix TrackStick support for SS5 hardware
     - libceph: ceph_x_encrypt_buflen() takes in_len
     - libceph: old_key in process_one_ticket() is redundant
-    - libceph: introduce ceph_x_encrypt_offset()
+    - libceph: introduce ceph_x_encrypt_offset() (CVE-2016-10153)
     - libceph: introduce ceph_crypt() for in-place en/decryption
     - libceph: rename and align ceph_x_authorizer::reply_buf
     - libceph: tweak calcu_signature() a little