diff --git a/debian/changelog b/debian/changelog
index 81f45b2b4..7e01044b5 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -407,8 +407,9 @@ linux (4.9.6-1) UNRELEASED; urgency=medium
     - Input: ALPS - fix TrackStick support for SS5 hardware
     - libceph: ceph_x_encrypt_buflen() takes in_len
     - libceph: old_key in process_one_ticket() is redundant
-    - libceph: introduce ceph_x_encrypt_offset() (CVE-2016-10153)
+    - libceph: introduce ceph_x_encrypt_offset()
     - libceph: introduce ceph_crypt() for in-place en/decryption
+      (CVE-2016-10153)
     - libceph: rename and align ceph_x_authorizer::reply_buf
     - libceph: tweak calcu_signature() a little
     - libceph: switch ceph_x_encrypt() to ceph_crypt()