diff --git a/ChangeLog b/ChangeLog
index 5185f19e1..fb5e063dd 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -45,6 +45,7 @@ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyA
 2.11.1.2 (2007-10-17)
 - fixed XSS in server_status.php, thanks to Omer Singer, The DigiTrust Group
 - fixed some possible XSS with PHP_SELF, PATH_INFO, REQUEST_URI
+  (reference: CVE-2007-5589)
 
 2.11.1.1 (2007-10-15)
 - bug #1810629 [setup] XSS in setup.php, thanks to Omer Singer, The DigiTrust Group