diff --git a/CHANGELOG b/CHANGELOG
index 8935d2167a..928ab6a08b 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -19,6 +19,7 @@ git-annex (8.20210224) UNRELEASED; urgency=medium
   * Fix support for local gcrypt repositories with a space in their URI.
   * uninit: Fix a small bug that left a lock file in .git/annex
   * Windows: Correct the path to the html help file for 64 bit build.
+  * OSX dmg: Updated bundled git to 2.30.2 which fixes CVE-2021-21300.
 
  -- Joey Hess <id@joeyh.name>  Wed, 24 Feb 2021 13:18:38 -0400