diff --git a/CHANGELOG.md b/CHANGELOG.md
index f12dbf445..6169be32a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,9 +1,13 @@
 ## Next
 
 BUG FIXES:
-  * cli: Fix panic that could occur if parameters were not provided. [GH-5603]
-  * secrets/azure: Fix valid roles being rejected for duplicate ids despite
-    having distinct scopes. [[GH-16]](https://github.com/hashicorp/vault-plugin-secrets-azure/pull/16)
+
+ * auth/userpass: Fix minor timing issue that could leak the presence of a
+   username [GH-5614]
+ * cli: Fix panic that could occur if parameters were not provided. [GH-5603]
+ * secrets/azure: Fix valid roles being rejected for duplicate ids despite
+    having distinct scopes.
+    [[GH-16]](https://github.com/hashicorp/vault-plugin-secrets-azure/pull/16)
 
 ## 1.0.0-beta1 (October 23rd, 2018)