diff --git a/ChangeLog b/ChangeLog
index 2e116c3c3..0e17081e3 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -3,6 +3,7 @@ Easy-RSA 3 ChangeLog
 3.2.0 (TBD)
 
 3.1.7 (2023-10-13)
+   * gen-crl: preserve existing crl.pem ownership+mode (#1020)
    * New command: make-vars - Print vars.example (here-doc) to stdout (#1024)
    * show-expire: Calculate cert. expire seconds from DB date (#1023)
    * Forbid "default vars in the default PKI" for all commands (#1021)