diff --git a/docs/simplesamlphp-changelog.txt b/docs/simplesamlphp-changelog.txt
index 4ca21ce77d9e5593757d44862793f7382fb0c795..38650ab8c398f93dd52b1cc78b7667d73ff65bf6 100644
--- a/docs/simplesamlphp-changelog.txt
+++ b/docs/simplesamlphp-changelog.txt
@@ -43,6 +43,7 @@ Released TBD
   * Fixed an issue with replay detection in IdP-initiated flows.
   * Fixed an issue with SessionNotOnOrAfter that kept moving forward in the future with every SSO authentication.
   * Fixed an issue with the session cookie being set twice for the first time.
+  * Fixed an issue with the XXE attack prevention mechanism conflicting with other applications running in the same server.
   * Fixed an issue that prevented the SAML 1.X IdP to restart when the session is lost.
   * Fixed an issue that prevented classes using namespaces to be loaded automatically.
   * Fixed an issue that prevented certain metadata signatures to be verified (fixed upstream in `xmlseclibs`).