diff --git a/debian/changelog b/debian/changelog
index 34766cc7..be0028d8 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+shadow (1:4.4-4) unstable; urgency=high
+
+  * su: properly clear child PID (CVE-2017-2616) (Closes: #855943)
+
+ -- Balint Reczey <balint@balintreczey.hu>  Fri, 24 Feb 2017 01:33:25 +0100
+
 shadow (1:4.4-3) unstable; urgency=medium
 
   [ Balint Reczey ]