diff --git a/ChangeLog b/ChangeLog
index 09a32b50..63288569 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -15,6 +15,8 @@ for a wide range of applications, including key derivation, session encryption
 and more.
 
 * Version 1.0.20-stable
+ - XCFramework: cross-compilation is now forced on Apple Silicon to
+avoid Rosetta-related build issues
  - The Fil-C compiler is supported out of the box
  - The CompCert compiler is supported out of the box
  - MSVC 2026 (Visual Studio 2026) is now supported
@@ -51,6 +53,11 @@ compatibility with older runtimes
 fixed
  - `crypto_aead_aes256gcm_is_available` is exported to JavaScript
  - libsodium is now compatible with Emscripten 4.x
+ - Security: memory fences have been added after MAC verification in
+AEAD to prevent speculative access to plaintext before authentication
+is complete
+ - Assembly files now include .gnu.property notes for proper IBT and
+Shadow Stack support when building with CET instrumentation
 
 * Version 1.0.20
   This point release includes all the changes from 1.0.19-stable,