diff --git a/docs/changelog.rst b/docs/changelog.rst
index 3bb52baa8..ee8060b2e 100644
--- a/docs/changelog.rst
+++ b/docs/changelog.rst
@@ -34,6 +34,11 @@ Other new things:
 
 * Permissions plugin now sets cover art permissions to the file permissions.
 
+Fixes:
+
+* :doc:`/plugins/aura`: Fix a potential security hole when serving image
+  files. :bug:`4160`
+
 1.5.0 (August 19, 2021)
 -----------------------