diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3664026c2303..ef6a532b65ab 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -19,6 +19,8 @@ BUG FIXES:
 
  * api/health: Don't treat standby `429` codes as an error [GH-2850]
  * api/leases: Fix lease lookup returning lease properties at the top level
+ * audit: Fix panic when audit logging a read operation on an asymmetric
+   `transit` key [GH-2958]
  * auth/token: Don't allow using the same token ID twice when manually
    specifying [GH-2916]
  * core: Relocated `sys/leases/renew` returns same payload as original