diff --git a/ChangeLog b/ChangeLog
index efdb2b3ca..c5a1760d5 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+2007-12-13  David Shaw  <dshaw@jabberwocky.com>
+
+	* NEWS: Note SHA-224 typo.
+
 2007-11-17  David Shaw  <dshaw@jabberwocky.com>
 
 	* NEWS: Say a bit more about RFC-4880.  Note some defaults
diff --git a/NEWS b/NEWS
index 88d8530a8..7cffe007d 100644
--- a/NEWS
+++ b/NEWS
@@ -19,7 +19,7 @@ Noteworthy changes in version 1.4.8 (unreleased)
 
     * By default (i.e. --gnupg mode), --require-cross-certification is
       now on.  --rfc2440-text and --force-v3-sigs are now off.
-    
+
     * Allow encryption using legacy Elgamal sign+encrypt keys if
       option --rfc2440 is used.
 
@@ -27,6 +27,9 @@ Noteworthy changes in version 1.4.8 (unreleased)
 
     * Fixed a rare bug in decryption using the OpenPGP card.
 
+    * Fix RFC-4880 typo in the SHA-224 hash prefix.  Old SHA-224
+      signatures will continue to work.
+
 
 Noteworthy changes in version 1.4.7 (2007-03-05)
 ------------------------------------------------