diff --git a/CHANGELOG.md b/CHANGELOG.md
index 71f2864ba22..62c467a21ce 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,8 @@ BUG FIXES:
    another job [GH-3120]
  * cli: Fix setting of TLSServerName for node API Client. This fixes an issue of
    contacting nodes that are using TLS [GH-3127]
+ * client/template: Fix issue in which the template block could cause high load
+   on Vault when secret lease duration was less than the Vault grace [GH-3153]
  * driver/docker: Fix issue where potentially incorrect syslog server address is
    used [GH-3135]
  * jobspec: Allow distinct_host constraint to have L/RTarget set [GH-3136]