diff --git a/CHANGELOG.md b/CHANGELOG.md
index 30293c6..80b3325 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,8 @@ SPDX-License-Identifier: Apache-2.0
 ## 4.0.2-SNAPSHOT
 - Fix: `verify`: Do not include detached signature in list of certificates
 - Fix: `inline-verify`: Also include the first argument in list of certificates
+- Hide stacktraces by default and add `--stacktrace` option to print them
+- Properly throw `CannotDecrypt` exception when message could not be decrypted
 
 ## 4.0.1
 - Use shared resources for i18n