diff --git a/ChangeLog.d/security-advice.txt b/ChangeLog.d/security-advice.txt
new file mode 100644
index 0000000000..1f7677a882
--- /dev/null
+++ b/ChangeLog.d/security-advice.txt
@@ -0,0 +1,2 @@
+Security
+   * Added advice about compiler options in SECURITY.md.