diff --git a/src/Symfony/Component/Routing/CHANGELOG.md b/src/Symfony/Component/Routing/CHANGELOG.md
index 05701440e1..f0c616d080 100644
--- a/src/Symfony/Component/Routing/CHANGELOG.md
+++ b/src/Symfony/Component/Routing/CHANGELOG.md
@@ -4,13 +4,11 @@ CHANGELOG
 2.3.0
 -----
 
- * [BC BREAK] the BCrypt encoder constructor signature has changed (the first argument was removed)
  * added RequestContext::getQueryString()
 
 2.2.0
 -----
 
- * Added BCrypt password encoder
  * [DEPRECATION] Several route settings have been renamed (the old ones will be removed in 3.0):
 
     * The `pattern` setting for a route has been deprecated in favor of `path`
diff --git a/src/Symfony/Component/Security/CHANGELOG.md b/src/Symfony/Component/Security/CHANGELOG.md
index e29de9f794..92f807366e 100644
--- a/src/Symfony/Component/Security/CHANGELOG.md
+++ b/src/Symfony/Component/Security/CHANGELOG.md
@@ -4,6 +4,8 @@ CHANGELOG
 2.3.0
 -----
 
+ * [BC BREAK] the BCrypt encoder constructor signature has changed (the first argument was removed)
+   To use the BCrypt encoder, you now need PHP 5.5 or "ircmaxell/password-compat" as a composer dependency
  * [BC BREAK] return 401 instead of 500 when using use_forward during for form authentication
  * added a `require_previous_session` option to `AbstractAuthenticationListener`