diff --git a/ChangeLog b/ChangeLog
index 7f94512e..1e626296 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,4 +1,10 @@
 
+* Version 1.0.47:
+ - Unlike other directory listing commands, the STAT command should
+use TLS on the control channel even if TLS has been disabled on the data
+channel. It wasn't the case; this has been fixed. Thanks to Carlo
+Cannas.
+
 * Version 1.0.46:
  - The server can now be linked against OpenSSL 1.1.x with the strict API.
  - Unmaintained contributions have been removed.
diff --git a/NEWS b/NEWS
index af733417..d319ee5c 100644
--- a/NEWS
+++ b/NEWS
@@ -1,4 +1,9 @@
 
+* Version 1.0.47:
+ - If TLS was only enabled on the control channel (-Y 1), the STAT command
+would send its output as other directory listing commands, breaking
+the TLS stream. This has been fixed. Spotted by Carlo Cannas, thanks! 
+
 * Version 1.0.46:
  - The server can now be linked against OpenSSL 1.1.x with the strict API.
  - Unmaintained contributions have been removed.