Mention issue #502 in 2.1.1 change log
diff --git a/expat/Changes b/expat/Changes
index c3c8055..3da916c 100644
--- a/expat/Changes
+++ b/expat/Changes
@@ -3,6 +3,7 @@
             #582: CVE-2015-1283 - Multiple integer overflows in XML_GetBuffer
 
         Bug fixes:
+            #502: Fix potential null pointer dereference
             #520: Symbol XML_SetHashSalt was not exported
             Output of "xmlwf -h" was incomplete
 
diff --git a/htdocs/index.html b/htdocs/index.html
index 99fc5fc..a6a019b 100644
--- a/htdocs/index.html
+++ b/htdocs/index.html
@@ -64,6 +64,8 @@
     </ul>
     <h4>Bug fixes</h4>
     <ul>
+      <li>Fix potential null pointer dereference
+      (<a href="https://sourceforge.net/p/expat/bugs/520/">bug 502</a>)</li>
       <li>Symbol <code>XML_SetHashSalt</code> was not exported
       (<a href="https://sourceforge.net/p/expat/bugs/520/">bug 520</a>)</li>
       <li>Output of <code>xmlwf -h</code> was incomplete</li>